last executing test programs: 3m29.549226153s ago: executing program 2 (id=23): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r1, 0x0, 0xfffffeea) 3m28.517147873s ago: executing program 2 (id=25): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]}) unshare(0x44040200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 3m28.272220025s ago: executing program 2 (id=29): r0 = socket(0xa, 0x3, 0x3a) creat(&(0x7f0000000000)='./file0\x00', 0x8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x5b) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000890c"], 0x80}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='i2c_read\x00', r2, 0x0, 0x1}, 0x18) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000250000000e0001006e6574646576737464657673696d300000c1e8906bdfba7603f7bac03dc8bd5f3ed59595cbea2ac210e87e8dcf804a5cf0c64d4583dac365c74b2502781cfa55784af3581e1ff7fd79eb006d1d478a2de9fdd8895f4c90a30f6ac8da4c83ec035f2ca90a4ba67b89949f8ddcf94cf210943a093db17c354948b2e22933c6dc5cee6d3d9f4e7635d77c340f086d"], 0x34}}, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, r8, 0x100, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x800) io_submit(0x0, 0x2, &(0x7f0000000500)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5, r2, &(0x7f0000000fc0)="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", 0x1000, 0x8000, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x64a, r3, &(0x7f0000000440)="764daa9a65f8321ab881522844a4bfec644dd88abe856e0ba24adff64c1111c52b007886b0dca7a968eb1a0aff2fe2682d4ce101b78ea66b9f398d7fe50dde107f1e624d8c", 0x45, 0x4, 0x0, 0x2, r6}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x10000002}, 0x18) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDADDIO(r9, 0x4b34, 0x7) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c250000000000202020540af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd1af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000070000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_KEEPCAPS(0x8, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000000308050000ea000000000000050000000500030021000000240004"], 0x48}}, 0x40) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 3m28.202870646s ago: executing program 2 (id=30): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a10700, &(0x7f0000000380), 0x0, 0x44a, &(0x7f0000000880)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0xb) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000ec0)=@newsa={0x104, 0x10, 0x421, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x39}, [@coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x104}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000200006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000340000000020800014000000014080002400000001208000640000000030900010073797a30"], 0x108}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x24, r5, 0x1, 0x70b92a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004854) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r5, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x880) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="3000000098162107edc49ed13ed598000000c94ce8fd963b912a4e26e6566cc316f9ffb853acb0adf7a59a6d5264cb4356bbd8d7b92a234eff06430c6445b9dec004883ce6b5c4f02317ac9085eab996852417887480055fef9d6b085a979c4697942e32aaefeecfc3bc273c0b01d760b622", @ANYRES16=r7, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r8, @ANYBLOB="14002f800c0002000203aaaaaaaaaaaa04000380"], 0x30}, 0x1, 0x0, 0x0, 0x20000041}, 0x40800) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="142b563753e21e275b3e17e2a3efd8bcd105714e56e175e77d5781de161df0fd2648a749dc153267505ec5da68f9a2915ff201331de94eea855426a46d3e9aae4f6cc2de8d4681cc87f90efe78dd9ab3a76646dc4b981c0d0417454a7b59b765698fa134774e1e08a2fbe214564511c513573532a76c330043b84622ec08c4b6e0ff", @ANYBLOB="000428da7000ffdbdf253100000008000200", @ANYRES32=r4, @ANYBLOB="05003400fa000000050033000600000008000200", @ANYRES8=r0, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20008004) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r9 = socket$netlink(0x10, 0x3, 0x4) r10 = socket$inet(0x2, 0x80001, 0x84) listen(r10, 0x3) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000001000)={0x1040, r11, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x102c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xdf}]}]}, 0x1040}, 0x1, 0x0, 0x0, 0x91}, 0x4004) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file1\x00') 3m27.370423324s ago: executing program 2 (id=33): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x380000000, 0x140) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f00000000c0)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000000)={0x81, 0x7f, 0x40, 0x0, 0xfffe, 0x3}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) process_madvise(0xffffffffffffffff, &(0x7f0000001180)=[{0x0}, {&(0x7f0000000000)="004d0e", 0x3}], 0x10000000000000ff, 0x1b, 0x0) 3m26.384777643s ago: executing program 2 (id=50): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]}) unshare(0x44040200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000580)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 3m26.384436713s ago: executing program 32 (id=50): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]}) unshare(0x44040200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000580)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 3m4.965327161s ago: executing program 1 (id=339): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) 3m4.935614741s ago: executing program 1 (id=341): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "6a655069ade22ce4", "0d35db0d4af1cbcce779bbc24b53fc4988c215118dd14cb837de56339a336a19", 'FY\\;', "8891ea13f18ef0be"}, 0x38) 3m4.914273421s ago: executing program 1 (id=343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x800, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0) sigaltstack(&(0x7f0000000180)={&(0x7f0000000480)=""/195, 0x40000003, 0xc3}, &(0x7f0000000200)={&(0x7f0000000580)=""/162, 0x0, 0xa2}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) syz_pidfd_open(r7, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x40, 0x1, 0x6, 0x8, 0x0, 0x8, 0x140, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x9, 0x100000001}, 0x4400, 0x8000000000000000, 0x43, 0x6, 0x1, 0x6, 0x83, 0x0, 0x6, 0x0, 0x2}, r7, 0xffffffffffffffff, r2, 0x1) 3m4.765599333s ago: executing program 1 (id=350): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) setrlimit(0xf00, &(0x7f0000000000)={0x2, 0xffffffffffff58bb}) 3m4.706466923s ago: executing program 1 (id=352): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000047020000f8ffffffb703000008000000b7040000000000008557c455f3d17d5f8d00000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) lsm_list_modules(&(0x7f0000002100)=[0x0, 0x0], 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r7, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x1) connect$vsock_stream(r5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c00010005000000030000000800", @ANYRES32=r10], 0xb4}}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x64}}, 0x24002800) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e00000097420000020000200500000016200400", @ANYRES32=r1, @ANYBLOB="e30b00"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000005000000010000000800"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000940)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @alu={0x7, 0x0, 0x0, 0x6, 0x7, 0x20}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0xa, 0x1, 0x0, r14}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000380)='syzkaller\x00', 0x10000, 0xe9, &(0x7f0000000a00)=""/233, 0x41100, 0x2, '\x00', r13, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x210, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r4, r14, r4], &(0x7f0000000840), 0x10, 0x1, @void, @value}, 0x94) 3m4.211018778s ago: executing program 1 (id=357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000400"/18, @ANYRES32], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) acct(&(0x7f0000000040)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2m49.179567593s ago: executing program 33 (id=357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000400"/18, @ANYRES32], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) acct(&(0x7f0000000040)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1m32.636968544s ago: executing program 4 (id=2017): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000d00)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="48fed4d7f5b8976a72325a7a4475518c8d8a9629deb06c4e680f4ea7e455be0095b78419dc32be7a7a984436b376fd03f67af3ed1d5bb35f216485b41cdcbf53694e0687154e6aff974b9a4a09eae3b13fc668d251214c5c55f89b8d7da9a6384351758802bf51495393dc6788aa2f3a5fe2ca65e943cc864c99e74acf06ce962859b644646dd81a4f6c7951f40ce7172bfd3307720a3a7d80c4", @ANYRESOCT, @ANYRES32=0x0], 0xfe, 0xa27, &(0x7f0000000e80)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x2c, r5, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040045}, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0xf9, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r7}, 0x10) io_destroy(0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r4, r3}, 0xc) 1m32.220425678s ago: executing program 4 (id=2020): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x5014, 0xffffffff, 0x1, 0x6, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[], 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) 1m32.149354629s ago: executing program 4 (id=2021): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000400"/18, @ANYRES32], 0x50) pipe2$9p(&(0x7f0000000000), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x3}, 0x4}, 0x0, {[0x6, 0x0, 0x0, 0xfffffef9, 0x0, 0x1, 0x5, 0x200000]}}, 0x5c) 1m32.128122099s ago: executing program 4 (id=2022): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0x9, 0x12d600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r7, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r8}, 0x10) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r9, 0x5453, 0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0x11000) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000740)={0x1f, 0x0, @none}, &(0x7f0000000780)=0xe, 0x0) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r10, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) close(r3) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="e03f030013006bcd9e3fe3dc6e48aa31086b8700350000007ea60264160af3653c002e000d000af08bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r12, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 1m31.910059091s ago: executing program 4 (id=2023): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) 1m31.534056305s ago: executing program 4 (id=2028): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 1m31.533925325s ago: executing program 34 (id=2028): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 52.308981994s ago: executing program 6 (id=2851): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x2, 0x0, 0x5, 0x6a000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000002fc0)) getpeername$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000000)=@raw=[@ldst={0x3, 0x1, 0x6, 0x3, 0x1, 0x80, 0x8}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x8}, @ldst={0x3, 0x2, 0x1, 0x8, 0x3, 0x10, 0x8}], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x54, &(0x7f0000000180)=""/84, 0x40f00, 0x5, '\x00', r2, 0x0, r0, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x8, 0x4, 0x3}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000380)=[r0], &(0x7f00000003c0)=[{0x4, 0x5, 0x2, 0xc}, {0x0, 0x3, 0x4, 0x6}, {0x5, 0x2, 0xa, 0x9}, {0x4, 0x4, 0xa, 0x4}, {0x0, 0x4, 0x10, 0xc}, {0x3, 0x3, 0xa, 0xc}, {0x2, 0x2, 0x9}, {0x2, 0x2, 0x1, 0xc}, {0x4, 0x2, 0xa, 0x7}, {0x5, 0x5, 0x7, 0x5}], 0x10, 0xf8, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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") recvmmsg(r0, &(0x7f00000055c0)=[{{&(0x7f0000000b80)=@isdn, 0x80, &(0x7f0000001040)=[{&(0x7f0000000c00)=""/250, 0xfa}, {&(0x7f0000000d00)=""/253, 0xfd}, {&(0x7f0000000e00)=""/84, 0x54}, {&(0x7f0000000e80)=""/169, 0xa9}, {&(0x7f0000000f40)=""/152, 0x98}, {&(0x7f0000001000)=""/48, 0x30}], 0x6, &(0x7f00000010c0)=""/68, 0x44}, 0x1}, {{&(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000024c0)=[{&(0x7f00000011c0)=""/29, 0x1d}, {&(0x7f0000001200)=""/224, 0xe0}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/90, 0x5a}, {&(0x7f0000002380)=""/111, 0x6f}, {&(0x7f0000002400)=""/25, 0x19}, {&(0x7f0000002440)=""/55, 0x37}, {&(0x7f0000002480)=""/45, 0x2d}], 0x8, &(0x7f0000002540)=""/253, 0xfd}, 0x243}, {{&(0x7f0000002640)=@nfc_llcp, 0x80, &(0x7f0000002880)=[{&(0x7f00000026c0)=""/122, 0x7a}, {&(0x7f0000002740)=""/88, 0x58}, {&(0x7f00000027c0)=""/148, 0x94}], 0x3}, 0xfffffff9}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000028c0)=""/7, 0x7}, {&(0x7f0000003000)=""/4096, 0x1000}], 0x2, &(0x7f0000002940)=""/2, 0x2}, 0x80000000}, {{&(0x7f0000002980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/88, 0x58}, {&(0x7f0000002a80)=""/17, 0x11}, {&(0x7f0000002ac0)=""/94, 0x5e}], 0x4}, 0xc1ea}, {{&(0x7f0000002b80)=@nfc, 0x80, &(0x7f0000005000)=[{&(0x7f0000002c00)=""/236, 0xec}, {&(0x7f0000002d00)=""/47, 0x2f}, {&(0x7f0000002d40)=""/47, 0x2f}, {&(0x7f0000002d80)=""/11, 0xb}, {&(0x7f0000002dc0)=""/194, 0xc2}, {&(0x7f0000002ec0)=""/168, 0xa8}, {&(0x7f0000002f80)=""/26, 0x1a}], 0x7, &(0x7f0000005080)=""/188, 0xbc}, 0x2}, {{&(0x7f0000005140)=@nfc, 0x80, &(0x7f0000005300)=[{&(0x7f00000051c0)=""/66, 0x42}, {&(0x7f0000005240)=""/148, 0x94}], 0x2, &(0x7f0000005340)=""/22, 0x16}}, {{&(0x7f0000005380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000005580)=[{&(0x7f0000005400)=""/65, 0x41}, {&(0x7f0000005480)=""/179, 0xb3}, {&(0x7f0000005540)}], 0x3}, 0x4}], 0x8, 0x40010000, &(0x7f00000057c0)) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000005540)='team_slave_1\x00') ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000480)={0xffffffffffffffff}) 52.039789257s ago: executing program 6 (id=2858): unshare(0x66000080) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2, 0x7fffffff) 50.773412909s ago: executing program 6 (id=2868): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000f00)={0x1d, r1, 0x2, {0x0, 0x1, 0x2}}, 0x18) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x1, 0xf0, 0x8}, 0xfe}, 0x18) 50.366334723s ago: executing program 6 (id=2875): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x55b, &(0x7f0000000980)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x18) r1 = socket(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@nogrpid}]}, 0x1, 0x792, &(0x7f0000000f80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './bus'}, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000020240), 0x10010) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=""/32, 0x20}], 0x1}, 0x40018022) r7 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x0, 0x6000) connect$inet(r7, &(0x7f0000000300)={0x2, 0x4e22, @multicast1}, 0x10) socket$inet(0x2, 0x2, 0xfff) r8 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r8, &(0x7f0000000280), 0x208e24b) semget$private(0x0, 0x4000, 0x755) close_range(r1, 0xffffffffffffffff, 0x0) 50.062040166s ago: executing program 6 (id=2881): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x5}, 0x8) 49.444190842s ago: executing program 6 (id=2890): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') read$rfkill(r0, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x7f, 0x8, 0x81, 0x2}, {0x1ff, 0x5, 0x8, 0x9}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)={0x64, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r6 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r6, 0x0) r7 = socket$inet_dccp(0x2, 0x6, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) getsockopt$inet_int(r7, 0x10d, 0xb6, &(0x7f0000000240), &(0x7f00000003c0)=0x4) 49.444022072s ago: executing program 35 (id=2890): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') read$rfkill(r0, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x7f, 0x8, 0x81, 0x2}, {0x1ff, 0x5, 0x8, 0x9}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)={0x64, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r6 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r6, 0x0) r7 = socket$inet_dccp(0x2, 0x6, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) getsockopt$inet_int(r7, 0x10d, 0xb6, &(0x7f0000000240), &(0x7f00000003c0)=0x4) 23.375134305s ago: executing program 0 (id=3359): socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000bc0)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f0000000000)={[], [{@pcr={'pcr', 0x3d, 0x2d}}, {@smackfsroot={'smackfsroot', 0x3d, '&\\\x17)!'}}, {@fowner_lt}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, 's\x00'/20}}, {@hash}, {@uid_eq}, {@uid_gt}, {@euid_gt}]}, 0x1, 0xbd7, &(0x7f0000000c00)="$eJzs3M1rHOcZAPBnRqsvW+3KpZS6l6qUYkPpWnKRqU2hdnHppYdCzgEr8soIrT+QFBzJOqySfyBf50AugSQmIYf47EtCcs0lsa8JuZmgWAmEkCjMfkgbSyvJ9q5GkX8/eHfed97dfZ5nh92ZF3Y3gCfWSHaTRhyNiAtJRLGxP42IvlpvIKJav9/qytLktytLk0msrT31VRJJRNxfWZpsPlfS2B5uDAYi4pN/J/GbFzbHnVtYnJmoVMqzjfGJ+cvXTswtLP5t+vLEpfKl8pWxU/8YPzl+avT0eMdq/e7zs7e++dN/v6x+/9YPN79+5Y0kzsZQY661jk4ZiZH116RVISImOh0sJz2NelrrTAo7PCjtclIAALSVtlzD/S6K0RMbF2/F+ODTXJMDAAAAOmKtJ2INAAAAOOAS638AAAA44JrfA7i/sjTZbPl+I2Fv3TsXEcP1+lcbrT5TiGptOxC9EXHofhKtP2tN6g97bCMR8cXd0+9mLbr0O+TtVJcj4vdbHf+kVv9w7Vfcm+tPI2K0A/FHHhj/kuo/24H4edcPwJPp9rn6iWzz+S9dv/6JLc5/hS3OXY+i/flvsAPPvrPm9d/qpuu/jfp72lz//X+XMW68+dr1dnNZ/f+89Z93mi2Ln20fq6iHcG854g+FrepP1utP2tR/YZcxij9eL7eby7v+tdcjjsXW9Tcl2/8/0Ymp6Up5tH67ZYzlj8ffbhc/7/qz43+oTf3N/39qd/yv7TLG0+fPv7dp592N7vb1p+v/FtTX2D43MT8/OxbRl/xv8/6T2+fSvE/zObL6j/95+/f/VvVnnwnVxuuQJbjc2Gbj5x+I+a+bN95vl09z/Zfn8b/Y5vi31v9RYfPxf3GXMf7y4cvH2821rn+zlsVvroUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCmNiKFI0tJ6P01LpYjDEfHbOJRWrs7N/3Xq6rNXLmZzEcPRm05NV8qjEVGsj5NsPFbrb4xPPjD+e0QciYhXi4O1cWnyauVi3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw7nBEDEWSliIijYjVYpqWSnlnBQAAAHTccN4JAAAAAF1n/Q8AAAAHn/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXXbkj7fvJBFRPTNYa5m+xlxvrpkB3ZbmnQCQm568EwByU8g7ASA3D7nGd7kAB1Cyw/xA25n+jucCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP517OjtO0lEVM8M1lqmrzHXm2tmQLelLf0kxzyAvdez3WRh7/IA9p63ODy5rPGBndb+Axv3qf58pr9rOQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw/wzVWpKWIqKvsa9UivhVRAxHbzI1XSmPRsSvI+KzYm9/Nh7LOWcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6b25hcWaiUinPZp00Gp31PV3o9DQidzFEdzpJPe/qfsnnQHQi2kz1v7TTw5+Jx4zeF/vkRXjUznI3Q+T5qQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQF7mFhZnJiqV8uxc3pkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeZtbWJyZqFTKs13s5F0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5+SkAAP//my0EMA==") 22.702223141s ago: executing program 0 (id=3363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000480)={0x55, 0x1, 0x0, {0x0, 0x1}, {0x3a, 0x2}, @cond=[{0x9, 0x9f2d, 0x8, 0x638, 0x36, 0x8000}, {0x7, 0x801e, 0x4, 0x4, 0x5}]}) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000130081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c1f01400b080c00bdad01409bbc7a46e3988285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x448c5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r7, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0) lchown(&(0x7f0000002280)='./file0\x00', 0xee00, 0xffffffffffffffff) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x78, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x2, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @dev}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}}, 0x0) 22.359292584s ago: executing program 0 (id=3366): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="745a69e391356fc1f16d61707539671bd48cda266b26e07a2af452021d54f1ce05bbd1b915f5c1a3642271aa0d64b2e8267ca5ddd8c7c79cb4ab5210f115f8", 0x3f, 0x44002, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000380)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}}) r7 = syz_pidfd_open(r0, 0x0) setns(r7, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 21.115816446s ago: executing program 0 (id=3370): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002000)=""/4080, 0xff0}], 0x1, 0xa, 0x8) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x11123, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x7}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r2, 0xfffffffffffffdb1, &(0x7f0000000340)={&(0x7f0000000a00)=""/197, 0xc5, 0x0, &(0x7f0000000400)=""/28, 0x12}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000480)={{0x80, 0x3}, 'port0\x00', 0x84, 0x0, 0x6, 0x67, 0x0, 0x0, 0xb, 0x0, 0x0, 0xc}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000000)={{0x80}, 'port1\x00', 0x0, 0x40409}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 18.311319233s ago: executing program 0 (id=3373): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x10000000000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x18) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x200000000000000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'veth1_virt_wifi\x00', &(0x7f0000000040)=@ethtool_channels={0x3d, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc, 0xfffffffc}}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="54010000100013070000000000000000fc00000000000000000000000000000000000000000000000000000000000000000000004e2200"/64, @ANYRES32=0x0, @ANYRES64=r3, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000010000000000000000000020000000000000000ae20a716978f1c3f0000010000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000002000400200000000000000048000200656362286369706865725f6e756c6c29cd00"/217], 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x138) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000002c0)=0x20) sendmsg$NFT_MSG_GETOBJ_RESET(r9, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000150a01010000000000000000000000031e0008002648a69a4d6ef58c1c62793c0b699d9a225789da4cbce5fe00000000"], 0x34}, 0x1, 0x0, 0x0, 0x10000000}, 0xc090) 17.767048109s ago: executing program 0 (id=3378): timer_create(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, &(0x7f00000000c0)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0x1) memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 4.627358136s ago: executing program 5 (id=3498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000480)={0x55, 0x1, 0x0, {0x0, 0x1}, {0x3a, 0x2}, @cond=[{0x9, 0x9f2d, 0x8, 0x638, 0x36, 0x8000}, {0x7, 0x801e, 0x4, 0x4, 0x5}]}) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000130081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c1f01400b080c00bdad01409bbc7a46e3988285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x448c5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r7, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0) lchown(&(0x7f0000002280)='./file0\x00', 0xee00, 0xffffffffffffffff) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x78, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x2, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @dev}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}}, 0x0) signalfd4(r3, &(0x7f0000000340)={[0x7]}, 0x8, 0x80000) 4.453524417s ago: executing program 5 (id=3501): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0x50) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) statx(0xffffffffffffffff, 0x0, 0x0, 0xd09, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x10, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC=r2], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000180)) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x80000000000) connect$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x0, 0x4}}, 0x10) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000380)={0x8, &(0x7f0000000340)=[{0x6, 0x2, 0xa5, 0xb}, {0xe048, 0x3, 0x2, 0x1}, {0xfff8, 0x3, 0x4, 0x88}, {0x800, 0x87, 0x60, 0x4}, {0xa, 0x5, 0x8, 0x3}, {0x2a, 0x7, 0xc1, 0xa}, {0x3, 0x2, 0x3c, 0xffffff81}, {0x8001, 0x3, 0x7, 0x30}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmsg$xdp(r3, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, 0x6, 0x0, 0x14}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000002340)="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", 0x1000}], 0x1, 0x0, 0x0, 0x20004800}, 0x4000810) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 3.427180707s ago: executing program 5 (id=3511): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="745a69e391356fc1f16d61707539671bd48cda266b26e07a2af452021d54f1ce05bbd1b915f5c1a3642271aa0d64b2e8267ca5ddd8c7c79cb4ab5210f115f8", 0x3f, 0x44002, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000380)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}}) r7 = syz_pidfd_open(r0, 0x0) setns(r7, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 2.694554994s ago: executing program 36 (id=3378): timer_create(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, &(0x7f00000000c0)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0x1) memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 2.07758473s ago: executing program 5 (id=3518): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800010003000000060000000000010000000000240002007f2378304102"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 2.015481861s ago: executing program 5 (id=3521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000480)={0x55, 0x1, 0x0, {0x0, 0x1}, {0x3a, 0x2}, @cond=[{0x9, 0x9f2d, 0x8, 0x638, 0x36, 0x8000}, {0x7, 0x801e, 0x4, 0x4, 0x5}]}) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000130081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c1f01400b080c00bdad01409bbc7a46e3988285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x448c5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0) lchown(&(0x7f0000002280)='./file0\x00', 0xee00, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00030f14000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e300000000000000000000000140001006772653000000000000000000000040008000140000000005c000000180a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626f6e64300000000000000000000000140001006970766c616e31"], 0x4b0}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x78, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x2, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @dev}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}}, 0x0) signalfd4(r3, &(0x7f0000000340)={[0x7]}, 0x8, 0x80000) 1.844963972s ago: executing program 3 (id=3527): r0 = socket$inet6(0xa, 0x3, 0xff) fsopen(&(0x7f0000000300)='devpts\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8000009, 0x5, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x1b) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=r2], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000000000)=""/83, 0x2000, 0x20000000, &(0x7f0000000100)={0x77359400}) r6 = mq_open(&(0x7f0000000480)='eth0\x00\xf1\x80{\xa8d\xba3\xcb\xae\x99\xe1\x14z\xd3\xe4\x80\xa2\xbc\xdd\xb8\xed\xe9\xa34s\xa6R(\x12\x91i\xeb\x1f\xd1\x8d\xb6\x9a|\xf2\xa6e\x02\x98\x88x\x8b\x85#v#\xf0/\x84\x7f_\x05\xcd9\xe1aRK\xd9\xc5\x99|\xcd\a\x17\xd1\xd2\a\xab\xd2\xd2b\xa9\xf7d%$\xc0\xa6vBK\x9f\x1c\x19s\xa5}|Q\xd5\xe6%!g\xad1M\xa0j\xa2x\a\x14T\xe6t\xa2v\xc3n\x93\\\xcc\x96\x00\xe4\x1f\x94\xac\xb5\xd6\xe5\xccm\x95\xa8R\x00r\x8fg\x9b\xc0\xc3\x15\xd0XB\xf1\xf2>~\x9dmQ\xae\xbe\xca\x1c\xdeQ\xc6\x1e\x12&\x9f\xbe\\?\x99\x18E\xe0\xd7\xf1^.S\xc4\x8f8{IY\vVsw_@P\x99\xd70\xad\xa4\xfd\x04\x7f>h\x8b\xd1q\xb9\x95\xef\xd0\'\xef\xb6\r\x9b\xd7\x1b\x0e\xa2\xcc\xc2\xe5\xce\xcb\xc3`b\xdc\xad\x9d\xf0.\b\xa5\xdfg8\x01\x92,\xb9\'+\x02Uc\xacI{R&\xb0\xd4\xe6\xecr\xfd\x94w', 0x42, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0xa00, 0x0) 1.777615423s ago: executing program 5 (id=3528): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="745a69e391356fc1f16d61707539671bd48cda266b26e07a2af452021d54f1ce05bbd1b915f5c1a3642271aa0d64b2e8267ca5ddd8c7c79cb4ab5210f115f8", 0x3f, 0x44002, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000380)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}}) r7 = syz_pidfd_open(r0, 0x0) setns(r7, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.744888484s ago: executing program 3 (id=3529): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="745a69e391356fc1f16d61707539671bd48cda266b26e07a2af452021d54f1ce05bbd1b915f5c1a3642271aa0d64b2e8267ca5ddd8c7c79cb4ab5210", 0x3c, 0x44002, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) creat(&(0x7f0000000380)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_fscache}]}}) r6 = syz_pidfd_open(r0, 0x0) setns(r6, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 781.812333ms ago: executing program 7 (id=3531): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000c600010025000000180100002020642500000000002020207b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000042000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000feffffff00000000"]}, 0x108) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000004c0)={0x1, 'veth0_to_bridge\x00', {}, 0x101}) keyctl$get_security(0x11, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) 635.293384ms ago: executing program 8 (id=3533): r0 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000001880)="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", 0x45b) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 608.342315ms ago: executing program 7 (id=3534): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffbfffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r7}, &(0x7f0000000a00), &(0x7f0000000a40)=r6}, 0x20) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x0) 543.563875ms ago: executing program 8 (id=3535): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000c600010025000000180100002020642500000000002020207b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000042000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000feffffff00000000"]}, 0x108) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000004c0)={0x1, 'veth0_to_bridge\x00', {}, 0x101}) keyctl$get_security(0x11, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) 519.348845ms ago: executing program 3 (id=3536): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000c600010025000000180100002020642500000000002020207b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000042000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000feffffff00000000"]}, 0x108) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000004c0)={0x1, 'veth0_to_bridge\x00', {}, 0x101}) keyctl$get_security(0x11, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) 475.014486ms ago: executing program 8 (id=3537): r0 = syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000d00)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="48fed4d7f5b8976a72325a7a4475518c8d8a9629deb06c4e680f4ea7e455be0095b78419dc32be7a7a984436b376fd03f67af3ed1d5bb35f216485b41cdcbf53694e0687154e6aff974b9a4a09eae3b13fc668d251214c5c55f89b8d7da9a6384351758802bf51495393dc6788aa2f3a5fe2ca65e943cc864c99e74acf06ce962859b644646dd81a4f6c7951f40ce7172bfd3307720a3a7d80c4", @ANYRESOCT, @ANYRES32=0x0], 0xfe, 0xa27, &(0x7f0000000e80)="$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") r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={0x0, r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r6, 0x2, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040045}, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r7, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0xf9, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x10) io_destroy(0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r5, r4}, 0xc) 474.079056ms ago: executing program 7 (id=3538): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x39) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) close_range(r1, r2, 0x2000000) 336.433527ms ago: executing program 3 (id=3539): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000280), &(0x7f00000005c0)}, 0x20) 295.717078ms ago: executing program 7 (id=3540): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 294.998037ms ago: executing program 3 (id=3541): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x5, 0x9, 0x9, 0x2, 0x7, 0xc3f}}, {0xa}}]}]}, 0x54}}, 0x40081) r3 = perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_ID(r3, 0x4008240b, &(0x7f00000013c0)) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f00000002c0)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$tipc(0x1e, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x4) io_submit(0x0, 0xe10c319247b3336a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0xe61e2840a154f0c0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000ff16b54ae466863250fe8ca9ffff000000000000429538c1d821cede00", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_create1(0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) setxattr$incfs_id(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x3) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000010000305000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) 278.037638ms ago: executing program 7 (id=3542): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800010003000000060000000000010000000000240002007f2378304102"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 189.059988ms ago: executing program 8 (id=3543): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="1b000000"], 0x48) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}]}, 0x28}}, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 40.15513ms ago: executing program 8 (id=3544): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 24.39091ms ago: executing program 7 (id=3545): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000380)={0x0, 0x0}) (async) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000000c0)='system_u:object_r:printer_device_t:s0\x00', 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYRES16=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) pwritev(r3, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) (async) r7 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[], 0x0, 0x6fe, &(0x7f0000001340)="$eJzs3V2P21gZB/D/STJJJoWqAlStqm7ndMpKUzGkTmabKipIGOckY0jiyPbAjIS0KnRmNWqmQFskmpt2bniRli/A3d5wwYdYiQuu9lvAFUgrEBJiBUJGPrbzMnEyk07abtn/bwRx7MfnPD72+tQz9jGIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIgIwmoYRkWgbXd3duVsVsN1OsmXLKaWR6Wt4GY0cXNenSthvYAI/4diEW9Fs9/6yijkcvh/67gafbuKYvhRxODC5Ut3v5zLJOvPSfhFYNECHz8dPLjX7+8/OkNsFgsX/zohc4agluranmN3zJaStufIeq1m3NpuerJpt5W35/mqIy1XZXzHlRvWTVmp17ekKu85O91Ww2yrZOadr1cNoya/U4h2NICyZ23b7bbdbemYcHEYc0d+8IMoQJkdKQ8O+/tbY/k8S2vjMKiSknxmPDgMqp62uVWjWq1UqtVK7Xb99h3DyE3NMELCGMJUxNIPWnrDLPcETnQOGavxH+NPAmijiC52sAuZ+mOhARcOOjOWx5L+/51bam694/1/0suvjBZfge7/r0Xfrs3q/2fkIiH1CmlLxIz5i/2s6IwkHuMpBniAe+ijj308WkLZEnLt3CXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyHiORB011GDgPWyjCQ8STdhoQ8HDHjz4UOERlQ8zVTDhw4ELiQ1YuAmJCuqoYwsSCmXswcEOumihARP/CoLgAIe63bfifJ6nbDWSoMqMjSgglxx3+6jO2dpZ/f8Pn0Vrx/2/wf7/8yo6DgrRx8fzYog+A4L4+n9Bay8nGyIiIiIiIiJ6GYT+7bvQf5V/G0CApt1WxkRM4bVlR0RERERERETLIBAUcBUiuisfb0NMX/8TERERERER0ZtN6GfsBICSvqlfjB6XOssvAbKvIEUiIiIiIiIiOif95P+1PBDou/zXIBa6/iciIiIiIiKiN8CvxsbYz2XjMXaD5M/6GQBrfy6Ij/5WgLsijnu7XxVHZrjEPIpjpu4A8JtXxMV4oF79kQegv1nqqohrk8A/k98+hD45SB/r/3kQEUK4JxLIZ8cLmJGACGuu5eJv+ADXo1Wux+PM3x9koJdEIwqXmnZblS2nfbcC07yY8dWu/7OHhz8H3OF2Hhz298s/+nH/vs7lOJx1fBQW+mwinUx6Y4xyeaLHW9DPXKSNbryKZlLlr7udktD1Gsn2Z2EeZcYrmrcDaqtAtJW/wHq0z9aDKLY0GI64L4A1PfhDpax32cTWuytilEXl5Jan7YgZW17UWdyIYm5s3Ig+kjYJy8mI4teyQLU8vQ8msqiOZ3F6W4i/n2j/+VlAFMO22Aqz+ENY0Iksvv9RtPJWbzcZHuMsWUwdBUREr8vBqBfSg5hPjbGfdA/JSe3s/Q5yQHyWm9G7j2oJ4v4j6d2f/DaIeqgskIv/NpFeS9KvIDyjbwhdTj4a0D13JeWMbpQ/DYLAvFjE+Bn9v/G/M4Z97Nl6t+MgCE6e0X8/egdSnPZUFv8OguBuRfckvznRq34YrvDhzHq9djUbNuGtJ0c/0QPgh97ff3//YbW6VTPeNYzbVazofyrEH1mw7yEioimnv2NHR2TmRIh3cT0q4/r9v74TTU30eF+KbynQbgF93Mdm8gqBtfRSSzjAN/8R3YawGV21Auul6LM0kJcv3Q2vaoexhyKn3/CyOfOqTvelUay+vaE6jE3eO3TyCnAUu/WS9wIREdGrtT6jHwYm+n9M9v/Fif5/ExtRxMaV1Ovu0tgthZvJ1fHwkn5w4Tg1tnJ68t9acmMQERF9Tij3E1Hyfylc1+69V6nXK6a/raTrWN+Vrt1oKWl3feVa22a3pWTPdXzHctqy56JgrypPeju9nuP6sum4sud49q5+87uMX/3uqY7Z9W3L67WV6SlpOV3ftHzZsD1L9na+3ba9beXqlb2esuymbZm+7XSl5+y4lipL6Sk1Fmg3VNe3m3Y42ZU91+6Y7p78ntPe6SjZUJ7l2j3fiQpM6rK7Tcft6GLLCBZ+0SEREdH/o8dPBw/u9fv7j05OrIaX5tGcY8yImZ7IpxTIMYKIiIg+Y0bd9QIrFV9iQkRERERERERERERERERERERERERERERENOX0R/oWnFhJe1gQGM756cV4Dp5j9IjhVDkC583nU/ePemC/F1k9s2ilySMRgwcfzwleHc5Jmn885niRSnEJeOH2+csXgAt6DqI5uSUeANPPjy79GEub+MZB1KKzYvTC1EWF4b7ILf8/h3Di4e+mF4mw5YMgCOavXphsw/zZj+ccgEf5c+yCV30mIqJX7X8BAAD//6KXQek=") (async) r8 = syz_io_uring_setup(0xac3, &(0x7f0000001480)={0x0, 0x81064, 0x80, 0x4, 0xd9, 0x0, r3}, &(0x7f0000000240)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x1}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) io_uring_enter(r8, 0x47f8, 0x0, 0x0, 0x0, 0x0) (async) futimesat(r7, &(0x7f0000000000)='./file1\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000b000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000000000ac3985c100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r12, &(0x7f0000000100)}, 0x20) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r11, 0x84, 0x65, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x1d, @loopback, 0x12}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e20, @empty}], 0x5c) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$tipc(0x1e, 0x2, 0x0) 11.0514ms ago: executing program 8 (id=3546): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x6ca}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000080008000200050000000a0006"], 0x4c}}, 0x0) 0s ago: executing program 3 (id=3547): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000c600010025000000180100002020642500000000002020207b1af8ff00000000bf0200000000000007010000f8ffffffb702000008000000b7"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000042000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000feffffff00000000"]}, 0x108) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000004c0)={0x1, 'veth0_to_bridge\x00', {}, 0x101}) keyctl$get_security(0x11, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) kernel console output (not intermixed with test programs): ce:0kB free_pcp:45736kB local_pcp:24780kB free_cma:0kB [ 204.498533][T11731] lowmem_reserve[]: 0 0 0 0 [ 204.503127][T11731] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 204.515897][T11731] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950836kB [ 204.532093][T11731] Node 0 Normal: 18*4kB (UME) 30*8kB (UME) 371*16kB (UME) 229*32kB (UME) 500*64kB (UM) 389*128kB (UM) 301*256kB (UME) 129*512kB (UME) 54*1024kB (UME) 20*2048kB (UM) 897*4096kB (M) = 4008840kB [ 204.551259][T11731] Node 0 hugepages_total=8 hugepages_free=1 hugepages_surp=4 hugepages_size=2048kB [ 204.560598][T11731] 107257 total pagecache pages [ 204.565350][T11731] 23 pages in swap cache [ 204.569638][T11731] Free swap = 124740kB [ 204.573780][T11731] Total swap = 124996kB [ 204.577940][T11731] 2097051 pages RAM [ 204.581739][T11731] 0 pages HighMem/MovableOnly [ 204.586429][T11731] 80067 pages reserved [ 204.598906][T11741] bond1: entered promiscuous mode [ 204.603974][T11741] bond1: entered allmulticast mode [ 204.609476][T11741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.620115][T11741] bond1 (unregistering): Released all slaves [ 204.661807][T11596] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 204.671966][T11596] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 204.681293][T11596] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 204.691988][T11596] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 204.741346][T11596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.774879][T11596] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.786738][ T7190] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.793910][ T7190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.813063][ T7190] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.820309][ T7190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.870213][T11754] lo speed is unknown, defaulting to 1000 [ 205.387472][T11758] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.2947' sets config #1 [ 205.401262][T11596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.411743][T11596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.492758][T11596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.533257][T11768] 9pnet_fd: Insufficient options for proto=fd [ 205.566117][T11772] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.647850][T11772] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.738108][T11772] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.860725][T11772] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.872355][T11786] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2953'. [ 205.915025][T11596] veth0_vlan: entered promiscuous mode [ 205.935373][T11789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2954'. [ 205.944464][T11789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2954'. [ 205.957488][T11596] veth1_vlan: entered promiscuous mode [ 205.986990][T11596] veth0_macvtap: entered promiscuous mode [ 206.004338][T11596] veth1_macvtap: entered promiscuous mode [ 206.031217][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.041750][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.051833][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.062591][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.073660][T11596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.087221][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.097821][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.108069][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.118560][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.129256][T11799] sd 0:0:1:0: device reset [ 206.133353][T11596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.142379][T11596] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.151224][T11596] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.160025][T11596] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.169151][T11596] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.204844][T11801] loop5: detected capacity change from 0 to 2048 [ 206.225281][T11801] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.244448][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2891'. [ 206.259628][ T3624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.383102][T11814] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2963'. [ 206.441905][T11821] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2965'. [ 206.451138][T11821] netlink: 'syz.5.2965': attribute type 7 has an invalid length. [ 206.459019][T11821] netlink: 'syz.5.2965': attribute type 8 has an invalid length. [ 206.466867][T11821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2965'. [ 206.487809][T11825] lo speed is unknown, defaulting to 1000 [ 207.318437][T11827] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.2962' sets config #1 [ 207.425945][T11821] gretap0: entered promiscuous mode [ 207.437125][T11821] batadv_slave_1: entered promiscuous mode [ 207.450220][T11821] gretap0: left promiscuous mode [ 207.455674][T11821] batadv_slave_1: left promiscuous mode [ 207.522480][T11831] lo speed is unknown, defaulting to 1000 [ 207.570208][T11832] loop8: detected capacity change from 0 to 512 [ 207.617637][T11832] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.639329][T11832] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.707983][T11831] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.2968: Failed to acquire dquot type 0 [ 207.733169][T11848] bond3: entered promiscuous mode [ 207.738404][T11848] bond3: entered allmulticast mode [ 207.745586][T11848] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.755732][T11848] bond3 (unregistering): Released all slaves [ 207.765731][T11851] team0: No ports can be present during mode change [ 207.826287][T11596] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.853969][T11860] loop5: detected capacity change from 0 to 1024 [ 207.886857][T11860] EXT4-fs: Ignoring removed i_version option [ 207.910368][T11860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.937271][T11860] EXT4-fs error (device loop5): ext4_xattr_inode_iget:440: inode #11: comm syz.5.2980: missing EA_INODE flag [ 207.951460][T11860] EXT4-fs (loop5): Remounting filesystem read-only [ 207.986388][ T3624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.998400][T11878] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2989'. [ 208.007635][T11878] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2989'. [ 208.092697][T11887] loop5: detected capacity change from 0 to 1764 [ 208.108107][T11887] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 208.192581][T11772] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.233278][T11772] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.260601][T11772] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.289884][T11772] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.508808][T11965] loop7: detected capacity change from 0 to 2048 [ 208.532211][T11965] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.540636][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 208.540654][ T29] audit: type=1326 audit(1741385477.980:15476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11922 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 208.580796][ T29] audit: type=1326 audit(1741385478.020:15477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11922 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 208.605250][ T29] audit: type=1326 audit(1741385478.050:15478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11922 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 208.606352][T11978] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.628953][ T29] audit: type=1326 audit(1741385478.050:15479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11922 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 208.629019][ T29] audit: type=1326 audit(1741385478.050:15480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11922 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 208.638987][T11979] loop8: detected capacity change from 0 to 2048 [ 208.713001][ T29] audit: type=1326 audit(1741385478.130:15481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11922 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 208.736761][ T29] audit: type=1326 audit(1741385478.130:15482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11922 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 208.760576][ T29] audit: type=1326 audit(1741385478.130:15483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11922 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 208.784193][ T29] audit: type=1326 audit(1741385478.130:15484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11922 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 208.807729][ T29] audit: type=1326 audit(1741385478.140:15485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11922 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 208.849866][ T9357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.860293][T11978] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.883967][T12002] __nla_validate_parse: 5 callbacks suppressed [ 208.884051][T12002] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3017'. [ 208.901318][T11979] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.915396][T11978] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.956883][T11596] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.967933][T12011] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3019'. [ 208.969861][T11978] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.989777][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3018'. [ 209.021360][T12010] bond1: entered promiscuous mode [ 209.026542][T12010] bond1: entered allmulticast mode [ 209.055398][T12010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.086838][T11978] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.107809][T12025] loop8: detected capacity change from 0 to 512 [ 209.119127][T11978] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.128586][T12025] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 209.132836][T11978] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.149903][T11978] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.168847][T12036] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 209.170312][T12033] bond2: entered promiscuous mode [ 209.182448][T12033] bond2: entered allmulticast mode [ 209.189418][T12033] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.197069][T12025] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.3022: Failed to acquire dquot type 0 [ 209.212116][T12025] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 209.231498][T12043] FAULT_INJECTION: forcing a failure. [ 209.231498][T12043] name failslab, interval 1, probability 0, space 0, times 0 [ 209.231586][T12043] CPU: 1 UID: 0 PID: 12043 Comm: syz.7.3026 Tainted: G W 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 209.231624][T12043] Tainted: [W]=WARN [ 209.231633][T12043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 209.231648][T12043] Call Trace: [ 209.231656][T12043] [ 209.231665][T12043] dump_stack_lvl+0xf2/0x150 [ 209.231699][T12043] dump_stack+0x15/0x1a [ 209.231761][T12043] should_fail_ex+0x24a/0x260 [ 209.231868][T12043] should_failslab+0x8f/0xb0 [ 209.231899][T12043] __kmalloc_noprof+0xab/0x3f0 [ 209.231924][T12043] ? vc_do_resize+0x21a/0xdc0 [ 209.231961][T12043] vc_do_resize+0x21a/0xdc0 [ 209.232015][T12043] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 209.232098][T12043] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 209.232129][T12043] __vc_resize+0x3d/0x50 [ 209.232158][T12043] vgacon_adjust_height+0x3c8/0x450 [ 209.232190][T12043] vgacon_font_set+0x18c/0x1b0 [ 209.232215][T12043] ? __pfx_vgacon_font_set+0x10/0x10 [ 209.232287][T12043] con_font_op+0x89e/0x900 [ 209.232356][T12043] ? should_fail_ex+0xd7/0x260 [ 209.232396][T12043] vt_ioctl+0x1580/0x1810 [ 209.232424][T12043] tty_ioctl+0x815/0xbe0 [ 209.232448][T12043] ? __pfx_tty_ioctl+0x10/0x10 [ 209.232477][T12043] __se_sys_ioctl+0xc9/0x140 [ 209.232584][T12043] __x64_sys_ioctl+0x43/0x50 [ 209.232612][T12043] x64_sys_call+0x1690/0x2dc0 [ 209.232639][T12043] do_syscall_64+0xc9/0x1c0 [ 209.232669][T12043] ? clear_bhb_loop+0x55/0xb0 [ 209.232717][T12043] ? clear_bhb_loop+0x55/0xb0 [ 209.232752][T12043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.232786][T12043] RIP: 0033:0x7f3488dad169 [ 209.232804][T12043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.232924][T12043] RSP: 002b:00007f34873f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.232944][T12043] RAX: ffffffffffffffda RBX: 00007f3488fc6080 RCX: 00007f3488dad169 [ 209.232958][T12043] RDX: 0000400000000080 RSI: 0000000000004b72 RDI: 0000000000000003 [ 209.232973][T12043] RBP: 00007f34873f0090 R08: 0000000000000000 R09: 0000000000000000 [ 209.232987][T12043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.233069][T12043] R13: 0000000000000001 R14: 00007f3488fc6080 R15: 00007ffea3e64168 [ 209.233093][T12043] [ 209.234779][T12033] bond2 (unregistering): Released all slaves [ 209.246957][T12025] EXT4-fs (loop8): 1 truncate cleaned up [ 209.486927][T12025] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.503722][T12025] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.3022: corrupted xattr block 19: bad e_name length [ 209.517537][T12025] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 209.526540][T12025] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.3022: corrupted xattr block 19: bad e_name length [ 209.541692][T12025] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 209.571427][T11596] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.585646][T12075] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3029'. [ 209.720564][T12103] sd 0:0:1:0: device reset [ 209.781450][T12114] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3041'. [ 209.813421][T12121] bond2: entered promiscuous mode [ 209.818652][T12121] bond2: entered allmulticast mode [ 209.825003][T12121] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.839668][T12121] bond2 (unregistering): Released all slaves [ 209.911934][T12140] loop7: detected capacity change from 0 to 512 [ 209.963236][T12151] FAULT_INJECTION: forcing a failure. [ 209.963236][T12151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.976474][T12151] CPU: 1 UID: 0 PID: 12151 Comm: syz.5.3054 Tainted: G W 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 209.976505][T12151] Tainted: [W]=WARN [ 209.976518][T12151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 209.976530][T12151] Call Trace: [ 209.976536][T12151] [ 209.976544][T12151] dump_stack_lvl+0xf2/0x150 [ 209.976580][T12151] dump_stack+0x15/0x1a [ 209.976687][T12151] should_fail_ex+0x24a/0x260 [ 209.976726][T12151] should_fail+0xb/0x10 [ 209.976757][T12151] should_fail_usercopy+0x1a/0x20 [ 209.976788][T12151] _copy_to_user+0x20/0xa0 [ 209.976839][T12151] simple_read_from_buffer+0xa0/0x110 [ 209.976874][T12151] proc_fail_nth_read+0xf9/0x140 [ 209.976911][T12151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.976944][T12151] vfs_read+0x19b/0x6f0 [ 209.977047][T12151] ? __rcu_read_unlock+0x4e/0x70 [ 209.977074][T12151] ? __fget_files+0x17c/0x1c0 [ 209.977232][T12151] ksys_read+0xe8/0x1b0 [ 209.977264][T12151] __x64_sys_read+0x42/0x50 [ 209.977297][T12151] x64_sys_call+0x2874/0x2dc0 [ 209.977330][T12151] do_syscall_64+0xc9/0x1c0 [ 209.977438][T12151] ? clear_bhb_loop+0x55/0xb0 [ 209.977473][T12151] ? clear_bhb_loop+0x55/0xb0 [ 209.977515][T12151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.977551][T12151] RIP: 0033:0x7fb7268abb7c [ 209.977566][T12151] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 209.977584][T12151] RSP: 002b:00007fb724f17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.977602][T12151] RAX: ffffffffffffffda RBX: 00007fb726ac5fa0 RCX: 00007fb7268abb7c [ 209.977633][T12151] RDX: 000000000000000f RSI: 00007fb724f170a0 RDI: 0000000000000007 [ 209.977645][T12151] RBP: 00007fb724f17090 R08: 0000000000000000 R09: 0000000000000000 [ 209.977656][T12151] R10: 0000400000000140 R11: 0000000000000246 R12: 0000000000000001 [ 209.977668][T12151] R13: 0000000000000000 R14: 00007fb726ac5fa0 R15: 00007ffd41f47fc8 [ 209.977686][T12151] [ 210.193992][T12159] sd 0:0:1:0: device reset [ 210.271273][T12163] loop8: detected capacity change from 0 to 512 [ 210.284556][T12163] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 210.297721][T12163] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 210.305938][T12163] System zones: 1-12 [ 210.312649][T12163] EXT4-fs (loop8): 1 truncate cleaned up [ 210.321785][T12163] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.343106][T12172] bond3: entered promiscuous mode [ 210.348413][T12172] bond3: entered allmulticast mode [ 210.353999][T12172] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.367305][T12172] bond3 (unregistering): Released all slaves [ 210.478445][T12178] lo speed is unknown, defaulting to 1000 [ 210.940523][T12194] sd 0:0:1:0: device reset [ 211.360262][T11596] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.383975][T12197] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3071'. [ 211.401303][T12197] loop8: detected capacity change from 0 to 1764 [ 211.425552][T12197] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 211.606464][T12212] loop8: detected capacity change from 0 to 1764 [ 211.777774][T12217] lo speed is unknown, defaulting to 1000 [ 212.061289][ T3391] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 212.068919][ T3391] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 212.086332][ T3391] hid-generic 0000:0003:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz1 [ 212.670062][T12249] lo speed is unknown, defaulting to 1000 [ 212.717005][T12255] loop8: detected capacity change from 0 to 512 [ 212.745533][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3094'. [ 212.757760][T12256] loop7: detected capacity change from 0 to 1764 [ 212.790945][T12255] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.839486][T12255] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.898776][T12255] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.3093: Failed to acquire dquot type 0 [ 212.941370][T12208] syz.5.3079 (12208) used greatest stack depth: 6096 bytes left [ 212.992056][T12271] loop5: detected capacity change from 0 to 1764 [ 212.999065][T12267] veth0_to_batadv: entered promiscuous mode [ 213.005020][T12267] veth0_to_batadv: entered allmulticast mode [ 213.044468][T11596] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.057141][T12275] netlink: 'syz.0.3104': attribute type 1 has an invalid length. [ 213.065034][T12275] netlink: 'syz.0.3104': attribute type 2 has an invalid length. [ 213.076672][T12277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.083907][T12277] IPv6: NLM_F_CREATE should be set when creating new route [ 213.130079][T12283] lo speed is unknown, defaulting to 1000 [ 213.159647][T12288] loop8: detected capacity change from 0 to 512 [ 213.178376][T12288] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 213.180100][T12290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3110'. [ 213.197410][T12290] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3110'. [ 213.209246][T12291] loop7: detected capacity change from 0 to 512 [ 213.218159][T12288] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 213.229446][T12288] System zones: 1-12 [ 213.240517][T12288] EXT4-fs (loop8): 1 truncate cleaned up [ 213.253099][T12288] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.280471][T12291] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.298296][T12291] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.380463][T12306] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.396566][T12283] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.3107: Failed to acquire dquot type 0 [ 213.442537][T12306] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.459108][T12315] loop5: detected capacity change from 0 to 512 [ 213.466942][T12315] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 213.480647][T12315] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 213.489319][T12315] System zones: 1-12 [ 213.493985][T12315] EXT4-fs (loop5): 1 truncate cleaned up [ 213.500468][T12315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.538178][T12306] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.584573][ T9357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.620078][T12326] loop7: detected capacity change from 0 to 1764 [ 213.655977][ T29] kauditd_printk_skb: 434 callbacks suppressed [ 213.655994][ T29] audit: type=1400 audit(1741385483.090:15914): avc: denied { execute } for pid=12327 comm="syz.0.3124" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 214.103307][T11596] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.173891][T12306] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.207944][ T29] audit: type=1326 audit(1741385483.650:15915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12345 comm="syz.7.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 214.231767][ T29] audit: type=1326 audit(1741385483.650:15916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12345 comm="syz.7.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 214.257671][ T29] audit: type=1326 audit(1741385483.700:15917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12345 comm="syz.7.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 214.281336][ T29] audit: type=1326 audit(1741385483.700:15918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12345 comm="syz.7.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 214.305017][ T29] audit: type=1326 audit(1741385483.700:15919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12345 comm="syz.7.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 214.380119][ T29] audit: type=1326 audit(1741385483.750:15920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12345 comm="syz.7.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 214.403858][ T29] audit: type=1326 audit(1741385483.750:15921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12345 comm="syz.7.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 214.427534][ T29] audit: type=1326 audit(1741385483.750:15922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12345 comm="syz.7.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 214.451277][ T29] audit: type=1326 audit(1741385483.750:15923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12345 comm="syz.7.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 214.483671][ T3624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.485282][T12306] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.540023][T12306] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.558636][T12306] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.569294][T12351] __nla_validate_parse: 6 callbacks suppressed [ 214.569312][T12351] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3135'. [ 214.576525][T12353] loop5: detected capacity change from 0 to 128 [ 214.588667][T12306] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.608701][T12351] loop8: detected capacity change from 0 to 1764 [ 214.661326][T12353] bio_check_eod: 23956 callbacks suppressed [ 214.661344][T12353] syz.5.3134: attempt to access beyond end of device [ 214.661344][T12353] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 214.673409][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3139'. [ 214.692749][T12360] loop8: detected capacity change from 0 to 128 [ 214.700025][T12353] syz.5.3134: attempt to access beyond end of device [ 214.700025][T12353] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 214.752162][T12360] syz.8.3138: attempt to access beyond end of device [ 214.752162][T12360] loop8: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 214.768411][T12353] syz.5.3134: attempt to access beyond end of device [ 214.768411][T12353] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 214.781688][T12367] syz.5.3134: attempt to access beyond end of device [ 214.781688][T12367] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 214.790823][T12360] syz.8.3138: attempt to access beyond end of device [ 214.790823][T12360] loop8: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 214.808727][T12353] syz.5.3134: attempt to access beyond end of device [ 214.808727][T12353] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 214.822031][T12367] syz.5.3134: attempt to access beyond end of device [ 214.822031][T12367] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 214.831099][T12360] syz.8.3138: attempt to access beyond end of device [ 214.831099][T12360] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 214.848682][T12353] syz.5.3134: attempt to access beyond end of device [ 214.848682][T12353] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 215.129376][T12388] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.167041][T12389] lo speed is unknown, defaulting to 1000 [ 215.197560][T12388] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.295946][T12388] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.377966][T12388] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.445381][T12388] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.479295][T12388] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.511524][T12388] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.562550][T12388] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.603209][T12400] lo speed is unknown, defaulting to 1000 [ 215.612660][T12404] loop5: detected capacity change from 0 to 512 [ 215.678989][T12404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.701040][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3158'. [ 215.709973][T12413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3158'. [ 215.722401][T12404] ext4 filesystem being mounted at /548/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.755957][T12404] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.3153: Failed to acquire dquot type 0 [ 215.783935][T12413] bond1: entered promiscuous mode [ 215.789094][T12413] bond1: entered allmulticast mode [ 215.811577][T12417] ALSA: seq fatal error: cannot create timer (-22) [ 215.826194][T12413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.861032][T12427] loop7: detected capacity change from 0 to 512 [ 215.863541][T12429] loop8: detected capacity change from 0 to 512 [ 215.870410][T12422] lo speed is unknown, defaulting to 1000 [ 215.884077][T12429] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 215.914731][T12429] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.937467][T12427] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.939943][T12429] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.966274][T12427] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.985474][T12427] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.3161: Failed to acquire dquot type 0 [ 216.015462][ T3624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.026666][T11596] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.088546][ T9357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.152886][T12453] FAULT_INJECTION: forcing a failure. [ 216.152886][T12453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.166047][T12453] CPU: 1 UID: 0 PID: 12453 Comm: syz.8.3169 Tainted: G W 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 216.166081][T12453] Tainted: [W]=WARN [ 216.166089][T12453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 216.166104][T12453] Call Trace: [ 216.166112][T12453] [ 216.166121][T12453] dump_stack_lvl+0xf2/0x150 [ 216.166152][T12453] dump_stack+0x15/0x1a [ 216.166204][T12453] should_fail_ex+0x24a/0x260 [ 216.166235][T12453] should_fail+0xb/0x10 [ 216.166264][T12453] should_fail_usercopy+0x1a/0x20 [ 216.166331][T12453] strncpy_from_user+0x25/0x210 [ 216.166359][T12453] ? bpf_probe_read_compat_str+0x123/0x130 [ 216.166400][T12453] strncpy_from_user_nofault+0x66/0xe0 [ 216.166431][T12453] bpf_probe_read_compat_str+0xb3/0x130 [ 216.166524][T12453] bpf_prog_d73d3bb03d5a037f+0x3e/0x40 [ 216.166540][T12453] bpf_trace_run2+0x104/0x1d0 [ 216.166563][T12453] ? snd_timer_instance_free+0x56/0x70 [ 216.166601][T12453] ? snd_timer_instance_free+0x56/0x70 [ 216.166695][T12453] __traceiter_kfree+0x2b/0x50 [ 216.166717][T12453] ? snd_timer_instance_free+0x56/0x70 [ 216.166758][T12453] kfree+0x247/0x2f0 [ 216.166781][T12453] snd_timer_instance_free+0x56/0x70 [ 216.166856][T12453] snd_seq_timer_close+0x72/0xa0 [ 216.166880][T12453] snd_seq_queue_delete+0x133/0x1a0 [ 216.166904][T12453] snd_seq_ioctl_delete_queue+0x30/0x40 [ 216.167042][T12453] snd_seq_ioctl+0x169/0x2a0 [ 216.167083][T12453] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 216.167118][T12453] __se_sys_ioctl+0xc9/0x140 [ 216.167148][T12453] __x64_sys_ioctl+0x43/0x50 [ 216.167175][T12453] x64_sys_call+0x1690/0x2dc0 [ 216.167254][T12453] do_syscall_64+0xc9/0x1c0 [ 216.167352][T12453] ? clear_bhb_loop+0x55/0xb0 [ 216.167485][T12453] ? clear_bhb_loop+0x55/0xb0 [ 216.167515][T12453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.167613][T12453] RIP: 0033:0x7f747e28d169 [ 216.167630][T12453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.167651][T12453] RSP: 002b:00007f747c8f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.167673][T12453] RAX: ffffffffffffffda RBX: 00007f747e4a5fa0 RCX: 00007f747e28d169 [ 216.167686][T12453] RDX: 0000400000000580 RSI: 00000000408c5333 RDI: 0000000000000005 [ 216.167699][T12453] RBP: 00007f747c8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 216.167712][T12453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.167745][T12453] R13: 0000000000000000 R14: 00007f747e4a5fa0 R15: 00007ffd0547bd48 [ 216.167762][T12453] [ 216.643622][T12461] loop8: detected capacity change from 0 to 1024 [ 216.715239][T12461] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.820495][T12471] loop7: detected capacity change from 0 to 128 [ 216.891115][T12473] netlink: 'syz.0.3178': attribute type 30 has an invalid length. [ 216.919873][T12461] x_tables: duplicate underflow at hook 2 [ 216.935091][T12478] loop9: detected capacity change from 0 to 7 [ 216.962203][T12478] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.979231][T12478] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.987195][T12478] loop9: unable to read partition table [ 217.046092][T12478] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 217.046092][T12478] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 217.114907][T12491] lo speed is unknown, defaulting to 1000 [ 217.149484][T12494] loop8: detected capacity change from 0 to 512 [ 217.187918][T12496] lo speed is unknown, defaulting to 1000 [ 217.213440][T12494] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.240979][T12494] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.3185: Failed to acquire dquot type 0 [ 217.352020][T12507] loop5: detected capacity change from 0 to 512 [ 217.365369][T12507] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 217.385987][T12507] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 217.394217][T12507] System zones: 1-12 [ 217.404857][T12507] EXT4-fs (loop5): 1 truncate cleaned up [ 217.581324][T12517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.591830][T12517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.065284][T12526] loop8: detected capacity change from 0 to 128 [ 218.089189][T12528] sd 0:0:1:0: device reset [ 218.168858][T12534] lo speed is unknown, defaulting to 1000 [ 218.254247][T12537] loop7: detected capacity change from 0 to 512 [ 218.357012][T12537] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.435321][T12554] loop5: detected capacity change from 0 to 512 [ 218.455498][T12534] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.3202: Failed to acquire dquot type 0 [ 218.485162][T12554] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 218.523154][T12554] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 218.554172][T12554] System zones: 1-12 [ 218.562080][T12554] EXT4-fs (loop5): 1 truncate cleaned up [ 218.661198][ T29] kauditd_printk_skb: 519 callbacks suppressed [ 218.661215][ T29] audit: type=1326 audit(1741385488.100:16435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.0.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd14cad169 code=0x7ffc0000 [ 218.691094][ T29] audit: type=1326 audit(1741385488.100:16436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.0.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd14cad169 code=0x7ffc0000 [ 218.739211][ T29] audit: type=1326 audit(1741385488.160:16437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.0.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd14cad169 code=0x7ffc0000 [ 218.762965][ T29] audit: type=1326 audit(1741385488.160:16438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.0.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd14cad169 code=0x7ffc0000 [ 218.825905][ T29] audit: type=1326 audit(1741385488.240:16439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12565 comm="syz.3.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 218.849638][ T29] audit: type=1326 audit(1741385488.240:16440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12565 comm="syz.3.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 218.873914][ T29] audit: type=1326 audit(1741385488.240:16441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12565 comm="syz.3.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 218.897624][ T29] audit: type=1326 audit(1741385488.240:16442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12565 comm="syz.3.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 218.921602][ T29] audit: type=1326 audit(1741385488.240:16443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12565 comm="syz.3.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 218.945208][ T29] audit: type=1326 audit(1741385488.240:16444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12565 comm="syz.3.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 219.089196][T12572] FAULT_INJECTION: forcing a failure. [ 219.089196][T12572] name failslab, interval 1, probability 0, space 0, times 0 [ 219.104979][T12572] CPU: 0 UID: 0 PID: 12572 Comm: syz.7.3217 Tainted: G W 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 219.105016][T12572] Tainted: [W]=WARN [ 219.105049][T12572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 219.105062][T12572] Call Trace: [ 219.105068][T12572] [ 219.105074][T12572] dump_stack_lvl+0xf2/0x150 [ 219.105102][T12572] dump_stack+0x15/0x1a [ 219.105125][T12572] should_fail_ex+0x24a/0x260 [ 219.105179][T12572] should_failslab+0x8f/0xb0 [ 219.105212][T12572] kmem_cache_alloc_node_noprof+0x59/0x320 [ 219.105241][T12572] ? __alloc_skb+0x10b/0x310 [ 219.105271][T12572] __alloc_skb+0x10b/0x310 [ 219.105293][T12572] rtmsg_ifinfo_build_skb+0x63/0x1b0 [ 219.105323][T12572] rtmsg_ifinfo+0x6b/0x100 [ 219.105348][T12572] dev_close_many+0x151/0x240 [ 219.105379][T12572] unregister_netdevice_many_notify+0x263/0x1280 [ 219.105449][T12572] ? unregister_netdevice_queue+0x1ce/0x220 [ 219.105544][T12572] unregister_netdevice_queue+0x1f4/0x220 [ 219.105587][T12572] __tun_detach+0x7db/0xae0 [ 219.105615][T12572] tun_chr_close+0x58/0xf0 [ 219.105635][T12572] ? __pfx_tun_chr_close+0x10/0x10 [ 219.105659][T12572] __fput+0x2ac/0x640 [ 219.105726][T12572] __fput_sync+0x96/0xc0 [ 219.105745][T12572] __x64_sys_close+0x55/0xe0 [ 219.105771][T12572] x64_sys_call+0x266c/0x2dc0 [ 219.105803][T12572] do_syscall_64+0xc9/0x1c0 [ 219.105850][T12572] ? clear_bhb_loop+0x55/0xb0 [ 219.105919][T12572] ? clear_bhb_loop+0x55/0xb0 [ 219.106006][T12572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.106038][T12572] RIP: 0033:0x7f3488dad169 [ 219.106056][T12572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.106077][T12572] RSP: 002b:00007f3487411038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 219.106100][T12572] RAX: ffffffffffffffda RBX: 00007f3488fc5fa0 RCX: 00007f3488dad169 [ 219.106150][T12572] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 219.106161][T12572] RBP: 00007f3487411090 R08: 0000000000000000 R09: 0000000000000000 [ 219.106173][T12572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.106184][T12572] R13: 0000000000000000 R14: 00007f3488fc5fa0 R15: 00007ffea3e64168 [ 219.106237][T12572] [ 219.350817][T12583] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.3218' sets config #1 [ 219.413910][T12586] sd 0:0:1:0: device reset [ 219.418966][T12575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.427451][T12575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.453671][T12575] lo speed is unknown, defaulting to 1000 [ 219.460501][T12588] lo speed is unknown, defaulting to 1000 [ 219.519451][T12589] loop5: detected capacity change from 0 to 512 [ 219.559974][T12589] ext4 filesystem being mounted at /562/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.573353][T12589] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.3222: Failed to acquire dquot type 0 [ 219.624346][T12603] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 219.659852][T12606] loop8: detected capacity change from 0 to 1764 [ 219.681280][T12608] loop5: detected capacity change from 0 to 128 [ 219.710850][T12608] bio_check_eod: 70392 callbacks suppressed [ 219.710939][T12608] syz.5.3229: attempt to access beyond end of device [ 219.710939][T12608] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 219.748018][T12608] syz.5.3229: attempt to access beyond end of device [ 219.748018][T12608] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 219.768824][T12608] syz.5.3229: attempt to access beyond end of device [ 219.768824][T12608] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 219.784987][T12608] syz.5.3229: attempt to access beyond end of device [ 219.784987][T12608] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 219.800123][T12608] syz.5.3229: attempt to access beyond end of device [ 219.800123][T12608] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 219.814312][T12608] syz.5.3229: attempt to access beyond end of device [ 219.814312][T12608] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 219.828173][T12614] syz.5.3229: attempt to access beyond end of device [ 219.828173][T12614] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 219.841529][T12608] syz.5.3229: attempt to access beyond end of device [ 219.841529][T12608] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 219.854843][T12614] syz.5.3229: attempt to access beyond end of device [ 219.854843][T12614] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 219.873346][T12608] syz.5.3229: attempt to access beyond end of device [ 219.873346][T12608] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 219.915061][T12621] sd 0:0:1:0: device reset [ 219.943087][T12623] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3235'. [ 219.958306][T12624] loop8: detected capacity change from 0 to 512 [ 219.964881][T12624] EXT4-fs: Ignoring removed oldalloc option [ 220.006106][T12624] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.3233: Parent and EA inode have the same ino 15 [ 220.023119][T12624] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.3233: Parent and EA inode have the same ino 15 [ 220.054523][T12624] EXT4-fs (loop8): 1 orphan inode deleted [ 220.101095][T12631] sd 0:0:1:0: device reset [ 220.169685][T12635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3240'. [ 220.208675][T12635] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 220.253961][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3242'. [ 220.296098][T12642] loop7: detected capacity change from 0 to 1764 [ 220.608736][T12663] lo speed is unknown, defaulting to 1000 [ 220.630017][T12667] FAULT_INJECTION: forcing a failure. [ 220.630017][T12667] name failslab, interval 1, probability 0, space 0, times 0 [ 220.642772][T12667] CPU: 0 UID: 0 PID: 12667 Comm: syz.3.3255 Tainted: G W 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 220.642832][T12667] Tainted: [W]=WARN [ 220.642839][T12667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.642851][T12667] Call Trace: [ 220.642858][T12667] [ 220.642866][T12667] dump_stack_lvl+0xf2/0x150 [ 220.642900][T12667] dump_stack+0x15/0x1a [ 220.642922][T12667] should_fail_ex+0x24a/0x260 [ 220.643026][T12667] ? proc_do_submiturb+0x837/0x1de0 [ 220.643066][T12667] should_failslab+0x8f/0xb0 [ 220.643096][T12667] __kmalloc_cache_noprof+0x4e/0x320 [ 220.643122][T12667] ? mntput+0x49/0x70 [ 220.643168][T12667] proc_do_submiturb+0x837/0x1de0 [ 220.643207][T12667] ? path_openat+0x19a0/0x1fc0 [ 220.643231][T12667] ? avc_has_extended_perms+0x6e9/0x8e0 [ 220.643265][T12667] ? should_fail_ex+0xd7/0x260 [ 220.643305][T12667] usbdev_ioctl+0x1ddb/0x3f20 [ 220.643348][T12667] ? do_vfs_ioctl+0x98b/0x1590 [ 220.643380][T12667] ? selinux_file_ioctl+0x2f7/0x380 [ 220.643483][T12667] ? __fget_files+0x17c/0x1c0 [ 220.643586][T12667] ? __pfx_usbdev_ioctl+0x10/0x10 [ 220.643621][T12667] __se_sys_ioctl+0xc9/0x140 [ 220.643658][T12667] __x64_sys_ioctl+0x43/0x50 [ 220.643712][T12667] x64_sys_call+0x1690/0x2dc0 [ 220.643807][T12667] do_syscall_64+0xc9/0x1c0 [ 220.643839][T12667] ? clear_bhb_loop+0x55/0xb0 [ 220.643873][T12667] ? clear_bhb_loop+0x55/0xb0 [ 220.643907][T12667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.643938][T12667] RIP: 0033:0x7f88e295d169 [ 220.644022][T12667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.644069][T12667] RSP: 002b:00007f88e0fc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.644092][T12667] RAX: ffffffffffffffda RBX: 00007f88e2b75fa0 RCX: 00007f88e295d169 [ 220.644104][T12667] RDX: 0000400000000000 RSI: 000000008038550a RDI: 0000000000000004 [ 220.644116][T12667] RBP: 00007f88e0fc1090 R08: 0000000000000000 R09: 0000000000000000 [ 220.644127][T12667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.644139][T12667] R13: 0000000000000000 R14: 00007f88e2b75fa0 R15: 00007ffcf72776d8 [ 220.644157][T12667] [ 220.882907][T12668] loop5: detected capacity change from 0 to 512 [ 220.918636][T12668] ext4 filesystem being mounted at /564/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.969507][T12678] loop8: detected capacity change from 0 to 1764 [ 220.977148][T12663] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.3253: Failed to acquire dquot type 0 [ 221.072492][T12689] loop7: detected capacity change from 0 to 128 [ 221.095989][ T3624] EXT4-fs unmount: 14 callbacks suppressed [ 221.101903][ T3624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.261412][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3270'. [ 221.285307][T12695] netlink: 'syz.8.3266': attribute type 1 has an invalid length. [ 221.293109][T12695] netlink: 'syz.8.3266': attribute type 2 has an invalid length. [ 221.383814][T12707] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.3269' sets config #1 [ 221.712486][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3272'. [ 221.833047][T12718] loop5: detected capacity change from 0 to 128 [ 221.875778][T12723] FAULT_INJECTION: forcing a failure. [ 221.875778][T12723] name failslab, interval 1, probability 0, space 0, times 0 [ 221.888539][T12723] CPU: 1 UID: 0 PID: 12723 Comm: syz.8.3277 Tainted: G W 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 221.888632][T12723] Tainted: [W]=WARN [ 221.888640][T12723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.888655][T12723] Call Trace: [ 221.888701][T12723] [ 221.888708][T12723] dump_stack_lvl+0xf2/0x150 [ 221.888738][T12723] dump_stack+0x15/0x1a [ 221.888801][T12723] should_fail_ex+0x24a/0x260 [ 221.888839][T12723] should_failslab+0x8f/0xb0 [ 221.888921][T12723] kmem_cache_alloc_noprof+0x52/0x320 [ 221.888946][T12723] ? audit_log_start+0x34c/0x6b0 [ 221.888989][T12723] audit_log_start+0x34c/0x6b0 [ 221.889032][T12723] audit_seccomp+0x4b/0x130 [ 221.889113][T12723] __seccomp_filter+0x6fa/0x1180 [ 221.889222][T12723] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 221.889255][T12723] ? vfs_write+0x644/0x920 [ 221.889301][T12723] __secure_computing+0x9f/0x1c0 [ 221.889327][T12723] syscall_trace_enter+0xd1/0x1f0 [ 221.889360][T12723] do_syscall_64+0xaa/0x1c0 [ 221.889396][T12723] ? clear_bhb_loop+0x55/0xb0 [ 221.889486][T12723] ? clear_bhb_loop+0x55/0xb0 [ 221.889524][T12723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.889558][T12723] RIP: 0033:0x7f747e28d169 [ 221.889671][T12723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.889694][T12723] RSP: 002b:00007f747c8f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 221.889715][T12723] RAX: ffffffffffffffda RBX: 00007f747e4a5fa0 RCX: 00007f747e28d169 [ 221.889727][T12723] RDX: 000000000000ee00 RSI: 0000000000000000 RDI: 000000000000000a [ 221.889739][T12723] RBP: 00007f747c8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 221.889750][T12723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.889761][T12723] R13: 0000000000000000 R14: 00007f747e4a5fa0 R15: 00007ffd0547bd48 [ 221.889780][T12723] [ 222.248167][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3289'. [ 222.277268][T12756] FAULT_INJECTION: forcing a failure. [ 222.277268][T12756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.279469][T12757] FAULT_INJECTION: forcing a failure. [ 222.279469][T12757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.290477][T12756] CPU: 1 UID: 0 PID: 12756 Comm: syz.0.3292 Tainted: G W 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 222.290562][T12756] Tainted: [W]=WARN [ 222.290572][T12756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 222.290587][T12756] Call Trace: [ 222.290595][T12756] [ 222.290604][T12756] dump_stack_lvl+0xf2/0x150 [ 222.290640][T12756] dump_stack+0x15/0x1a [ 222.290668][T12756] should_fail_ex+0x24a/0x260 [ 222.290804][T12756] should_fail+0xb/0x10 [ 222.290868][T12756] should_fail_usercopy+0x1a/0x20 [ 222.290963][T12756] _copy_from_user+0x1c/0xa0 [ 222.290988][T12756] copy_msghdr_from_user+0x54/0x2a0 [ 222.291028][T12756] ? __fget_files+0x17c/0x1c0 [ 222.291123][T12756] __sys_sendmsg+0x13e/0x230 [ 222.291168][T12756] __x64_sys_sendmsg+0x46/0x50 [ 222.291200][T12756] x64_sys_call+0x2734/0x2dc0 [ 222.291272][T12756] do_syscall_64+0xc9/0x1c0 [ 222.291388][T12756] ? clear_bhb_loop+0x55/0xb0 [ 222.291423][T12756] ? clear_bhb_loop+0x55/0xb0 [ 222.291460][T12756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.291533][T12756] RIP: 0033:0x7fdd14cad169 [ 222.291554][T12756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.291647][T12756] RSP: 002b:00007fdd13311038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.291671][T12756] RAX: ffffffffffffffda RBX: 00007fdd14ec5fa0 RCX: 00007fdd14cad169 [ 222.291686][T12756] RDX: 00000000240440c0 RSI: 0000400000000340 RDI: 0000000000000003 [ 222.291703][T12756] RBP: 00007fdd13311090 R08: 0000000000000000 R09: 0000000000000000 [ 222.291718][T12756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.291732][T12756] R13: 0000000000000000 R14: 00007fdd14ec5fa0 R15: 00007ffc536dbce8 [ 222.291783][T12756] [ 222.320569][T12759] bond1: entered promiscuous mode [ 222.330098][T12757] CPU: 0 UID: 0 PID: 12757 Comm: syz.8.3285 Tainted: G W 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 222.330154][T12757] Tainted: [W]=WARN [ 222.330163][T12757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 222.330180][T12757] Call Trace: [ 222.330188][T12757] [ 222.330199][T12757] dump_stack_lvl+0xf2/0x150 [ 222.330272][T12757] dump_stack+0x15/0x1a [ 222.330374][T12757] should_fail_ex+0x24a/0x260 [ 222.330413][T12757] should_fail+0xb/0x10 [ 222.330446][T12757] should_fail_usercopy+0x1a/0x20 [ 222.330544][T12757] _copy_to_user+0x20/0xa0 [ 222.330568][T12757] simple_read_from_buffer+0xa0/0x110 [ 222.330655][T12757] proc_fail_nth_read+0xf9/0x140 [ 222.330694][T12757] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.330754][T12757] vfs_read+0x19b/0x6f0 [ 222.330784][T12757] ? __rcu_read_unlock+0x4e/0x70 [ 222.330813][T12757] ? __fget_files+0x17c/0x1c0 [ 222.330856][T12757] ksys_read+0xe8/0x1b0 [ 222.330890][T12757] __x64_sys_read+0x42/0x50 [ 222.330939][T12757] x64_sys_call+0x2874/0x2dc0 [ 222.330973][T12757] do_syscall_64+0xc9/0x1c0 [ 222.331012][T12757] ? clear_bhb_loop+0x55/0xb0 [ 222.331110][T12757] ? clear_bhb_loop+0x55/0xb0 [ 222.331143][T12757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.331312][T12757] RIP: 0033:0x7f747e28bb7c [ 222.331333][T12757] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 222.331356][T12757] RSP: 002b:00007f747c8d6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.331380][T12757] RAX: ffffffffffffffda RBX: 00007f747e4a6080 RCX: 00007f747e28bb7c [ 222.331396][T12757] RDX: 000000000000000f RSI: 00007f747c8d60a0 RDI: 000000000000000b [ 222.331467][T12757] RBP: 00007f747c8d6090 R08: 0000000000000000 R09: 0000000000000000 [ 222.331482][T12757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.331552][T12757] R13: 0000000000000001 R14: 00007f747e4a6080 R15: 00007ffd0547bd48 [ 222.331576][T12757] [ 222.440403][T12771] loop5: detected capacity change from 0 to 1764 [ 222.448310][T12759] bond1: entered allmulticast mode [ 222.465583][T12759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.714275][T12759] bond1 (unregistering): Released all slaves [ 222.738864][T12784] netlink: 'syz.0.3302': attribute type 1 has an invalid length. [ 222.746845][T12784] netlink: 'syz.0.3302': attribute type 2 has an invalid length. [ 222.777602][T12787] vlan2: entered allmulticast mode [ 222.783651][T12787] bond0: entered allmulticast mode [ 222.789464][T12787] bond0: left allmulticast mode [ 222.832900][T12792] lo speed is unknown, defaulting to 1000 [ 222.888594][T12795] loop7: detected capacity change from 0 to 512 [ 222.900026][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3309'. [ 222.918321][T12800] loop8: detected capacity change from 0 to 512 [ 222.926538][T12795] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.928555][T12800] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 222.952323][T12800] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 222.952595][T12798] FAULT_INJECTION: forcing a failure. [ 222.952595][T12798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.960673][T12800] System zones: [ 222.973573][T12798] CPU: 1 UID: 0 PID: 12798 Comm: syz.5.3309 Tainted: G W 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 222.973610][T12798] Tainted: [W]=WARN [ 222.973619][T12798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 222.973634][T12798] Call Trace: [ 222.973650][T12798] [ 222.973661][T12798] dump_stack_lvl+0xf2/0x150 [ 222.973768][T12798] dump_stack+0x15/0x1a [ 222.973795][T12798] should_fail_ex+0x24a/0x260 [ 222.973871][T12798] should_fail+0xb/0x10 [ 222.973904][T12798] should_fail_usercopy+0x1a/0x20 [ 222.973962][T12798] _copy_from_user+0x1c/0xa0 [ 222.973988][T12798] copy_msghdr_from_user+0x54/0x2a0 [ 222.974028][T12798] ? __fget_files+0x17c/0x1c0 [ 222.974073][T12798] __sys_sendmsg+0x13e/0x230 [ 222.974177][T12798] __x64_sys_sendmsg+0x46/0x50 [ 222.974209][T12798] x64_sys_call+0x2734/0x2dc0 [ 222.974243][T12798] do_syscall_64+0xc9/0x1c0 [ 222.974283][T12798] ? clear_bhb_loop+0x55/0xb0 [ 222.974395][T12798] ? clear_bhb_loop+0x55/0xb0 [ 222.974429][T12798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.974463][T12798] RIP: 0033:0x7fb7268ad169 [ 222.974483][T12798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.974506][T12798] RSP: 002b:00007fb724f17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.974531][T12798] RAX: ffffffffffffffda RBX: 00007fb726ac5fa0 RCX: 00007fb7268ad169 [ 222.974547][T12798] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000003 [ 222.974604][T12798] RBP: 00007fb724f17090 R08: 0000000000000000 R09: 0000000000000000 [ 222.974620][T12798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.974635][T12798] R13: 0000000000000000 R14: 00007fb726ac5fa0 R15: 00007ffd41f47fc8 [ 222.974731][T12798] [ 222.978598][T12795] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.989560][T12800] 1-12 [ 223.023256][T12792] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.3306: Failed to acquire dquot type 0 [ 223.023965][T12800] EXT4-fs (loop8): 1 truncate cleaned up [ 223.187549][T12800] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.265986][T12821] 9pnet_fd: Insufficient options for proto=fd [ 223.288507][ T9357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.304785][T12822] netlink: 'syz.5.3315': attribute type 1 has an invalid length. [ 223.312687][T12822] netlink: 'syz.5.3315': attribute type 2 has an invalid length. [ 223.361685][T12831] loop5: detected capacity change from 0 to 1764 [ 223.365719][T12830] bond1: entered promiscuous mode [ 223.373344][T12830] bond1: entered allmulticast mode [ 223.379165][T12830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.389511][T12830] bond1 (unregistering): Released all slaves [ 223.562244][T12849] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3326'. [ 223.590922][T12851] lo speed is unknown, defaulting to 1000 [ 223.601983][T12849] loop7: detected capacity change from 0 to 1764 [ 223.701034][T12849] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 223.734375][T12857] lo speed is unknown, defaulting to 1000 [ 224.160893][T11596] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.185934][T12853] netlink: 'syz.5.3329': attribute type 1 has an invalid length. [ 224.193842][T12853] netlink: 'syz.5.3329': attribute type 2 has an invalid length. [ 224.253158][ T29] kauditd_printk_skb: 620 callbacks suppressed [ 224.253186][ T29] audit: type=1326 audit(1741385493.690:17057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.7.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 224.391143][ T29] audit: type=1326 audit(1741385493.770:17058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.7.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 224.415017][ T29] audit: type=1326 audit(1741385493.770:17059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.7.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 224.438918][ T29] audit: type=1326 audit(1741385493.770:17060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.7.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 224.462777][ T29] audit: type=1326 audit(1741385493.770:17061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.7.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 224.486744][ T29] audit: type=1326 audit(1741385493.770:17062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.7.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 224.510405][ T29] audit: type=1326 audit(1741385493.770:17063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.7.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 224.534059][ T29] audit: type=1326 audit(1741385493.770:17064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.7.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 224.557671][ T29] audit: type=1326 audit(1741385493.770:17065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.7.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 224.581510][ T29] audit: type=1326 audit(1741385493.770:17066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.7.3332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 224.755374][T12879] bond1: entered promiscuous mode [ 224.760487][T12879] bond1: entered allmulticast mode [ 224.781721][T12879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.805766][T12879] bond1 (unregistering): Released all slaves [ 224.925630][T12889] netlink: 'syz.3.3342': attribute type 1 has an invalid length. [ 224.933535][T12889] netlink: 'syz.3.3342': attribute type 2 has an invalid length. [ 225.020394][T12902] lo speed is unknown, defaulting to 1000 [ 225.104238][T12905] lo speed is unknown, defaulting to 1000 [ 225.113152][T12910] loop7: detected capacity change from 0 to 512 [ 225.169209][T12910] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.225433][T12910] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.240196][T12910] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.3347: Failed to acquire dquot type 0 [ 225.368490][ T9357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.628482][T12931] lo speed is unknown, defaulting to 1000 [ 225.872107][T12933] bond1: entered promiscuous mode [ 225.877360][T12933] bond1: entered allmulticast mode [ 225.882775][T12933] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.906340][T12933] bond1 (unregistering): Released all slaves [ 226.687382][T12945] lo speed is unknown, defaulting to 1000 [ 227.062208][T12938] netlink: 'syz.5.3358': attribute type 1 has an invalid length. [ 227.070046][T12938] netlink: 'syz.5.3358': attribute type 2 has an invalid length. [ 227.399139][T12954] netlink: 'syz.0.3363': attribute type 1 has an invalid length. [ 227.406988][T12954] netlink: 'syz.0.3363': attribute type 2 has an invalid length. [ 227.924380][T12968] lo speed is unknown, defaulting to 1000 [ 230.528033][T12981] loop7: detected capacity change from 0 to 512 [ 230.535670][T12981] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 230.554968][T12979] lo speed is unknown, defaulting to 1000 [ 230.588451][T12974] lo speed is unknown, defaulting to 1000 [ 231.101122][T12981] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 231.119139][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3371'. [ 231.130587][T12981] System zones: 1-12 [ 231.465346][T12981] EXT4-fs (loop7): 1 truncate cleaned up [ 231.471573][T12981] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.625957][T12995] loop5: detected capacity change from 0 to 128 [ 231.671940][T12994] loop8: detected capacity change from 0 to 1764 [ 231.684039][T12991] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3373'. [ 231.693369][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 231.693383][ T29] audit: type=1400 audit(1741385501.120:17349): avc: denied { write } for pid=12988 comm="syz.0.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 231.720164][ T29] audit: type=1400 audit(1741385501.120:17350): avc: denied { nlmsg_write } for pid=12988 comm="syz.0.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 231.743763][ T29] audit: type=1326 audit(1741385501.140:17351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12992 comm="syz.3.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 231.767500][ T29] audit: type=1326 audit(1741385501.140:17352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12992 comm="syz.3.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 231.791263][ T29] audit: type=1326 audit(1741385501.140:17353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12992 comm="syz.3.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 231.814757][ T29] audit: type=1326 audit(1741385501.140:17354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12992 comm="syz.3.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 231.838400][ T29] audit: type=1326 audit(1741385501.140:17355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12992 comm="syz.3.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 231.862025][ T29] audit: type=1326 audit(1741385501.140:17356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12992 comm="syz.3.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 231.885751][ T29] audit: type=1326 audit(1741385501.140:17357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12992 comm="syz.3.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 231.909399][ T29] audit: type=1326 audit(1741385501.140:17358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12992 comm="syz.3.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 231.939548][T13000] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.3372' sets config #1 [ 231.950597][T13000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.959115][T13000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.987423][T13000] lo speed is unknown, defaulting to 1000 [ 232.088004][ T1806] bio_check_eod: 30510 callbacks suppressed [ 232.088019][ T1806] kworker/u8:7: attempt to access beyond end of device [ 232.088019][ T1806] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 232.220028][T13012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3381'. [ 232.264291][T13012] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 232.280997][T13014] loop5: detected capacity change from 0 to 128 [ 232.323552][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3384'. [ 232.344632][T13014] syz.5.3382: attempt to access beyond end of device [ 232.344632][T13014] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 232.380745][T13014] syz.5.3382: attempt to access beyond end of device [ 232.380745][T13014] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 232.394947][T13014] syz.5.3382: attempt to access beyond end of device [ 232.394947][T13014] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 232.434951][T13014] syz.5.3382: attempt to access beyond end of device [ 232.434951][T13014] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 232.456090][T13021] syz.5.3382: attempt to access beyond end of device [ 232.456090][T13021] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 232.469425][T13014] syz.5.3382: attempt to access beyond end of device [ 232.469425][T13014] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 232.483432][T13021] syz.5.3382: attempt to access beyond end of device [ 232.483432][T13021] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 232.502904][T13014] syz.5.3382: attempt to access beyond end of device [ 232.502904][T13014] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 232.519156][T13021] syz.5.3382: attempt to access beyond end of device [ 232.519156][T13021] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 232.580844][T13027] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3387'. [ 232.690582][T13032] loop8: detected capacity change from 0 to 512 [ 232.708325][T13032] EXT4-fs: Ignoring removed oldalloc option [ 232.734929][T13032] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.3389: Parent and EA inode have the same ino 15 [ 232.780644][T13032] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.3389: Parent and EA inode have the same ino 15 [ 232.833633][T13032] EXT4-fs (loop8): 1 orphan inode deleted [ 232.851828][T13032] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.933690][T11596] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.162336][T13041] loop5: detected capacity change from 0 to 128 [ 233.197405][T13045] loop8: detected capacity change from 0 to 1764 [ 233.266824][ T9357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.305433][T13048] loop7: detected capacity change from 0 to 1764 [ 233.547321][T13058] FAULT_INJECTION: forcing a failure. [ 233.547321][T13058] name failslab, interval 1, probability 0, space 0, times 0 [ 233.560151][T13058] CPU: 1 UID: 0 PID: 13058 Comm: syz.7.3400 Tainted: G W 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 233.560231][T13058] Tainted: [W]=WARN [ 233.560240][T13058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.560255][T13058] Call Trace: [ 233.560263][T13058] [ 233.560272][T13058] dump_stack_lvl+0xf2/0x150 [ 233.560314][T13058] dump_stack+0x15/0x1a [ 233.560343][T13058] should_fail_ex+0x24a/0x260 [ 233.560379][T13058] ? qdisc_get_rtab+0x1a3/0x2c0 [ 233.560454][T13058] should_failslab+0x8f/0xb0 [ 233.560493][T13058] __kmalloc_cache_noprof+0x4e/0x320 [ 233.560522][T13058] qdisc_get_rtab+0x1a3/0x2c0 [ 233.560548][T13058] tbf_change+0x126/0xca0 [ 233.560623][T13058] ? stack_trace_save+0x61/0x90 [ 233.560652][T13058] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 233.560708][T13058] ? __list_add_valid_or_report+0x38/0xe0 [ 233.560745][T13058] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 233.560768][T13058] ? rtnetlink_rcv+0x1c/0x30 [ 233.560836][T13058] ? netlink_unicast+0x599/0x670 [ 233.560873][T13058] ? netlink_sendmsg+0x5cc/0x6e0 [ 233.560914][T13058] ? __sock_sendmsg+0x140/0x180 [ 233.560944][T13058] ? ____sys_sendmsg+0x326/0x4b0 [ 233.561017][T13058] ? __sys_sendmsg+0x19d/0x230 [ 233.561048][T13058] ? __x64_sys_sendmsg+0x46/0x50 [ 233.561080][T13058] ? hrtimer_init+0x2d/0x110 [ 233.561107][T13058] ? read_tsc+0x9/0x20 [ 233.561136][T13058] tbf_init+0x72/0x90 [ 233.561216][T13058] ? __pfx_tbf_init+0x10/0x10 [ 233.561248][T13058] qdisc_create+0x6c1/0xae0 [ 233.561279][T13058] ? __nla_parse+0x40/0x60 [ 233.561398][T13058] tc_modify_qdisc+0x668/0x1100 [ 233.561470][T13058] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 233.561560][T13058] rtnetlink_rcv_msg+0x6aa/0x710 [ 233.561594][T13058] ? ref_tracker_free+0x3a5/0x410 [ 233.561635][T13058] netlink_rcv_skb+0x12c/0x230 [ 233.561755][T13058] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 233.561796][T13058] rtnetlink_rcv+0x1c/0x30 [ 233.561827][T13058] netlink_unicast+0x599/0x670 [ 233.561899][T13058] netlink_sendmsg+0x5cc/0x6e0 [ 233.561974][T13058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.562017][T13058] __sock_sendmsg+0x140/0x180 [ 233.562053][T13058] ____sys_sendmsg+0x326/0x4b0 [ 233.562133][T13058] __sys_sendmsg+0x19d/0x230 [ 233.562177][T13058] __x64_sys_sendmsg+0x46/0x50 [ 233.562209][T13058] x64_sys_call+0x2734/0x2dc0 [ 233.562242][T13058] do_syscall_64+0xc9/0x1c0 [ 233.562283][T13058] ? clear_bhb_loop+0x55/0xb0 [ 233.562318][T13058] ? clear_bhb_loop+0x55/0xb0 [ 233.562360][T13058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.562395][T13058] RIP: 0033:0x7f3488dad169 [ 233.562414][T13058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.562438][T13058] RSP: 002b:00007f3487411038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.562465][T13058] RAX: ffffffffffffffda RBX: 00007f3488fc5fa0 RCX: 00007f3488dad169 [ 233.562481][T13058] RDX: 0000000000000000 RSI: 0000400000001200 RDI: 0000000000000005 [ 233.562497][T13058] RBP: 00007f3487411090 R08: 0000000000000000 R09: 0000000000000000 [ 233.562618][T13058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.562688][T13058] R13: 0000000000000000 R14: 00007f3488fc5fa0 R15: 00007ffea3e64168 [ 233.562711][T13058] [ 233.562735][T13058] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 233.918812][T13065] loop8: detected capacity change from 0 to 512 [ 234.022689][T13067] lo speed is unknown, defaulting to 1000 [ 234.682888][T13079] loop7: detected capacity change from 0 to 512 [ 234.696968][T13079] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 234.729308][T13079] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 234.737633][T13079] System zones: 1-12 [ 234.748508][T13079] EXT4-fs (loop7): 1 truncate cleaned up [ 234.754676][T13079] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.932933][T13086] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3409'. [ 234.961034][T13086] IPVS: set_ctl: invalid protocol: 50 172.20.20.15:20004 [ 234.972124][T13086] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 234.979615][T13086] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 235.074555][T13092] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.3407' sets config #1 [ 235.137271][T13092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.206340][T13095] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 235.253923][T13092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.342252][T13092] lo speed is unknown, defaulting to 1000 [ 235.419763][T13110] bond1: entered promiscuous mode [ 235.424838][T13110] bond1: entered allmulticast mode [ 235.485228][T13110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.526124][T13110] bond1 (unregistering): Released all slaves [ 235.552802][T13097] lo speed is unknown, defaulting to 1000 [ 235.579409][T13117] FAULT_INJECTION: forcing a failure. [ 235.579409][T13117] name failslab, interval 1, probability 0, space 0, times 0 [ 235.592198][T13117] CPU: 1 UID: 0 PID: 13117 Comm: syz.3.3418 Tainted: G W 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 235.592229][T13117] Tainted: [W]=WARN [ 235.592235][T13117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 235.592247][T13117] Call Trace: [ 235.592254][T13117] [ 235.592262][T13117] dump_stack_lvl+0xf2/0x150 [ 235.592290][T13117] dump_stack+0x15/0x1a [ 235.592311][T13117] should_fail_ex+0x24a/0x260 [ 235.592345][T13117] should_failslab+0x8f/0xb0 [ 235.592380][T13117] kmem_cache_alloc_noprof+0x52/0x320 [ 235.592405][T13117] ? vm_area_alloc+0x2c/0x130 [ 235.592441][T13117] vm_area_alloc+0x2c/0x130 [ 235.592468][T13117] mmap_region+0x819/0x1620 [ 235.592514][T13117] do_mmap+0x98a/0xc30 [ 235.592545][T13117] vm_mmap_pgoff+0x16d/0x2d0 [ 235.592578][T13117] ksys_mmap_pgoff+0xd0/0x330 [ 235.592611][T13117] ? fpregs_assert_state_consistent+0x83/0xa0 [ 235.592634][T13117] x64_sys_call+0x1940/0x2dc0 [ 235.592661][T13117] do_syscall_64+0xc9/0x1c0 [ 235.592694][T13117] ? clear_bhb_loop+0x55/0xb0 [ 235.592726][T13117] ? clear_bhb_loop+0x55/0xb0 [ 235.592755][T13117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.592781][T13117] RIP: 0033:0x7f88e295d1a3 [ 235.592797][T13117] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 235.592820][T13117] RSP: 002b:00007f88e0fc0e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 235.592842][T13117] RAX: ffffffffffffffda RBX: 000000000000054c RCX: 00007f88e295d1a3 [ 235.592858][T13117] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 235.592873][T13117] RBP: 00004000000014c2 R08: 00000000ffffffff R09: 0000000000000000 [ 235.592887][T13117] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000008 [ 235.592898][T13117] R13: 00007f88e0fc0ef0 R14: 00007f88e0fc0eb0 R15: 0000400000000300 [ 235.592916][T13117] [ 235.993686][T13120] lo speed is unknown, defaulting to 1000 [ 236.051892][T13097] chnl_net:caif_netlink_parms(): no params data found [ 236.185321][T13130] lo speed is unknown, defaulting to 1000 [ 236.251975][T13097] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.259162][T13097] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.324880][T13097] bridge_slave_0: entered allmulticast mode [ 236.343486][T13097] bridge_slave_0: entered promiscuous mode [ 236.358618][T13097] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.365822][T13097] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.391087][T13097] bridge_slave_1: entered allmulticast mode [ 236.405633][T13097] bridge_slave_1: entered promiscuous mode [ 236.450820][T13097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.494396][T13097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.513982][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3424'. [ 236.549790][ T28] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.747336][T13097] team0: Port device team_slave_0 added [ 236.754309][T13097] team0: Port device team_slave_1 added [ 236.977031][ T28] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.003421][T13142] lo speed is unknown, defaulting to 1000 [ 237.286213][ T24] IPVS: starting estimator thread 0... [ 237.347383][ T28] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.376132][T13146] IPVS: using max 2304 ests per chain, 115200 per kthread [ 237.484818][ T28] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.695346][T13152] loop8: detected capacity change from 0 to 512 [ 237.711485][T13152] EXT4-fs: Ignoring removed oldalloc option [ 237.733342][T13152] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.3428: Parent and EA inode have the same ino 15 [ 237.761244][T13152] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.3428: Parent and EA inode have the same ino 15 [ 237.801366][T13097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.808479][T13097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.834611][T13097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.858079][T13152] EXT4-fs (loop8): 1 orphan inode deleted [ 237.864329][T13152] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.877456][T13097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.884417][T13097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.910580][T13097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.923778][ T9357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.947873][T13156] FAULT_INJECTION: forcing a failure. [ 237.947873][T13156] name failslab, interval 1, probability 0, space 0, times 0 [ 237.960646][T13156] CPU: 1 UID: 0 PID: 13156 Comm: syz.3.3430 Tainted: G W 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 237.960806][T13156] Tainted: [W]=WARN [ 237.960814][T13156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 237.960830][T13156] Call Trace: [ 237.960838][T13156] [ 237.960846][T13156] dump_stack_lvl+0xf2/0x150 [ 237.960883][T13156] dump_stack+0x15/0x1a [ 237.960911][T13156] should_fail_ex+0x24a/0x260 [ 237.960975][T13156] should_failslab+0x8f/0xb0 [ 237.961005][T13156] kmem_cache_alloc_noprof+0x52/0x320 [ 237.961031][T13156] ? skb_clone+0x154/0x1f0 [ 237.961101][T13156] skb_clone+0x154/0x1f0 [ 237.961133][T13156] nfnetlink_rcv+0x2de/0x15d0 [ 237.961160][T13156] ? kmem_cache_free+0xdc/0x2d0 [ 237.961191][T13156] ? __kfree_skb+0x102/0x150 [ 237.961212][T13156] ? consume_skb+0x49/0x160 [ 237.961284][T13156] ? nlmon_xmit+0x51/0x60 [ 237.961326][T13156] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 237.961406][T13156] ? __dev_queue_xmit+0xb6e/0x2090 [ 237.961436][T13156] ? ref_tracker_free+0x3a5/0x410 [ 237.961487][T13156] netlink_unicast+0x599/0x670 [ 237.961527][T13156] netlink_sendmsg+0x5cc/0x6e0 [ 237.961636][T13156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.961679][T13156] __sock_sendmsg+0x140/0x180 [ 237.961716][T13156] ____sys_sendmsg+0x326/0x4b0 [ 237.961744][T13156] __sys_sendmsg+0x19d/0x230 [ 237.961926][T13156] __x64_sys_sendmsg+0x46/0x50 [ 237.961983][T13156] x64_sys_call+0x2734/0x2dc0 [ 237.962041][T13156] do_syscall_64+0xc9/0x1c0 [ 237.962081][T13156] ? clear_bhb_loop+0x55/0xb0 [ 237.962117][T13156] ? clear_bhb_loop+0x55/0xb0 [ 237.962312][T13156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.962339][T13156] RIP: 0033:0x7f88e295d169 [ 237.962354][T13156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.962401][T13156] RSP: 002b:00007f88e0fc1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.962429][T13156] RAX: ffffffffffffffda RBX: 00007f88e2b75fa0 RCX: 00007f88e295d169 [ 237.962441][T13156] RDX: 0000000000000040 RSI: 0000400000000200 RDI: 0000000000000006 [ 237.962453][T13156] RBP: 00007f88e0fc1090 R08: 0000000000000000 R09: 0000000000000000 [ 237.962468][T13156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.962483][T13156] R13: 0000000000000000 R14: 00007f88e2b75fa0 R15: 00007ffcf72776d8 [ 237.962501][T13156] [ 238.124392][T13158] loop7: detected capacity change from 0 to 1764 [ 238.215946][T13097] hsr_slave_0: entered promiscuous mode [ 238.221998][T13097] hsr_slave_1: entered promiscuous mode [ 238.228441][T13097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.237156][T13097] Cannot create hsr debugfs directory [ 238.252732][ T29] kauditd_printk_skb: 450 callbacks suppressed [ 238.252749][ T29] audit: type=1326 audit(1741385507.690:17809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.7.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 238.282949][ T29] audit: type=1326 audit(1741385507.690:17810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.7.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 238.306679][ T29] audit: type=1326 audit(1741385507.690:17811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.7.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 238.330519][ T29] audit: type=1326 audit(1741385507.690:17812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.7.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 238.354285][ T29] audit: type=1326 audit(1741385507.690:17813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.7.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 238.377948][ T29] audit: type=1326 audit(1741385507.690:17814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.7.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 238.390277][T13165] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3432'. [ 238.401636][ T29] audit: type=1326 audit(1741385507.690:17815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.7.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 238.434536][ T29] audit: type=1326 audit(1741385507.690:17816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.7.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 238.458272][ T29] audit: type=1326 audit(1741385507.690:17817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.7.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 238.482140][ T29] audit: type=1326 audit(1741385507.690:17818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.7.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 238.522524][T11596] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.569633][T13168] loop8: detected capacity change from 0 to 128 [ 238.595966][T13163] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 238.710356][ T28] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 238.787773][ T28] bond0 (unregistering): Released all slaves [ 238.798894][ T28] bond1 (unregistering): (slave bond2): Releasing backup interface [ 238.807665][ T28] bond2 (unregistering): left promiscuous mode [ 238.814700][ T28] bond1 (unregistering): Released all slaves [ 238.824089][ T28] bond2 (unregistering): Released all slaves [ 238.834148][T13175] IPVS: stopping master sync thread 13178 ... [ 238.838845][T13178] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 238.851171][T13174] FAULT_INJECTION: forcing a failure. [ 238.851171][T13174] name failslab, interval 1, probability 0, space 0, times 0 [ 238.863959][T13174] CPU: 1 UID: 0 PID: 13174 Comm: syz.8.3436 Tainted: G W 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 238.863994][T13174] Tainted: [W]=WARN [ 238.864002][T13174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 238.864016][T13174] Call Trace: [ 238.864024][T13174] [ 238.864034][T13174] dump_stack_lvl+0xf2/0x150 [ 238.864065][T13174] dump_stack+0x15/0x1a [ 238.864170][T13174] should_fail_ex+0x24a/0x260 [ 238.864240][T13174] should_failslab+0x8f/0xb0 [ 238.864279][T13174] kmem_cache_alloc_noprof+0x52/0x320 [ 238.864305][T13174] ? prepare_kernel_cred+0x3c/0x650 [ 238.864341][T13174] prepare_kernel_cred+0x3c/0x650 [ 238.864392][T13174] _request_firmware+0x2c7/0xa00 [ 238.864428][T13174] ? wake_up_q+0x3f/0x80 [ 238.864448][T13174] ? __rcu_read_unlock+0x4e/0x70 [ 238.864541][T13174] request_firmware+0x36/0x50 [ 238.864574][T13174] devlink_compat_flash_update+0xaf/0x1b0 [ 238.864617][T13174] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 238.864643][T13174] dev_ethtool+0x138b/0x14c0 [ 238.864669][T13174] ? __rcu_read_unlock+0x4e/0x70 [ 238.864723][T13174] dev_ioctl+0x854/0xab0 [ 238.864746][T13174] sock_do_ioctl+0x11c/0x260 [ 238.864778][T13174] sock_ioctl+0x40f/0x600 [ 238.864877][T13174] ? __pfx_sock_ioctl+0x10/0x10 [ 238.864984][T13174] __se_sys_ioctl+0xc9/0x140 [ 238.865010][T13174] __x64_sys_ioctl+0x43/0x50 [ 238.865033][T13174] x64_sys_call+0x1690/0x2dc0 [ 238.865066][T13174] do_syscall_64+0xc9/0x1c0 [ 238.865137][T13174] ? clear_bhb_loop+0x55/0xb0 [ 238.865164][T13174] ? clear_bhb_loop+0x55/0xb0 [ 238.865263][T13174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.865296][T13174] RIP: 0033:0x7f747e28d169 [ 238.865315][T13174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.865338][T13174] RSP: 002b:00007f747c8f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.865359][T13174] RAX: ffffffffffffffda RBX: 00007f747e4a5fa0 RCX: 00007f747e28d169 [ 238.865371][T13174] RDX: 0000400000000340 RSI: 0000000000008946 RDI: 0000000000000003 [ 238.865385][T13174] RBP: 00007f747c8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 238.865398][T13174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.865473][T13174] R13: 0000000000000000 R14: 00007f747e4a5fa0 R15: 00007ffd0547bd48 [ 238.865495][T13174] [ 239.150968][T13182] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3437'. [ 239.312523][ T28] hsr_slave_0: left promiscuous mode [ 239.330844][ T28] hsr_slave_1: left promiscuous mode [ 239.343010][ T28] veth1_macvtap: left promiscuous mode [ 239.348588][ T28] veth0_macvtap: left promiscuous mode [ 239.354302][ T28] veth1_vlan: left promiscuous mode [ 239.361510][ T28] veth0_vlan: left promiscuous mode [ 239.433161][T13200] loop7: detected capacity change from 0 to 128 [ 239.488501][T13200] bio_check_eod: 25459 callbacks suppressed [ 239.488517][T13200] syz.7.3444: attempt to access beyond end of device [ 239.488517][T13200] loop7: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 239.517815][T13198] syz.7.3444: attempt to access beyond end of device [ 239.517815][T13198] loop7: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 239.531108][T13197] bond2: entered promiscuous mode [ 239.536850][T13197] bond2: entered allmulticast mode [ 239.544746][T13197] 8021q: adding VLAN 0 to HW filter on device bond2 [ 239.557853][T13197] bond2 (unregistering): Released all slaves [ 239.632212][T13203] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3445'. [ 239.655389][T13203] IPVS: set_ctl: invalid protocol: 50 172.20.20.15:20004 [ 239.785114][T13212] loop7: detected capacity change from 0 to 128 [ 239.816639][T13212] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 239.963291][T13097] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 239.983096][T13215] lo speed is unknown, defaulting to 1000 [ 240.221335][T13212] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 240.257323][T13212] serio: Serial port ptm0 [ 240.315630][T13220] netlink: 'syz.7.3449': attribute type 3 has an invalid length. [ 240.334512][ T28] IPVS: stop unused estimator thread 0... [ 240.456455][ T307] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 240.600344][T13222] loop7: detected capacity change from 0 to 2048 [ 240.637892][T13222] EXT4-fs: Ignoring removed orlov option [ 240.686099][T13222] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.892903][ T9357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.915302][T13235] FAULT_INJECTION: forcing a failure. [ 240.915302][T13235] name failslab, interval 1, probability 0, space 0, times 0 [ 240.928100][T13235] CPU: 0 UID: 0 PID: 13235 Comm: syz.8.3456 Tainted: G W 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 240.928130][T13235] Tainted: [W]=WARN [ 240.928137][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 240.928151][T13235] Call Trace: [ 240.928171][T13235] [ 240.928180][T13235] dump_stack_lvl+0xf2/0x150 [ 240.928270][T13235] dump_stack+0x15/0x1a [ 240.928291][T13235] should_fail_ex+0x24a/0x260 [ 240.928325][T13235] should_failslab+0x8f/0xb0 [ 240.928433][T13235] kmem_cache_alloc_noprof+0x52/0x320 [ 240.928455][T13235] ? prepare_kernel_cred+0x3c/0x650 [ 240.928575][T13235] prepare_kernel_cred+0x3c/0x650 [ 240.928606][T13235] _request_firmware+0x2c7/0xa00 [ 240.928633][T13235] ? avc_has_perm_noaudit+0x1cc/0x210 [ 240.928747][T13235] ? rpm_resume+0x655/0xd00 [ 240.928766][T13235] ? __rcu_read_unlock+0x4e/0x70 [ 240.928790][T13235] request_firmware+0x36/0x50 [ 240.928859][T13235] devlink_compat_flash_update+0xaf/0x1b0 [ 240.928895][T13235] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 240.928925][T13235] dev_ethtool+0x138b/0x14c0 [ 240.928971][T13235] ? __rcu_read_unlock+0x4e/0x70 [ 240.928993][T13235] dev_ioctl+0x854/0xab0 [ 240.929015][T13235] sock_do_ioctl+0x11c/0x260 [ 240.929103][T13235] sock_ioctl+0x40f/0x600 [ 240.929154][T13235] ? __pfx_sock_ioctl+0x10/0x10 [ 240.929250][T13235] __se_sys_ioctl+0xc9/0x140 [ 240.929293][T13235] __x64_sys_ioctl+0x43/0x50 [ 240.929365][T13235] x64_sys_call+0x1690/0x2dc0 [ 240.929391][T13235] do_syscall_64+0xc9/0x1c0 [ 240.929421][T13235] ? clear_bhb_loop+0x55/0xb0 [ 240.929447][T13235] ? clear_bhb_loop+0x55/0xb0 [ 240.929536][T13235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.929562][T13235] RIP: 0033:0x7f747e28d169 [ 240.929577][T13235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.929607][T13235] RSP: 002b:00007f747c8f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.929624][T13235] RAX: ffffffffffffffda RBX: 00007f747e4a5fa0 RCX: 00007f747e28d169 [ 240.929637][T13235] RDX: 0000400000000340 RSI: 0000000000008946 RDI: 0000000000000005 [ 240.929660][T13235] RBP: 00007f747c8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 240.929672][T13235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.929684][T13235] R13: 0000000000000000 R14: 00007f747e4a5fa0 R15: 00007ffd0547bd48 [ 240.929702][T13235] [ 240.932875][T13097] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 241.191388][T13250] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3462'. [ 241.218318][T13097] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 241.233438][T13251] loop7: detected capacity change from 0 to 1764 [ 241.243680][T13249] IPVS: set_ctl: invalid protocol: 50 172.20.20.15:20004 [ 241.258594][T13097] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 241.358629][T13097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.389366][T13097] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.402602][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.409811][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.424503][ T7190] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.431626][ T7190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.548838][T13262] loop7: detected capacity change from 0 to 1024 [ 241.575207][T13262] EXT4-fs: Ignoring removed nobh option [ 241.603433][T13097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.627529][T13262] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.663605][T13273] loop8: detected capacity change from 0 to 128 [ 241.671820][T13262] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 241.678373][T13262] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 241.686262][T13262] vhci_hcd vhci_hcd.0: Device attached [ 241.715963][T13275] vhci_hcd: unknown pdu 2 [ 241.721014][ T1806] vhci_hcd: stop threads [ 241.725311][ T1806] vhci_hcd: release socket [ 241.729803][ T1806] vhci_hcd: disconnect device [ 241.760719][T13273] syz.8.3469: attempt to access beyond end of device [ 241.760719][T13273] loop8: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 241.798930][T13273] syz.8.3469: attempt to access beyond end of device [ 241.798930][T13273] loop8: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 241.813488][T13273] syz.8.3469: attempt to access beyond end of device [ 241.813488][T13273] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 241.827993][T13273] syz.8.3469: attempt to access beyond end of device [ 241.827993][T13273] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 241.848903][T13273] syz.8.3469: attempt to access beyond end of device [ 241.848903][T13273] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 241.862796][T13286] syz.8.3469: attempt to access beyond end of device [ 241.862796][T13286] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 241.876358][T13273] syz.8.3469: attempt to access beyond end of device [ 241.876358][T13273] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 241.889690][T13286] syz.8.3469: attempt to access beyond end of device [ 241.889690][T13286] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 241.902166][T13097] veth0_vlan: entered promiscuous mode [ 241.920935][T13097] veth1_vlan: entered promiscuous mode [ 241.953361][T13097] veth0_macvtap: entered promiscuous mode [ 241.971128][T13097] veth1_macvtap: entered promiscuous mode [ 241.994204][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.004737][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.014672][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.025182][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.035037][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.045483][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.128195][T13097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.148002][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.158617][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.168514][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.179054][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.188960][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.199438][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.259361][T13290] FAULT_INJECTION: forcing a failure. [ 242.259361][T13290] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 242.272722][T13290] CPU: 1 UID: 0 PID: 13290 Comm: syz.3.3470 Tainted: G W 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 242.272759][T13290] Tainted: [W]=WARN [ 242.272766][T13290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 242.272801][T13290] Call Trace: [ 242.272828][T13290] [ 242.272839][T13290] dump_stack_lvl+0xf2/0x150 [ 242.272887][T13290] dump_stack+0x15/0x1a [ 242.272908][T13290] should_fail_ex+0x24a/0x260 [ 242.272946][T13290] should_fail_alloc_page+0xfd/0x110 [ 242.272989][T13290] __alloc_frozen_pages_noprof+0x109/0x340 [ 242.273171][T13290] alloc_pages_mpol+0xb4/0x260 [ 242.273200][T13290] alloc_pages_noprof+0xe8/0x130 [ 242.273272][T13290] get_free_pages_noprof+0xc/0x30 [ 242.273304][T13290] do_proc_control+0x174/0x850 [ 242.273401][T13290] ? should_fail_ex+0xd7/0x260 [ 242.273433][T13290] usbdev_ioctl+0x2a5d/0x3f20 [ 242.273476][T13290] ? do_vfs_ioctl+0x98b/0x1590 [ 242.273508][T13290] ? selinux_file_ioctl+0x2f7/0x380 [ 242.273584][T13290] ? __fget_files+0x17c/0x1c0 [ 242.273620][T13290] ? __pfx_usbdev_ioctl+0x10/0x10 [ 242.273649][T13290] __se_sys_ioctl+0xc9/0x140 [ 242.273701][T13290] __x64_sys_ioctl+0x43/0x50 [ 242.273733][T13290] x64_sys_call+0x1690/0x2dc0 [ 242.273763][T13290] do_syscall_64+0xc9/0x1c0 [ 242.273803][T13290] ? clear_bhb_loop+0x55/0xb0 [ 242.273881][T13290] ? clear_bhb_loop+0x55/0xb0 [ 242.273914][T13290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.273959][T13290] RIP: 0033:0x7f88e295d169 [ 242.274041][T13290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.274090][T13290] RSP: 002b:00007f88e0fc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.274131][T13290] RAX: ffffffffffffffda RBX: 00007f88e2b75fa0 RCX: 00007f88e295d169 [ 242.274148][T13290] RDX: 0000400000000140 RSI: 00000000c0105500 RDI: 0000000000000003 [ 242.274164][T13290] RBP: 00007f88e0fc1090 R08: 0000000000000000 R09: 0000000000000000 [ 242.274180][T13290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.274196][T13290] R13: 0000000000000000 R14: 00007f88e2b75fa0 R15: 00007ffcf72776d8 [ 242.274215][T13290] [ 242.280155][T13097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.494715][T13293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3472'. [ 242.515412][ T9357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.551810][T13292] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 242.617658][T13295] lo speed is unknown, defaulting to 1000 [ 242.647748][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3473'. [ 242.669720][T13298] loop7: detected capacity change from 0 to 512 [ 242.698131][T13097] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.707115][T13097] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.715831][T13097] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.724753][T13097] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.744810][T13298] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.763836][T13300] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3474'. [ 242.775041][T13300] IPVS: set_ctl: invalid protocol: 50 172.20.20.15:20004 [ 242.793585][T13298] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.820508][T13295] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.3471: Failed to acquire dquot type 0 [ 242.917887][ T9357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.962810][T13310] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3410'. [ 243.032032][T13314] lo speed is unknown, defaulting to 1000 [ 243.151075][T13310] loop5: detected capacity change from 0 to 1764 [ 243.258884][T13310] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 243.388987][T13318] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 243.496754][T13322] loop5: detected capacity change from 0 to 512 [ 243.537369][T13328] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3482'. [ 243.570784][T13322] EXT4-fs (loop5): 1 orphan inode deleted [ 243.590372][ T28] __quota_error: 219 callbacks suppressed [ 243.590393][ T28] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 243.606037][ T28] EXT4-fs error (device loop5): ext4_release_dquot:6950: comm kworker/u8:1: Failed to release dquot type 1 [ 243.620672][T13334] FAULT_INJECTION: forcing a failure. [ 243.620672][T13334] name failslab, interval 1, probability 0, space 0, times 0 [ 243.625260][T13322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.633493][T13334] CPU: 0 UID: 0 PID: 13334 Comm: syz.7.3483 Tainted: G W 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 243.633545][T13334] Tainted: [W]=WARN [ 243.633555][T13334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.633573][T13334] Call Trace: [ 243.633582][T13334] [ 243.633593][T13334] dump_stack_lvl+0xf2/0x150 [ 243.633628][T13334] dump_stack+0x15/0x1a [ 243.633656][T13334] should_fail_ex+0x24a/0x260 [ 243.633694][T13334] should_failslab+0x8f/0xb0 [ 243.633780][T13334] kmem_cache_alloc_node_noprof+0x59/0x320 [ 243.633810][T13334] ? __alloc_skb+0x10b/0x310 [ 243.633839][T13334] __alloc_skb+0x10b/0x310 [ 243.633867][T13334] netlink_alloc_large_skb+0xad/0xe0 [ 243.633960][T13334] netlink_sendmsg+0x3b4/0x6e0 [ 243.634017][T13334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.634059][T13334] __sock_sendmsg+0x140/0x180 [ 243.634202][T13334] ____sys_sendmsg+0x326/0x4b0 [ 243.634300][T13334] __sys_sendmsg+0x19d/0x230 [ 243.634348][T13334] __x64_sys_sendmsg+0x46/0x50 [ 243.634379][T13334] x64_sys_call+0x2734/0x2dc0 [ 243.634413][T13334] do_syscall_64+0xc9/0x1c0 [ 243.634534][T13334] ? clear_bhb_loop+0x55/0xb0 [ 243.634569][T13334] ? clear_bhb_loop+0x55/0xb0 [ 243.634604][T13334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.634640][T13334] RIP: 0033:0x7f3488dad169 [ 243.634668][T13334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.634691][T13334] RSP: 002b:00007f3487411038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.634731][T13334] RAX: ffffffffffffffda RBX: 00007f3488fc5fa0 RCX: 00007f3488dad169 [ 243.634747][T13334] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000004 [ 243.634759][T13334] RBP: 00007f3487411090 R08: 0000000000000000 R09: 0000000000000000 [ 243.634771][T13334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.634786][T13334] R13: 0000000000000000 R14: 00007f3488fc5fa0 R15: 00007ffea3e64168 [ 243.634809][T13334] [ 243.895752][T13339] netlink: 'syz.8.3484': attribute type 1 has an invalid length. [ 243.903578][T13339] netlink: 'syz.8.3484': attribute type 2 has an invalid length. [ 243.924431][T13322] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.982890][T13322] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3480'. [ 243.999976][T13343] loop7: detected capacity change from 0 to 2048 [ 244.007122][T13341] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 244.040856][T13346] netlink: 'syz.8.3488': attribute type 1 has an invalid length. [ 244.048813][T13346] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3488'. [ 244.067813][T13343] loop7: p2 p3 < > p4 < p5 > [ 244.072521][T13343] loop7: partition table partially beyond EOD, truncated [ 244.088684][ T29] audit: type=1326 audit(1741385513.530:18036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13340 comm="syz.3.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 244.112350][ T29] audit: type=1326 audit(1741385513.530:18037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13340 comm="syz.3.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 244.147753][ T29] audit: type=1326 audit(1741385513.580:18038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13340 comm="syz.3.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 244.149516][T13343] loop7: p3 start 4284289 is beyond EOD, [ 244.171377][ T29] audit: type=1326 audit(1741385513.580:18039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13340 comm="syz.3.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 244.171409][ T29] audit: type=1326 audit(1741385513.580:18040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13340 comm="syz.3.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 244.171442][ T29] audit: type=1326 audit(1741385513.580:18041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13340 comm="syz.3.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 244.177158][T13343] truncated [ 244.251657][ T29] audit: type=1326 audit(1741385513.580:18042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13340 comm="syz.3.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 244.275263][ T29] audit: type=1326 audit(1741385513.580:18043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13340 comm="syz.3.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 244.298859][ T29] audit: type=1326 audit(1741385513.580:18044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13340 comm="syz.3.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88e295d169 code=0x7ffc0000 [ 244.337422][T13097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.133670][T13382] loop7: detected capacity change from 0 to 512 [ 245.146142][T13382] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 245.186637][T13382] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 245.211601][T13382] EXT4-fs (loop7): 1 truncate cleaned up [ 245.225701][T13382] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.309565][ T9357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.360972][T13387] netlink: 'syz.5.3498': attribute type 1 has an invalid length. [ 245.368870][T13387] netlink: 'syz.5.3498': attribute type 2 has an invalid length. [ 245.376562][T13390] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3500'. [ 245.394503][T13393] lo speed is unknown, defaulting to 1000 [ 245.433329][T13397] loop5: detected capacity change from 0 to 128 [ 245.475367][T13399] loop7: detected capacity change from 0 to 512 [ 245.495446][T13397] bio_check_eod: 16215 callbacks suppressed [ 245.495465][T13397] syz.5.3501: attempt to access beyond end of device [ 245.495465][T13397] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 245.539992][T13399] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.543209][T13397] syz.5.3501: attempt to access beyond end of device [ 245.543209][T13397] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 245.582290][T13399] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.609210][T13402] syz.5.3501: attempt to access beyond end of device [ 245.609210][T13402] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 245.633529][T13406] loop8: detected capacity change from 0 to 1764 [ 245.654585][T13402] syz.5.3501: attempt to access beyond end of device [ 245.654585][T13402] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 245.676140][T13397] syz.5.3501: attempt to access beyond end of device [ 245.676140][T13397] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 245.719392][T13402] syz.5.3501: attempt to access beyond end of device [ 245.719392][T13402] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 245.728757][T13409] bond2: entered promiscuous mode [ 245.737671][T13409] bond2: entered allmulticast mode [ 245.743420][T13397] syz.5.3501: attempt to access beyond end of device [ 245.743420][T13397] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 245.752700][T13409] 8021q: adding VLAN 0 to HW filter on device bond2 [ 245.773600][T13402] syz.5.3501: attempt to access beyond end of device [ 245.773600][T13402] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 245.787614][T13397] syz.5.3501: attempt to access beyond end of device [ 245.787614][T13397] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 245.798315][T13393] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.3499: Failed to acquire dquot type 0 [ 245.802227][T13402] syz.5.3501: attempt to access beyond end of device [ 245.802227][T13402] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 245.813621][T13409] bond2 (unregistering): Released all slaves [ 245.966909][T13417] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 246.040258][T13415] random: crng reseeded on system resumption [ 246.279702][ T9357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.422550][T13426] loop7: detected capacity change from 0 to 512 [ 246.445151][T13426] EXT4-fs: Ignoring removed oldalloc option [ 246.469803][T13426] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.3509: Parent and EA inode have the same ino 15 [ 246.490265][T13426] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.3509: Parent and EA inode have the same ino 15 [ 246.518575][T13426] EXT4-fs (loop7): 1 orphan inode deleted [ 246.534874][T13426] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.799899][T13437] lo speed is unknown, defaulting to 1000 [ 247.281382][T13441] loop8: detected capacity change from 0 to 1764 [ 247.409399][T13442] lo speed is unknown, defaulting to 1000 [ 247.572154][T13455] FAULT_INJECTION: forcing a failure. [ 247.572154][T13455] name failslab, interval 1, probability 0, space 0, times 0 [ 247.585335][T13455] CPU: 0 UID: 0 PID: 13455 Comm: syz.3.3517 Tainted: G W 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 247.585438][T13455] Tainted: [W]=WARN [ 247.585447][T13455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 247.585463][T13455] Call Trace: [ 247.585470][T13455] [ 247.585480][T13455] dump_stack_lvl+0xf2/0x150 [ 247.585515][T13455] dump_stack+0x15/0x1a [ 247.585558][T13455] should_fail_ex+0x24a/0x260 [ 247.585588][T13455] should_failslab+0x8f/0xb0 [ 247.585623][T13455] __kmalloc_noprof+0xab/0x3f0 [ 247.585649][T13455] ? copy_splice_read+0xb5/0x5b0 [ 247.585681][T13455] copy_splice_read+0xb5/0x5b0 [ 247.585743][T13455] ? __pfx_copy_splice_read+0x10/0x10 [ 247.585767][T13455] splice_direct_to_actor+0x269/0x670 [ 247.585800][T13455] ? __pfx_direct_splice_actor+0x10/0x10 [ 247.585835][T13455] do_splice_direct+0xd7/0x150 [ 247.585924][T13455] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 247.585967][T13455] do_sendfile+0x398/0x660 [ 247.585994][T13455] __x64_sys_sendfile64+0x110/0x150 [ 247.586034][T13455] x64_sys_call+0xfbd/0x2dc0 [ 247.586067][T13455] do_syscall_64+0xc9/0x1c0 [ 247.586174][T13455] ? clear_bhb_loop+0x55/0xb0 [ 247.586203][T13455] ? clear_bhb_loop+0x55/0xb0 [ 247.586272][T13455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.586303][T13455] RIP: 0033:0x7f88e295d169 [ 247.586322][T13455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.586343][T13455] RSP: 002b:00007f88e0fc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 247.586362][T13455] RAX: ffffffffffffffda RBX: 00007f88e2b75fa0 RCX: 00007f88e295d169 [ 247.586374][T13455] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 247.586388][T13455] RBP: 00007f88e0fc1090 R08: 0000000000000000 R09: 0000000000000000 [ 247.586401][T13455] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 247.586417][T13455] R13: 0000000000000000 R14: 00007f88e2b75fa0 R15: 00007ffcf72776d8 [ 247.586492][T13455] [ 247.791656][T13457] loop8: detected capacity change from 0 to 1764 [ 247.810485][T13442] chnl_net:caif_netlink_parms(): no params data found [ 247.850427][ T9357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.874233][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3520'. [ 247.913462][T13467] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 247.922963][T13442] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.930207][T13442] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.938367][T13442] bridge_slave_0: entered allmulticast mode [ 247.946937][T13442] bridge_slave_0: entered promiscuous mode [ 247.958501][T13442] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.965677][T13442] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.983609][T13442] bridge_slave_1: entered allmulticast mode [ 247.990428][T13442] bridge_slave_1: entered promiscuous mode [ 248.018392][T13471] netlink: 'syz.5.3521': attribute type 1 has an invalid length. [ 248.026262][T13471] netlink: 'syz.5.3521': attribute type 2 has an invalid length. [ 248.053625][T13480] loop7: detected capacity change from 0 to 1764 [ 248.202950][T13442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.023679][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 249.023696][ T29] audit: type=1326 audit(1741385517.780:18277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.7.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 249.053595][ T29] audit: type=1326 audit(1741385517.780:18278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.7.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3488dad169 code=0x7ffc0000 [ 249.191255][T13442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.202972][T13495] lo speed is unknown, defaulting to 1000 [ 249.255740][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3532'. [ 249.275140][T13496] lo speed is unknown, defaulting to 1000 [ 249.388641][T13442] team0: Port device team_slave_0 added [ 249.400384][T13442] team0: Port device team_slave_1 added [ 249.460584][T13442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.467617][T13442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.467794][T13516] loop8: detected capacity change from 0 to 1764 [ 249.493787][T13442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.504711][T13442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.517809][T13442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.543799][T13442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.591490][T13442] hsr_slave_0: entered promiscuous mode [ 249.601168][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3540'. [ 249.605776][T13442] hsr_slave_1: entered promiscuous mode [ 249.622246][T13442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.635757][T13442] Cannot create hsr debugfs directory [ 249.648920][ T29] audit: type=1326 audit(1741385519.070:18279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13515 comm="syz.8.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747e28d169 code=0x7ffc0000 [ 249.672827][ T29] audit: type=1326 audit(1741385519.070:18280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13515 comm="syz.8.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747e28d169 code=0x7ffc0000 [ 249.696517][ T29] audit: type=1326 audit(1741385519.070:18281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13515 comm="syz.8.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f747e28d169 code=0x7ffc0000 [ 249.720183][ T29] audit: type=1326 audit(1741385519.070:18282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13515 comm="syz.8.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747e28d169 code=0x7ffc0000 [ 249.743880][ T29] audit: type=1326 audit(1741385519.070:18283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13515 comm="syz.8.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747e28d169 code=0x7ffc0000 [ 249.767599][ T29] audit: type=1326 audit(1741385519.070:18284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13515 comm="syz.8.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747e28d169 code=0x7ffc0000 [ 249.791193][ T29] audit: type=1326 audit(1741385519.070:18285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13515 comm="syz.8.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747e28d169 code=0x7ffc0000 [ 249.814837][ T29] audit: type=1326 audit(1741385519.070:18286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13515 comm="syz.8.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747e28d169 code=0x7ffc0000 [ 249.850876][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3543'. [ 249.878864][T13530] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 249.890367][ T7190] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.909072][T13532] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3546'. [ 249.920279][T13533] ================================================================== [ 249.928386][T13533] BUG: KCSAN: data-race in mas_replace_node / mtree_range_walk [ 249.935953][T13533] [ 249.938279][T13533] write to 0xffff888104558500 of 8 bytes by task 13534 on cpu 0: [ 249.946000][T13533] mas_replace_node+0x1b8/0x430 [ 249.950868][T13533] mas_wr_store_entry+0x1e12/0x23f0 [ 249.956091][T13533] mas_store_prealloc+0x6bf/0x960 [ 249.961141][T13533] mmap_region+0xf4e/0x1620 [ 249.965657][T13533] do_mmap+0x98a/0xc30 [ 249.969753][T13533] vm_mmap_pgoff+0x16d/0x2d0 [ 249.974362][T13533] ksys_mmap_pgoff+0xd0/0x330 [ 249.979057][T13533] x64_sys_call+0x1940/0x2dc0 [ 249.983754][T13533] do_syscall_64+0xc9/0x1c0 [ 249.988282][T13533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.994217][T13533] [ 249.996548][T13533] read to 0xffff888104558500 of 8 bytes by task 13533 on cpu 1: [ 250.004207][T13533] mtree_range_walk+0x33d/0x460 [ 250.009077][T13533] mas_walk+0x16e/0x320 [ 250.013246][T13533] lock_vma_under_rcu+0x95/0x270 [ 250.018221][T13533] exc_page_fault+0x150/0x650 [ 250.022913][T13533] asm_exc_page_fault+0x26/0x30 [ 250.027775][T13533] [ 250.030099][T13533] value changed: 0xffff888104558b06 -> 0xffff888104558500 [ 250.037207][T13533] [ 250.039529][T13533] Reported by Kernel Concurrency Sanitizer on: [ 250.045678][T13533] CPU: 1 UID: 0 PID: 13533 Comm: syz.7.3545 Tainted: G W 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 250.057926][T13533] Tainted: [W]=WARN [ 250.061729][T13533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 250.071790][T13533] ================================================================== [ 250.196117][ T7190] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.559713][ T7190] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.657156][ T7190] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.948057][ T7190] bond0 (unregistering): Released all slaves [ 250.956468][ T7190] bond1 (unregistering): Released all slaves [ 251.035191][ T7190] hsr_slave_0: left promiscuous mode [ 251.040862][ T7190] hsr_slave_1: left promiscuous mode [ 251.048598][ T7190] veth1_macvtap: left promiscuous mode [ 251.054073][ T7190] veth0_macvtap: left promiscuous mode [ 251.059848][ T7190] veth1_vlan: left promiscuous mode [ 251.065124][ T7190] veth0_vlan: left promiscuous mode [ 251.426882][ T7190] bridge_slave_1: left allmulticast mode [ 251.432578][ T7190] bridge_slave_1: left promiscuous mode [ 251.438298][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.446108][ T7190] bridge_slave_0: left allmulticast mode [ 251.451951][ T7190] bridge_slave_0: left promiscuous mode [ 251.457655][ T7190] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.498543][ T7190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.508335][ T7190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.518133][ T7190] bond0 (unregistering): Released all slaves [ 251.563564][ T7190] hsr_slave_0: left promiscuous mode [ 251.569276][ T7190] hsr_slave_1: left promiscuous mode [ 251.574948][ T7190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.582495][ T7190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.606702][ T7190] team0 (unregistering): Port device team_slave_1 removed [ 251.616093][ T7190] team0 (unregistering): Port device team_slave_0 removed [ 255.730252][ T7190] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.777558][ T7190] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.837557][ T7190] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.917462][ T7190] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.047618][ T7190] bond0 (unregistering): Released all slaves [ 256.149140][ T7190] hsr_slave_0: left promiscuous mode [ 256.154830][ T7190] hsr_slave_1: left promiscuous mode [ 256.162142][ T7190] veth1_macvtap: left promiscuous mode [ 256.167839][ T7190] veth0_macvtap: left promiscuous mode [ 256.173345][ T7190] veth1_vlan: left promiscuous mode [ 256.178587][ T7190] veth0_vlan: left promiscuous mode