last executing test programs: 4m53.43171161s ago: executing program 32 (id=102): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8a58ff00000000bfa200000000000007020000f8ffffffb70300000800000007000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x200000, 0x1800, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000002c0)={0x2c, 0x4, r5}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8}]}, 0x24}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x1, @perf_config_ext={0x37343467, 0x5}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$isdn(0x22, 0x2, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x1e, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e6210000f9ff0000ff07000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000181b0000", @ANYRES32=0x1, @ANYBLOB="0000000000000000041c0400f7ffffff1b420200040000001d7a0800080000001831000005000000000000000000000085100000fcffffff85000000a6000000075b0000fcffffffbf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x48, &(0x7f00000003c0)=""/72, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0x8, 0x9358, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0xffffffffffffffff], &(0x7f0000000480)=[{0x1, 0x3, 0x7, 0x6}, {0x3, 0x5, 0x5, 0x2}, {0x5, 0x3, 0xf, 0x1}], 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='gpio_direction\x00', r6, 0x0, 0x200}, 0x18) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r7, @ANYRES64=0x0, @ANYRESHEX], 0x20) 3m11.189942806s ago: executing program 33 (id=1800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="60000000040000000000003a69aa2513aec0059f", @ANYRESHEX=r1, @ANYRESHEX=r1], 0x60}}, 0x1) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec000000", @ANYBLOB="0761dcf388476791369af74659b81ecad6dbb1590cb9688bb8336a17c6f7ab223d6aafd9ef3f7265cfc6d95388433026", @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRESOCT=r1], 0xec}, 0x1, 0x0, 0x0, 0xc01}, 0x44084) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYRES64=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@delsa={0x44, 0x11, 0x400, 0x4, 0x25dfdbfc, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x0, 0x6c}, [@encap={0x1c, 0x4, {0x3, 0x4e22, 0x3, @in=@multicast1}}]}, 0x44}}, 0x0) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x20042, 0x45) r6 = open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123) copy_file_range(r6, 0x0, r5, 0x0, 0x3df1, 0x0) r7 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) r8 = socket$netlink(0x10, 0x3, 0xf) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xffe0}, {0xe, 0xd}}, [@TCA_RATE={0x57, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x693, 0x80, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x3, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) pwritev(r7, &(0x7f0000001980)=[{&(0x7f0000000000)="884146d75ddabdd3ae361629588b8cc285c698b1b3258faec09b3ee1ce81d5653760eea69cf233a11e9cb4a19d00", 0x2e}, {&(0x7f0000000040)="93a25f9eb66015f2e7d4fc8c3b811304d1bb25007b6651b56b8f8f349f4129b1ef51531c5e4b2fbc4a63d39d965579c6483c59c761cabec0693db457292cd042515b95171da1c6ea0c9cdfa0814e2b48acfd817565d5fd6a9fbc20598b584ca7f1407e7bfa37d7cb7bb97ddf9f82e237c5a1e9f7ef971f", 0x77}, {&(0x7f0000000700)="93a77852a9a55a9e00db4fad7124dbd220af34d3fc89255252dda7443d0ae663c5b40494afd7d8a208d5f16080751ee799819c932938aa9c7ddce03c75dc066cc157cbd0518735bb270b679ce2826912fd5fcbc9e9bd423ff71920b049374c2069bdccc44338f15db9fad5e5605368d7bd780210058f7564d3466505c9a94c2830787baeee999898340b436c8dfb4eb7632692c1f855ff726ef283d4ef6984d7b3d1c2c36cee1b2ce95b0b485ad5e636d976f982509072bccd9c", 0xba}, {&(0x7f0000000800)="7154cb91e231d4c94a379e696ec4707b08709688e8b43649b7535168e658683b62ad504d3b547c61571469673b4852261060095aa37d868df64ca60cbbf350edcf06b034c985d03efaf86e65ed4c9331c9efdb35db44260502fc28411fc56a78ecadacd2bc3f0c45e669c95e2f5bfd531b4390b7f02134c8139949672c2b88e8b5545dfc609a6cf3bac227c27de5", 0x8e}, {&(0x7f00000008c0)="f2bbc5b580a394d6130a5c3f4dd9757249fb5aa0ce9613d29727eebb06a9bbea1952c80ca41d45d4697b6c0e867b6710d801a9a1ed56bfadf16479814eff41b2f93488010d99a9a73823252ac8eb40edec7c3acd34186db7d9d7505cd8617d9bb8080061a9f14bae34f28ac319def691ec0f8e6403bc071629236ff22ca5852ab0", 0x81}, {&(0x7f0000000100)="b8960c2939dd3a5ca1658e17bd1233885aa5", 0x12}, {&(0x7f0000000980)="b3ef1f476d5b2236a9dd89bd688133123a69e2a19907919fef3efae5a7377d48a0c26b06230c3832da4ecb1fff9686375235c7b80b539a06a3335e071568565d923f5fc08c5584898d4d540a6b54f1e4eb3fc4055967f2d864e943496ddbb95417c461640253646ed23d9ce27da3b85cac1eb21405cc833b85633e082a49ef7513e5acedbefe504569ab8e74ca203824ea0496ff43b4a24dde06cca153f41d7672505d6f06f186f771834634168e6a496f415abdc3dc481ebb8c53d25e20de63602e8cc7aa6eaa00e9db06971dd5b0f6d1f0710c2198cabb22c6cc25ed293d0beeec60a979315e68a9889174084b7c7afd6ad5f8f54fd253e0ae14c0a730a4c16de97ec82f60dccf2038c54a52fbad4fc8a573f336d7e0f9e97ba04c29569c60fc95742bfc6feec87966387c3537a939153db93095946103c4bc7fa0e849ce24a1c0f9373313c4308f8ce89551ccbba8c67898c7fbee02d5d6c8a2d06cc3685a4b2787172b6ac7fc330866c9d664285f61d3b8b251d25914a2", 0x179}], 0x7, 0x8, 0x365) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r11}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) 3m3.182578256s ago: executing program 34 (id=1888): r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000240)=0x10, 0x80000) readv(r2, &(0x7f0000000f80)=[{&(0x7f0000000300)=""/115, 0x73}, {&(0x7f0000000280)=""/25, 0x19}, {&(0x7f0000000380)=""/59, 0x3b}, {&(0x7f00000003c0)=""/15, 0xf}, {&(0x7f0000000400)=""/182, 0xb6}, {&(0x7f0000000740)=""/243, 0xf3}, {&(0x7f0000000840)=""/197, 0xc5}, {&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000580)=""/1, 0x1}], 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f0000000380), &(0x7f0000000400)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r7, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 3m2.513523057s ago: executing program 35 (id=1892): syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x10000}, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x3}}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x4ae, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='cpu\t>-&&\t') r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r6, 0x0, 0xf7}, 0x18) mq_notify(0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000010002000000000002000600", @ANYRES32=r2, @ANYBLOB="040001000000000008000100", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRESDEC=r7, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="1000fba1678cbb139dda01000000000067140000002000000000e47b9a18d67492691d615138d1dfdb1e9eb0e28deade8ea11b55584784b3c5b30b70c4248fd1b84e3af5349dbe6b0a27736f4688c58db869ced5a9f8ed9bc358f2a6f86d150448279ee84df4701ac07dc4bb165735c646d39191cbf8fe88ba4040f407e0d1fbdf5e3b4d4a04c71a30bf381ce932d4ea720b006de2c2fa93d11c086b44e25fd4a2d54d886dbf99b44378d0687ef1fe3f9b3cc4c6a95cc42fbc09754400ae271a7e775d54253041b6bbfe02b9f70c066a86c003eaf8f6035e55803479d92d2d2b9874fe266647c26713fd070c8e1e71f331ace6f8f0806bd87f335b979ee886048c9a4557"], 0x44, 0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05fb45ed15631e5cfd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) 3m0.782500572s ago: executing program 6 (id=1906): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) uname(&(0x7f0000000000)=""/123) 3m0.740931083s ago: executing program 6 (id=1907): close(0xffffffffffffffff) 3m0.647889425s ago: executing program 6 (id=1908): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xb000000c}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r2, 0x541d) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f00000002c0)={'ip6tnl0', 0x32, 0x32}, 0xa) syz_emit_ethernet(0x6c, &(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5, {0x8000}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r5, @ANYRES32, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x128, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) socket$kcm(0xa, 0x1, 0x0) 3m0.574023396s ago: executing program 6 (id=1909): gettid() rt_sigqueueinfo(0xffffffffffffffff, 0x1d, &(0x7f00000000c0)={0x3d, 0x9, 0x4}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002440)=ANY=[@ANYBLOB='`\x00'], 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048050) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x805) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) syz_clone(0x8000400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="a6", 0x1, 0x8000c61) fallocate(r0, 0x20, 0x4000, 0x8000) 3m0.490036197s ago: executing program 6 (id=1910): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r3}, 0x10) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x2, r3, 0x4777bf99}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r6, @ANYBLOB="050427bd7000fcdbdf2501000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @remote, @remote}, &(0x7f00000003c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x6ecc662b873768d1}, 0xc, &(0x7f0000000400)={&(0x7f0000001a80)=ANY=[], 0x404}, 0x1, 0x0, 0x0, 0x400d0}, 0x20044010) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000300)=r7}, 0x20) r8 = epoll_create1(0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x8, 0x8, 0x10, 0x0, r9}, &(0x7f00000000c0)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) write$binfmt_elf64(r9, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x327) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r12 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) 3m0.179861172s ago: executing program 6 (id=1911): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x20004, 0xfffffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) (async) perf_event_open(&(0x7f0000000bc0)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0xcc38b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x8342, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 3m0.179472032s ago: executing program 36 (id=1911): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x20004, 0xfffffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) (async) perf_event_open(&(0x7f0000000bc0)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0xcc38b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x8342, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 2m59.844022877s ago: executing program 3 (id=1915): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x2}, 0x1c) listen(r4, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setuid(r7) getgroups(0x4, &(0x7f00000001c0)=[0x0, 0xee00, 0xee01, 0xee01]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {r7, r8}}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)=0x2) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r11, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) 2m59.751235488s ago: executing program 3 (id=1916): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = getpgrp(0xffffffffffffffff) kcmp(r1, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 2m59.750752518s ago: executing program 3 (id=1917): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") (fail_nth: 2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = msgget$private(0x0, 0x0) futex(&(0x7f0000000300), 0x2, 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)=0x2, 0x2) msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x68e}, 0x18) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r2, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 2m59.302999295s ago: executing program 3 (id=1918): gettid() rt_sigqueueinfo(0xffffffffffffffff, 0x1d, &(0x7f00000000c0)={0x3d, 0x9, 0x4}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002440)=ANY=[@ANYBLOB='`\x00'], 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048050) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x805) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) syz_clone(0x8000400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="a6", 0x1, 0x8000c61) fallocate(r0, 0x20, 0x4000, 0x8000) 2m59.202267716s ago: executing program 3 (id=1919): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90224fc60100c0b4002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mq_open(&(0x7f0000000680)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\b\x05', 0x6e93ebbbcc0884f0, 0x100, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x2e, 0xa, [@int={0xa, 0x0, 0x0, 0x1, 0x0, 0x35, 0x0, 0x42, 0x2}, @typedef={0x2, 0x0, 0x0, 0x8, 0x1}, @const={0x2, 0x0, 0x0, 0xa, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x400}}, @restrict={0x9, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x5f, 0x0, 0x61, 0xb0, 0x30, 0x3e, 0x61, 0x5f]}}, &(0x7f0000000a00)=""/197, 0x76, 0xc5, 0x1, 0xf2, 0x10000, @value=r3}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xffe0}, {0xe, 0xd}}, [@TCA_RATE={0x57, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x693, 0x80, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x3, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) futex(0x0, 0x3, 0x2, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x100000) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)) 2m58.568364826s ago: executing program 3 (id=1920): r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x8eb9}]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) setsockopt$inet6_buf(r4, 0x29, 0x15, &(0x7f00000001c0)="69139899a9a1afd2e2fb40fca66af53abb7627c0930cd4593d467a4178379ce3868db8fd52aa8f7cf3128ee1e15c2c4813ff51935d0bd285d8b645b1793280b6cf2c0752bf3c84f6dc52a16b825ea922b6d76ad845fc63cf580d9b799915df12a3", 0x61) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r5}, 0x10) sched_rr_get_interval(0x0, 0x0) write$ppp(r3, &(0x7f0000000300)="10e5a0", 0x3) syz_emit_ethernet(0x82, &(0x7f0000000680)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x11, 0x0, @local, @rand_addr, {[@rr={0x7, 0x3, 0x5}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0xc7, 0x3, 0x0, [{@multicast2, 0x10000}, {@private}, {@multicast2}, {@remote}, {@private}, {@dev={0xac, 0x14, 0x14, 0x34}}, {@private}]}]}}}}}}}, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r0}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7f, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd", @ANYRES8=r7, @ANYRES16=r1], 0xfdef) 2m58.548883356s ago: executing program 37 (id=1920): r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x8eb9}]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) setsockopt$inet6_buf(r4, 0x29, 0x15, &(0x7f00000001c0)="69139899a9a1afd2e2fb40fca66af53abb7627c0930cd4593d467a4178379ce3868db8fd52aa8f7cf3128ee1e15c2c4813ff51935d0bd285d8b645b1793280b6cf2c0752bf3c84f6dc52a16b825ea922b6d76ad845fc63cf580d9b799915df12a3", 0x61) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r5}, 0x10) sched_rr_get_interval(0x0, 0x0) write$ppp(r3, &(0x7f0000000300)="10e5a0", 0x3) syz_emit_ethernet(0x82, &(0x7f0000000680)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x11, 0x0, @local, @rand_addr, {[@rr={0x7, 0x3, 0x5}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0xc7, 0x3, 0x0, [{@multicast2, 0x10000}, {@private}, {@multicast2}, {@remote}, {@private}, {@dev={0xac, 0x14, 0x14, 0x34}}, {@private}]}]}}}}}}}, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r0}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7f, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd", @ANYRES8=r7, @ANYRES16=r1], 0xfdef) 2m55.825205177s ago: executing program 8 (id=1893): r0 = getpid() r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 2m55.667871339s ago: executing program 8 (id=1925): gettid() rt_sigqueueinfo(0xffffffffffffffff, 0x1d, &(0x7f00000000c0)={0x3d, 0x9, 0x4}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002440)=ANY=[@ANYBLOB='`\x00'], 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048050) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x805) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) syz_clone(0x8000400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$eJzs3T1sG2UfAPD/neO3X3nf9JXeVwLUoQKkIlV1kn5AYWpXRKVKHZBYIHLcqIoTV7EDTZQh3StEBwSoS9lgYAQxMCAWRlYWEDNSRSOQmg5g5K80TZzglDouud9POvuee87+P8+d/499pzs5gMw62nhII56OiItJxMi6uqFoVx5trbe6slS8v7JUTKJev/RLEklE3FtZKnbWT9rPhyJiOSKeiohv8hHH081xqwuL0xPlcmmuXR6tzVwdrS4snrgyMzFVmirNnnrp5TNnT58ZPzm+/mX36+tL+Z319caPN9+98d2rt29++tmR5eL7E0mci+F23fp+PE6tbZKPcxuWn+5HsAFKBt0AHkmuneeNVPp/jESunfXd1Ed2tWlAn9X3RdSBjErkP2RU53dA4/i3M+3m748751sHII24q+2pVTPUOjcR+5vHJgd/TR46Mmkcbx7ezYayJy1fj4ixoaHNn/+k/fl7dGOPo4H01dfnWztq8/5P18af6DL+DHfOnf5NnfFvddP49yB+bovx72KPMX5/46ePtox/PeKZrvGTtfhJl/hpRLzVY/xbr395dqu6+scRx6J7/I5k+/PDo5evlEtjrceuMb46duSV7fp/cIv4rXO2+5tfM922f5fT2l198e3nzy5vE/+F57bf/922/4GIeK/H+P+998lrW9XduZ7cbfwK2On+TyIft3uM/+K5oz/0uCoAAAAAAAAAALADafNatiQtrM2naaHQuof3f3EwLVeqteOXK/Ozk61r3g5HPu1caTXSKieN8nj7etxO+eSG8qlcO2DuQLNcKFbKkwPuOwAAAAAAAAAAAAAAAAAAADwpDm24//+3XPP+/41/Vw3sVVv/5Tew18l/yK6H8z8ZWDuA3ef7HzKrLv8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/AAAAAAAAAAAAAAAAAAAAAAAAAADoi4sXLjSm+v2VpWKjPDm0MD9defvEZKk6XZiZLxaKlbmrhalKZapcKhQrM3/1fkmlcnUsZuevjdZK1dpodWHxzZnK/GznP0VL+b73CAAAAAAAAAAAAAAAAAAAAP55hptTkhYiIm3Op2mhEPHviDicRHL5Srk0FhH/iYjvc/l9jfL4oBsNAAAAAAAAAAAAAAAAAAAAe0x1YXF6olwuzWVkZmgnK0fE8uNtRuMdd/yqfHtfPSnb0EwWZgY8MAEAAAAAAAAAAAAAAAAAQAY9uOm311f80d8GAQAAAAAAAAAAAAAAAAAAQCalPycR0ZiOjTw/vLH2X8lqrvkcEe/cuvTBtYlabW68sfzu2vLah+3lJwfRfqBXnTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQHVhcXqiXC7N9XFm0H0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBR/BgAA///eANcP") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="a6", 0x1, 0x8000c61) fallocate(r0, 0x20, 0x4000, 0x8000) 2m55.479094882s ago: executing program 8 (id=1926): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791002000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/sockcreate\x00') readlinkat(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x81, 0x8}, 0xc) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{r4}, &(0x7f00000011c0), &(0x7f0000001200)='%-010d \x00'}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r7, 0x0, 0x343}}}}}}]}, 0x48}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x6, 0x0}, 0x8) r9 = syz_open_dev$vcsu(&(0x7f0000000340), 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x80}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x1}, @ldst={0x2, 0x1, 0x0, 0x2, 0xa, 0x50, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0xd, 0x1, 0x5, 0x8, 0xffffffffffffffe8}]}, &(0x7f0000000140)='syzkaller\x00', 0x657, 0x8, &(0x7f00000001c0)=""/8, 0x40f00, 0x0, '\x00', r7, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x400, 0x4}, 0x10, r8, r0, 0xa, &(0x7f0000000380)=[r3, r3, r3, r9, r3], &(0x7f00000003c0)=[{0x2, 0x4, 0xd, 0x3}, {0x2, 0x4, 0xa, 0x6}, {0x4, 0x68, 0x6, 0xa}, {0x2, 0x2, 0x4, 0xa}, {0x3, 0x5, 0x10, 0x4}, {0x2, 0x4, 0x0, 0x9}, {0x4, 0x3, 0x7, 0xc}, {0x1, 0x3, 0x9, 0x1}, {0x3, 0x5, 0x7, 0xa}, {0x4, 0x2, 0x3, 0x5}], 0x10, 0xffff0000, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xeea5, 0x0, r2, 0x7fff, '\x00', 0x0, r3, 0x0, 0xfffff6bb, 0x1, 0x0, @void, @value, @void, @value}, 0x50) 2m54.506762867s ago: executing program 8 (id=1930): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000480)={[0x8]}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000b2c000)=[{r4, 0x300}], 0x2c, 0xffffffffffbffff8) bind$packet(r3, &(0x7f0000000100)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) connect$unix(r2, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r5}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x7, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) 2m54.506536797s ago: executing program 38 (id=1930): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000480)={[0x8]}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000b2c000)=[{r4, 0x300}], 0x2c, 0xffffffffffbffff8) bind$packet(r3, &(0x7f0000000100)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) connect$unix(r2, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r5}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x7, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) 2m51.796390908s ago: executing program 5 (id=1969): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x8080, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) stat(&(0x7f00000001c0)='./file0\x00', 0x0) (fail_nth: 2) 2m51.438863263s ago: executing program 5 (id=1971): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x2, 0xff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x20c000, 0x0, 0x4, 0x0, &(0x7f0000000380)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x0, 0x0) 2m50.505851997s ago: executing program 5 (id=1978): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = getpgrp(0xffffffffffffffff) kcmp(r1, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 2m50.454470328s ago: executing program 5 (id=1981): gettid() rt_sigqueueinfo(0xffffffffffffffff, 0x1d, &(0x7f00000000c0)={0x3d, 0x9, 0x4}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002440)=ANY=[@ANYBLOB='`\x00'], 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048050) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x805) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) syz_clone(0x8000400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)="a6", 0x1, 0x8000c61) fallocate(r0, 0x20, 0x4000, 0x8000) 2m50.374586399s ago: executing program 5 (id=1982): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES16=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) memfd_secret(0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r7, @ANYRESOCT=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) connect$phonet_pipe(r8, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r8, 0x89ed, 0x0) 2m50.063832334s ago: executing program 5 (id=1986): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x7}, 0x18) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") (fail_nth: 5) 2m50.063577684s ago: executing program 39 (id=1986): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x7}, 0x18) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Lu1cUB/CbgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS+hTa2qUtpvTH57OEe8+59+TyfQL/a/HwU7PZjIUQmom/f/r7s/xEsXdqbHomhFiYDyHkv/n610os6vjt1otoXYrWxUSmdnA7/nrWcdf3UE0dxaP6ZTyEH0IIS0/HyX/7Nr5857nr5MbmSmFrLbf4WFh/Hl4YyPds55d3Rw6z5dnu7Fz0YV3GWzM/VRs9uW+WXvbaB9uqtUbmJupLxz5nPv+tP+e/31WpVxqT/aerQ+nO+lV5J8r9Tf4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAnO89dJzc2Vwpba7nFx8L68/DCQL5nO7+8O3KYLc92Z+fi732X8dbMT9VGT+6bpZe99sG2aq2RuYn60rEPR7/78XP+Ei30bfhj/vtdlXqlMdl/ujqU7qxflXei3N8+5g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8JfyE8XeqbHpmRBiYT6EMB7vOP5lv5l4r8eivovotxTtFxOZ2sHt+OtZx13fQzV1NJUIIfG7e5eejpNftfIh/CM/BwAA//8514ZQ") (fail_nth: 5) 31.442797338s ago: executing program 4 (id=4408): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x49d, &(0x7f0000000940)="$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") 31.354068609s ago: executing program 4 (id=4409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x13) r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 31.353221009s ago: executing program 4 (id=4410): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000009e, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000018c0)=""/220, 0xdc}], 0x1, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095", @ANYRESOCT=0x0], &(0x7f0000000300)='GPL\x00', 0x800000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) io_uring_setup(0x33b7, &(0x7f0000000280)={0x0, 0x6c3e, 0x8, 0x1, 0x28e}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c000080080003"], 0xc0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a08000000003c00006322a4bd6c722200090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000004440000001e0a05020000000000000000010000000900020073797a32000000001800038014000080100001800400028008000180000040000900010073797a30000000001400000010000100000000000000000000000028474e1bbc1372b8124ce8c47bbedc006d6d2e67"], 0xc8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) close(0xffffffffffffffff) r6 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000100), 0xa, 0x800001) ioctl$LOOP_SET_CAPACITY(r8, 0x4c07) close_range(r6, 0xffffffffffffffff, 0x0) 30.428560863s ago: executing program 4 (id=4419): perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x6, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x3, 0x2}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0019000000000000140012800b0001006970366772650000040002800a000100aaaaaaaaa12800e08a21b2000c74e1d7fa6ee06b8ffeffb3ee63e709233d2b4369c6ca8ec3c35b3861cea9ed2823ee0e5e575c"], 0x40}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r5, &(0x7f0000000340), 0x0}, 0x20) socket$netlink(0x10, 0x3, 0x13) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0x1a, r8, 0xc, &(0x7f0000000040)) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) 30.243605936s ago: executing program 4 (id=4423): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x55b21000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f000075b000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7, 0x0, 0x0, 0xe4, 0x8, 0x14, 0x0, 0x2}) syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x44, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-\xc6\x01&\x00'}]}]}]}]}, 0x44}}, 0x8044) 30.083624879s ago: executing program 4 (id=4425): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r4, 0x8, 0x70bd2a, 0x25dfdbf7, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r6, 0x40309439, &(0x7f0000000080)={0x2, 0x2, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 30.083440679s ago: executing program 40 (id=4425): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r4, 0x8, 0x70bd2a, 0x25dfdbf7, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r6, 0x40309439, &(0x7f0000000080)={0x2, 0x2, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5.98698801s ago: executing program 0 (id=4720): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0xfd, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x10) 5.111396994s ago: executing program 0 (id=4732): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x1, 0x0) 5.069602164s ago: executing program 0 (id=4734): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x55b21000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x44, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-\xc6\x01&\x00'}]}]}]}]}, 0x44}}, 0x8044) 4.874327857s ago: executing program 0 (id=4738): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000009e, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000018c0)=""/220, 0xdc}], 0x1, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095", @ANYRESOCT=0x0], &(0x7f0000000300)='GPL\x00', 0x800000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) io_uring_setup(0x33b7, &(0x7f0000000280)={0x0, 0x6c3e, 0x8, 0x1, 0x28e}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c000080080003"], 0xc0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a08000000003c00006322a4bd6c722200090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000004440000001e0a05020000000000000000010000000900020073797a32000000001800038014000080100001800400028008000180000040000900010073797a30000000001400000010000100000000000000000000000028474e1bbc1372b8124ce8c47bbedc006d6d2e67"], 0xc8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) close(0xffffffffffffffff) io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xa, 0x800001) ioctl$LOOP_SET_CAPACITY(r6, 0x4c07) 3.892744742s ago: executing program 0 (id=4745): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085010000720000005a7d78ce"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0) r5 = openat$nvram(0xffffffffffffff9c, 0x0, 0x80, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r7}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="b80000001900674c0018000010000000fe800000000000000000000000000008e000000200000000000000000000000000000000000000000a00000050000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000"], 0xb8}}, 0x4000000) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r11 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xe099, 0x0, 0x1, 0xb5}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80930824}, 0xc, &(0x7f00000014c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="09000000d16427070602000000aa86f73c60b0620a08346055f781f33029606b9e175c944631fad4b2909e9a5b856fc2ea8185823c967a501000528556d06c5649571991024fbc815759bc057474da8d5a8b40aadcaf6440a52d263c6c3aac23db1933fdcd8b0dcc1dcf1d50cfe3b422f6d3071fb834c730e3a5fa7b1704c6f3e67501fe9c33d9119dc948", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcdbdf2511000000380004800c000780080004000000008014000780080001000000000008000100170000001300010062726f6164636173742d6c696e6b0000"], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001580)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x314}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000001) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="a4020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2a4}, 0x1, 0x0, 0x0, 0x10}, 0x800) io_uring_enter(r11, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f1, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe21587e, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x8000, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffe, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x2, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 3.698839985s ago: executing program 0 (id=4749): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0xfd, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x10) 3.045392015s ago: executing program 2 (id=4754): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000009e, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000018c0)=""/220, 0xdc}], 0x1, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095", @ANYRESOCT=0x0], &(0x7f0000000300)='GPL\x00', 0x800000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) io_uring_setup(0x33b7, &(0x7f0000000280)={0x0, 0x6c3e, 0x8, 0x1, 0x28e}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c000080080003"], 0xc0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a08000000003c00006322a4bd6c722200090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000004440000001e0a05020000000000000000010000000900020073797a32000000001800038014000080100001800400028008000180000040000900010073797a30000000001400000010000100000000000000000000000028474e1bbc1372b8124ce8c47bbedc006d6d2e67"], 0xc8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) close(0xffffffffffffffff) io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xa, 0x800001) ioctl$LOOP_SET_CAPACITY(r6, 0x4c07) 2.899564777s ago: executing program 9 (id=4757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x36) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000)=0xf, 0x4) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r4, 0x401, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000894}, 0x4811) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 2.375810765s ago: executing program 9 (id=4760): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRESOCT=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) lsm_get_self_attr(0x66, &(0x7f0000000240)={0x0, 0x0, 0xab, 0x8b, ""/139}, &(0x7f0000000040)=0xab, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) mkdir(&(0x7f0000000040)='.\x02\x00', 0xe88022b11028290f) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80b07, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100210, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r2, 0xa) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0xfffffffc, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xcc03, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$caif_stream(0x25, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000c10, &(0x7f00000001c0)={[], [{@fsmagic={'fsmagic', 0x3d, 0xff}}]}, 0xfb, 0x23f, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020500000000000000100000000000082de243ffd6044000"/36], 0x24, 0x0) openat(r0, 0x0, 0x82000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') sendmmsg$inet(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{}, 0x1000000}], 0x2, 0x4810) r6 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000200000008d90467a00000fc02000109022400010000a020090400060103000200092100000001220800090581fe0900000000589ef75e4f0e56a71e674c7ebdde9f8ff7ccc098d07a548ba3c655d0f047a2fa2c438fd4b8f27e848b66e23ecb32dfbc422f112ebb576eb7f20ba183fe534ac80853477e703533262b41a74fe8c235be1d9eda396b53eec4b6f0d9d9907c847c71b906ebe83c7cfd6b3c19a1e02eac0b66940944c8c5e90086891b7289a3b3dc727b319662c96a9df8ca7d81506fd9080b9b03c8b5da2094f3fa0394b6255d6e447a3441906ba6d80fca5211bcea6ff25e439492cb86910d1f66c23406d10309bbc21c82ff9a829c46049f3b389479ddcad24b90ba"], 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2002b71ec95c63208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2312ce", 0xb8) syz_usb_control_io$hid(r6, 0x0, 0x0) 2.230649107s ago: executing program 7 (id=4763): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) dup2(r4, r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000680), &(0x7f0000000840)=r1}, 0x20) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x800) sendmsg$kcm(r5, &(0x7f0000000400)={&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x4, 0x1, 0x2}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000380)="ad143f98d953ca6185975045019fb83cc0bf95eecc96a3a2602082c5104ee2499267d0ca32451337bb703c3d5e3d8bcf6a584e690ea9d4326b103f9b79597edd3a6ad072804d1a0bdddfb2c8eec30ffa414ed60c08ec8beea72010a20f0831e529", 0x61}, {&(0x7f0000000200)="69b920", 0x3}], 0x2}, 0x24008007) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000004700000d00000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) 2.134706359s ago: executing program 2 (id=4764): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r8}, 0x10) r9 = openat$cgroup_ro(r5, &(0x7f0000000740)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x40010) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640), 0x0, 0xe4, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x200029, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000800)=ANY=[@ANYRES8=r10, @ANYRESOCT=r11, @ANYBLOB="db7ee437908fe11c2ca368072a73febe854d94318230ee8a48fdfca4ea402f246f6440f9acd97550ac1a7448267471605cca434861db0443deddf2f53d8eabf7ecf3249069d4d546398d049d2ffd48064d7f756011b5f793210b220c4340ab76eacb05e19c4bbed76d41c077d1fdbcc41d3ecd705e741955575c2465ad51ec5d81c8b1d04f59a73d8bbc25d0268f74a7e2748a5242fe37e568e62ee5b2d88babefe6277d5f"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r13, 0xa, 0x13) fcntl$setlease(r13, 0x400, 0x0) fcntl$setlease(r13, 0x400, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000400"/28], 0x50) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 2.133834808s ago: executing program 7 (id=4765): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x9, 0xff8, 0x0, 0x20, r0, 0xffffffff, '\x00', r3, r4, 0x4, 0x2, 0x3, 0x4, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100ff03850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x8000000000000000}, 0x18) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040), 0xc) r8 = socket$qrtr(0x2a, 0x2, 0x0) read(r7, &(0x7f0000000180)=""/119, 0x77) connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x50}}, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r7, 0x891c, 0x0) writev(r8, &(0x7f0000000340)=[{&(0x7f0000000380)='Q', 0x1}], 0x1) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010001f1d00000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4100040000000000200012800b0001006272696467650000100002800a001400ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x1000}, 0x0) 2.075570419s ago: executing program 2 (id=4766): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x2}, 0x18) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x45d, &(0x7f0000000a00)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat2(r1, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380)={0x24003, 0x100, 0xa}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7ff}, [@map_fd={0x18, 0x7, 0x1, 0x0, r6}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x0, 0xa, 0x3, 0x9, 0xfffffffffffffffc, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x3c003) sendfile(r8, r8, 0x0, 0x789) 1.978706891s ago: executing program 1 (id=4768): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x8800000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f00000003c0)={0xfffffffffffffffc, 0x4000003, 0x0, {[0x100000000]}}, 0x0, 0x8, &(0x7f0000000440)) memfd_create(&(0x7f0000001f40)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xfa\xed\x04\x00\x00\x00\xd4N\x12;\x83-j\xa7\x02\x92\xecA\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4\xe1\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x19\b\x00\x00\x00\x00~\xf3S\x12\"\x00^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x00ZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99Y', 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x49d0, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local}, 0x1c) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth1_to_batadv\x00', &(0x7f0000000b80)=@ethtool_eeprom={0xc, 0x1, 0x1}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000040) sendfile(r5, r4, 0x0, 0x7ffff000) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) gettid() fsopen(&(0x7f0000000300)='autofs\x00', 0x0) 1.935692442s ago: executing program 2 (id=4769): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000006c86000000"], 0x50) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) read(r1, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ff", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x58, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000008, 0x50, 0xffffffffffffffff, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000040000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) close(r7) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 1.803306233s ago: executing program 7 (id=4770): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x1e1e, 0x0, 0x0, &(0x7f0000000240)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket(0x1, 0x1, 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1d5, 0x1) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x10000}}, {@timeout={'timeout', 0x3d, 0x3}}]}}) syz_io_uring_submit(0x0, r1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x1061, &(0x7f0000002400)="$eJzsz8ttwkAUBdA7cuzY2TgdpI10EEWsaYE2+JTDhhLogzpYIhn5I0oAFuesRnNn7tMLL9WVJNXHb0mGbfLfL/fXzXKokiap90nKLvlpkgyfY9LOD86rus3QV21ScvnrDlNlTnPT7fsxqoxFUzZ/rb+yPj5xVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4W/cAAAD//0h9DI0=") 1.578104516s ago: executing program 7 (id=4771): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff8}, 0x18) open(0x0, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000002c0), 0x12) ioctl$TCSBRK(r1, 0x5409, 0x5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$notify(r3, 0x402, 0x36) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 1.486310838s ago: executing program 7 (id=4772): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14142d50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc469c449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076ea43d9621dc08c029d1608a45ef26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061d00e9008a7a6045f4a85cf1446e4b5888be26bb349ef3b6e0cfac913f6a60bf3338737edc4669f63df4d16175f1ee1eab7307f8a25036ace20c02b32473381faa7833964cc2c5c0ae2532aa1104d9d97f7e88a323682e930aaca5beba39ac0e929535b9110b6335f7983116989bee5fa234c10737a59d216fd99cfe8b404f3396643df89f95c5cddc3099bf393f8245183959c01309e2765b7033d3ac9ad9aca4ab4cba4c806f105e59abf847882ee5fc8f05bc7d"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x1e1e, 0x0, 0x0, &(0x7f0000000240)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket(0x1, 0x1, 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1d5, 0x1) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, 0x0) syz_io_uring_submit(0x0, r2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x1061, &(0x7f0000002400)="$eJzsz8ttwkAUBdA7cuzY2TgdpI10EEWsaYE2+JTDhhLogzpYIhn5I0oAFuesRnNn7tMLL9WVJNXHb0mGbfLfL/fXzXKokiap90nKLvlpkgyfY9LOD86rus3QV21ScvnrDlNlTnPT7fsxqoxFUzZ/rb+yPj5xVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4W/cAAAD//0h9DI0=") 1.33823764s ago: executing program 9 (id=4773): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000009e, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000018c0)=""/220, 0xdc}], 0x1, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095", @ANYRESOCT=0x0], &(0x7f0000000300)='GPL\x00', 0x800000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) io_uring_setup(0x33b7, &(0x7f0000000280)={0x0, 0x6c3e, 0x8, 0x1, 0x28e}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c000080080003"], 0xc0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a08000000003c00006322a4bd6c722200090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000004440000001e0a05020000000000000000010000000900020073797a32000000001800038014000080100001800400028008000180000040000900010073797a30000000001400000010000100000000000000000000000028474e1bbc1372b8124ce8c47bbedc006d6d2e67"], 0xc8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) close(0xffffffffffffffff) io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xa, 0x800001) ioctl$LOOP_SET_CAPACITY(r6, 0x4c07) 1.163951273s ago: executing program 1 (id=4774): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, 0x4100}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x200000000000000, 0x8040}, 0x4008000) 1.093542404s ago: executing program 1 (id=4775): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) fcntl$notify(r0, 0x402, 0x36) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 1.092391024s ago: executing program 2 (id=4776): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100ff03850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x8000000000000000}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40041}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1000}, 0x0) (fail_nth: 8) 999.027395ms ago: executing program 1 (id=4777): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000060000008500000007000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000880)=ANY=[@ANYRES32=r1, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES64=r1, @ANYBLOB="934fdc3265067b0df18d0407adc620d03c98216bae04b18622f4049285efe410c32a1546f50a6c0eef5a300d0154cf45dba857ae1fea873381830ba571d264c7e39c71f64a3d48", @ANYRESHEX=r1, @ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffb, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYRES8=r3], 0x34) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT=r2, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRES16=r5], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000380)='kfree\x00', r8}, 0x18) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000001000000950000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r6) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) close(r6) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000dc0)=@file={0x1, './file0/file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TIOCPKT(r12, 0x5420, &(0x7f0000000000)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='bcache_journal_write\x00', r0}, 0x18) 541.559502ms ago: executing program 1 (id=4778): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x1c) listen(r2, 0x0) r3 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r3, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r2, 0x0, 0x0, 0x800) sendmsg$tipc(r3, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000740)={@multicast2, @multicast1}, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 218.364087ms ago: executing program 7 (id=4779): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000440)={0x4, 0x800, 0x5, 0x9, 0x9, 0x4, 0x5, 0x7}, 0x20) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = dup3(r5, r4, 0x0) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e4010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1e4}, 0x1, 0x0, 0x0, 0x4000015}, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0x3) syz_open_dev$evdev(&(0x7f0000000240), 0x89c8, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x60800, 0x0) r9 = syz_io_uring_setup(0x1da1, &(0x7f00000000c0)={0x0, 0xe876, 0x40, 0x4, 0x2d6}, &(0x7f0000000280), &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_move_numa\x00'}, 0x18) execve(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x22, &(0x7f0000000380)={0x0}, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r8) sendfile(r7, r8, 0x0, 0x1000000000004) openat$cgroup_ro(r8, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 217.966837ms ago: executing program 2 (id=4780): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x44, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-\xc6\x01&\x00'}]}]}]}]}, 0x44}}, 0x8044) 217.621937ms ago: executing program 9 (id=4781): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) r0 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 62.95417ms ago: executing program 9 (id=4782): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 62.19317ms ago: executing program 1 (id=4783): syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x10000}, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x3}}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x4ae, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='cpu\t>-&&\t') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r5, 0x0, 0xf7}, 0x18) mq_notify(0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000010002000000000002000600", @ANYRES32=r2, @ANYBLOB="040001000000000008000100", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRESDEC=r6, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB="1000fba1678cbb139dda01000000000067140000002000000000e47b9a18d67492691d615138d1dfdb1e9eb0e28deade8ea11b55584784b3c5b30b70c4248fd1b84e3af5349dbe6b0a27736f4688c58db869ced5a9f8ed9bc358f2a6f86d150448279ee84df4701ac07dc4bb165735c646d39191cbf8fe88ba4040f407e0d1fbdf5e3b4d4a04c71a30bf381ce932d4ea720b006de2c2fa93d11c086b44e25fd4a2d54d886dbf99b44378d0687ef1fe3f9b3cc4c6a95cc42fbc09754400ae271a7e775d54253041b6bbfe02b9f70c066a86c003eaf8f6035e55803479d92d2d2b9874fe266647c26713fd070c8e1e71f331ace6f8f0806bd87f335b979ee886048c9a4557"], 0x44, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05fb45ed15631e5cfd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000140), &(0x7f0000000040)='%+9llu \x00'}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) 0s ago: executing program 9 (id=4784): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7}]}}}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): loop2): This should not happen!! Data will be lost [ 316.651877][T16267] [ 316.667866][T16267] EXT4-fs (loop2): Total free blocks count 0 [ 316.673876][T16267] EXT4-fs (loop2): Free/Dirty block details [ 316.679889][T16267] EXT4-fs (loop2): free_blocks=2415919504 [ 316.685709][T16267] EXT4-fs (loop2): dirty_blocks=7744 [ 316.691075][T16267] EXT4-fs (loop2): Block reservation details [ 316.697185][T16267] EXT4-fs (loop2): i_reserved_data_blocks=50 [ 316.745646][T16266] loop1: p1 p2 p3 p4 [ 316.749811][T16266] loop1: p1 start 51379968 is beyond EOD, truncated [ 316.756474][T16266] loop1: p2 start 2936012800 is beyond EOD, truncated [ 316.763341][T16266] loop1: p3 size 100663552 extends beyond EOD, truncated [ 316.805524][T16266] loop1: p4 size 656640 extends beyond EOD, truncated [ 317.005163][T16279] lo speed is unknown, defaulting to 1000 [ 317.024384][ T110] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 317.077486][T16278] loop7: detected capacity change from 0 to 8192 [ 317.110469][T16279] lo speed is unknown, defaulting to 1000 [ 317.146767][T16278] loop7: p1 p2 p3 p4 [ 317.150902][T16278] loop7: p1 start 51379968 is beyond EOD, truncated [ 317.157622][T16278] loop7: p2 start 2936012800 is beyond EOD, truncated [ 317.164474][T16278] loop7: p3 size 100663552 extends beyond EOD, truncated [ 317.182858][T16278] loop7: p4 size 656640 extends beyond EOD, truncated [ 317.280268][T16283] loop1: detected capacity change from 0 to 4096 [ 317.297639][T16283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.323122][T16286] ipvlan2: entered promiscuous mode [ 317.329236][T16286] bridge0: port 3(ipvlan2) entered blocking state [ 317.335742][T16286] bridge0: port 3(ipvlan2) entered disabled state [ 317.342873][T16286] ipvlan2: entered allmulticast mode [ 317.348260][T16286] bridge0: entered allmulticast mode [ 317.371130][T16286] ipvlan2: left allmulticast mode [ 317.376235][T16286] bridge0: left allmulticast mode [ 317.400666][ T9229] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.414202][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.422218][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.430075][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.437843][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.445641][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.453371][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.461222][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.469074][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.477028][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.484932][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.492773][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.500629][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.508457][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.516263][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.523986][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.531841][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.539610][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.547380][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.555316][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.563219][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.571023][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.578867][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.586716][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.594472][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.602239][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.610012][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.617820][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.625589][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.633340][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.641123][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.648934][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.656855][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.664646][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.672430][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.680215][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.688053][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.695935][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.703684][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.711487][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.719313][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.727146][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.734927][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.742947][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: unknown main item tag 0x0 [ 317.754150][ T3421] hid-generic 0000:007F:FFFFFFFE.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 317.825222][T16300] loop2: detected capacity change from 0 to 8192 [ 317.832194][T16303] lo speed is unknown, defaulting to 1000 [ 317.867749][T16308] loop0: detected capacity change from 0 to 512 [ 317.881339][T16306] loop9: detected capacity change from 0 to 4096 [ 317.888391][T16308] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 317.897548][T16304] loop7: detected capacity change from 0 to 8192 [ 317.903392][T16303] lo speed is unknown, defaulting to 1000 [ 317.913622][T16306] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.933947][T16308] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 317.942029][T16308] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 317.977704][T16308] System zones: 0-1, 15-15, 18-18, 34-34 [ 317.983782][T16308] EXT4-fs (loop0): orphan cleanup on readonly fs [ 317.995111][T16308] __quota_error: 328 callbacks suppressed [ 317.995128][T16308] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 318.018480][T16308] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 318.033095][T16308] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 318.044948][ T29] audit: type=1400 audit(1749745466.118:45990): avc: denied { remove_name } for pid=16305 comm="syz.9.4494" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 318.067909][ T29] audit: type=1400 audit(1749745466.128:45991): avc: denied { rename } for pid=16305 comm="syz.9.4494" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 318.116111][T16308] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4495: bg 0: block 40: padding at end of block bitmap is not set [ 318.142745][ T8827] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.155219][T16319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.164325][T16319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.172263][T16308] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 318.185928][T16308] EXT4-fs (loop0): 1 truncate cleaned up [ 318.192800][T16308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 318.217707][T16321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.233722][T16321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.248546][ T29] audit: type=1400 audit(1749745466.328:45992): avc: denied { remount } for pid=16307 comm="syz.0.4495" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 318.268976][T16308] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 318.276916][T16308] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 318.301849][T16300] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 318.309542][T16300] FAT-fs (loop2): Filesystem has been set read-only [ 318.327750][ T29] audit: type=1400 audit(1749745466.408:45993): avc: denied { setopt } for pid=16307 comm="syz.0.4495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 318.351881][T16315] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 318.361771][T16316] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 318.392411][T16313] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 318.400202][T16313] FAT-fs (loop7): Filesystem has been set read-only [ 318.411530][T16304] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 318.424274][T16320] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 318.520238][ T8875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.588360][T16335] loop0: detected capacity change from 0 to 4096 [ 318.597827][T16335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.603454][T16340] loop1: detected capacity change from 0 to 1024 [ 318.627550][ T8875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.627925][T16340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.684346][ T9229] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.975319][T16362] FAULT_INJECTION: forcing a failure. [ 318.975319][T16362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.988619][T16362] CPU: 0 UID: 0 PID: 16362 Comm: syz.1.4511 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) [ 318.988672][T16362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.988735][T16362] Call Trace: [ 318.988742][T16362] [ 318.988751][T16362] __dump_stack+0x1d/0x30 [ 318.988777][T16362] dump_stack_lvl+0xe8/0x140 [ 318.988800][T16362] dump_stack+0x15/0x1b [ 318.988852][T16362] should_fail_ex+0x265/0x280 [ 318.988952][T16362] should_fail+0xb/0x20 [ 318.988981][T16362] should_fail_usercopy+0x1a/0x20 [ 318.989006][T16362] _copy_from_user+0x1c/0xb0 [ 318.989047][T16362] ___sys_recvmsg+0xaa/0x370 [ 318.989146][T16362] ? _parse_integer+0x27/0x40 [ 318.989192][T16362] do_recvmmsg+0x1ef/0x540 [ 318.989227][T16362] ? fput+0x8f/0xc0 [ 318.989326][T16362] __x64_sys_recvmmsg+0xe5/0x170 [ 318.989349][T16362] x64_sys_call+0x1c6a/0x2fb0 [ 318.989375][T16362] do_syscall_64+0xd2/0x200 [ 318.989400][T16362] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 318.989449][T16362] ? clear_bhb_loop+0x40/0x90 [ 318.989500][T16362] ? clear_bhb_loop+0x40/0x90 [ 318.989527][T16362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.989635][T16362] RIP: 0033:0x7ff3a943e929 [ 318.989649][T16362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.989735][T16362] RSP: 002b:00007ff3a7aa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 318.989758][T16362] RAX: ffffffffffffffda RBX: 00007ff3a9665fa0 RCX: 00007ff3a943e929 [ 318.989773][T16362] RDX: 0000000000000003 RSI: 0000200000002bc0 RDI: 0000000000000005 [ 318.989789][T16362] RBP: 00007ff3a7aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 318.989805][T16362] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 318.989821][T16362] R13: 0000000000000000 R14: 00007ff3a9665fa0 R15: 00007ffeb1396c28 [ 318.989847][T16362] [ 319.220418][T16360] loop2: detected capacity change from 0 to 1024 [ 319.244226][T16366] loop9: detected capacity change from 0 to 4096 [ 319.275442][T16366] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.335830][ T8827] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.345066][T16377] loop7: detected capacity change from 0 to 8192 [ 319.368919][T16379] usb usb1: usbfs: process 16379 (syz.9.4518) did not claim interface 0 before use [ 319.537660][T16387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4520'. [ 319.563627][T16387] loop0: detected capacity change from 0 to 128 [ 319.603931][T16393] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4522'. [ 319.739591][T16404] netlink: 'syz.0.4525': attribute type 1 has an invalid length. [ 319.747580][T16404] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4525'. [ 319.759045][ T29] audit: type=1326 audit(1749745467.838:45994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16403 comm="syz.0.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceec05e929 code=0x7ffc0000 [ 319.786001][T16406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.795792][T16406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.803589][ T29] audit: type=1326 audit(1749745467.838:45995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16403 comm="syz.0.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fceec05e929 code=0x7ffc0000 [ 319.827189][ T29] audit: type=1326 audit(1749745467.838:45996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16403 comm="syz.0.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceec05e929 code=0x7ffc0000 [ 319.850855][ T29] audit: type=1326 audit(1749745467.838:45997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16403 comm="syz.0.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fceec05e929 code=0x7ffc0000 [ 319.851461][T16404] loop0: detected capacity change from 0 to 8192 [ 319.874362][ T29] audit: type=1326 audit(1749745467.838:45998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16403 comm="syz.0.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceec05e929 code=0x7ffc0000 [ 319.888898][T16377] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 319.912121][T16377] FAT-fs (loop7): Filesystem has been set read-only [ 319.920307][T16407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4523'. [ 319.929373][T16407] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4523'. [ 319.929956][T16383] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 319.949533][T16402] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 319.975092][T16404] loop0: p1 p2 p3 p4 [ 319.979297][T16404] loop0: p1 start 51379968 is beyond EOD, truncated [ 319.986060][T16404] loop0: p2 start 2936012800 is beyond EOD, truncated [ 319.992886][T16404] loop0: p3 size 100663552 extends beyond EOD, truncated [ 320.003689][T16404] loop0: p4 size 656640 extends beyond EOD, truncated [ 320.044169][T16419] netlink: 'syz.2.4529': attribute type 1 has an invalid length. [ 320.051996][T16419] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4529'. [ 320.052661][T16417] loop1: detected capacity change from 0 to 4096 [ 320.071782][T16417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.100192][ T9229] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.124641][T16419] loop2: detected capacity change from 0 to 8192 [ 320.155837][T16419] loop2: p1 p2 p3 p4 [ 320.159988][T16419] loop2: p1 start 51379968 is beyond EOD, truncated [ 320.166707][T16419] loop2: p2 start 2936012800 is beyond EOD, truncated [ 320.173514][T16419] loop2: p3 size 100663552 extends beyond EOD, truncated [ 320.181885][T16419] loop2: p4 size 656640 extends beyond EOD, truncated [ 320.231808][T16431] FAULT_INJECTION: forcing a failure. [ 320.231808][T16431] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 320.245189][T16431] CPU: 1 UID: 0 PID: 16431 Comm: syz.9.4534 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) [ 320.245254][T16431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 320.245266][T16431] Call Trace: [ 320.245274][T16431] [ 320.245284][T16431] __dump_stack+0x1d/0x30 [ 320.245315][T16431] dump_stack_lvl+0xe8/0x140 [ 320.245340][T16431] dump_stack+0x15/0x1b [ 320.245361][T16431] should_fail_ex+0x265/0x280 [ 320.245445][T16431] should_fail_alloc_page+0xf2/0x100 [ 320.245525][T16431] __alloc_frozen_pages_noprof+0xff/0x360 [ 320.245681][T16431] alloc_pages_mpol+0xb3/0x250 [ 320.245719][T16431] alloc_pages_noprof+0x90/0x130 [ 320.245759][T16431] __pud_alloc+0x47/0x4c0 [ 320.245786][T16431] handle_mm_fault+0x1882/0x2be0 [ 320.245835][T16431] ? check_vma_flags+0x26e/0x340 [ 320.245860][T16431] __get_user_pages+0x1036/0x1fb0 [ 320.245891][T16431] get_user_pages_remote+0x1dc/0x7a0 [ 320.245925][T16431] get_arg_page+0x8e/0x1e0 [ 320.245984][T16431] copy_string_kernel+0x134/0x340 [ 320.246017][T16431] do_execveat_common+0x5ad/0x750 [ 320.246053][T16431] ? getname_flags+0x154/0x3b0 [ 320.246118][T16431] __x64_sys_execveat+0x73/0x90 [ 320.246137][T16431] x64_sys_call+0x2dae/0x2fb0 [ 320.246159][T16431] do_syscall_64+0xd2/0x200 [ 320.246186][T16431] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 320.246220][T16431] ? clear_bhb_loop+0x40/0x90 [ 320.246385][T16431] ? clear_bhb_loop+0x40/0x90 [ 320.246414][T16431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.246435][T16431] RIP: 0033:0x7f2460a7e929 [ 320.246450][T16431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.246507][T16431] RSP: 002b:00007f245f0e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 320.246532][T16431] RAX: ffffffffffffffda RBX: 00007f2460ca5fa0 RCX: 00007f2460a7e929 [ 320.246623][T16431] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 320.246702][T16431] RBP: 00007f245f0e7090 R08: 0000000000001000 R09: 0000000000000000 [ 320.246714][T16431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 320.246726][T16431] R13: 0000000000000000 R14: 00007f2460ca5fa0 R15: 00007ffe6b25ea98 [ 320.246817][T16431] [ 320.510940][T16436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4535'. [ 320.529114][T16436] loop1: detected capacity change from 0 to 256 [ 320.687573][T16450] netlink: 'syz.2.4541': attribute type 1 has an invalid length. [ 320.695622][T16450] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4541'. [ 320.747114][T16450] loop2: detected capacity change from 0 to 8192 [ 320.764259][T16448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4540'. [ 320.773332][T16448] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4540'. [ 320.804027][ T3403] IPVS: starting estimator thread 0... [ 320.810687][T16450] loop2: p1 p2 p3 p4 [ 320.816637][T16450] loop2: p1 start 51379968 is beyond EOD, truncated [ 320.823347][T16450] loop2: p2 start 2936012800 is beyond EOD, truncated [ 320.830254][T16450] loop2: p3 size 100663552 extends beyond EOD, truncated [ 320.842119][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4544'. [ 320.862486][T16450] loop2: p4 size 656640 extends beyond EOD, truncated [ 320.882555][T16464] Invalid ELF header magic: != ELF [ 320.904903][T16459] IPVS: using max 1872 ests per chain, 93600 per kthread [ 320.925557][T16467] loop2: detected capacity change from 0 to 2048 [ 321.001719][T16473] bond_slave_1: entered promiscuous mode [ 321.009262][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4549'. [ 321.023846][T16473] bond_slave_1 (unregistering): left promiscuous mode [ 321.307051][T16486] lo speed is unknown, defaulting to 1000 [ 321.368008][T16486] lo speed is unknown, defaulting to 1000 [ 321.427037][T16486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4554'. [ 321.739942][T16489] loop9: detected capacity change from 0 to 8192 [ 321.762656][T16494] netlink: 'syz.7.4558': attribute type 1 has an invalid length. [ 321.822092][T16502] FAULT_INJECTION: forcing a failure. [ 321.822092][T16502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.835284][T16502] CPU: 0 UID: 0 PID: 16502 Comm: syz.9.4561 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) [ 321.835317][T16502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.835334][T16502] Call Trace: [ 321.835342][T16502] [ 321.835352][T16502] __dump_stack+0x1d/0x30 [ 321.835390][T16502] dump_stack_lvl+0xe8/0x140 [ 321.835415][T16502] dump_stack+0x15/0x1b [ 321.835435][T16502] should_fail_ex+0x265/0x280 [ 321.835513][T16502] should_fail+0xb/0x20 [ 321.835541][T16494] loop7: detected capacity change from 0 to 8192 [ 321.835561][T16502] should_fail_usercopy+0x1a/0x20 [ 321.835587][T16502] strncpy_from_user+0x25/0x230 [ 321.835628][T16502] ? kmem_cache_alloc_noprof+0x186/0x310 [ 321.835723][T16502] ? getname_flags+0x80/0x3b0 [ 321.835764][T16502] getname_flags+0xae/0x3b0 [ 321.835801][T16502] user_path_at+0x28/0x130 [ 321.835845][T16502] __se_sys_mount+0x25b/0x2e0 [ 321.835886][T16502] ? fput+0x8f/0xc0 [ 321.835964][T16502] __x64_sys_mount+0x67/0x80 [ 321.835996][T16502] x64_sys_call+0xd36/0x2fb0 [ 321.836108][T16502] do_syscall_64+0xd2/0x200 [ 321.836229][T16502] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 321.836265][T16502] ? clear_bhb_loop+0x40/0x90 [ 321.836340][T16502] ? clear_bhb_loop+0x40/0x90 [ 321.836372][T16502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.836403][T16502] RIP: 0033:0x7f2460a7e929 [ 321.836496][T16502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.836523][T16502] RSP: 002b:00007f245f0e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 321.836549][T16502] RAX: ffffffffffffffda RBX: 00007f2460ca5fa0 RCX: 00007f2460a7e929 [ 321.836569][T16502] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 321.836643][T16502] RBP: 00007f245f0e7090 R08: 0000200000000600 R09: 0000000000000000 [ 321.836661][T16502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.836678][T16502] R13: 0000000000000000 R14: 00007f2460ca5fa0 R15: 00007ffe6b25ea98 [ 321.836706][T16502] [ 322.034331][T16504] macvlan0: mtu less than device minimum [ 322.129071][T16494] loop7: p1 p2 p3 p4 [ 322.134347][T16494] loop7: p1 start 51379968 is beyond EOD, truncated [ 322.141060][T16494] loop7: p2 start 2936012800 is beyond EOD, truncated [ 322.147953][T16494] loop7: p3 size 100663552 extends beyond EOD, truncated [ 322.165167][T16494] loop7: p4 size 656640 extends beyond EOD, truncated [ 322.185427][T16519] loop9: detected capacity change from 0 to 512 [ 322.189652][T16516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=16516 comm=syz.0.4567 [ 322.192085][T16519] EXT4-fs: Ignoring removed nomblk_io_submit option [ 322.222200][T16521] loop1: detected capacity change from 0 to 2048 [ 322.250319][T16519] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 322.274043][T16521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.323923][T16519] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 322.350539][T16519] EXT4-fs (loop9): 1 truncate cleaned up [ 322.356963][T16519] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.410699][ T8827] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.475182][T16541] FAULT_INJECTION: forcing a failure. [ 322.475182][T16541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.488439][T16541] CPU: 0 UID: 0 PID: 16541 Comm: syz.7.4574 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) [ 322.488507][T16541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.488524][T16541] Call Trace: [ 322.488532][T16541] [ 322.488540][T16541] __dump_stack+0x1d/0x30 [ 322.488566][T16541] dump_stack_lvl+0xe8/0x140 [ 322.488591][T16541] dump_stack+0x15/0x1b [ 322.488632][T16541] should_fail_ex+0x265/0x280 [ 322.488696][T16541] should_fail+0xb/0x20 [ 322.488743][T16541] should_fail_usercopy+0x1a/0x20 [ 322.488764][T16541] _copy_from_iter+0xcf/0xe40 [ 322.488786][T16541] ? __build_skb_around+0x1a0/0x200 [ 322.488946][T16541] ? __alloc_skb+0x223/0x320 [ 322.489014][T16541] netlink_sendmsg+0x471/0x6b0 [ 322.489041][T16541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.489066][T16541] __sock_sendmsg+0x142/0x180 [ 322.489095][T16541] ____sys_sendmsg+0x31e/0x4e0 [ 322.489191][T16541] ___sys_sendmsg+0x17b/0x1d0 [ 322.489231][T16541] __x64_sys_sendmsg+0xd4/0x160 [ 322.489260][T16541] x64_sys_call+0x2999/0x2fb0 [ 322.489282][T16541] do_syscall_64+0xd2/0x200 [ 322.489390][T16541] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 322.489440][T16541] ? clear_bhb_loop+0x40/0x90 [ 322.489539][T16541] ? clear_bhb_loop+0x40/0x90 [ 322.489612][T16541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.489634][T16541] RIP: 0033:0x7f8b27f3e929 [ 322.489648][T16541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.489676][T16541] RSP: 002b:00007f8b265a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.489694][T16541] RAX: ffffffffffffffda RBX: 00007f8b28165fa0 RCX: 00007f8b27f3e929 [ 322.489706][T16541] RDX: 0000000000000850 RSI: 00002000000002c0 RDI: 0000000000000009 [ 322.489749][T16541] RBP: 00007f8b265a7090 R08: 0000000000000000 R09: 0000000000000000 [ 322.489762][T16541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.489773][T16541] R13: 0000000000000000 R14: 00007f8b28165fa0 R15: 00007ffc36303e58 [ 322.489793][T16541] [ 322.724620][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881182b7800: rx timeout, send abort [ 322.768818][T16545] FAULT_INJECTION: forcing a failure. [ 322.768818][T16545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.782099][T16545] CPU: 1 UID: 0 PID: 16545 Comm: syz.2.4575 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) [ 322.782201][T16545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.782214][T16545] Call Trace: [ 322.782220][T16545] [ 322.782226][T16545] __dump_stack+0x1d/0x30 [ 322.782244][T16545] dump_stack_lvl+0xe8/0x140 [ 322.782263][T16545] dump_stack+0x15/0x1b [ 322.782282][T16545] should_fail_ex+0x265/0x280 [ 322.782361][T16545] should_fail+0xb/0x20 [ 322.782394][T16545] should_fail_usercopy+0x1a/0x20 [ 322.782416][T16545] copy_to_user_nofault+0x7f/0x120 [ 322.782507][T16545] bpf_probe_write_user+0x83/0xc0 [ 322.782563][T16545] bpf_prog_19072b5a3fcf5d64+0x41/0x49 [ 322.782582][T16545] bpf_trace_run2+0x107/0x1c0 [ 322.782614][T16545] __bpf_trace_sys_enter+0x10/0x30 [ 322.782633][T16545] trace_sys_enter+0x86/0x110 [ 322.782675][T16545] syscall_trace_enter+0x13e/0x1e0 [ 322.782702][T16545] do_syscall_64+0xac/0x200 [ 322.782729][T16545] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 322.782813][T16545] ? clear_bhb_loop+0x40/0x90 [ 322.782832][T16545] ? clear_bhb_loop+0x40/0x90 [ 322.782932][T16545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.782965][T16545] RIP: 0033:0x7f35ddcfe929 [ 322.782978][T16545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.782994][T16545] RSP: 002b:00007f35dc367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.783057][T16545] RAX: ffffffffffffffda RBX: 00007f35ddf25fa0 RCX: 00007f35ddcfe929 [ 322.783071][T16545] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 322.783085][T16545] RBP: 00007f35dc367090 R08: 0000000000000000 R09: 0000000000000000 [ 322.783180][T16545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.783193][T16545] R13: 0000000000000000 R14: 00007f35ddf25fa0 R15: 00007ffd62535658 [ 322.783217][T16545] [ 322.982440][T16545] netlink: 'syz.2.4575': attribute type 39 has an invalid length. [ 322.993343][T16545] veth1_macvtap: left promiscuous mode [ 323.025566][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 323.025580][ T29] audit: type=1326 audit(1749745471.108:46190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.4575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f35ddcfd33c code=0x7ffc0000 [ 323.055507][ T29] audit: type=1326 audit(1749745471.108:46191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.4575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f35ddcfd3df code=0x7ffc0000 [ 323.079117][ T29] audit: type=1326 audit(1749745471.108:46192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.4575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f35ddcfd58a code=0x7ffc0000 [ 323.102826][ T29] audit: type=1326 audit(1749745471.108:46193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.4575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ddcfe929 code=0x7ffc0000 [ 323.126949][ T29] audit: type=1326 audit(1749745471.108:46194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.4575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ddcfe929 code=0x7ffc0000 [ 323.156686][ T153] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 323.178628][ T153] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 323.191169][ T153] EXT4-fs (loop1): This should not happen!! Data will be lost [ 323.191169][ T153] [ 323.200997][ T153] EXT4-fs (loop1): Total free blocks count 0 [ 323.207079][ T153] EXT4-fs (loop1): Free/Dirty block details [ 323.212988][ T153] EXT4-fs (loop1): free_blocks=2415919504 [ 323.218948][ T153] EXT4-fs (loop1): dirty_blocks=5296 [ 323.224266][ T153] EXT4-fs (loop1): Block reservation details [ 323.224643][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881182b7a00: rx timeout, send abort [ 323.230350][ T153] EXT4-fs (loop1): i_reserved_data_blocks=331 [ 323.238638][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881182b7800: abort rx timeout. Force session deactivation [ 323.271998][T16563] loop2: detected capacity change from 0 to 2048 [ 323.288913][ T153] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 323.309096][T16561] loop9: detected capacity change from 0 to 2048 [ 323.312122][T16563] Alternate GPT is invalid, using primary GPT. [ 323.321912][T16563] loop2: p1 p2 p3 [ 323.367770][T16561] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.405420][T16571] loop0: detected capacity change from 0 to 8192 [ 323.622139][T16579] lo speed is unknown, defaulting to 1000 [ 323.691350][T16579] lo speed is unknown, defaulting to 1000 [ 323.738518][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881182b7a00: abort rx timeout. Force session deactivation [ 323.796970][T16581] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 323.968819][T16581] EXT4-fs (loop9): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 390 with error 28 [ 323.981325][T16581] EXT4-fs (loop9): This should not happen!! Data will be lost [ 323.981325][T16581] [ 323.991016][T16581] EXT4-fs (loop9): Total free blocks count 0 [ 323.997043][T16581] EXT4-fs (loop9): Free/Dirty block details [ 324.003026][T16581] EXT4-fs (loop9): free_blocks=2415919504 [ 324.008791][T16581] EXT4-fs (loop9): dirty_blocks=7008 [ 324.014096][T16581] EXT4-fs (loop9): Block reservation details [ 324.020162][T16581] EXT4-fs (loop9): i_reserved_data_blocks=31 [ 324.027163][T16584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.046967][T16584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.102452][T16571] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 324.110121][T16571] FAT-fs (loop0): Filesystem has been set read-only [ 324.151196][T16582] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 324.169792][T16583] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 324.202903][T16586] loop2: detected capacity change from 0 to 2048 [ 324.380361][T16586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.528550][T16599] lo speed is unknown, defaulting to 1000 [ 324.597683][T16599] lo speed is unknown, defaulting to 1000 [ 324.925229][ T8755] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 325.134733][ T8755] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 325.165387][ T8755] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 325.177903][ T8755] EXT4-fs (loop2): This should not happen!! Data will be lost [ 325.177903][ T8755] [ 325.187667][ T8755] EXT4-fs (loop2): Total free blocks count 0 [ 325.193727][ T8755] EXT4-fs (loop2): Free/Dirty block details [ 325.199683][ T8755] EXT4-fs (loop2): free_blocks=2415919504 [ 325.205462][ T8755] EXT4-fs (loop2): dirty_blocks=10528 [ 325.210994][ T8755] EXT4-fs (loop2): Block reservation details [ 325.217017][ T8755] EXT4-fs (loop2): i_reserved_data_blocks=658 [ 325.247994][T16606] FAULT_INJECTION: forcing a failure. [ 325.247994][T16606] name failslab, interval 1, probability 0, space 0, times 0 [ 325.260770][T16606] CPU: 1 UID: 0 PID: 16606 Comm: syz.0.4593 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) [ 325.260808][T16606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.260840][T16606] Call Trace: [ 325.260849][T16606] [ 325.260858][T16606] __dump_stack+0x1d/0x30 [ 325.260960][T16606] dump_stack_lvl+0xe8/0x140 [ 325.260981][T16606] dump_stack+0x15/0x1b [ 325.261071][T16606] should_fail_ex+0x265/0x280 [ 325.261117][T16606] should_failslab+0x8c/0xb0 [ 325.261207][T16606] kmem_cache_alloc_node_noprof+0x57/0x320 [ 325.261245][T16606] ? __alloc_skb+0x101/0x320 [ 325.261279][T16606] __alloc_skb+0x101/0x320 [ 325.261309][T16606] ? audit_log_start+0x365/0x6c0 [ 325.261471][T16606] audit_log_start+0x380/0x6c0 [ 325.261511][T16606] ? should_fail_ex+0xdb/0x280 [ 325.261558][T16606] audit_seccomp+0x48/0x100 [ 325.261588][T16606] ? __seccomp_filter+0x68c/0x10d0 [ 325.261653][T16606] __seccomp_filter+0x69d/0x10d0 [ 325.261755][T16606] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 325.261775][T16606] ? vfs_read+0x47f/0x6f0 [ 325.261793][T16606] ? __rcu_read_unlock+0x4f/0x70 [ 325.261818][T16606] ? __fget_files+0x184/0x1c0 [ 325.261903][T16606] __secure_computing+0x82/0x150 [ 325.261995][T16606] syscall_trace_enter+0xcf/0x1e0 [ 325.262080][T16606] do_syscall_64+0xac/0x200 [ 325.262107][T16606] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 325.262140][T16606] ? clear_bhb_loop+0x40/0x90 [ 325.262166][T16606] ? clear_bhb_loop+0x40/0x90 [ 325.262205][T16606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.262232][T16606] RIP: 0033:0x7fceec05d3df [ 325.262252][T16606] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 325.262275][T16606] RSP: 002b:00007fceea6c7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 325.262295][T16606] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fceec05d3df [ 325.262371][T16606] RDX: 0000000000000001 RSI: 00007fceea6c70a0 RDI: 0000000000000006 [ 325.262387][T16606] RBP: 00007fceea6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 325.262402][T16606] R10: 0000000000000800 R11: 0000000000000293 R12: 0000000000000002 [ 325.262418][T16606] R13: 0000000000000000 R14: 00007fceec285fa0 R15: 00007ffd9bbad1f8 [ 325.262442][T16606] [ 325.262454][T16606] audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64 [ 325.325960][ T29] audit: type=1326 audit(1749745473.329:46195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.0.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceec05e929 code=0x7ffc0000 [ 325.328776][T16606] audit: out of memory in audit_log_start [ 325.333657][ T29] audit: type=1326 audit(1749745473.329:46196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.0.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fceec05d290 code=0x7ffc0000 [ 325.370038][ T4113] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 325.372829][ T29] audit: type=1326 audit(1749745473.329:46197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.0.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fceec05d3df code=0x7ffc0000 [ 325.689193][T16624] netlink: 'syz.9.4601': attribute type 1 has an invalid length. [ 325.726239][T16624] __nla_validate_parse: 3 callbacks suppressed [ 325.726253][T16624] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4601'. [ 325.741683][T16624] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4601'. [ 325.777812][T16639] netlink: 'syz.0.4606': attribute type 10 has an invalid length. [ 325.785815][T16639] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4606'. [ 325.801873][T16639] bridge0: port 3(dummy0) entered blocking state [ 325.808356][T16639] bridge0: port 3(dummy0) entered disabled state [ 325.808897][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 325.815804][T16639] dummy0: entered allmulticast mode [ 325.822544][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 325.835709][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 325.836348][T16639] bridge0: port 3(dummy0) entered blocking state [ 325.843560][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 325.849959][T16639] bridge0: port 3(dummy0) entered forwarding state [ 325.857644][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 325.871956][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 325.879826][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 325.887626][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 325.895402][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 325.903156][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 325.911011][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 325.918803][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 325.926638][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 325.934424][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 325.942312][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 325.950100][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 325.957923][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 325.965733][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 325.973562][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 325.981513][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 325.989409][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 325.997199][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.005087][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.011247][T16639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4606'. [ 326.012842][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.012871][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.021877][T16639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4606'. [ 326.029580][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.054050][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.061907][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.069731][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.077530][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.085346][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.088456][T16648] loop2: detected capacity change from 0 to 1024 [ 326.093084][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.101442][T16648] EXT4-fs: Ignoring removed nobh option [ 326.107245][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.112818][T16648] EXT4-fs: Ignoring removed bh option [ 326.120618][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.133884][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.141723][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.149580][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.157412][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.165203][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.172972][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.176168][T16646] loop7: detected capacity change from 0 to 8192 [ 326.180757][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.194893][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.202748][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 326.213118][ T3414] hid-generic 0000:007F:FFFFFFFE.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 326.235937][T16648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.330558][T16079] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.437319][T16672] FAULT_INJECTION: forcing a failure. [ 326.437319][T16672] name failslab, interval 1, probability 0, space 0, times 0 [ 326.437409][T16672] CPU: 0 UID: 0 PID: 16672 Comm: syz.2.4618 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) [ 326.437449][T16672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.437468][T16672] Call Trace: [ 326.437477][T16672] [ 326.437486][T16672] __dump_stack+0x1d/0x30 [ 326.437565][T16672] dump_stack_lvl+0xe8/0x140 [ 326.437585][T16672] dump_stack+0x15/0x1b [ 326.437602][T16672] should_fail_ex+0x265/0x280 [ 326.437648][T16672] should_failslab+0x8c/0xb0 [ 326.437684][T16672] kmem_cache_alloc_noprof+0x50/0x310 [ 326.437731][T16672] ? getname_flags+0x80/0x3b0 [ 326.437808][T16672] ? kstrtouint+0x76/0xc0 [ 326.437841][T16672] getname_flags+0x80/0x3b0 [ 326.437872][T16672] user_path_at+0x28/0x130 [ 326.437916][T16672] bpf_obj_get_user+0x66/0x300 [ 326.437975][T16672] bpf_obj_get+0xed/0x100 [ 326.438039][T16672] __sys_bpf+0x654/0x790 [ 326.438145][T16672] __x64_sys_bpf+0x41/0x50 [ 326.438178][T16672] x64_sys_call+0x2478/0x2fb0 [ 326.438201][T16672] do_syscall_64+0xd2/0x200 [ 326.438226][T16672] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 326.438287][T16672] ? clear_bhb_loop+0x40/0x90 [ 326.438317][T16672] ? clear_bhb_loop+0x40/0x90 [ 326.438344][T16672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.438377][T16672] RIP: 0033:0x7f35ddcfe929 [ 326.438397][T16672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.438495][T16672] RSP: 002b:00007f35dc367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.438543][T16672] RAX: ffffffffffffffda RBX: 00007f35ddf25fa0 RCX: 00007f35ddcfe929 [ 326.438557][T16672] RDX: 0000000000000018 RSI: 0000200000000300 RDI: 0000000000000007 [ 326.438573][T16672] RBP: 00007f35dc367090 R08: 0000000000000000 R09: 0000000000000000 [ 326.438592][T16672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.438610][T16672] R13: 0000000000000000 R14: 00007f35ddf25fa0 R15: 00007ffd62535658 [ 326.438632][T16672] [ 326.513108][T16676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4619'. [ 326.543749][T16678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.544456][T16676] netlink: 'syz.2.4619': attribute type 2 has an invalid length. [ 326.544478][T16676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4619'. [ 326.580371][T16646] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 326.584815][T16678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.603765][T16646] FAT-fs (loop7): Filesystem has been set read-only [ 326.757130][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.765027][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.772826][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.780699][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.788576][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.796381][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.804206][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.812014][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.819808][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.827502][T16693] loop2: detected capacity change from 0 to 512 [ 326.833944][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.841764][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.846053][T16663] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 326.849604][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.866083][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.873905][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.881711][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.889506][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.891868][T16675] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 326.897305][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.897335][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.921426][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.929302][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.930290][T16697] loop9: detected capacity change from 0 to 1024 [ 326.937081][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.937113][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.959099][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.966896][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.974664][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.982459][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.990234][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 326.998096][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 327.006040][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 327.013805][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 327.021618][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 327.029424][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 327.037301][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 327.045148][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 327.052988][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 327.060800][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 327.068610][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 327.069362][T16697] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.076408][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 327.076435][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 327.091714][T16693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.096254][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 327.104820][T16693] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 327.116477][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 327.142264][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 327.150196][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: unknown main item tag 0x0 [ 327.158681][T16697] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 327.174999][T16700] FAULT_INJECTION: forcing a failure. [ 327.174999][T16700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.188189][T16700] CPU: 0 UID: 0 PID: 16700 Comm: syz.0.4626 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) [ 327.188232][T16700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.188247][T16700] Call Trace: [ 327.188254][T16700] [ 327.188262][T16700] __dump_stack+0x1d/0x30 [ 327.188286][T16700] dump_stack_lvl+0xe8/0x140 [ 327.188306][T16700] dump_stack+0x15/0x1b [ 327.188321][T16700] should_fail_ex+0x265/0x280 [ 327.188421][T16700] should_fail+0xb/0x20 [ 327.188494][T16700] should_fail_usercopy+0x1a/0x20 [ 327.188518][T16700] copy_to_user_nofault+0x7f/0x120 [ 327.188649][T16700] bpf_probe_write_user+0x83/0xc0 [ 327.188702][T16700] bpf_prog_19072b5a3fcf5d64+0x41/0x49 [ 327.188718][T16700] bpf_trace_run2+0x107/0x1c0 [ 327.188744][T16700] __bpf_trace_sys_enter+0x10/0x30 [ 327.188768][T16700] trace_sys_enter+0x86/0x110 [ 327.188888][T16700] syscall_trace_enter+0x13e/0x1e0 [ 327.188954][T16700] do_syscall_64+0xac/0x200 [ 327.188974][T16700] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 327.189003][T16700] ? clear_bhb_loop+0x40/0x90 [ 327.189053][T16700] ? clear_bhb_loop+0x40/0x90 [ 327.189076][T16700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.189102][T16700] RIP: 0033:0x7fceec05d33c [ 327.189186][T16700] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 327.189239][T16700] RSP: 002b:00007fceea6c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 327.189261][T16700] RAX: ffffffffffffffda RBX: 00007fceec285fa0 RCX: 00007fceec05d33c [ 327.189276][T16700] RDX: 000000000000000f RSI: 00007fceea6c70a0 RDI: 0000000000000005 [ 327.189288][T16700] RBP: 00007fceea6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 327.189299][T16700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.189310][T16700] R13: 0000000000000000 R14: 00007fceec285fa0 R15: 00007ffd9bbad1f8 [ 327.189327][T16700] [ 327.190644][T16079] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.213353][ T8827] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.263871][T16708] loop0: detected capacity change from 0 to 512 [ 327.269894][ T3414] hid-generic 0000:007F:FFFFFFFE.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 327.273529][T16708] EXT4-fs: Ignoring removed nomblk_io_submit option [ 327.426487][T16708] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 327.455754][T16715] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 327.471683][T16708] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 327.488739][T16708] EXT4-fs (loop0): 1 truncate cleaned up [ 327.495515][T16708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.532962][ T8875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.670647][T16720] lo speed is unknown, defaulting to 1000 [ 327.705157][T16720] lo speed is unknown, defaulting to 1000 [ 327.851509][T16710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4631'. [ 327.934974][T16725] lo speed is unknown, defaulting to 1000 [ 328.009266][T16726] loop2: detected capacity change from 0 to 512 [ 328.302761][T16725] lo speed is unknown, defaulting to 1000 [ 328.317215][T16730] loop7: detected capacity change from 0 to 512 [ 328.336437][T16730] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 328.351956][T16730] EXT4-fs (loop7): orphan cleanup on readonly fs [ 328.363916][T16728] loop9: detected capacity change from 0 to 512 [ 328.371850][T16730] EXT4-fs error (device loop7): ext4_quota_enable:7124: inode #15: comm syz.7.4634: iget: bad i_size value: 360287970189639690 [ 328.385812][T16730] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.4634: Bad quota inode: 15, type: 2 [ 328.406947][T16730] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 328.422523][T16730] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 328.429760][T16730] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 328.450330][T16737] loop1: detected capacity change from 0 to 2048 [ 328.465295][T16728] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.480388][T16728] ext4 filesystem being mounted at /582/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.502991][ T8719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.512136][T16744] loop2: detected capacity change from 0 to 512 [ 328.513664][T16737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.561639][ T8827] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.582705][T16751] loop0: detected capacity change from 0 to 512 [ 328.616879][T16751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 328.731880][T16751] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 328.748318][T16751] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 328.768617][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.776703][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.784587][T16751] EXT4-fs (loop0): 1 truncate cleaned up [ 328.784960][T16751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.790303][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.810657][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.818457][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.826386][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.834211][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.842108][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.849964][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.857764][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.865711][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.873726][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.881524][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.889327][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.897183][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.904960][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.912763][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.920551][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.928323][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.936122][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.943966][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.951873][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.959740][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.967665][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.975444][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.983268][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.991127][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 328.998980][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 329.006806][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 329.014683][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 329.022530][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 329.030331][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 329.038210][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 329.046416][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 329.054726][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 329.063403][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 329.072023][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 329.079930][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 329.087725][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 329.095684][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 329.103471][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 329.111256][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 329.119024][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 329.128749][ T8875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.194331][T16767] lo speed is unknown, defaulting to 1000 [ 329.264296][T16767] lo speed is unknown, defaulting to 1000 [ 329.431304][ T153] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 329.499530][ T153] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 329.512269][ T153] EXT4-fs (loop1): This should not happen!! Data will be lost [ 329.512269][ T153] [ 329.522050][ T153] EXT4-fs (loop1): Total free blocks count 0 [ 329.528127][ T153] EXT4-fs (loop1): Free/Dirty block details [ 329.534035][ T153] EXT4-fs (loop1): free_blocks=2415919504 [ 329.539857][ T153] EXT4-fs (loop1): dirty_blocks=15984 [ 329.545276][ T153] EXT4-fs (loop1): Block reservation details [ 329.551283][ T153] EXT4-fs (loop1): i_reserved_data_blocks=999 [ 329.584293][ T3421] hid-generic 0000:007F:FFFFFFFE.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 329.610724][ T153] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 329.612061][T16775] FAULT_INJECTION: forcing a failure. [ 329.612061][T16775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.636609][T16775] CPU: 0 UID: 0 PID: 16775 Comm: syz.2.4650 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) [ 329.636660][T16775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.636713][T16775] Call Trace: [ 329.636722][T16775] [ 329.636733][T16775] __dump_stack+0x1d/0x30 [ 329.636760][T16775] dump_stack_lvl+0xe8/0x140 [ 329.636800][T16775] dump_stack+0x15/0x1b [ 329.636821][T16775] should_fail_ex+0x265/0x280 [ 329.636868][T16775] should_fail+0xb/0x20 [ 329.636920][T16775] should_fail_usercopy+0x1a/0x20 [ 329.636941][T16775] _copy_from_user+0x1c/0xb0 [ 329.636967][T16775] ___sys_sendmsg+0xc1/0x1d0 [ 329.637026][T16775] __x64_sys_sendmsg+0xd4/0x160 [ 329.637063][T16775] x64_sys_call+0x2999/0x2fb0 [ 329.637136][T16775] do_syscall_64+0xd2/0x200 [ 329.637158][T16775] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 329.637192][T16775] ? clear_bhb_loop+0x40/0x90 [ 329.637292][T16775] ? clear_bhb_loop+0x40/0x90 [ 329.637321][T16775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.637349][T16775] RIP: 0033:0x7f35ddcfe929 [ 329.637368][T16775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.637419][T16775] RSP: 002b:00007f35dc367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.637441][T16775] RAX: ffffffffffffffda RBX: 00007f35ddf25fa0 RCX: 00007f35ddcfe929 [ 329.637454][T16775] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000006 [ 329.637484][T16775] RBP: 00007f35dc367090 R08: 0000000000000000 R09: 0000000000000000 [ 329.637513][T16775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.637575][T16775] R13: 0000000000000000 R14: 00007f35ddf25fa0 R15: 00007ffd62535658 [ 329.637619][T16775] [ 329.971642][T16784] loop9: detected capacity change from 0 to 512 [ 329.990218][T16784] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.062698][T16784] ext4 filesystem being mounted at /584/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.084667][T16799] loop0: detected capacity change from 0 to 4096 [ 330.102943][T16799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.116419][ T8755] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.127938][ T8827] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.138902][T16781] lo speed is unknown, defaulting to 1000 [ 330.167972][ T8755] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.199512][T16810] loop9: detected capacity change from 0 to 512 [ 330.200096][T16781] lo speed is unknown, defaulting to 1000 [ 330.208506][ T8875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.224246][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 330.224262][ T29] audit: type=1326 audit(1749745478.299:46374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.1.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a943e929 code=0x7ffc0000 [ 330.244545][T16810] EXT4-fs: Ignoring removed nomblk_io_submit option [ 330.263305][T16808] loop1: detected capacity change from 0 to 1024 [ 330.276170][ T29] audit: type=1326 audit(1749745478.329:46375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.1.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a943e929 code=0x7ffc0000 [ 330.287839][T16810] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 330.299787][ T29] audit: type=1326 audit(1749745478.329:46376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.1.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a943e929 code=0x7ffc0000 [ 330.312688][T16808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.333256][ T29] audit: type=1326 audit(1749745478.329:46377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.1.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a943e929 code=0x7ffc0000 [ 330.347844][T16810] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, [ 330.368926][ T29] audit: type=1326 audit(1749745478.329:46378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.1.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff3a943e929 code=0x7ffc0000 [ 330.369031][ T29] audit: type=1326 audit(1749745478.329:46379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.1.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff3a943e963 code=0x7ffc0000 [ 330.369059][ T29] audit: type=1326 audit(1749745478.329:46380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.1.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff3a943d3df code=0x7ffc0000 [ 330.377359][T16810] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 330.400921][ T29] audit: type=1326 audit(1749745478.349:46381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.1.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff3a943e9b7 code=0x7ffc0000 [ 330.479732][ T29] audit: type=1326 audit(1749745478.349:46382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.1.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3a943d290 code=0x7ffc0000 [ 330.481876][T16810] EXT4-fs (loop9): 1 truncate cleaned up [ 330.503526][ T29] audit: type=1326 audit(1749745478.349:46383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.1.4659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3a943e52b code=0x7ffc0000 [ 330.510505][T16810] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.547448][ T8755] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.562705][T16808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4659'. [ 330.587498][T16781] chnl_net:caif_netlink_parms(): no params data found [ 330.596095][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.604015][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.611940][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.619875][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.627684][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.635465][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.643347][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.651207][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.659122][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.667062][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.674872][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.682637][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.690481][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.698414][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.706208][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.714022][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.721839][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.729624][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.737382][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.745299][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.753070][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.760828][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.768646][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.776416][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.784251][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.792129][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.799878][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.807648][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.815393][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.823189][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.830941][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.838765][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.846518][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.854337][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.862151][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.869953][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.877874][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.885723][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.893499][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.901369][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.909135][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.917167][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.925166][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0 [ 330.933765][ T1030] hid-generic 0000:007F:FFFFFFFE.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 330.935932][ T8827] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.954369][ T8755] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.975674][T16824] FAULT_INJECTION: forcing a failure. [ 330.975674][T16824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.989026][T16824] CPU: 1 UID: 0 PID: 16824 Comm: syz.9.4662 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) [ 330.989059][T16824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 330.989076][T16824] Call Trace: [ 330.989084][T16824] [ 330.989094][T16824] __dump_stack+0x1d/0x30 [ 330.989121][T16824] dump_stack_lvl+0xe8/0x140 [ 330.989157][T16824] dump_stack+0x15/0x1b [ 330.989217][T16824] should_fail_ex+0x265/0x280 [ 330.989257][T16824] should_fail+0xb/0x20 [ 330.989287][T16824] should_fail_usercopy+0x1a/0x20 [ 330.989372][T16824] _copy_from_user+0x1c/0xb0 [ 330.989403][T16824] __sys_bind+0x106/0x2a0 [ 330.989442][T16824] __x64_sys_bind+0x3f/0x50 [ 330.989495][T16824] x64_sys_call+0x2086/0x2fb0 [ 330.989519][T16824] do_syscall_64+0xd2/0x200 [ 330.989547][T16824] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 330.989612][T16824] ? clear_bhb_loop+0x40/0x90 [ 330.989640][T16824] ? clear_bhb_loop+0x40/0x90 [ 330.989665][T16824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.989685][T16824] RIP: 0033:0x7f2460a7e929 [ 330.989701][T16824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.989786][T16824] RSP: 002b:00007f245f0e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 330.989807][T16824] RAX: ffffffffffffffda RBX: 00007f2460ca5fa0 RCX: 00007f2460a7e929 [ 330.989824][T16824] RDX: 0000000000000014 RSI: 0000200000000300 RDI: 0000000000000003 [ 330.989840][T16824] RBP: 00007f245f0e7090 R08: 0000000000000000 R09: 0000000000000000 [ 330.989856][T16824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.989872][T16824] R13: 0000000000000000 R14: 00007f2460ca5fa0 R15: 00007ffe6b25ea98 [ 330.989898][T16824] [ 330.996683][T16823] loop0: detected capacity change from 0 to 512 [ 331.177983][T16823] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 331.197665][T16823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4663'. [ 331.221787][T16823] netlink: 'syz.0.4663': attribute type 27 has an invalid length. [ 331.256239][ T9229] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.256909][T16840] loop9: detected capacity change from 0 to 4096 [ 331.273678][T16842] loop0: detected capacity change from 0 to 512 [ 331.280949][T16842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 331.282175][T16781] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.294790][T16781] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.302665][T16842] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 331.313624][T16840] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.343291][T16781] bridge_slave_0: entered allmulticast mode [ 331.343325][ T8827] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.350726][T16781] bridge_slave_0: entered promiscuous mode [ 331.369917][T16842] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 331.376738][T16781] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.391452][T16781] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.398953][T16781] bridge_slave_1: entered allmulticast mode [ 331.407066][T16842] EXT4-fs (loop0): 1 truncate cleaned up [ 331.407568][T16842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.408019][T16781] bridge_slave_1: entered promiscuous mode [ 331.428990][T16846] loop1: detected capacity change from 0 to 8192 [ 331.453631][T16781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.523565][ T8875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.553545][ T8755] dvmrp1 (unregistering): left allmulticast mode [ 331.565814][ T8755] bond0 (unregistering): (slave lo): Releasing backup interface [ 331.573747][ T8755] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 331.587133][ T8755] bond0 (unregistering): Released all slaves [ 331.603588][ T8755] bond1 (unregistering): (slave veth3): Releasing active interface [ 331.611633][ T8755] vlan2: entered promiscuous mode [ 331.650700][ T8755] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 331.674654][ T8755] bond1 (unregistering): (slave vlan2): Releasing active interface [ 331.703670][ T8755] bond1 (unregistering): Released all slaves [ 331.707531][T16870] loop0: detected capacity change from 0 to 2048 [ 331.724520][ T8755] bond2 (unregistering): (slave veth5): Releasing active interface [ 331.741215][T16870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.757378][ T8755] bond2 (unregistering): Released all slaves [ 331.776003][T16781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.794358][ T3403] lo speed is unknown, defaulting to 1000 [ 331.800169][ T3403] syz2: Port: 1 Link DOWN [ 331.804660][ T3414] lo speed is unknown, defaulting to 1000 [ 331.872216][T16781] team0: Port device team_slave_0 added [ 331.893418][T16781] team0: Port device team_slave_1 added [ 331.905129][ T8755] hsr_slave_0: left promiscuous mode [ 331.915252][ T8755] hsr_slave_1: left promiscuous mode [ 331.921441][T16881] loop2: detected capacity change from 0 to 512 [ 331.930126][ T8755] veth1_macvtap: left promiscuous mode [ 331.936407][T16883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.942420][ T8755] veth0_macvtap: left promiscuous mode [ 331.954775][T16883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.972637][ T8755] veth1_vlan: left allmulticast mode [ 331.978172][ T8755] veth1_vlan: left promiscuous mode [ 331.988054][T16884] loop9: detected capacity change from 0 to 4096 [ 331.994586][ T8755] veth0_vlan: left promiscuous mode [ 331.995811][T16881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.014318][T16881] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 332.035697][T16884] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.052286][T16846] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 332.059935][T16846] FAT-fs (loop1): Filesystem has been set read-only [ 332.120875][T16889] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 332.142668][ T8827] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.158003][T16864] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 332.158514][T16889] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 254 with error 28 [ 332.179354][T16889] EXT4-fs (loop0): This should not happen!! Data will be lost [ 332.179354][T16889] [ 332.189088][T16889] EXT4-fs (loop0): Total free blocks count 0 [ 332.195281][T16889] EXT4-fs (loop0): Free/Dirty block details [ 332.201229][T16889] EXT4-fs (loop0): free_blocks=2415919504 [ 332.207271][T16889] EXT4-fs (loop0): dirty_blocks=10768 [ 332.212697][T16889] EXT4-fs (loop0): Block reservation details [ 332.218963][T16889] EXT4-fs (loop0): i_reserved_data_blocks=16 [ 332.231616][ T8755] pim6reg (unregistering): left allmulticast mode [ 332.240928][T16879] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 332.378653][T16781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.385710][T16781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.411738][T16781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.423148][T16781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.430194][T16781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.438794][ T4133] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 332.456259][T16781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.480733][T16079] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.499399][T16781] hsr_slave_0: entered promiscuous mode [ 332.519606][T16781] hsr_slave_1: entered promiscuous mode [ 332.525670][T16895] loop9: detected capacity change from 0 to 512 [ 332.527238][T16781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.541843][T16781] Cannot create hsr debugfs directory [ 332.544767][T16895] EXT4-fs: Ignoring removed nomblk_io_submit option [ 332.564181][T16895] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 332.683822][T16895] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 332.699574][T16895] EXT4-fs (loop9): 1 truncate cleaned up [ 332.705824][T16895] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.736037][T16903] Cannot find add_set index 3 as target [ 332.798814][T16906] lo speed is unknown, defaulting to 1000 [ 333.005514][ T8827] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.258556][T16914] loop0: detected capacity change from 0 to 4096 [ 333.291969][T16914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.329913][T16917] loop9: detected capacity change from 0 to 1024 [ 333.352051][ T8875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.371304][T16781] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 333.401569][T16926] loop1: detected capacity change from 0 to 2048 [ 333.415306][T16917] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.436215][T16781] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 333.475782][T16781] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 333.534660][T16781] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 333.618829][T16937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4697'. [ 333.627872][T16937] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4697'. [ 333.745302][T16952] FAULT_INJECTION: forcing a failure. [ 333.745302][T16952] name failslab, interval 1, probability 0, space 0, times 0 [ 333.758187][T16952] CPU: 1 UID: 0 PID: 16952 Comm: syz.0.4699 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) [ 333.758222][T16952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.758239][T16952] Call Trace: [ 333.758245][T16952] [ 333.758255][T16952] __dump_stack+0x1d/0x30 [ 333.758362][T16952] dump_stack_lvl+0xe8/0x140 [ 333.758385][T16952] dump_stack+0x15/0x1b [ 333.758409][T16952] should_fail_ex+0x265/0x280 [ 333.758442][T16952] should_failslab+0x8c/0xb0 [ 333.758463][T16952] kmem_cache_alloc_noprof+0x50/0x310 [ 333.758515][T16952] ? ioctx_alloc+0xf5/0x4e0 [ 333.758541][T16952] ioctx_alloc+0xf5/0x4e0 [ 333.758663][T16952] __se_sys_io_setup+0x6b/0x1b0 [ 333.758766][T16952] __x64_sys_io_setup+0x31/0x40 [ 333.758808][T16952] x64_sys_call+0x2f0e/0x2fb0 [ 333.758859][T16952] do_syscall_64+0xd2/0x200 [ 333.758880][T16952] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 333.758904][T16952] ? clear_bhb_loop+0x40/0x90 [ 333.758983][T16952] ? clear_bhb_loop+0x40/0x90 [ 333.759003][T16952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.759037][T16952] RIP: 0033:0x7fceec05e929 [ 333.759055][T16952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.759119][T16952] RSP: 002b:00007fceea6c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 333.759227][T16952] RAX: ffffffffffffffda RBX: 00007fceec285fa0 RCX: 00007fceec05e929 [ 333.759252][T16952] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000002 [ 333.759263][T16952] RBP: 00007fceea6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 333.759294][T16952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.759339][T16952] R13: 0000000000000000 R14: 00007fceec285fa0 R15: 00007ffd9bbad1f8 [ 333.759362][T16952] [ 333.762218][T16781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.887711][T16955] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 333.972087][T16955] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 298 with error 28 [ 333.982747][T16781] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.984577][T16955] EXT4-fs (loop1): This should not happen!! Data will be lost [ 333.984577][T16955] [ 334.000892][T16955] EXT4-fs (loop1): Total free blocks count 0 [ 334.007028][T16955] EXT4-fs (loop1): Free/Dirty block details [ 334.013013][T16955] EXT4-fs (loop1): free_blocks=2415919504 [ 334.018783][T16955] EXT4-fs (loop1): dirty_blocks=7728 [ 334.024209][T16955] EXT4-fs (loop1): Block reservation details [ 334.030213][T16955] EXT4-fs (loop1): i_reserved_data_blocks=19 [ 334.037124][ T4091] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.044262][ T4091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.116648][T16938] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 334.135896][T16963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4703'. [ 334.158579][T16963] loop0: detected capacity change from 0 to 512 [ 334.168010][ T4091] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.175173][ T4091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.201960][T16781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.212500][T16781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.262095][T16938] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 334.274712][T16938] EXT4-fs (loop9): This should not happen!! Data will be lost [ 334.274712][T16938] [ 334.284462][T16938] EXT4-fs (loop9): Total free blocks count 0 [ 334.290702][T16938] EXT4-fs (loop9): Free/Dirty block details [ 334.296713][T16938] EXT4-fs (loop9): free_blocks=68451041280 [ 334.302686][T16938] EXT4-fs (loop9): dirty_blocks=16400 [ 334.308216][T16938] EXT4-fs (loop9): Block reservation details [ 334.314234][T16938] EXT4-fs (loop9): i_reserved_data_blocks=1025 [ 334.332063][ T4091] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 334.344617][ T4091] EXT4-fs (loop1): This should not happen!! Data will be lost [ 334.344617][ T4091] [ 334.357011][T16963] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 334.387433][T16970] lo speed is unknown, defaulting to 1000 [ 334.476263][T16963] EXT4-fs (loop0): mount failed [ 334.529747][ T4091] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 334.757409][T16781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.922187][T16781] veth0_vlan: entered promiscuous mode [ 334.931804][T16781] veth1_vlan: entered promiscuous mode [ 334.987752][T16781] veth0_macvtap: entered promiscuous mode [ 334.994246][T17002] loop1: detected capacity change from 0 to 512 [ 335.000539][T16781] veth1_macvtap: entered promiscuous mode [ 335.007273][T16994] loop9: detected capacity change from 0 to 8192 [ 335.014194][T17002] EXT4-fs: Ignoring removed orlov option [ 335.019985][T16781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.030943][T17002] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 335.049559][T16781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.065198][T17002] EXT4-fs (loop1): orphan cleanup on readonly fs [ 335.076187][T16781] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.085030][T16781] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.093860][T16781] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.102742][T16781] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.124915][T17002] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4710: bg 0: block 248: padding at end of block bitmap is not set [ 335.145988][T17002] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4710: Failed to acquire dquot type 1 [ 335.158166][T17002] EXT4-fs (loop1): 1 truncate cleaned up [ 335.165183][T17002] FAULT_INJECTION: forcing a failure. [ 335.165183][T17002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.178363][T17002] CPU: 1 UID: 0 PID: 17002 Comm: syz.1.4710 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) [ 335.178445][T17002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 335.178519][T17002] Call Trace: [ 335.178528][T17002] [ 335.178537][T17002] __dump_stack+0x1d/0x30 [ 335.178558][T17002] dump_stack_lvl+0xe8/0x140 [ 335.178577][T17002] dump_stack+0x15/0x1b [ 335.178593][T17002] should_fail_ex+0x265/0x280 [ 335.178748][T17002] should_fail+0xb/0x20 [ 335.178788][T17002] should_fail_usercopy+0x1a/0x20 [ 335.178811][T17002] strncpy_from_user+0x25/0x230 [ 335.178883][T17002] ? kmem_cache_alloc_noprof+0x186/0x310 [ 335.178909][T17002] ? getname_flags+0x80/0x3b0 [ 335.179026][T17002] getname_flags+0xae/0x3b0 [ 335.179051][T17002] __x64_sys_mkdirat+0x40/0x60 [ 335.179088][T17002] x64_sys_call+0x2be0/0x2fb0 [ 335.179159][T17002] do_syscall_64+0xd2/0x200 [ 335.179234][T17002] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 335.179259][T17002] ? clear_bhb_loop+0x40/0x90 [ 335.179361][T17002] ? clear_bhb_loop+0x40/0x90 [ 335.179404][T17002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.179481][T17002] RIP: 0033:0x7ff3a943d197 [ 335.179499][T17002] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.179523][T17002] RSP: 002b:00007ff3a7aa6e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 335.179547][T17002] RAX: ffffffffffffffda RBX: 00007ff3a7aa6ef0 RCX: 00007ff3a943d197 [ 335.179564][T17002] RDX: 00000000000001ff RSI: 0000200000000f00 RDI: 00000000ffffff9c [ 335.179580][T17002] RBP: 0000200000000f40 R08: 0000200000000000 R09: 0000000000000000 [ 335.179606][T17002] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000200000000f00 [ 335.179648][T17002] R13: 00007ff3a7aa6eb0 R14: 0000000000000000 R15: 00002000000008c0 [ 335.179665][T17002] [ 335.293214][T16994] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 335.294808][T17002] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 335.299114][T16994] FAT-fs (loop9): Filesystem has been set read-only [ 335.344947][T17002] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 335.411539][T17008] loop2: detected capacity change from 0 to 8192 [ 335.412040][T17002] ext4 filesystem being remounted at /486/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 335.424643][T17004] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 335.456258][T17012] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 335.472267][T17008] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 335.481109][T17008] FAT-fs (loop2): Filesystem has been set read-only [ 335.489004][T17008] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 335.503036][T17008] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 335.511927][T17005] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 335.546351][T17008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.555949][T17008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.571266][T16994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.583109][T16994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.629296][T17023] FAULT_INJECTION: forcing a failure. [ 335.629296][T17023] name failslab, interval 1, probability 0, space 0, times 0 [ 335.642060][T17023] CPU: 1 UID: 0 PID: 17023 Comm: +}[@ Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) [ 335.642095][T17023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 335.642107][T17023] Call Trace: [ 335.642113][T17023] [ 335.642121][T17023] __dump_stack+0x1d/0x30 [ 335.642147][T17023] dump_stack_lvl+0xe8/0x140 [ 335.642188][T17023] dump_stack+0x15/0x1b [ 335.642209][T17023] should_fail_ex+0x265/0x280 [ 335.642253][T17023] should_failslab+0x8c/0xb0 [ 335.642282][T17023] kmem_cache_alloc_node_noprof+0x57/0x320 [ 335.642375][T17023] ? __alloc_skb+0x101/0x320 [ 335.642415][T17023] __alloc_skb+0x101/0x320 [ 335.642457][T17023] netlink_alloc_large_skb+0xba/0xf0 [ 335.642554][T17023] netlink_sendmsg+0x3cf/0x6b0 [ 335.642656][T17023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.642686][T17023] __sock_sendmsg+0x142/0x180 [ 335.642758][T17023] ____sys_sendmsg+0x31e/0x4e0 [ 335.642783][T17023] ___sys_sendmsg+0x17b/0x1d0 [ 335.642832][T17023] __x64_sys_sendmsg+0xd4/0x160 [ 335.642918][T17023] x64_sys_call+0x2999/0x2fb0 [ 335.642961][T17023] do_syscall_64+0xd2/0x200 [ 335.642981][T17023] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 335.643007][T17023] ? clear_bhb_loop+0x40/0x90 [ 335.643062][T17023] ? clear_bhb_loop+0x40/0x90 [ 335.643090][T17023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.643112][T17023] RIP: 0033:0x7fceec05e929 [ 335.643132][T17023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.643215][T17023] RSP: 002b:00007fceea6c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.643233][T17023] RAX: ffffffffffffffda RBX: 00007fceec285fa0 RCX: 00007fceec05e929 [ 335.643246][T17023] RDX: 0000000000020000 RSI: 0000200000000cc0 RDI: 0000000000000005 [ 335.643268][T17023] RBP: 00007fceea6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 335.643280][T17023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.643295][T17023] R13: 0000000000000000 R14: 00007fceec285fa0 R15: 00007ffd9bbad1f8 [ 335.643319][T17023] [ 335.883257][T17021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4714'. [ 335.892310][T17021] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4714'. [ 335.914299][ T29] kauditd_printk_skb: 1425 callbacks suppressed [ 335.914317][ T29] audit: type=1326 audit(1749745483.999:47806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17027 comm="syz.0.4717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fceec0558e7 code=0x7ffc0000 [ 335.944128][ T29] audit: type=1326 audit(1749745483.999:47807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17027 comm="syz.0.4717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fceebffab19 code=0x7ffc0000 [ 335.961052][T17031] hub 1-0:1.0: USB hub found [ 335.968627][ T29] audit: type=1326 audit(1749745483.999:47808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17027 comm="syz.0.4717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceec05e929 code=0x7ffc0000 [ 335.977867][T17031] hub 1-0:1.0: 8 ports detected [ 335.995768][ T29] audit: type=1326 audit(1749745483.999:47809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17027 comm="syz.0.4717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fceec0558e7 code=0x7ffc0000 [ 335.995879][ T29] audit: type=1326 audit(1749745483.999:47810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17027 comm="syz.0.4717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fceebffab19 code=0x7ffc0000 [ 336.007001][T17031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4718'. [ 336.024249][ T29] audit: type=1326 audit(1749745483.999:47811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17027 comm="syz.0.4717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fceec0558e7 code=0x7ffc0000 [ 336.080394][ T29] audit: type=1326 audit(1749745483.999:47812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17027 comm="syz.0.4717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fceebffab19 code=0x7ffc0000 [ 336.103964][ T29] audit: type=1326 audit(1749745483.999:47813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17027 comm="syz.0.4717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fceec0558e7 code=0x7ffc0000 [ 336.127605][ T29] audit: type=1326 audit(1749745483.999:47814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17027 comm="syz.0.4717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fceebffab19 code=0x7ffc0000 [ 336.151107][ T29] audit: type=1326 audit(1749745483.999:47815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17027 comm="syz.0.4717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fceec0558e7 code=0x7ffc0000 [ 336.349725][T17039] lo speed is unknown, defaulting to 1000 [ 336.463499][T17039] chnl_net:caif_netlink_parms(): no params data found [ 336.511372][ T153] bridge_slave_1: left allmulticast mode [ 336.517241][ T153] bridge_slave_1: left promiscuous mode [ 336.523065][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.537920][ T153] bridge_slave_0: left allmulticast mode [ 336.543667][ T153] bridge_slave_0: left promiscuous mode [ 336.549497][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.675700][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.685386][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.695022][ T153] bond0 (unregistering): Released all slaves [ 336.703214][ T153] bond1 (unregistering): Released all slaves [ 336.729784][T17039] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.736923][T17039] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.744981][T17066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4728'. [ 336.746430][T17039] bridge_slave_0: entered allmulticast mode [ 336.754040][T17066] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4728'. [ 336.760484][T17039] bridge_slave_0: entered promiscuous mode [ 336.776882][T17039] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.783997][T17039] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.791333][T17039] bridge_slave_1: entered allmulticast mode [ 336.797837][T17039] bridge_slave_1: entered promiscuous mode [ 336.829601][T17072] FAULT_INJECTION: forcing a failure. [ 336.829601][T17072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.842731][T17072] CPU: 1 UID: 0 PID: 17072 Comm: syz.1.4729 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) [ 336.842906][T17072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 336.842923][T17072] Call Trace: [ 336.842931][T17072] [ 336.842941][T17072] __dump_stack+0x1d/0x30 [ 336.842967][T17072] dump_stack_lvl+0xe8/0x140 [ 336.842992][T17072] dump_stack+0x15/0x1b [ 336.843053][T17072] should_fail_ex+0x265/0x280 [ 336.843097][T17072] should_fail+0xb/0x20 [ 336.843212][T17072] should_fail_usercopy+0x1a/0x20 [ 336.843239][T17072] _copy_to_user+0x20/0xa0 [ 336.843274][T17072] simple_read_from_buffer+0xb5/0x130 [ 336.843315][T17072] proc_fail_nth_read+0x100/0x140 [ 336.843350][T17072] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 336.843371][T17072] vfs_read+0x19d/0x6f0 [ 336.843408][T17072] ? __rcu_read_unlock+0x4f/0x70 [ 336.843468][T17072] ? __fget_files+0x184/0x1c0 [ 336.843522][T17072] ksys_read+0xda/0x1a0 [ 336.843542][T17072] __x64_sys_read+0x40/0x50 [ 336.843560][T17072] x64_sys_call+0x2d77/0x2fb0 [ 336.843581][T17072] do_syscall_64+0xd2/0x200 [ 336.843609][T17072] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 336.843639][T17072] ? clear_bhb_loop+0x40/0x90 [ 336.843665][T17072] ? clear_bhb_loop+0x40/0x90 [ 336.843689][T17072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.843710][T17072] RIP: 0033:0x7ff3a943d33c [ 336.843725][T17072] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 336.843823][T17072] RSP: 002b:00007ff3a7aa7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 336.843844][T17072] RAX: ffffffffffffffda RBX: 00007ff3a9665fa0 RCX: 00007ff3a943d33c [ 336.843926][T17072] RDX: 000000000000000f RSI: 00007ff3a7aa70a0 RDI: 0000000000000006 [ 336.843965][T17072] RBP: 00007ff3a7aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 336.843977][T17072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.843991][T17072] R13: 0000000000000000 R14: 00007ff3a9665fa0 R15: 00007ffeb1396c28 [ 336.844016][T17072] [ 336.852408][T17039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.063158][T17039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.081777][ T153] hsr_slave_0: left promiscuous mode [ 337.087446][ T153] hsr_slave_1: left promiscuous mode [ 337.162835][ T153] team0 (unregistering): Port device team_slave_1 removed [ 337.187458][ T153] team0 (unregistering): Port device C removed [ 337.305297][T17039] team0: Port device team_slave_0 added [ 337.312084][T17039] team0: Port device team_slave_1 added [ 337.348777][T17098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.357742][T17098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.359878][T17039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.372592][T17039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.398813][T17039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.412364][T17039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.419362][T17039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.445323][T17039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.499518][T17039] hsr_slave_0: entered promiscuous mode [ 337.506210][T17039] hsr_slave_1: entered promiscuous mode [ 337.512590][T17039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.520242][T17039] Cannot create hsr debugfs directory [ 337.822536][T17039] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 337.833419][T17039] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 337.844304][T17039] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 337.854200][T17039] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 337.900930][T17039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.917610][T17039] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.930168][ T4076] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.937360][ T4076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.965538][T17039] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 337.976163][T17039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.001888][ T4076] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.009078][ T4076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.019866][T17116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4741'. [ 338.039687][T17116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17116 comm=+}[@ [ 338.052178][T17116] netlink: 180 bytes leftover after parsing attributes in process `+}[@'. [ 338.097276][T17120] loop2: detected capacity change from 0 to 1024 [ 338.147616][T17039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.315873][T17133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4745'. [ 338.383389][T17142] FAULT_INJECTION: forcing a failure. [ 338.383389][T17142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.396635][T17142] CPU: 1 UID: 0 PID: 17142 Comm: syz.7.4747 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) [ 338.396750][T17142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.396767][T17142] Call Trace: [ 338.396775][T17142] [ 338.396784][T17142] __dump_stack+0x1d/0x30 [ 338.396811][T17142] dump_stack_lvl+0xe8/0x140 [ 338.396881][T17142] dump_stack+0x15/0x1b [ 338.396978][T17142] should_fail_ex+0x265/0x280 [ 338.397035][T17142] should_fail+0xb/0x20 [ 338.397072][T17142] should_fail_usercopy+0x1a/0x20 [ 338.397097][T17142] _copy_from_user+0x1c/0xb0 [ 338.397202][T17142] memdup_user+0x5e/0xd0 [ 338.397234][T17142] __se_sys_kexec_load+0x109/0x160 [ 338.397259][T17142] __x64_sys_kexec_load+0x55/0x70 [ 338.397285][T17142] x64_sys_call+0xa36/0x2fb0 [ 338.397314][T17142] do_syscall_64+0xd2/0x200 [ 338.397361][T17142] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 338.397445][T17142] ? clear_bhb_loop+0x40/0x90 [ 338.397473][T17142] ? clear_bhb_loop+0x40/0x90 [ 338.397561][T17142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.397584][T17142] RIP: 0033:0x7f0f3a08e929 [ 338.397602][T17142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.397622][T17142] RSP: 002b:00007f0f386f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 338.397641][T17142] RAX: ffffffffffffffda RBX: 00007f0f3a2b5fa0 RCX: 00007f0f3a08e929 [ 338.397654][T17142] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 0000000000000000 [ 338.397731][T17142] RBP: 00007f0f386f7090 R08: 0000000000000000 R09: 0000000000000000 [ 338.397748][T17142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.397824][T17142] R13: 0000000000000000 R14: 00007f0f3a2b5fa0 R15: 00007ffeba2cd2d8 [ 338.397850][T17142] [ 338.401309][T17144] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 338.428457][T17137] loop1: detected capacity change from 0 to 2048 [ 338.659770][T17157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.668765][T17157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.677913][T17157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.688049][T17157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.700168][T17039] veth0_vlan: entered promiscuous mode [ 338.720784][T17039] veth1_vlan: entered promiscuous mode [ 338.746239][T17039] veth0_macvtap: entered promiscuous mode [ 338.757849][T17039] veth1_macvtap: entered promiscuous mode [ 338.776992][T17039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.790105][T17039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.800392][T17039] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.809295][T17039] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.818045][T17039] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.826866][T17039] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.836739][T17159] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 338.856213][T17159] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 518 with error 28 [ 338.868694][T17159] EXT4-fs (loop1): This should not happen!! Data will be lost [ 338.868694][T17159] [ 338.878408][T17159] EXT4-fs (loop1): Total free blocks count 0 [ 338.884455][T17159] EXT4-fs (loop1): Free/Dirty block details [ 338.890440][T17159] EXT4-fs (loop1): free_blocks=2415919504 [ 338.896324][T17159] EXT4-fs (loop1): dirty_blocks=8256 [ 338.901647][T17159] EXT4-fs (loop1): Block reservation details [ 338.907914][T17159] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 339.021391][T17165] loop9: detected capacity change from 0 to 512 [ 339.039348][T17165] EXT4-fs: Ignoring removed nomblk_io_submit option [ 339.047376][T17165] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 339.066304][T17165] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 339.081212][T17165] EXT4-fs (loop9): 1 truncate cleaned up [ 339.088870][T17167] loop2: detected capacity change from 0 to 512 [ 339.096129][T17167] ext4: Unknown parameter 'smackfstransmute' [ 339.196756][ T153] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 339.209342][ T153] EXT4-fs (loop1): This should not happen!! Data will be lost [ 339.209342][ T153] [ 339.271513][T17178] netlink: 372 bytes leftover after parsing attributes in process `syz.7.4756'. [ 339.281908][T17178] loop7: detected capacity change from 0 to 128 [ 339.296812][T17178] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 339.345729][T17181] loop9: detected capacity change from 0 to 256 [ 339.352857][T17181] FAT-fs (loop9): bogus number of FAT sectors [ 339.359009][T17181] FAT-fs (loop9): Can't find a valid FAT filesystem [ 339.882357][T17196] loop9: detected capacity change from 0 to 8192 [ 339.955527][T17209] loop1: detected capacity change from 0 to 512 [ 339.974576][T17209] EXT4-fs: Ignoring removed nomblk_io_submit option [ 339.990988][T17209] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 340.064686][T17209] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 340.092389][T17209] EXT4-fs (loop1): 1 truncate cleaned up [ 340.103230][ T153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.123050][T17219] loop2: detected capacity change from 0 to 512 [ 340.156697][T17219] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 340.168354][T17219] EXT4-fs (loop2): 1 truncate cleaned up [ 340.196019][T17196] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 340.203674][T17196] FAT-fs (loop9): Filesystem has been set read-only [ 340.217138][T17217] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 340.229382][ T153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.243791][T17221] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 340.262840][T17233] loop2: detected capacity change from 0 to 512 [ 340.275632][T17233] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4769: bg 0: block 5: invalid block bitmap [ 340.276999][T17196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.290064][T17233] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 340.299933][T17196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.321924][T17233] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4769: invalid indirect mapped block 3 (level 2) [ 340.336513][T17233] EXT4-fs (loop2): 2 truncates cleaned up [ 340.345327][T17193] chnl_net:caif_netlink_parms(): no params data found [ 340.356929][ T153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.409004][T17240] netlink: 'syz.7.4770': attribute type 1 has an invalid length. [ 340.416847][T17240] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4770'. [ 340.461363][ T153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.478429][T17245] netlink: 'syz.2.4769': attribute type 10 has an invalid length. [ 340.500151][T17240] loop7: detected capacity change from 0 to 8192 [ 340.511834][T17245] team0 (unregistering): Port device team_slave_0 removed [ 340.540735][T17245] team0 (unregistering): Port device team_slave_1 removed [ 340.551671][T17240] loop7: p1 p2 p3 p4 [ 340.555930][T17240] loop7: p1 start 51379968 is beyond EOD, truncated [ 340.562642][T17240] loop7: p2 start 2936012800 is beyond EOD, truncated [ 340.569536][T17240] loop7: p3 size 100663552 extends beyond EOD, truncated [ 340.582673][T17240] loop7: p4 size 656640 extends beyond EOD, truncated [ 340.602962][T17193] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.610094][T17193] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.626820][T17193] bridge_slave_0: entered allmulticast mode [ 340.636090][T17193] bridge_slave_0: entered promiscuous mode [ 340.643006][T17193] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.650171][T17193] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.657595][T17193] bridge_slave_1: entered allmulticast mode [ 340.664154][T17193] bridge_slave_1: entered promiscuous mode [ 340.690118][T17193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.725835][T17250] netlink: 'syz.7.4772': attribute type 1 has an invalid length. [ 340.726207][T17193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.733655][T17250] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4772'. [ 340.767028][ T153] dummy0: left allmulticast mode [ 340.773365][ T153] bridge0: port 3(dummy0) entered disabled state [ 340.782015][T17250] 9pnet_virtio: no channels available for device 127.0.0.1 [ 340.791478][ T153] bridge_slave_1: left allmulticast mode [ 340.797196][ T153] bridge_slave_1: left promiscuous mode [ 340.803021][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.814032][ T153] bridge_slave_0: left allmulticast mode [ 340.819740][ T153] bridge_slave_0: left promiscuous mode [ 340.825630][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.027961][T17251] loop7: detected capacity change from 0 to 8192 [ 341.077074][ T153] team0: Port device bridge1 removed [ 341.097975][T17251] loop7: p1 p2 p3 p4 [ 341.102027][T17251] loop7: p1 start 51379968 is beyond EOD, truncated [ 341.108673][T17251] loop7: p2 start 2936012800 is beyond EOD, truncated [ 341.115499][T17251] loop7: p3 size 100663552 extends beyond EOD, truncated [ 341.177411][T17251] loop7: p4 size 656640 extends beyond EOD, truncated [ 341.196699][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.219267][ T153] bond0 (unregistering): Released all slaves [ 341.235944][T17193] team0: Port device team_slave_0 added [ 341.251361][T17193] team0: Port device team_slave_1 added [ 341.281672][T17262] loop1: detected capacity change from 0 to 512 [ 341.296684][T17262] EXT4-fs: Ignoring removed nomblk_io_submit option [ 341.340634][T17193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.347673][T17193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.373689][T17193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.391428][T17262] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 341.473213][T17262] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 341.516368][T17193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.523347][T17193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.550005][T17193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.564564][T17262] EXT4-fs (loop1): 1 truncate cleaned up [ 341.607515][T17266] FAULT_INJECTION: forcing a failure. [ 341.607515][T17266] name failslab, interval 1, probability 0, space 0, times 0 [ 341.620230][T17266] CPU: 1 UID: 0 PID: 17266 Comm: syz.2.4776 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) [ 341.620263][T17266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.620278][T17266] Call Trace: [ 341.620285][T17266] [ 341.620293][T17266] __dump_stack+0x1d/0x30 [ 341.620376][T17266] dump_stack_lvl+0xe8/0x140 [ 341.620417][T17266] dump_stack+0x15/0x1b [ 341.620462][T17266] should_fail_ex+0x265/0x280 [ 341.620497][T17266] ? __hw_addr_add_ex+0x162/0x440 [ 341.620530][T17266] should_failslab+0x8c/0xb0 [ 341.620557][T17266] __kmalloc_cache_noprof+0x4c/0x320 [ 341.620594][T17266] __hw_addr_add_ex+0x162/0x440 [ 341.620658][T17266] dev_addr_init+0xb1/0x120 [ 341.620698][T17266] alloc_netdev_mqs+0x212/0xab0 [ 341.620770][T17266] ? __pfx_br_dev_setup+0x10/0x10 [ 341.620843][T17266] rtnl_create_link+0x239/0x710 [ 341.620868][T17266] rtnl_newlink_create+0x14c/0x620 [ 341.620903][T17266] ? __list_del_entry_valid_or_report+0x65/0x130 [ 341.620972][T17266] rtnl_newlink+0xf29/0x12d0 [ 341.621007][T17266] ? bpf_trace_run3+0x12c/0x1d0 [ 341.621034][T17266] ? __memcg_slab_free_hook+0x135/0x230 [ 341.621091][T17266] ? __kfree_skb+0x109/0x150 [ 341.621109][T17266] ? __rcu_read_unlock+0x4f/0x70 [ 341.621161][T17266] ? avc_has_perm_noaudit+0x1b1/0x200 [ 341.621200][T17266] ? selinux_capable+0x1f9/0x270 [ 341.621243][T17266] ? security_capable+0x83/0x90 [ 341.621277][T17266] ? ns_capable+0x7d/0xb0 [ 341.621306][T17266] ? __pfx_rtnl_newlink+0x10/0x10 [ 341.621349][T17266] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 341.621390][T17266] netlink_rcv_skb+0x120/0x220 [ 341.621412][T17266] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 341.621466][T17266] rtnetlink_rcv+0x1c/0x30 [ 341.621503][T17266] netlink_unicast+0x5a1/0x670 [ 341.621564][T17266] netlink_sendmsg+0x58b/0x6b0 [ 341.621589][T17266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.621656][T17266] __sock_sendmsg+0x142/0x180 [ 341.621686][T17266] ____sys_sendmsg+0x31e/0x4e0 [ 341.621840][T17266] ___sys_sendmsg+0x17b/0x1d0 [ 341.621910][T17266] __x64_sys_sendmsg+0xd4/0x160 [ 341.622007][T17266] x64_sys_call+0x2999/0x2fb0 [ 341.622026][T17266] do_syscall_64+0xd2/0x200 [ 341.622059][T17266] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 341.622089][T17266] ? clear_bhb_loop+0x40/0x90 [ 341.622111][T17266] ? clear_bhb_loop+0x40/0x90 [ 341.622136][T17266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.622168][T17266] RIP: 0033:0x7f35ddcfe929 [ 341.622184][T17266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.622266][T17266] RSP: 002b:00007f35dc367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.622285][T17266] RAX: ffffffffffffffda RBX: 00007f35ddf25fa0 RCX: 00007f35ddcfe929 [ 341.622298][T17266] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 341.622311][T17266] RBP: 00007f35dc367090 R08: 0000000000000000 R09: 0000000000000000 [ 341.622324][T17266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.622337][T17266] R13: 0000000000000000 R14: 00007f35ddf25fa0 R15: 00007ffd62535658 [ 341.622383][T17266] [ 341.736745][T17193] hsr_slave_0: entered promiscuous mode [ 341.917531][T17250] syz.7.4772 (17250) used greatest stack depth: 5984 bytes left [ 341.921336][T17193] hsr_slave_1: entered promiscuous mode [ 341.966596][T17193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.974559][T17193] Cannot create hsr debugfs directory [ 341.993882][ T153] hsr_slave_0: left promiscuous mode [ 342.007588][ T153] hsr_slave_1: left promiscuous mode [ 342.013943][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.021501][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.037762][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.046123][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.056477][ T153] veth1_macvtap: left promiscuous mode [ 342.061012][ T29] kauditd_printk_skb: 1419 callbacks suppressed [ 342.061051][ T29] audit: type=1400 audit(1749745490.139:49235): avc: denied { bind } for pid=17274 comm="syz.7.4779" lport=37882 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 342.061967][ T153] veth0_macvtap: left promiscuous mode [ 342.068251][ T29] audit: type=1400 audit(1749745490.139:49236): avc: denied { node_bind } for pid=17274 comm="syz.7.4779" saddr=224.0.0.1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 342.103934][ T153] veth1_vlan: left promiscuous mode [ 342.126125][ T153] veth0_vlan: left promiscuous mode [ 342.177943][ T29] audit: type=1400 audit(1749745490.259:49237): avc: denied { read } for pid=17274 comm="syz.7.4779" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 342.201354][ T29] audit: type=1400 audit(1749745490.259:49238): avc: denied { open } for pid=17274 comm="syz.7.4779" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 342.238268][ T29] audit: type=1326 audit(1749745490.319:49239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17277 comm="syz.1.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff3a94358e7 code=0x7ffc0000 [ 342.261885][ T29] audit: type=1326 audit(1749745490.319:49240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17277 comm="syz.1.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3a93dab19 code=0x7ffc0000 [ 342.285477][ T29] audit: type=1326 audit(1749745490.319:49241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17277 comm="syz.1.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff3a94358e7 code=0x7ffc0000 [ 342.285581][T17284] loop7: detected capacity change from 0 to 8192 [ 342.308975][ T29] audit: type=1326 audit(1749745490.319:49242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17277 comm="syz.1.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3a93dab19 code=0x7ffc0000 [ 342.309014][ T29] audit: type=1326 audit(1749745490.319:49243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17277 comm="syz.1.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff3a94358e7 code=0x7ffc0000 [ 342.309045][ T29] audit: type=1326 audit(1749745490.319:49244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17277 comm="syz.1.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3a93dab19 code=0x7ffc0000 [ 342.405106][ T4091] ================================================================== [ 342.413256][ T4091] BUG: KCSAN: data-race in batadv_hard_if_event / batadv_mcast_mla_update [ 342.421803][ T4091] [ 342.424143][ T4091] write to 0xffff888119548010 of 1 bytes by task 153 on cpu 1: [ 342.431702][ T4091] batadv_hard_if_event+0x76a/0x1070 [ 342.437028][ T4091] raw_notifier_call_chain+0x6c/0x1b0 [ 342.442443][ T4091] call_netdevice_notifiers_info+0xae/0x100 [ 342.448386][ T4091] unregister_netdevice_many_notify+0xd9d/0x1690 [ 342.454736][ T4091] default_device_exit_batch+0x50c/0x560 [ 342.460391][ T4091] ops_undo_list+0x2c0/0x410 [ 342.465003][ T4091] cleanup_net+0x2de/0x4d0 [ 342.469455][ T4091] process_scheduled_works+0x4cb/0x9d0 [ 342.474931][ T4091] worker_thread+0x582/0x770 [ 342.479537][ T4091] kthread+0x486/0x510 [ 342.483612][ T4091] ret_from_fork+0xda/0x150 [ 342.488133][ T4091] ret_from_fork_asm+0x1a/0x30 [ 342.492906][ T4091] [ 342.495234][ T4091] read to 0xffff888119548010 of 1 bytes by task 4091 on cpu 0: [ 342.502782][ T4091] batadv_mcast_mla_update+0x29f/0x1850 [ 342.508349][ T4091] process_scheduled_works+0x4cb/0x9d0 [ 342.513835][ T4091] worker_thread+0x582/0x770 [ 342.518453][ T4091] kthread+0x486/0x510 [ 342.522533][ T4091] ret_from_fork+0xda/0x150 [ 342.527054][ T4091] ret_from_fork_asm+0x1a/0x30 [ 342.531852][ T4091] [ 342.534181][ T4091] value changed: 0x00 -> 0x01 [ 342.538860][ T4091] [ 342.541191][ T4091] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc [ 342.547353][ T4091] CPU: 0 UID: 0 PID: 4091 Comm: kworker/u8:22 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(voluntary) [ 342.560040][ T4091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.570116][ T4091] Workqueue: bat_events batadv_mcast_mla_update [ 342.576382][ T4091] ================================================================== [ 342.587124][ T153] team0 (unregistering): Port device team_slave_1 removed [ 342.599513][ T153] team0 (unregistering): Port device team_slave_0 removed [ 342.625522][ T4076] smc: removing ib device syz1 Connection to 10.128.0.76 closed by remote host. [ 342.700427][ T1030] syz1: Port: 1 Link DOWN [ 343.101811][ T153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.136947][ T153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.196321][ T153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.266254][ T153] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.349714][ T153] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.395884][ T153] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.445894][ T153] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.516241][ T153] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.587876][ T153] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.615696][ T153] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.666056][ T153] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.715511][ T153] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.800076][ T153] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.855992][ T153] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.916284][ T153] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.956282][ T153] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.006625][ T153] bridge_slave_1: left allmulticast mode [ 344.012409][ T153] bridge_slave_1: left promiscuous mode [ 344.018135][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.025792][ T153] bridge_slave_0: left allmulticast mode [ 344.031452][ T153] bridge_slave_0: left promiscuous mode [ 344.037263][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.046284][ T153] bridge_slave_1: left allmulticast mode [ 344.051947][ T153] bridge_slave_1: left promiscuous mode [ 344.057700][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.065451][ T153] bridge_slave_0: left allmulticast mode [ 344.071119][ T153] bridge_slave_0: left promiscuous mode [ 344.076867][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.085988][ T153] bridge_slave_1: left allmulticast mode [ 344.091636][ T153] bridge_slave_1: left promiscuous mode [ 344.098005][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.105733][ T153] bridge_slave_0: left allmulticast mode [ 344.111453][ T153] bridge_slave_0: left promiscuous mode [ 344.117157][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.125920][ T153] bridge_slave_1: left allmulticast mode [ 344.131639][ T153] bridge_slave_1: left promiscuous mode [ 344.138063][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.145852][ T153] bridge_slave_0: left allmulticast mode [ 344.151490][ T153] bridge_slave_0: left promiscuous mode [ 344.157900][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.325592][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.335499][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.344876][ T153] bond0 (unregistering): Released all slaves [ 344.425414][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.435019][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.444449][ T153] bond0 (unregistering): Released all slaves [ 344.545515][ T153] bond0 (unregistering): (slave lo): Releasing backup interface [ 344.553443][ T153] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 344.564530][ T153] bond0 (unregistering): Released all slaves [ 344.615587][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.625148][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.634288][ T153] bond0 (unregistering): Released all slaves [ 344.706206][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.716159][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.725908][ T153] bond0 (unregistering): Released all slaves [ 344.784600][ T153] hsr_slave_0: left promiscuous mode [ 344.790246][ T153] hsr_slave_1: left promiscuous mode [ 344.796026][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.803551][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.811098][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.818523][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.827975][ T153] hsr_slave_0: left promiscuous mode [ 344.833829][ T153] hsr_slave_1: left promiscuous mode [ 344.839489][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.846949][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.854610][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.862017][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.871155][ T153] hsr_slave_0: left promiscuous mode [ 344.876827][ T153] hsr_slave_1: left promiscuous mode [ 344.882401][ T153] hsr_slave_0: left promiscuous mode [ 344.888704][ T153] hsr_slave_1: left promiscuous mode [ 344.894456][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.901906][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.911205][ T153] hsr_slave_0: left promiscuous mode [ 344.916839][ T153] hsr_slave_1: left promiscuous mode [ 344.922381][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.929818][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.937377][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.945005][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.961557][ T153] veth0_macvtap: left promiscuous mode [ 344.967181][ T153] veth1_vlan: left promiscuous mode [ 344.972403][ T153] veth0_vlan: left promiscuous mode [ 344.978192][ T153] veth1_macvtap: left promiscuous mode [ 344.983737][ T153] veth0_macvtap: left promiscuous mode [ 344.989302][ T153] veth1_vlan: left promiscuous mode [ 344.994723][ T153] veth0_vlan: left promiscuous mode [ 345.000502][ T153] veth1_macvtap: left promiscuous mode [ 345.006056][ T153] veth0_macvtap: left promiscuous mode [ 345.011624][ T153] veth1_vlan: left promiscuous mode [ 345.016914][ T153] veth0_vlan: left promiscuous mode [ 345.022557][ T153] veth1_macvtap: left promiscuous mode [ 345.028185][ T153] veth0_macvtap: left promiscuous mode [ 345.033693][ T153] veth1_vlan: left promiscuous mode [ 345.038969][ T153] veth0_vlan: left promiscuous mode [ 345.237642][ T153] team0 (unregistering): Port device team_slave_1 removed [ 345.246800][ T153] team0 (unregistering): Port device team_slave_0 removed [ 345.334576][ T153] team0 (unregistering): Port device team_slave_1 removed [ 345.344202][ T153] team0 (unregistering): Port device team_slave_0 removed [ 345.395946][ T153] team0 (unregistering): Port device team_slave_1 removed [ 345.405352][ T153] team0 (unregistering): Port device team_slave_0 removed [ 346.475025][ T153] IPVS: stop unused estimator thread 0...