last executing test programs: 3m34.247658266s ago: executing program 32 (id=1282): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000c28000/0x1000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x48, 0x18}) r3 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r3, 0x7000000) r4 = dup(r3) preadv2(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r9}, &(0x7f0000000480), &(0x7f00000004c0)='%pK \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000a80)='kfree\x00', r8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x140e, 0x20, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0xc894) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xc00, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 3m19.40534589s ago: executing program 33 (id=1559): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) bpf$MAP_CREATE(0x0, 0x0, 0x48) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$USBDEVFS_CONNECTINFO(r1, 0x8004550f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a01040000000000001d000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180f6fffffc08000140000000000900010073797a30000000000900020073797a32"], 0x88}}, 0x0) eventfd2(0x1, 0x80000) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) write$P9_RVERSION(r3, &(0x7f0000000240)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.L'}, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000030000000020000000b0000000000000200000005ff070000000000000300000d020000000700000008000004050000000300000010000000ffffffff002e300061616161303000"], &(0x7f0000000f40)=""/4089, 0x53, 0xff9, 0x6}, 0x28) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req3={0x80000001, 0x3ff, 0xb4, 0x80000001, 0xa6e3, 0x76b6, 0x40}, 0x1c) 2m29.673662019s ago: executing program 34 (id=2533): bpf$MAP_CREATE(0x0, 0x0, 0x1f) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x104c002, &(0x7f0000000380)={[{@commit={'commit', 0x3d, 0x8}}, {@acl}, {@max_batch_time={'max_batch_time', 0x3d, 0x80000000}}, {@errors_remount}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}]}, 0x23, 0x60a, &(0x7f0000000d40)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff37000000000008000000b7030000000000f0850000002d000000953e19611ee0240b57d3b630261b5c4fcf2f07fcb6ff00000079570f513e280513263132fed36a700d1affeaa741bc4bd3056f56817ba7084218e9ee0c2e30b94b1f6e36c73714257587dbe2ba4b00f9db818f0d187655d7da217fb01087f12149a3eb1f3c798caecf62a9066d0ef219e79ad9c82a2c24a9f0791706adeb60d8f4c177746512e24074e88d8c309ab83c837741a833a4008ced45702de893f71e37e42a108b07"], &(0x7f00000006c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='sys_enter\x00'}, 0x18) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) getpeername(r3, 0x0, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000180)={0xb, 0x0, 0x3, 0x7fff}) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xcc38, 0x40ffffffff}, 0x100a4c, 0x5, 0x10000, 0x4, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)}], 0x1}, 0x1) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) flock(0xffffffffffffffff, 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kvm_set_irq\x00', r6}, 0x16) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r7, 0x1) flock(r7, 0x2) dup3(r7, 0xffffffffffffffff, 0x0) 2m1.119585838s ago: executing program 0 (id=3168): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) socket(0x10, 0x803, 0x0) io_uring_setup(0x6ca7, &(0x7f00000001c0)={0x0, 0xa99f, 0x2, 0x0, 0x3d9}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2m1.102896728s ago: executing program 0 (id=3169): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000900)='kfree\x00', r2}, 0x18) r3 = mq_open(&(0x7f0000000740)='ttl\x00', 0x40, 0x106, &(0x7f0000000840)={0x40, 0x714, 0x1, 0x347a033a}) mq_getsetattr(r3, &(0x7f0000000880)={0x4383, 0xffffffffffffffff, 0x7ff}, &(0x7f00000008c0)) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="090000008100000003000000ffffffff16010000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001140)=ANY=[@ANYBLOB="5491a7639968ac600000", @ANYRES16=r5, @ANYBLOB="0100140000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000000000d0001007564703a73797a3200000000"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x10000, 0x4b) r7 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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") statx(r7, &(0x7f0000000040)='./file1\x00', 0x2000, 0x4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=r8], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x24}, 0x94) fchownat(r6, &(0x7f0000000700)='./file0\x00', 0xee01, r8, 0x100) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x250, 0x700001b, 0x148, 0x0, 0x148, 0x350, 0x206, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'veth0\x00', {0xff}, {}, 0x0, 0x0, 0x2e}, 0x1ea, 0x1e8, 0x250, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0xb32, 0x1ff, 0x1, 0x1, 0x1, 0x0, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x0, 0x0, 0x2, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0xfff, 0x80, 0xa, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r10, &(0x7f0000000bc0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x50}}, 0x40) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r11}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x26, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYRES16=r2, @ANYRES16=r0], 0x548}, 0x1, 0x0, 0x0, 0x20004086}, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r12, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r12) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 2m0.98643872s ago: executing program 0 (id=3170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m0.98556736s ago: executing program 0 (id=3171): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17e) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="4754414347747073d9090a67a17f18fae853103da6556ca08483e23d06b93864d088f0ef70a164fc8d21bcc1c66a73fc53597edfca2e573f1c2506f960656c96e8c6f7f89a79898616ded0810cbd5e31efe8e32600fce9ac564a7807885a17c02236207d809a647caf9764dfa3da705a1e009c4629bd02b208e1f98afd01980abba0361e79aa376c9ae80ceb5161e6"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r7}, 0x18) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r8, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 2m0.867580052s ago: executing program 0 (id=3174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x2, 0x0, &(0x7f0000000480)) timer_create(0x0, 0x0, &(0x7f0000000480)=0x0) timer_settime(r1, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_delete(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c000440000010c6f7a0b5ec0c0005"], 0xec}}, 0x8890) 2m0.040844225s ago: executing program 0 (id=3181): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000002fe0500002015000600142603600e1209000a0000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83100043370e9701008400002d3bc75dc0bb9dd33e438c0000000000000000", 0xd8}], 0x1}, 0x880) 2m0.040599705s ago: executing program 35 (id=3181): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000002fe0500002015000600142603600e1209000a0000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83100043370e9701008400002d3bc75dc0bb9dd33e438c0000000000000000", 0xd8}], 0x1}, 0x880) 1m53.084952544s ago: executing program 7 (id=3306): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x97ffffffffffffff) 1m53.024293205s ago: executing program 7 (id=3307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a0003070000000000000000de3f0005001a00ac1414bb000000000000000000000000ff0100000000000000000000000000010a0004"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x16, &(0x7f0000000540)=@raw=[@exit, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x3, 0x3, 0x3, 0x0, 0x0, 0x30, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000a00)=""/4096, 0x1f00, 0x44, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x0, 0x8, 0xffffffd9}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000400)=[{0x1, 0x3, 0x4, 0x9}, {0x2, 0x1, 0x4, 0x9}, {0x2, 0x3, 0x4, 0xc}, {0x5, 0x4, 0x9, 0x3}]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x18) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x30, r7, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0xc7, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r7, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x12}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000800}, 0x20006080) 1m53.023555775s ago: executing program 7 (id=3308): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) shutdown(r0, 0x1) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x4d}}], 0x30}, 0x0) 1m52.993201026s ago: executing program 7 (id=3309): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000791010000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x300, 0x20, 0x1c}, 0x18) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x92040) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000ac0)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffd}, 0x66) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@dioread_nolock}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvVNUfAPDvnU5Ly+NXfogPELSKRuKjpeUhCzcaTVxoNNEFxlWdFoIM1NCaCCGKLjDGhSFxb1ya+Be40o1RVyZudW9IjGEDuhpzZu5tyzBT+5h2ivP5JBfOufcO53zvuWfm3HNmCKBnjaQ/sojtEfFrRAxHRKn5hJHGXzevX6r8df1SJYta7bU/s/SyuHH9UiX/J+pbsq2xo1bL81talHvlzYjJanX6fJ4fmzv7ztjshYtPnT47eWr61PS5iePHjxzeP3Bs4mhH4kxx3dj7/sy+PS++cfXlyomrb/34darv9vx4EUcnjTSubkuPdrqwLtuxKJ2Vu1gRViS1W2qu/nr/H46+GJo/NhwvfNTVygHrqlar1Vp9Pucu14D/sCy6XQOgO4oP+vT8W2wbNPTYFP54tvEAlOK+mW+NI+X5eZD+pufbThqMiBOX//4ibbFO8xAAAIt9m8Y/T7Ya/5XinkXn/S9fQ9kZEf+PiF0RcVdE7I6IuyPq594bEfetsPzmFZLbxz+la6sKbJnS+O+ZfG3r1vHf/CrYzr48t6Mef3928nR1+lB+TQ5G/5aUH4/mhbMF3z3/y2fN+z7Np9lHFo3/0pbKL8aCeT2ulZsm6KYm5yY7EnyK/8OIveVW8WdRLONkEbEnIvausozTj3+1r92xf49/CR1YZ6p9GfFYo/0vR1P8hazt+uT408cmjo4NRnX60FhxV9zup5+vvNqu/DXF3wGp/be2vP8b8adnxGwwYvbCxTP19drZlZdx5bePK1mbY7tXef8PZK/X0wP5vvcm5+bOj0cMZC+l7NAt+ycWXlvki/NT/AcPtO7/uxqPZ/UrcX9EpJt4f0Q8EBEP5m33UEQ8HBEHloj/h+ceebvdsfbtv8SsfAel+KeWaP/0lpdSC+2/8kTfme+/aVd+bVntf6SeOpjvWc7733IruJZrBwAAAHeKUv078FlpdD5dKo2ONr7Dvzu2lqozs3NPnJx599xU47vyO6O/VMx0DS+aDx3P54aL/ERT/nA+b/x531A9P1qZqU51O3jocdva9P/k975u1w5Yd36vBb1L/4fepf9D79L/oXfp/9CjBlrv/mCj6wF0xco//wfXpR7AxjP+h96l/0Pv0v+hJ7X9bXxpTT/5v1MT5c1RjZaJoc1RjSIRpU1Rjc4lXvmk0SU2S32KRHnZ/5nFKhNbWh7q9jsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wTAAD//0635nc=") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) inotify_init1(0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0a0000000100000008000000080000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 1m52.899322307s ago: executing program 7 (id=3310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a00000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m49.883303924s ago: executing program 1 (id=3356): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000000, 0x0, 0x0, 0x2) 1m49.882397424s ago: executing program 1 (id=3358): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r4, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x1000000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 1m49.060008977s ago: executing program 1 (id=3371): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = syz_open_pts(0xffffffffffffffff, 0x40) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000001c0)) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x140, 0x140, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x4, &(0x7f0000000680), {[{{@ip={@local, @remote, 0xffffffff, 0x0, 'wg2\x00', 'ip6gre0\x00', {0xff}, {}, 0x2, 0x2, 0x28}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x6}, {0x1, 0x2, 0x2}, {0x4, 0x6, 0x3}, 0x7fffffff, 0x4}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x0, 0x0, 0x3, 0x1, 0x6, 0x8], 0x6}, {0x2, [0x0, 0x6, 0x4, 0x3, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) kexec_load(0x9, 0x6, &(0x7f0000000e00)=[{&(0x7f0000000a00), 0x0, 0x3, 0x5}, {&(0x7f0000000a40)="fa7b509d62bd4a4190a987285ee3d4031bd3e31e8b5c67427661d43bd9d6529526bed81e0c39dddfeedc1051c39ed949f2d2c111bd27c096e0cbbe571d05ce10002276068256d4d93ab36c74f8e589167b404f5bf48a28", 0x57, 0x5, 0xe}, {&(0x7f0000000ac0)="8e9d0acbafefdbbb18e84434f6312644c7c0200a2c65fd685865efcefe4baa19a147ed496d84c3d97bc8a62bd969ff6a1fe6566595a3369e4057822a31aa0620ba5b37ea73e173a533b361a71ab30167d987dcdd9032679cff2303ea7d14edd3e53c0be475a78154ef38bf168f5f8058a7d17179780e646b2aa48e0f9c9008d4ca6fcd13f8b553f66ca23da9974379ae50e99ff77fcab43b62b67365ed5c25", 0x9f, 0x0, 0x1e}, {&(0x7f0000000b80)="694fd12ff35d08ae143a153d4bc1684fc2cf987fd8adf02cd953b4f4f0f7eb6d878e604733e0288f07ceb6e306a6fa2b94997597b9b0265f61778bb917aec24c48071ce98362c6900980bc54119362b7a3e7119ec7898d950730348378cee848e3407fc4b523a3fce84b15e157fe4839f9ee908f2b9a156bd60c3275bbe9942a983d2681da2d8e70e79cda537300ad647baddad8a1039a938940b62a6390284c912cdbc75421f25645db5e1110c45a547338c7cd", 0xb4, 0x2, 0x8000000000000001}, {&(0x7f0000000c40)="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", 0xff, 0x1, 0x5}, {&(0x7f0000000d40)="853723278b49a9a73c3f6e137c92a62157f89c7c34e94bb897014931e39aa9d4bea8cf4578384b4d81ad26a011cbb2bb11705a4a747afb9fd1d5f03bddcc98d21bf0da9561d92e5897362797a34fe539b6ff850fed4cc0f14d7ecf8c0666660b9f8101a630c3d563037b6d74671d3e469bd1a3866d7f3f66d8e4656033ba8ec63968cee5a5286e26027fc138f6fd534f77a7f7d86f0c99c899dcae7cb8914fcdf4dba035", 0xa4, 0x6}], 0x150000) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', 0x410281, 0x2d) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000080)={@dev, @empty}, &(0x7f00000001c0)=0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="c62d00000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050007000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, r5, 0x5, 0x0, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}]]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000f40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="b4110000", @ANYRES16=r4, @ANYBLOB="00002abd7000fddbdf256300000008000300", @ANYRES32=r6, @ANYBLOB="0c009900001000004f000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r1, 0x5, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x0, 0x34, 0xfffffe09}, 0x28) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000000040)=@generic={0x1, 0xffffffffffffff6f, 0x4}) syz_clone3(&(0x7f0000000600)={0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000300)=0x0, {0x7}, &(0x7f0000000340)=""/75, 0x4b, &(0x7f00000003c0)=""/234, &(0x7f00000004c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0xa}, 0x58) syz_open_procfs(r8, &(0x7f0000000500)='net/rfcomm\x00') openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) 1m48.87266415s ago: executing program 1 (id=3372): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000006000000000000f183850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r1 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f00000003c0)={0x0, "42f1e9cf22a003466eaddbc02e857eaef9bb3d505383f677bb9acefc83cfe4f4759d48ae08e379a6e0d7cfc223b8aac78d2b50f8eea9f422316c30cbdcdc875f", 0x1b}, 0x48, 0xfffffffffffffffa) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='.dead\x00', &(0x7f0000000300)={'syz', 0x3}, r1) r2 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) ptrace$cont(0x1f, r2, 0x3, 0xb0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x20, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2f73134d07bf7005a050000f200ffffff070000007fff000000000800000021", [0x10]}) unlinkat(0xffffffffffffff9c, 0x0, 0x200) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) 1m48.755402302s ago: executing program 7 (id=3373): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x1ffffc86, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES8=r5], &(0x7f0000000180)='GPL\x00', 0x101, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 1m48.754870152s ago: executing program 36 (id=3373): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x1ffffc86, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRES8=r5], &(0x7f0000000180)='GPL\x00', 0x101, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 1m48.733967012s ago: executing program 1 (id=3375): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x38, 0xc51a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f00003e2000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, 0xffffffffffffffff, 0x12000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000040)) r1 = creat(0x0, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_mrelease(0xffffffffffffffff, 0x0) (fail_nth: 1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m48.672762823s ago: executing program 1 (id=3376): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) shutdown(0xffffffffffffffff, 0x1) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x4d}}], 0x30}, 0x0) 1m48.656617803s ago: executing program 37 (id=3376): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) shutdown(0xffffffffffffffff, 0x1) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x4d}}], 0x30}, 0x0) 1m24.353546075s ago: executing program 3 (id=3823): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x15, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xb}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x58, 0x2d, &(0x7f0000000140)=""/45, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x0, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r0, r0, r0, r0, r0, r0], &(0x7f0000000600)=[{0x1, 0x2, 0xb}, {0x4, 0x2, 0x10, 0x8}, {0x2, 0x1, 0x6, 0x2}, {0x1, 0x4, 0xd, 0x6}], 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='cachefiles_mkdir\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r2 = open(&(0x7f0000000080)='./mnt\x00', 0x1e7942, 0x1c0) preadv2(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/11, 0xb}], 0x1, 0x0, 0x0, 0x1f) 1m24.272578026s ago: executing program 3 (id=3825): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000) (fail_nth: 4) 1m24.01069599s ago: executing program 3 (id=3829): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$getflags(r2, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='leases_conflict\x00', r3}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 1m23.072527605s ago: executing program 3 (id=3837): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@auto_da_alloc}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x7}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x40042, 0x8) open(0x0, 0x400, 0x43) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000300)={0x17c04, 0xffffffffffffffff, 0x8001, 0x100000001, 0x0, 0xdc}) socket$kcm(0x10, 0x400000002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fchmod(r4, 0x148) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x3, 0x0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000100000000000000000000000018110000", @ANYRES8=r6, @ANYRESHEX=0x0, @ANYRES64=r6, @ANYRES8=r0], &(0x7f0000001dc0)='GPL\x00', 0x0, 0xfffffea2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) socketpair(0x25, 0x2, 0xfffffbce, &(0x7f00000002c0)) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c1400000011000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_route(0x10, 0x3, 0x0) dup3(r10, r9, 0x80000) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000040)=0x2) 1m22.988561956s ago: executing program 3 (id=3839): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0x182b, 0x4) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 1m22.868306018s ago: executing program 3 (id=3842): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4bb, &(0x7f0000000980)="$eJzs3MtrHVUYAPBvJo++0ibWWu1Lo1UMPpImrdqFCxUFBQVBF3UZk7TW3jbSRLAlaCpSl1JwLy4F/wJ3bkRdiOBWwaUUigahqavIzJ1pb5Kb5CZNctvk94ObOWee55uZc++ZOZkJYNPqzv4kER0R8XtEdFazs2forg6mpyaGbkxNDCUxM/PW30k+3/WpiaFy1nK5HUWmJ41IP0vihWT+dscuXDwzWKmMnC/yfeNnP+gbu3Dx6dNnB0+NdMS5gePHjx3tf+7ZgWdWJc4sruv7Px49uO/Vd668MXTiyrs/fZsVa++h6vTaOJZ0o05AdXRne+2fmdzcaY8to+x3g5016aS1iQVhWVoiIjtcbXn974yWuHXwOuOVT5taOGBNZb9NWxaePDkDbGBJNLsEQHOUP/TZ9W/5Waemxx3h2osR7UV6empiaPpm/K2RFuPb1nD73RFxYvK/r7JPLPc+BADACuRtm6fqtf/S2JsPq30du4o+lK6IuCcidkfEvRGxJyLui8jnvT/a44HqwjOdDW6/e05+fvsnvVq3zKska/89X9P2m66Jvxh0tRS5nXn8bcnJ05WRI8U+6Ym2LVm+f5FtfP/yb18sNK22/Zd9su2XbcGiAFdbyxt0k9XB8OD44GrthGuXIva31os/udkTkJ0B+yJi//JWvatMnH7im4MLzbR0/ItYhX6mma8jHq8e/8mYE38pmdc/eWqkpn+yb2tURo70lWfFfD//evnNItk+d9ptxb8KsuO/ffb5X0y5VAw7/02q/bVtUamMnB9b/jYu//H5gtc0yzr/C9n53568nfdZ//JeddxHg+Pj5/sj2pPX83y5o/PxA7eWLfPl/Fn8PYfr1//dxTJZ/AciIjuJD0XEgxHxUFH2hyPikYg4vEj8P7706PuLxJ9EEk09/sN1v/+SiK15oiup7a9fQaLlzA/fLdRj3tjxP5Z/9fUUY/LvvyU0WsDb34MAAABw50sjoiOStLea7u6INO3trf4P/57YnlZGx8afPDn64bnh6jMCXdGWlne6Omvuh/Ynxc3JIj9Q3Csupx8t7ht/2bItz/cOjVaGmxw7bHY7Ztf/KOt/5q+WZpcOWHOe14LNa279T5tUDmD9Lfb7X17WuxaAjalO/d/WjHIA68/1P2xe9er/J3Py2v+wMc2v/3/WeWUdsBE13v5/7YAbA7CxuP6HzUv9h02p0af4y/cprPglALMS5cMCK1/P1oaf8F8iMXmbLzdYQaJ7TdZcHqG1LPy2uDUm0lVb8+R67fm7N5HVmJUsHrsafxfG7ESdl9UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADchf4PAAD//xsF4aM=") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) clock_getres(0x1, &(0x7f0000001d80)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r2, r5, 0x33, 0x0, @void}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) r8 = open_tree(r0, &(0x7f0000000640)='./file0\x00', 0x9100) r9 = signalfd4(r3, &(0x7f0000000600)={[0x2a1f]}, 0x8, 0x1000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xa, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x446, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x9c}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, &(0x7f0000000600), 0x41100, 0x0, '\x00', r4, 0x25, r8, 0x8, &(0x7f0000000680)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x7, 0xfffffff8, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[r1, r1, r1, r1, r9], &(0x7f0000000780)=[{0x5, 0x4, 0x8, 0x4}, {0x1, 0x5, 0xf, 0x3}, {0x5, 0x1, 0x9, 0x5}, {0x4, 0x4, 0x2, 0x5}, {0x2, 0x3, 0x2, 0x5}], 0x10, 0x6}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) pipe(&(0x7f0000000300)) r11 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000003c0)={0x60, r12, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x4}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4100}, 0x20000000) fallocate(r11, 0x0, 0x0, 0x1000f4) 1m22.831863169s ago: executing program 38 (id=3842): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4bb, &(0x7f0000000980)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) clock_getres(0x1, &(0x7f0000001d80)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r2, r5, 0x33, 0x0, @void}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) r8 = open_tree(r0, &(0x7f0000000640)='./file0\x00', 0x9100) r9 = signalfd4(r3, &(0x7f0000000600)={[0x2a1f]}, 0x8, 0x1000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xa, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x446, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x9c}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, &(0x7f0000000600), 0x41100, 0x0, '\x00', r4, 0x25, r8, 0x8, &(0x7f0000000680)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x7, 0xfffffff8, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[r1, r1, r1, r1, r9], &(0x7f0000000780)=[{0x5, 0x4, 0x8, 0x4}, {0x1, 0x5, 0xf, 0x3}, {0x5, 0x1, 0x9, 0x5}, {0x4, 0x4, 0x2, 0x5}, {0x2, 0x3, 0x2, 0x5}], 0x10, 0x6}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) pipe(&(0x7f0000000300)) r11 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000003c0)={0x60, r12, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x4}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4100}, 0x20000000) fallocate(r11, 0x0, 0x0, 0x1000f4) 1m11.312338211s ago: executing program 5 (id=4031): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r3, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xe2a4, 0x1}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001080)={'syztnl2\x00', &(0x7f0000000fc0)={'tunl0\x00', 0x0, 0x8000, 0x8, 0x39b7, 0x0, {{0x23, 0x4, 0x0, 0xa, 0x8c, 0x64, 0x0, 0x4, 0x4, 0x0, @private=0xa010101, @empty, {[@generic={0x86, 0x10, "9222898e5dc869622296b385a3b7"}, @timestamp_addr={0x44, 0x14, 0xc, 0x1, 0x2, [{@broadcast, 0xf4}, {@multicast2, 0x7}]}, @timestamp_prespec={0x44, 0x1c, 0x9f, 0x3, 0x4, [{@local, 0x2}, {@broadcast, 0x6}, {@local, 0xf97}]}, @timestamp_prespec={0x44, 0x14, 0x39, 0x3, 0x7, [{@broadcast, 0x5}, {@private=0xa010101, 0x7}]}, @rr={0x7, 0x1f, 0xde, [@loopback, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @local]}, @generic={0x86, 0x5, "5950de"}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001380)=@o_path={&(0x7f0000001340)='./file0\x00', 0x0, 0x4008, r5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x19, &(0x7f0000000e80)=@raw=[@call={0x85, 0x0, 0x0, 0x92}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}, @map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffc6}, @alu={0x4, 0x1, 0xc, 0x5, 0x1, 0x80, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @jmp={0x5, 0x1, 0x7, 0x8, 0x4, 0x100, 0xfffffffffffffffc}], &(0x7f0000000f80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x40, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000001300)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000013c0)=[r4, r4, r9], &(0x7f0000001400)=[{0x2, 0x1, 0x6, 0x4}, {0x5, 0x3, 0x1}, {0x3, 0x4, 0x2, 0x9}], 0x10, 0xd}, 0x94) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000040)=""/30, &(0x7f0000000240), &(0x7f0000000280), 0x1, r4}, 0x38) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m10.638379411s ago: executing program 5 (id=4038): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB="7c140000", @ANYRES16=r3, @ANYBLOB="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"], 0x147c}, 0x1, 0x0, 0x0, 0x8010}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r4, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x25}, 0x3}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000000)="daffc3fa80002cd21721a4af36a4a2ab00000000000000025a91f64b007f0c6a680f6c787f", 0x25}, {&(0x7f0000001480)="1c7b53", 0x3}], 0x2}, 0x4b00) 1m10.616654841s ago: executing program 5 (id=4039): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000fcb000)=0xfffffffc, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) getrandom(&(0x7f0000000580)=""/157, 0x90e0d836448e4e55, 0x3) dup(r0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x18) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) clock_adjtime(0x0, &(0x7f0000000700)={0x1000000000064fc, 0x3, 0x10000, 0x0, 0xfffffffffffffffe, 0x8, 0x10000000001, 0xfffffffffffffff9, 0x2, 0x0, 0x6, 0x240e, 0x0, 0x9, 0x81, 0x0, 0x7, 0x0, 0xfffffffffffffffe, 0x0, 0x7, 0x7, 0x0, 0xffffffffdffffffe, 0x0, 0x4}) vmsplice(r8, &(0x7f0000000240)=[{&(0x7f0000000140)="56ac8910f50028737213c71372bd028b3fa3b1627d3d555826d301294258a80bedb4b0fe529b891231e71d9ecdcd27835a242f83db1f3903cf18ad04271e8a1abb24d97f9678d9b3d2e7ccecf3a66df8f00973d50199f9", 0x57}, {&(0x7f0000000040)="ffad3bde8b9fbdb5e22f20da364bbd8ae170b213f26dca66b6a1dfee7bc5eec457a1fde86a16f8711ce6", 0x2a}, {&(0x7f00000001c0)="47ef3608c09a34c456f9b1a5b8496b9b639848b7af78856c9fc399e89b575058c7ed212da416772c51153cbb9e60748db889ccea94668996368e227f3fd540a9bdc39b102f04e443064185f76466703aa53fe96ac71b98c98088568e83c82be8", 0x60}], 0x3, 0x6) r9 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) faccessat2(r9, &(0x7f0000000000)='\x00', 0x2, 0x1100) 1m9.408909559s ago: executing program 5 (id=4046): r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX, @ANYBLOB="303a77643ef87c98fa6d382eaf00c7aee2", @ANYRES16=0x0, @ANYRESHEX, @ANYRES32], 0xfe, 0x677, &(0x7f0000000c00)="$eJzs3UtvG9fdx/HfUNT1AYwHbREYhmOd2A0goy5NUrECwV2UHQ6lSUkOMUMV0ipwYykwTDmt7QK1Nqk2vQDtG+gumyz6Igp0nXXfQJcFgnZXoBsWc+NFnBFp3ew234+Q8HDOf+b85+I5GpFzRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJZdL5crlppue2fX5LPrvtc6pT5e2rzuxoW7U9uVrPA/LS3pejzp+neG1e+E/7utm/G7m1oKX5Z09H/v/P/DbxcL6fynJHQWet0Fvnh19PRRr7f//Gyt9a2zzHcpJjJRYYa5tpy2G3huq7blGDfwzObGRvn+diMwDbfpBHtB12kZ23cKXc83a/ZdU9ncXDdOac/baW/Va00nnfjh96vl8ob5aDHZ/fc/KgX2tttsuu2tKCasDmMWB0eIU2sZc/Ckt78+LckwqDJLUHVaULVcrVYq1Wpl48Hmgw/L5eLEhPIJmogYHrRvz87HVbqgMzdwfoWw//+bJTW1pLZ2tCuT+WOrLl+eWjn1ibT/f/++c2q7o/1/2stfH1bfUNT/34rf3crr/3NyMTLRDFk1Vs70s/280Csd6akeqaee9vX8Ypa7enEZXu7PllSUXAXy5KqlmrbkyCRTjDa1oQ2V9bG21VAgo4ZcNeUo0J4CdeWoFe0TX45q6sqTL6M12boro4o2tal1GTkqaU+edtTWluqq6V/9fv9AT6Ltvn5KjkqDKrMEFQfH4GRQXv//08/jOV6v/8f/nsGxM0MM8Mb1k+v/fHNZE1cvLyMAAAAAAHDRrOiv71b02f27kvpquE2n/KbTAgAAAAAAFyj65P9m+DIflt6VlXP937/63AAAAAAAwMWwonvsLEkr0Zf6reGdULN8CSDz5gAAAAAAAPB2iT7/v7Ug9aOh1VZlvdb1PwAAAAAA+C/w25Ex9ovpGLv99GP9gqSgs2j9+R+L8uet487ud63DWlhTO0xiJr4B0G3csIqKB+qNxutdkBS9s52bVjI+cDIIphUP7Ct9fTBtrH/LP5HAwlz654uMBK4djSSwUUze6fd6L455L2n38VFBUU3cykrDbTol22s+rKhWu1boOrvdXzx78kvJH6znwZPefumTz3qPo1yOw0nHh2Een4+lU5iWy8tovIXonousNV5WI23yd+3WihW1W07Xf061w8JoQ7Ot/691O465vRK/rhyle0DWr5JCpRTtsuHaR6NDWMMsKifXPGtH5GSxFGVxJ465s3Ynfknzi/fC0vfmpGppch/4o1lUR7OYvi2sf05siylZhMfCepjFX8IF5WSx/npZTOwRAHhTDoa9UDSI+eQY+yf73Yyz3HLymnuWm967/3C8lZd/7Mc3HM5JRfUXk+6ln9+vKDyjr8VhC/Eo7sUbGWf0ctKvLCnnjF4+R+8WtvWn4TOQkqfVJDXFQRb/7vf7DytRu3840at+Ec7wRW67QbM6F27C+y8PfxYNgB/6dP/T/WfV6vpG+YNy+UFV89FqJC/0PQCADNOfsTMesTTszwZ99weDq+rHf38/Lo31u98afKWgpE/0mXp6rHvpIwRWs9tdGfkawr3Jq9YwNvqtYzy2onu5V3VRXzoSWx3EziudZfz3hWHs+mXvBgAArtTtKf3wyf4/69r9XnrdvXYj87p7vC8/+YTgvNjKFW8JAAC+ORz/a2ul+xvL993Ox5XNzUqtu+0Y37N/bHy3vuUYt911fHu71t5yTMf3up7tNU3H16JbdwIT7HQ6nt81Dc83HS9wd6Mnv5vk0e+B06q1u64ddJpOLXCM7bW7Nbtr6m5gm87Oj5pusO340cxBx7HdhmvXuq7XNoG3LNspGRM4zkigW3faXbfhhsW26fhuq+bvmZ94zZ2WY+pOYPtup+vFC0zbctsNz29Fiy2pf9qDDgEA+MZ48ero6aNeb//5KYVjxYX0+2hJ1VcZwQtZC3zDqwgAAE6glwYAAAAAAAAAAAAAAAAAAAAA4O03y/1/pxbSmwLTKfPKCJYGU35+baYlWxpO+fKv58rwDIXCySnJSLv96bN/FReKWTHLYWFBUi/d/KMxx1MTm8uYK6+wOtOaKi4UL34bLktZR8KlFX5wMH4cTsSElZlVi4OtWjz/P4eswrMvc6qmH1GL49tw4bQVHC8UJT1fOMcuuNrzEICr958AAAD//7gMOck=") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r7 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x13) ptrace(0x10, r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r8}, 0x10) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000340)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)="01", 0x1}], 0x1, 0x0, 0x0, 0x804c840}, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000001700)=0x4) 1m9.219355252s ago: executing program 5 (id=4049): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1832abd7000ffffffff050000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4040004) 1m6.964139775s ago: executing program 5 (id=4093): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r0 = socket(0x200000000000011, 0x2, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x2c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x9c, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) 1m6.939305106s ago: executing program 39 (id=4093): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r0 = socket(0x200000000000011, 0x2, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x2c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x9c, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) 2.557852302s ago: executing program 4 (id=5285): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000008d87184b000080000000000000000031d8b4903c629ba34d06648eca22b1d9ed89bf33d78c2f0e597054cb97e9a8cc77cfcd596e3231efcd2da49eadd1903c68aac36edaaad751c6f0c405da4e461201e1aa97", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="614160e530da4ec5c2b2f6b97455", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r2, 0x20, &(0x7f0000000100)={&(0x7f0000000400)=""/199, 0xc7, 0x0, &(0x7f0000000680)=""/180, 0xb4}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xa202, 0x0) pwritev(r5, 0xfffffffffffffffc, 0x1, 0x6, 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000200000007000000", @ANYBLOB="000001008a20000014001a80100004800c000180080001"], 0x34}, 0x1, 0x0, 0x0, 0x54005}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r7, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000240)=@gcm_128={{}, "ecb9d06d2d6e459d", "9ab7e8da5fbd3fc91d33e32cd9f5bddb", "6973ca9e", "e80ebfa5ac114dfa"}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000000000014001a80100005"], 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x40}, 0x18) r10 = fsmount(0xffffffffffffffff, 0x1, 0x7f) connect$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[], 0x118}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x80010, r5, 0x8000000) semget(0x3, 0x3, 0x31c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000640)={0x0, 0x0}, 0x10) 2.468534413s ago: executing program 4 (id=5287): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000100)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@mblk_io_submit}, {@bh}, {@auto_da_alloc}, {@barrier}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000000)=@generic={&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000070000000200000022bf000001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, r4}, 0x38) 2.444495173s ago: executing program 4 (id=5288): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x38}}, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000000)=0x32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc7f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)=[0x7], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000005c0)={[{@jqfmt_vfsv0}, {@errors_continue}, {@dioread_lock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nobh}, {@debug}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}, 0x1, 0x57b, &(0x7f0000000640)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r4, 0x8953, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x73c, 0x0, 0x0, &(0x7f0000000340)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) request_key(0x0, 0x0, &(0x7f0000000f00)='R\x10rust\xe3c*s\xa8rVid:\xc4eo,H\x83\x93<\xc5\xd6\xfa\x12r\xfc\x00\x17\xc9\xe1\x1e\v\x92zv\xd3\xe2\xda\aC3\x15\xbcab\x02\x00\x95\x9e\x1f\xba\xd9\xe2\xec\x9d\xf9Jr?\be?\xe3\x1a\x99\xe18\xa0\xb8\xebU\xb2.\xf6\xfdM\x13\x0f;V]\xd1D\x15\x9fF\\\xa7\xee\xf7\xa5\x91\xcar\xdc\x14h\xd2%\xcf\x00\xf8\x94\xd8\xbau\xd9\xf9s\xae\xd4\x01\x85\x93K?\x014\xa3MiM@Q\t\xb0\'n\xc7\xe9\xe9\x9e\a\xd2I\x05\xb7\xa7\xe8S\xcd\x8dX\xbb\xe6\x0e\xdb\xec\xeb\x9b\xaa\"\x81y[Y\x9e\v\xab\xd3\xd3RP\x9e\xd9\x1c\xcb\x8bxt]\x12\x98D\xb5>\xb9EPq\x0f\"\xbc\xa8\xd2\x107\xe1i\x00\xa5\x85\x1ew\x19\xcdID\xb7\xb4\xfe\xbe!Y\xc4i\vJv\x9e\x86\x1f\a', 0x0) 2.306678705s ago: executing program 4 (id=5290): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004b40)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.839170972s ago: executing program 4 (id=5297): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) pause() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) socket(0x1d, 0x80805, 0x0) r2 = socket$kcm(0x29, 0x4, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_open(0x0, 0x2, 0x12, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000240)=0x800, 0x6) r4 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xde, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x7}, 0x4e58, 0x5, 0x0, 0x4, 0x87, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000840)='mm_page_alloc\x00', r5}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r4, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x800000004, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xd, @empty, 0x8}, {0xa, 0x4e27, 0xce, @empty, 0x2}, r7, 0xfffffffb}}, 0x48) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000340)={0xe000300e}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, {0xa, 0x4e27, 0x8d1, @mcast1, 0x5}, r7, 0xfffffffd}}, 0x48) epoll_pwait(r8, &(0x7f0000000000)=[{}], 0x1, 0x5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 1.639736765s ago: executing program 9 (id=5304): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000000)={0x2a, 0x2}, 0xc) bind$qrtr(r3, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000004000000f5a4b52edb6d027dc48b72f05abccd040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x5faf, 0x4) bind$inet(r7, &(0x7f0000000300)={0x2, 0x0, @local}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, 0x0}) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) 1.32004299s ago: executing program 6 (id=5314): r0 = socket$kcm(0xa, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1804000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000540)="e8691a913b", 0x2ec0}, {0x0, 0x2900}], 0x2, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x38}, 0x0) 1.31375092s ago: executing program 6 (id=5315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000100)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@mblk_io_submit}, {@bh}, {@auto_da_alloc}, {@barrier}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000000)=@generic={&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000070000000200000022bf000001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, r4}, 0x38) 1.227139751s ago: executing program 6 (id=5317): openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001240), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000202070250000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)}, 0x20000000}], 0x1, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x40004) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000000600000001228290081e949b93897bc3b0000000040007d01ff020000000000000000000000000001"], 0xfdef) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5, 0xffffffff}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x1, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x1000, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x100, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, {}, {0x0, 0xfffffff9}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0xffffffff, 0x0, 0xfffffffe}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x40, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x295}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1, 0xfffffff7}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x5}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000, 0x7fffffff}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x7, 0x1}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r7, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010020, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001010000850000001500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 1.076697504s ago: executing program 2 (id=5320): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000be8214b00000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) (rerun: 64) timer_settime(0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r1}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) (async, rerun: 32) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x8, 0x0, 0x0, 0x0, 0x0, 0x37a05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x500, 0x6d}, 0x1075, 0x4, 0x0, 0x0, 0xffffffffffffbbfe, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1c0000000000000}, 0x0, 0x5, 0xffffffffffffffff, 0x9) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 1.033709754s ago: executing program 6 (id=5322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) 980.596395ms ago: executing program 2 (id=5323): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) r6 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) (fail_nth: 2) 778.564548ms ago: executing program 6 (id=5324): socket$packet(0x11, 0x3, 0x300) io_submit(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {0x0}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 773.022768ms ago: executing program 2 (id=5325): r0 = socket$kcm(0xa, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1804000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000540)="e8691a913b", 0x2ec0}, {0x0, 0x2900}], 0x2, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x38}, 0x0) 738.579659ms ago: executing program 4 (id=5327): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2e69a, 0x0, "000800fe630500000000000800001f00"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES8=0x0, @ANYRES64=0x0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000046557b30b0c9d5c150f381fee9eaa3f21dde3027101346eb9feb35f522d9568ac16eb6b3ed6aff9653341f91bf3c3843310bb5359b75a6ffe7720159ac84f68cda4b8abb87"], 0x50) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffa0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fdatasync(r5) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x40800) r6 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) shmat(r6, &(0x7f0000ffa000/0x3000)=nil, 0x4000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) lremovexattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)=@random={'os2.', '\xff\xff\xff\xff\xff\xff'}) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x7}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x4, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xe}, 0xd59, 0x5, 0x0, 0x1, 0x8, 0x20001, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlock(&(0x7f00009c1000/0x3000)=nil, 0x3000) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xffff, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @loopback}}}}}}, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f00000002c0)=[{&(0x7f0000000440)='\x00!', 0x2}], 0x1, 0x71a, 0x802003) preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000480)=""/243, 0xf3}, {&(0x7f0000000400)=""/7, 0x7}, {&(0x7f0000000580)=""/77, 0x4d}], 0x3, 0x6, 0x0) 737.814649ms ago: executing program 2 (id=5328): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) io_submit(0x0, 0x1, &(0x7f0000003a00)=[&(0x7f0000001840)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0}]) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x14}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 726.093269ms ago: executing program 6 (id=5329): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@remote, @loopback, 0x0}, &(0x7f00000000c0)=0xc) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000002780)=0x4, 0x4, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x100}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) 716.627749ms ago: executing program 9 (id=5331): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a0000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83100043370e9701008400002d3bc75dc0bb9dd33e438c0000000000000000", 0xd8}], 0x1}, 0x880) 710.663549ms ago: executing program 2 (id=5332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff00000006"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001400010000000000000000000a0000002ba9ef9c1d0a49b86a20fee95198e0766cb80ec305ccdd664496841541d0bb90bcc1840d43edaf250ee434b0a0c82d6b7fc95d9e8f90694da43f339f4284be53429372bcee70caebe67d9706986ffdbc15b7e2551bdab96086efefa5712d89429ffe1ec42c7e54628bb7f85a483042c58b8e14572f1b3c4c8f805c2203d18e0e379671fd645015821c557af9"], 0x14}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='dlm_send\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000200)=ANY=[], &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2, 0x0, 0x82}, 0x18) unlink(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="d84328f62e30d72ee38f1dc7d0d02bed031fb3311903b06e2cbf98c7f891b911d48c1de164d2038614025cb69d107e87f4a7e02abb79f1abb112eca13b5a50ecc14c8f1c6280fef7f72b04e46db0d8df7358455099eb327a4b85622a839054677318b16cc9a1b628425fd3c0587686fcbc975c9072756dcbd6353fb5246c534d449f552f16b76a95720193c3a2401c000eb7a2a282f5fe8e1c2941433ab07e2f269929f6bb391d801ae9efc88131e39a8c736aa2db2cd271d178eef04ca5e077e981e715"], 0x0, 0x400, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600), &(0x7f00000005c0)) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) sendmmsg$inet(r6, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 667.12208ms ago: executing program 2 (id=5333): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000024c0)={0xffffffffffffffff, 0xe0, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f00000022c0)=[{}], 0x8, 0x10, &(0x7f0000002300), &(0x7f0000002340), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000002380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) r2 = semget$private(0x0, 0x4, 0x29b) semop(r2, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x50, 0xd49}, 0xfffffffffffffffc, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) pidfd_send_signal(0xffffffffffffffff, 0x3e, 0x0, 0x0) 666.79492ms ago: executing program 9 (id=5334): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) 633.72453ms ago: executing program 9 (id=5336): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x44, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0xbbd0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0) 632.45647ms ago: executing program 9 (id=5337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600080004000000080000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x4}, 0x2012, 0x0, 0x2, 0x2, 0x100000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x17, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="49e220c3a7ce2a95aca71ba268acb61ca4259379437f4ced24caa129e4c319418498c908e67c2b522f9dab30f5919e649e43be3f4a2935e59b8916ffa923117a69ada311b2fed5c93dc2f03d84a0d567923144551ab93054f2a6bc0087f01a2012509664ff40925880a52b039f8e9dc726512c7ffe153f41e4f91c9dc04ffc0b0ccf5e76cb97a80a3ca55298dc34b4dc3a3c04e18d3244", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0xc8c0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095", @ANYRES16=r1, @ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8, 0x6, 0x101, 0x9}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4811) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="0695491e20ed30dc4dab55f699420b1c"], 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x41000) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000127e00000027bd7000fddbdf25082b994c129741ada7b52f00010002000000"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r3}, 0x18) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mlockall(0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 283.279185ms ago: executing program 9 (id=5342): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r4, 0x0, 0x6}, 0x18) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = dup2(r2, r2) write$tun(r5, 0x0, 0x46) sendfile(r1, r0, 0x0, 0x7fffeffd) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) openat(r1, &(0x7f0000000300)='./bus/file0\x00', 0xa4001, 0x0) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0x300}}}, 0x14) keyctl$read(0xb, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() lstat(0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) 282.549855ms ago: executing program 8 (id=5343): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='jbd2_lock_buffer_stall\x00', r0, 0x0, 0x178}, 0x18) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], &(0x7f00000005c0), 0x2}, 0x20) 220.823556ms ago: executing program 8 (id=5344): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0xffffff80}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 193.713806ms ago: executing program 8 (id=5345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="a80100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19fee6bb49f6cc7a2c50fd57ce6bd1a75df432aa833128a0772ff8f5e1e99aa70477d35b296674f1fe35663c0d236fd91d7ba00000044010680400175809500058008002200", @ANYRES32=r1, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000b40)={0x0, 0x1, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) 179.047697ms ago: executing program 8 (id=5346): r0 = creat(&(0x7f0000000340)='./mnt\x00', 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x443, 0x101) r2 = fspick(0xffffffffffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a1640, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0xe1, 0x20, 0x35ce, 0x40, {{0x1f, 0x4, 0x2, 0x1, 0x7c, 0x68, 0x0, 0x7, 0x4, 0x0, @empty, @remote, {[@timestamp={0x44, 0x8, 0xc1, 0x0, 0x2, [0x9e2]}, @timestamp_addr={0x44, 0xc, 0xe, 0x1, 0x5, [{@rand_addr=0x64010102, 0x4}]}, @rr={0x7, 0x7, 0x68, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xb, 0x1f, [@rand_addr=0x64010101, @multicast1]}, @ssrr={0x89, 0x17, 0x37, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @remote, @private=0xa010100]}, @lsrr={0x83, 0x2b, 0x65, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @local, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast1, @broadcast]}]}}}}}) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x200000, 0x40000000) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x148}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x9, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="9c700000"], &(0x7f0000000140)='GPL\x00', 0x6, 0x41, &(0x7f0000000240)=""/65, 0x41100, 0x10, '\x00', r8, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x5, 0x7, 0x5}, 0x10, r9, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000640)=[{0x2, 0x3, 0x8, 0x4}, {0x2, 0x4, 0x3}], 0x10, 0x4}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r10}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0x9, '\x00', 0x0, r0, 0x3, 0x1}, 0x50) r13 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000090000008500000006000000950000000000000018120000c3a4a3029be92d4b3b4be409619f4cff360cb418ef29b2f76cafa0571d80e48f003ec3a096e16aab7838a7e4778d794946ec18a7528de385a4b3fbab9e463fc6e79b9e9f88ede3cbc823", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x1f, &(0x7f0000000280)=""/31, 0x40f00, 0x18, '\x00', r6, @fallback=0x6, r7, 0x8, &(0x7f0000000300)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x80000001, 0x4}, 0x10, r9, r10, 0x1, &(0x7f0000000600)=[r11, r12, r1, r13, r0, r0, r1, r0, r1], &(0x7f0000000640)=[{0x2, 0x1, 0x0, 0x8}], 0x10, 0xfff}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x20000094) r15 = socket(0x400000000010, 0x3, 0x0) r16 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r17, {0x9, 0xa}, {0xfffa, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) listxattr(&(0x7f0000000100)='./mnt\x00', 0x0, 0x100000) 653.08µs ago: executing program 8 (id=5347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) 0s ago: executing program 8 (id=5348): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) ioctl$BLKTRACESETUP(r0, 0x1276, 0x0) mount$bind(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x40, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x30002000}) syz_emit_ethernet(0x4e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaa020000183afffe84000000002e0000000000000000bbff1980edffffff0010000000008000018900907800000000fe88000000000080000000000000000100"/78], 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000000c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x2}], {}, [], {0x10, 0x5}}, 0x34, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='br_fdb_add\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000710400000000000095040000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdfb}, 0x21) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) set_mempolicy(0x2, 0x0, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e40)={0xffffffffffffffff}) dup3(r3, 0xffffffffffffffff, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x36, 0x3, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x9, 0x20005, 0xb, 0x0, 0x3, 0x0, 0x100002}, 0x0, 0xfffffffffffff7ff, 0xffffffffffffffff, 0x2) kernel console output (not intermixed with test programs): r/w without journal. Quota mode: writeback. [ 279.660375][T18608] netlink: 'syz.9.4474': attribute type 1 has an invalid length. [ 279.661529][T18615] vxcan1 speed is unknown, defaulting to 1000 [ 279.704446][T15033] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.709579][T18615] lo speed is unknown, defaulting to 1000 [ 279.778342][T18623] dummy0: entered promiscuous mode [ 279.789627][T18623] macvtap1: entered promiscuous mode [ 279.800676][T18623] macvtap1: entered allmulticast mode [ 279.812078][T18623] dummy0: entered allmulticast mode [ 280.095374][T18660] netlink: 'syz.2.4487': attribute type 10 has an invalid length. [ 280.124184][T18660] batman_adv: batadv0: Adding interface: team0 [ 280.130395][T18660] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.133029][T18662] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 280.155650][T18660] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 280.270427][T18665] loop9: detected capacity change from 0 to 512 [ 280.294028][T18665] EXT4-fs: Ignoring removed mblk_io_submit option [ 280.300717][T18665] EXT4-fs: Ignoring removed bh option [ 280.319271][T18665] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 280.361118][T18665] EXT4-fs (loop9): 1 truncate cleaned up [ 280.375275][T18665] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.453210][T18665] netlink: 'syz.9.4492': attribute type 1 has an invalid length. [ 280.542699][T15033] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.554866][T18676] FAULT_INJECTION: forcing a failure. [ 280.554866][T18676] name failslab, interval 1, probability 0, space 0, times 0 [ 280.567599][T18676] CPU: 1 UID: 0 PID: 18676 Comm: syz.4.4496 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 280.567628][T18676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.567639][T18676] Call Trace: [ 280.567644][T18676] [ 280.567667][T18676] __dump_stack+0x1d/0x30 [ 280.567749][T18676] dump_stack_lvl+0xe8/0x140 [ 280.567770][T18676] dump_stack+0x15/0x1b [ 280.567786][T18676] should_fail_ex+0x265/0x280 [ 280.567816][T18676] ? rfkill_fop_open+0x114/0x440 [ 280.567913][T18676] should_failslab+0x8c/0xb0 [ 280.567936][T18676] __kmalloc_cache_noprof+0x4c/0x320 [ 280.567986][T18676] rfkill_fop_open+0x114/0x440 [ 280.568082][T18676] ? __pfx_rfkill_fop_open+0x10/0x10 [ 280.568108][T18676] misc_open+0x1d6/0x200 [ 280.568130][T18676] chrdev_open+0x2e8/0x3a0 [ 280.568201][T18676] do_dentry_open+0x649/0xa20 [ 280.568225][T18676] ? __pfx_chrdev_open+0x10/0x10 [ 280.568331][T18676] vfs_open+0x37/0x1e0 [ 280.568354][T18676] path_openat+0x1c5e/0x2170 [ 280.568391][T18676] do_filp_open+0x109/0x230 [ 280.568496][T18676] do_sys_openat2+0xa6/0x110 [ 280.568521][T18676] __x64_sys_openat+0xf2/0x120 [ 280.568547][T18676] x64_sys_call+0x1af/0x2fb0 [ 280.568569][T18676] do_syscall_64+0xd2/0x200 [ 280.568588][T18676] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 280.568657][T18676] ? clear_bhb_loop+0x40/0x90 [ 280.568743][T18676] ? clear_bhb_loop+0x40/0x90 [ 280.568765][T18676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.568787][T18676] RIP: 0033:0x7f1d6c2ce929 [ 280.568804][T18676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.568822][T18676] RSP: 002b:00007f1d6a937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 280.568838][T18676] RAX: ffffffffffffffda RBX: 00007f1d6c4f5fa0 RCX: 00007f1d6c2ce929 [ 280.568855][T18676] RDX: 0000000000125000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 280.568887][T18676] RBP: 00007f1d6a937090 R08: 0000000000000000 R09: 0000000000000000 [ 280.568917][T18676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.568931][T18676] R13: 0000000000000000 R14: 00007f1d6c4f5fa0 R15: 00007ffd16820338 [ 280.568950][T18676] [ 281.010998][T18703] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 281.056229][T18705] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 281.461434][T18723] netlink: 'syz.2.4513': attribute type 10 has an invalid length. [ 281.461989][T18721] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 281.534415][T18721] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 281.549538][ T29] kauditd_printk_skb: 2775 callbacks suppressed [ 281.549581][ T29] audit: type=1326 audit(791.554:24814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18720 comm="syz.6.4512" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0516ae929 code=0x0 [ 281.555436][T18730] macvtap4: entered promiscuous mode [ 281.573171][ T29] audit: type=1326 audit(791.572:24815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18720 comm="syz.6.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0516ae929 code=0x7ffc0000 [ 281.603758][T18730] macvtap4: entered allmulticast mode [ 281.606410][ T29] audit: type=1326 audit(791.572:24816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18720 comm="syz.6.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0516ae929 code=0x7ffc0000 [ 281.684863][T18732] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 281.864717][T18742] xt_hashlimit: size too large, truncated to 1048576 [ 282.164476][T18747] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 282.189212][T18749] netlink: 'syz.4.4522': attribute type 1 has an invalid length. [ 282.323242][ T29] audit: type=1326 audit(792.274:24817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18753 comm="syz.6.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0516ae929 code=0x7ffc0000 [ 282.364687][ T29] audit: type=1326 audit(792.274:24818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18753 comm="syz.6.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0516ae929 code=0x7ffc0000 [ 282.387825][ T29] audit: type=1326 audit(792.274:24819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18753 comm="syz.6.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd0516ae929 code=0x7ffc0000 [ 282.410887][ T29] audit: type=1326 audit(792.274:24820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18753 comm="syz.6.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0516ae929 code=0x7ffc0000 [ 282.434183][ T29] audit: type=1326 audit(792.274:24821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18753 comm="syz.6.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd0516ae929 code=0x7ffc0000 [ 282.457260][ T29] audit: type=1326 audit(792.274:24822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18753 comm="syz.6.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0516ae929 code=0x7ffc0000 [ 282.480245][ T29] audit: type=1326 audit(792.274:24823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18753 comm="syz.6.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd0516ae929 code=0x7ffc0000 [ 282.556520][T18764] __nla_validate_parse: 12 callbacks suppressed [ 282.556536][T18764] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4529'. [ 282.574804][T18764] dummy0: entered promiscuous mode [ 282.586469][T18764] macvtap1: entered promiscuous mode [ 282.592594][T18764] macvtap1: entered allmulticast mode [ 282.598424][T18764] dummy0: entered allmulticast mode [ 282.657654][T18770] xt_hashlimit: size too large, truncated to 1048576 [ 282.776942][T18784] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 282.922244][T18794] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4542'. [ 282.947527][T18794] macvtap2: entered promiscuous mode [ 282.953434][T18794] macvtap2: entered allmulticast mode [ 283.050446][T18807] xt_hashlimit: size too large, truncated to 1048576 [ 283.077880][T18811] tipc: Enabling of bearer rejected, already enabled [ 283.108098][T18815] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4552'. [ 283.187398][T18819] tipc: Enabling of bearer rejected, already enabled [ 283.343945][T18835] xt_hashlimit: size too large, truncated to 1048576 [ 283.645360][T18843] tipc: Enabling of bearer rejected, already enabled [ 283.660592][T18845] netlink: 'syz.9.4564': attribute type 10 has an invalid length. [ 283.701041][T18853] tipc: Enabling of bearer rejected, already enabled [ 283.728196][T18858] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4569'. [ 283.764996][T18863] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 283.772801][T18863] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 283.796938][T18866] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4574'. [ 283.818947][T18870] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4576'. [ 283.870987][T18876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4579'. [ 283.883280][T18876] macvtap2: entered promiscuous mode [ 283.888657][T18876] macvtap2: entered allmulticast mode [ 284.073957][T18898] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4587'. [ 284.081914][T18896] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4587'. [ 284.093978][T18900] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4588'. [ 285.212135][T18930] xt_hashlimit: size too large, truncated to 1048576 [ 285.302578][T18935] macvtap3: entered promiscuous mode [ 285.307951][T18935] macvtap3: entered allmulticast mode [ 285.323859][T18936] loop8: detected capacity change from 0 to 8192 [ 285.643625][T18955] tipc: Enabling of bearer rejected, already enabled [ 285.832052][T18970] macvtap3: entered promiscuous mode [ 285.844916][T18970] macvtap3: entered allmulticast mode [ 286.131029][T18979] xt_hashlimit: size too large, truncated to 1048576 [ 286.218845][T18984] siw: device registration error -23 [ 286.318173][T18987] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 286.575829][T19015] loop8: detected capacity change from 0 to 512 [ 286.582726][T19015] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.589236][T19015] EXT4-fs: Ignoring removed bh option [ 286.604898][T19015] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 286.638330][T19015] EXT4-fs (loop8): 1 truncate cleaned up [ 286.646493][T19015] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.692270][T14424] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.732011][T19029] loop9: detected capacity change from 0 to 1764 [ 286.781136][T19042] loop8: detected capacity change from 0 to 512 [ 286.802996][T19042] EXT4-fs: inline encryption not supported [ 286.808960][T19042] EXT4-fs: Ignoring removed nobh option [ 286.855977][T19042] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 286.866412][T19052] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 286.879126][T19042] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4641: invalid indirect mapped block 2683928664 (level 1) [ 286.914249][T19042] EXT4-fs (loop8): 1 truncate cleaned up [ 286.941574][T19042] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.957593][T19044] loop9: detected capacity change from 0 to 128 [ 286.970851][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 286.970865][ T29] audit: type=1400 audit(796.566:25076): avc: denied { read write } for pid=19041 comm="syz.8.4641" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 286.999323][ T29] audit: type=1400 audit(796.566:25077): avc: denied { open } for pid=19041 comm="syz.8.4641" path="/209/file0/file0/file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 287.000718][T19042] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4641: invalid indirect mapped block 1669132791 (level 1) [ 287.022884][ T29] audit: type=1400 audit(796.594:25078): avc: denied { ioctl } for pid=19041 comm="syz.8.4641" path="/209/file0/file0/file0" dev="loop8" ino=13 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 287.061754][T19054] syz.9.4640: attempt to access beyond end of device [ 287.061754][T19054] loop9: rw=2049, sector=145, nr_sectors = 224 limit=128 [ 287.097567][T19056] netlink: 'syz.8.4641': attribute type 10 has an invalid length. [ 287.137131][T19042] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.4641: Invalid block bitmap block 3 in block_group 0 [ 287.150155][ T29] audit: type=1400 audit(796.677:25079): avc: denied { read } for pid=19039 comm="syz.9.4640" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 287.174592][ T29] audit: type=1400 audit(796.677:25080): avc: denied { open } for pid=19039 comm="syz.9.4640" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 287.198867][ T29] audit: type=1400 audit(796.677:25081): avc: denied { ioctl } for pid=19039 comm="syz.9.4640" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 287.226968][ T29] audit: type=1400 audit(796.787:25082): avc: denied { watch watch_reads } for pid=19041 comm="syz.8.4641" path="/209/file0/file0/file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 287.253157][T19042] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 287.282066][T19042] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4641: invalid indirect mapped block 2683928664 (level 1) [ 287.390458][T14424] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.421511][T19068] program syz.8.4649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.501589][T19072] loop8: detected capacity change from 0 to 512 [ 287.509337][T19072] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 287.527693][T19072] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 287.536189][T19072] EXT4-fs (loop8): orphan cleanup on readonly fs [ 287.543979][T19072] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4651: bg 0: block 361: padding at end of block bitmap is not set [ 287.559479][T19072] EXT4-fs (loop8): Remounting filesystem read-only [ 287.568796][T19072] EXT4-fs (loop8): 1 truncate cleaned up [ 287.575498][T19072] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 287.592706][T19072] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.4651: dx entry: limit 0 != root limit 125 [ 287.604567][T19072] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.4651: Corrupt directory, running e2fsck is recommended [ 287.608502][T19077] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 287.644664][T19072] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.4651: dx entry: limit 0 != root limit 125 [ 287.656484][T19072] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.4651: Corrupt directory, running e2fsck is recommended [ 287.658114][T19077] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 287.671275][T19072] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.4651: dx entry: limit 0 != root limit 125 [ 287.688271][T19072] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.4651: Corrupt directory, running e2fsck is recommended [ 287.689273][T19080] Invalid option length (0) for dns_resolver key [ 287.726697][T14424] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 287.790565][T19084] program syz.8.4655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.801879][T18354] kworker/u8:46: attempt to access beyond end of device [ 287.801879][T18354] loop9: rw=1, sector=377, nr_sectors = 8 limit=128 [ 287.852663][T18354] kworker/u8:46: attempt to access beyond end of device [ 287.852663][T18354] loop9: rw=1, sector=393, nr_sectors = 8 limit=128 [ 287.883982][T18354] kworker/u8:46: attempt to access beyond end of device [ 287.883982][T18354] loop9: rw=1, sector=409, nr_sectors = 8 limit=128 [ 287.923784][T18354] kworker/u8:46: attempt to access beyond end of device [ 287.923784][T18354] loop9: rw=1, sector=425, nr_sectors = 8 limit=128 [ 287.948749][T19092] siw: device registration error -23 [ 287.959266][T18354] kworker/u8:46: attempt to access beyond end of device [ 287.959266][T18354] loop9: rw=1, sector=441, nr_sectors = 8 limit=128 [ 287.975982][T18354] kworker/u8:46: attempt to access beyond end of device [ 287.975982][T18354] loop9: rw=1, sector=457, nr_sectors = 8 limit=128 [ 288.000912][T18354] kworker/u8:46: attempt to access beyond end of device [ 288.000912][T18354] loop9: rw=1, sector=473, nr_sectors = 8 limit=128 [ 288.032465][T18354] kworker/u8:46: attempt to access beyond end of device [ 288.032465][T18354] loop9: rw=1, sector=489, nr_sectors = 8 limit=128 [ 288.055634][T18354] kworker/u8:46: attempt to access beyond end of device [ 288.055634][T18354] loop9: rw=1, sector=505, nr_sectors = 8 limit=128 [ 288.151370][T19112] syz.2.4666 (19112): /proc/19112/oom_adj is deprecated, please use /proc/19112/oom_score_adj instead. [ 288.172191][ T29] audit: type=1326 audit(797.673:25083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19113 comm="syz.6.4667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0516ae929 code=0x7ffc0000 [ 288.195417][ T29] audit: type=1326 audit(797.673:25084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19113 comm="syz.6.4667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0516ae929 code=0x7ffc0000 [ 288.220988][T19114] tipc: Started in network mode [ 288.222628][T19115] vhci_hcd: default hub control req: 230e v0008 i0002 l0 [ 288.225941][T19114] tipc: Node identity ac141413, cluster identity 4711 [ 288.241192][T19114] tipc: New replicast peer: 10.1.1.2 [ 288.246688][T19114] tipc: Enabled bearer , priority 10 [ 288.270621][ T29] audit: type=1326 audit(797.710:25085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19113 comm="syz.6.4667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fd0516ae929 code=0x7ffc0000 [ 288.296478][T19119] __nla_validate_parse: 10 callbacks suppressed [ 288.296574][T19119] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4669'. [ 288.855178][T19126] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4672'. [ 288.876854][T19128] netlink: 'syz.6.4673': attribute type 1 has an invalid length. [ 289.333531][T19166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4686'. [ 289.343094][T19172] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4685'. [ 289.343682][T19171] loop9: detected capacity change from 0 to 1024 [ 289.410417][T19171] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.461062][T19169] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.4687: inode #180764180: comm syz.9.4687: iget: illegal inode # [ 289.481357][ T36] tipc: Node number set to 2886997011 [ 289.508258][T19180] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4688'. [ 289.519997][T19169] EXT4-fs (loop9): Remounting filesystem read-only [ 289.551543][T19169] EXT4-fs warning (device loop9): ext4_xattr_block_set:2190: inode #19: comm syz.9.4687: dec ref error=-30 [ 289.605544][T19182] netlink: 'syz.2.4689': attribute type 1 has an invalid length. [ 289.651763][T15033] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.731493][T19188] loop8: detected capacity change from 0 to 8192 [ 289.783032][T19193] pimreg: entered allmulticast mode [ 289.798983][T19193] pimreg: left allmulticast mode [ 289.822969][T19195] netlink: 'syz.2.4695': attribute type 13 has an invalid length. [ 289.908134][T19195] dummy0: left allmulticast mode [ 289.967654][T19200] xt_hashlimit: size too large, truncated to 1048576 [ 290.477448][T19210] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4700'. [ 290.980284][T19231] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4707'. [ 291.046402][T19233] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 291.160133][T19237] siw: device registration error -23 [ 291.260869][T19241] tipc: Enabling of bearer rejected, already enabled [ 291.369155][T19247] xt_hashlimit: size too large, truncated to 1048576 [ 291.369871][T19245] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4711'. [ 291.541502][T19256] netlink: 'syz.2.4716': attribute type 1 has an invalid length. [ 291.722980][T19270] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 291.778937][T19272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4720'. [ 291.944745][T19285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4726'. [ 291.985851][T19285] macvtap5: entered promiscuous mode [ 292.002575][T19285] macvtap5: entered allmulticast mode [ 292.018113][T19285] dummy0: entered allmulticast mode [ 292.296407][T19306] xt_hashlimit: size too large, truncated to 1048576 [ 292.401757][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 292.401833][ T29] audit: type=1326 audit(801.578:25278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.9.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f634e929 code=0x7ffc0000 [ 292.441943][ T29] audit: type=1326 audit(801.605:25279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.9.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5f634e929 code=0x7ffc0000 [ 292.464957][ T29] audit: type=1326 audit(801.605:25280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.9.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f634e929 code=0x7ffc0000 [ 292.488019][ T29] audit: type=1326 audit(801.605:25281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.9.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f634e929 code=0x7ffc0000 [ 292.511027][ T29] audit: type=1326 audit(801.615:25282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.9.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd5f634e929 code=0x7ffc0000 [ 292.534042][ T29] audit: type=1326 audit(801.615:25283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.9.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f634e929 code=0x7ffc0000 [ 292.557145][ T29] audit: type=1326 audit(801.615:25284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.9.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f634e929 code=0x7ffc0000 [ 292.580157][ T29] audit: type=1326 audit(801.615:25285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.9.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5f634e929 code=0x7ffc0000 [ 292.603369][ T29] audit: type=1326 audit(801.615:25286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.9.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f634e929 code=0x7ffc0000 [ 292.626361][ T29] audit: type=1326 audit(801.615:25287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.9.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f634e929 code=0x7ffc0000 [ 292.651151][T19327] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(13) [ 292.657824][T19327] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 292.665482][T19327] vhci_hcd vhci_hcd.0: Device attached [ 292.681895][T19328] vhci_hcd: connection closed [ 292.682206][T18364] vhci_hcd: stop threads [ 292.691274][T18364] vhci_hcd: release socket [ 292.695681][T18364] vhci_hcd: disconnect device [ 292.730061][T19336] tipc: Enabling of bearer rejected, already enabled [ 292.756759][T19342] 9pnet_fd: Insufficient options for proto=fd [ 292.897491][T19352] FAULT_INJECTION: forcing a failure. [ 292.897491][T19352] name failslab, interval 1, probability 0, space 0, times 0 [ 292.910258][T19352] CPU: 0 UID: 0 PID: 19352 Comm: syz.4.4748 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 292.910288][T19352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.910301][T19352] Call Trace: [ 292.910379][T19352] [ 292.910388][T19352] __dump_stack+0x1d/0x30 [ 292.910410][T19352] dump_stack_lvl+0xe8/0x140 [ 292.910430][T19352] dump_stack+0x15/0x1b [ 292.910447][T19352] should_fail_ex+0x265/0x280 [ 292.910507][T19352] should_failslab+0x8c/0xb0 [ 292.910533][T19352] kmem_cache_alloc_noprof+0x50/0x310 [ 292.910559][T19352] ? dst_alloc+0xbd/0x100 [ 292.910590][T19352] dst_alloc+0xbd/0x100 [ 292.910709][T19352] ip_route_output_key_hash_rcu+0xf16/0x1440 [ 292.910763][T19352] ip_route_output_flow+0x7b/0x130 [ 292.910790][T19352] udp_sendmsg+0x1197/0x13b0 [ 292.910858][T19352] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 292.910883][T19352] ? __rcu_read_unlock+0x4f/0x70 [ 292.910913][T19352] ? __pfx_udp_sendmsg+0x10/0x10 [ 292.910934][T19352] inet_sendmsg+0xac/0xd0 [ 292.911000][T19352] __sock_sendmsg+0x102/0x180 [ 292.911021][T19352] ____sys_sendmsg+0x345/0x4e0 [ 292.911095][T19352] ___sys_sendmsg+0x17b/0x1d0 [ 292.911171][T19352] __sys_sendmmsg+0x178/0x300 [ 292.911213][T19352] __x64_sys_sendmmsg+0x57/0x70 [ 292.911312][T19352] x64_sys_call+0x2f2f/0x2fb0 [ 292.911334][T19352] do_syscall_64+0xd2/0x200 [ 292.911395][T19352] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 292.911422][T19352] ? clear_bhb_loop+0x40/0x90 [ 292.911444][T19352] ? clear_bhb_loop+0x40/0x90 [ 292.911530][T19352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.911552][T19352] RIP: 0033:0x7f1d6c2ce929 [ 292.911569][T19352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.911586][T19352] RSP: 002b:00007f1d6a937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 292.911671][T19352] RAX: ffffffffffffffda RBX: 00007f1d6c4f5fa0 RCX: 00007f1d6c2ce929 [ 292.911717][T19352] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000006 [ 292.911730][T19352] RBP: 00007f1d6a937090 R08: 0000000000000000 R09: 0000000000000000 [ 292.911743][T19352] R10: 0000000004008804 R11: 0000000000000246 R12: 0000000000000001 [ 292.911756][T19352] R13: 0000000000000000 R14: 00007f1d6c4f5fa0 R15: 00007ffd16820338 [ 292.911775][T19352] [ 293.196611][T19359] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 293.204378][T19359] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 293.382177][T19364] SET target dimension over the limit! [ 293.842797][T19367] xt_hashlimit: size too large, truncated to 1048576 [ 293.927387][T19374] tipc: Enabling of bearer rejected, already enabled [ 294.045757][T19382] loop8: detected capacity change from 0 to 2048 [ 294.052512][T19382] EXT4-fs: test_dummy_encryption option not supported [ 294.210729][T19397] __nla_validate_parse: 2 callbacks suppressed [ 294.210792][T19397] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4765'. [ 294.231462][T19399] loop9: detected capacity change from 0 to 512 [ 294.231752][T19399] EXT4-fs: Ignoring removed mblk_io_submit option [ 294.231768][T19399] EXT4-fs: Ignoring removed bh option [ 294.232080][T19399] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 294.245047][T19399] EXT4-fs (loop9): 1 truncate cleaned up [ 294.245579][T19399] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.253208][T19399] netlink: 'syz.9.4766': attribute type 1 has an invalid length. [ 294.295066][T15033] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.348466][T19405] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4767'. [ 294.351630][T19407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4769'. [ 294.373572][T19409] 9pnet_fd: Insufficient options for proto=fd [ 294.404355][T19413] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 294.404389][T19413] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 294.430764][T19415] netlink: 'syz.2.4772': attribute type 1 has an invalid length. [ 294.445881][T19417] siw: device registration error -23 [ 294.483770][T19421] netlink: 'syz.2.4775': attribute type 12 has an invalid length. [ 294.496144][T19423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4776'. [ 294.565200][T19425] loop9: detected capacity change from 0 to 512 [ 294.568534][T19425] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4777: bg 0: block 131: padding at end of block bitmap is not set [ 294.588178][T19425] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 294.588477][T19425] EXT4-fs (loop9): 1 truncate cleaned up [ 294.589000][T19425] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.666203][T19434] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4780'. [ 294.776772][T19441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4782'. [ 294.789581][T19441] macvtap6: entered promiscuous mode [ 294.789599][T19441] team0: entered promiscuous mode [ 294.789612][T19441] team_slave_0: entered promiscuous mode [ 294.789679][T19441] team_slave_1: entered promiscuous mode [ 294.789822][T19441] macvtap6: entered allmulticast mode [ 294.789836][T19441] team0: entered allmulticast mode [ 294.789849][T19441] team_slave_0: entered allmulticast mode [ 294.789863][T19441] team_slave_1: entered allmulticast mode [ 294.790195][T19441] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 294.867603][T19443] tipc: Enabling of bearer rejected, already enabled [ 294.891523][T19445] 9pnet_fd: Insufficient options for proto=fd [ 294.906495][T19447] netlink: 'syz.4.4784': attribute type 1 has an invalid length. [ 294.946772][T19451] siw: device registration error -23 [ 294.986513][T19459] loop8: detected capacity change from 0 to 1024 [ 294.995106][T19459] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.4790: Failed to acquire dquot type 0 [ 294.998251][T19462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4791'. [ 295.006956][T19459] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 295.019994][T19462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4791'. [ 295.029986][T19459] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #13: comm syz.8.4790: corrupted inode contents [ 295.050961][T19459] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #13: comm syz.8.4790: mark_inode_dirty error [ 295.062550][T19459] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #13: comm syz.8.4790: corrupted inode contents [ 295.075475][T19459] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #13: comm syz.8.4790: mark_inode_dirty error [ 295.088445][T19459] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #13: comm syz.8.4790: corrupted inode contents [ 295.092900][T19466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4793'. [ 295.110698][T19459] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 295.113149][T19466] macvtap7: entered promiscuous mode [ 295.119850][T19459] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #13: comm syz.8.4790: corrupted inode contents [ 295.124782][T19466] macvtap7: entered allmulticast mode [ 295.138035][T19459] EXT4-fs error (device loop8): ext4_truncate:4597: inode #13: comm syz.8.4790: mark_inode_dirty error [ 295.142152][T19466] 8021q: adding VLAN 0 to HW filter on device macvtap7 [ 295.153461][T19459] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 295.169472][T19459] EXT4-fs (loop8): 1 truncate cleaned up [ 295.185988][T19459] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.286142][T14424] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.350125][T19478] netlink: 'syz.8.4796': attribute type 1 has an invalid length. [ 295.376783][T19482] 9pnet_fd: Insufficient options for proto=fd [ 295.394241][T19484] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 295.402982][T19484] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 295.444889][T15033] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.469358][T19497] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4804'. [ 295.498668][T19497] macvtap3: entered promiscuous mode [ 295.504058][T19497] team0: entered promiscuous mode [ 295.509544][T19497] team_slave_0: entered promiscuous mode [ 295.515379][T19497] team_slave_1: entered promiscuous mode [ 295.517654][T19505] xt_hashlimit: size too large, truncated to 1048576 [ 295.521304][T19497] macvtap3: entered allmulticast mode [ 295.533417][T19497] team0: entered allmulticast mode [ 295.538811][T19497] team_slave_0: entered allmulticast mode [ 295.544544][T19497] team_slave_1: entered allmulticast mode [ 295.550556][T19497] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 295.611251][T19512] loop8: detected capacity change from 0 to 512 [ 295.614954][T19511] netlink: 'syz.2.4810': attribute type 1 has an invalid length. [ 295.618380][T19512] EXT4-fs: Ignoring removed mblk_io_submit option [ 295.631790][T19512] EXT4-fs: Ignoring removed bh option [ 295.639388][T19512] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 295.677630][T19512] EXT4-fs (loop8): 1 truncate cleaned up [ 295.683879][T19512] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.735942][T19521] 9pnet_fd: Insufficient options for proto=fd [ 295.759101][T19512] netlink: 'syz.8.4809': attribute type 1 has an invalid length. [ 295.786288][T14424] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.859894][T19537] team_slave_0: entered promiscuous mode [ 295.865610][T19537] team_slave_1: entered promiscuous mode [ 295.872085][T19528] loop8: detected capacity change from 0 to 2048 [ 295.884705][T19537] macvtap4: entered promiscuous mode [ 295.890146][T19537] team0: entered promiscuous mode [ 295.898470][T19537] macvtap4: entered allmulticast mode [ 295.903861][T19537] team0: entered allmulticast mode [ 295.909211][T19537] team_slave_0: entered allmulticast mode [ 295.914937][T19537] team_slave_1: entered allmulticast mode [ 295.921824][T19537] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 295.940703][T19528] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 296.051300][T14424] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 296.070239][T19560] 9pnet_fd: Insufficient options for proto=fd [ 296.103087][T19574] xt_hashlimit: size too large, truncated to 1048576 [ 296.111528][T19572] tipc: Enabling of bearer rejected, already enabled [ 296.810165][T19598] loop9: detected capacity change from 0 to 164 [ 296.821658][T19598] bio_check_eod: 75 callbacks suppressed [ 296.821672][T19598] syz.9.4839: attempt to access beyond end of device [ 296.821672][T19598] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 296.843012][T19598] syz.9.4839: attempt to access beyond end of device [ 296.843012][T19598] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 296.891868][T19598] netlink: 'syz.9.4839': attribute type 21 has an invalid length. [ 296.901528][T19598] netlink: 'syz.9.4839': attribute type 1 has an invalid length. [ 296.997185][T19613] loop9: detected capacity change from 0 to 1024 [ 297.022526][T19618] 9pnet_fd: Insufficient options for proto=fd [ 297.033130][T19613] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.090114][T15033] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.152176][T19632] team_slave_0: entered promiscuous mode [ 297.157858][T19632] team_slave_1: entered promiscuous mode [ 297.166381][T19632] macvtap4: entered promiscuous mode [ 297.171707][T19632] team0: entered promiscuous mode [ 297.182994][T19632] macvtap4: entered allmulticast mode [ 297.188686][T19632] team0: entered allmulticast mode [ 297.194296][T19632] team_slave_0: entered allmulticast mode [ 297.200116][T19632] team_slave_1: entered allmulticast mode [ 297.215749][T19632] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 297.314240][T19643] vxcan1 speed is unknown, defaulting to 1000 [ 297.330848][T19649] tipc: Enabling of bearer rejected, already enabled [ 297.347622][T19643] lo speed is unknown, defaulting to 1000 [ 297.390145][T19653] 9pnet_fd: Insufficient options for proto=fd [ 297.511372][T19658] FAULT_INJECTION: forcing a failure. [ 297.511372][T19658] name failslab, interval 1, probability 0, space 0, times 0 [ 297.524046][T19658] CPU: 0 UID: 0 PID: 19658 Comm: syz.9.4860 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 297.524132][T19658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.524200][T19658] Call Trace: [ 297.524207][T19658] [ 297.524214][T19658] __dump_stack+0x1d/0x30 [ 297.524235][T19658] dump_stack_lvl+0xe8/0x140 [ 297.524252][T19658] dump_stack+0x15/0x1b [ 297.524268][T19658] should_fail_ex+0x265/0x280 [ 297.524343][T19658] should_failslab+0x8c/0xb0 [ 297.524387][T19658] __kmalloc_noprof+0xa5/0x3e0 [ 297.524413][T19658] ? offload_action_alloc+0x2b/0x180 [ 297.524481][T19658] offload_action_alloc+0x2b/0x180 [ 297.524518][T19658] tcf_action_offload_add_ex+0x11f/0x3c0 [ 297.524567][T19658] tcf_action_init+0x333/0x6d0 [ 297.524669][T19658] ? __pfx_cmp_ex_search+0x10/0x10 [ 297.524723][T19658] tc_ctl_action+0x291/0x830 [ 297.524794][T19658] ? __pfx_tc_ctl_action+0x10/0x10 [ 297.524825][T19658] rtnetlink_rcv_msg+0x657/0x6d0 [ 297.524885][T19658] netlink_rcv_skb+0x120/0x220 [ 297.524918][T19658] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 297.524960][T19658] rtnetlink_rcv+0x1c/0x30 [ 297.524994][T19658] netlink_unicast+0x5a5/0x680 [ 297.525035][T19658] netlink_sendmsg+0x58b/0x6b0 [ 297.525129][T19658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.525149][T19658] __sock_sendmsg+0x145/0x180 [ 297.525175][T19658] ____sys_sendmsg+0x31e/0x4e0 [ 297.525230][T19658] ___sys_sendmsg+0x17b/0x1d0 [ 297.525275][T19658] __x64_sys_sendmsg+0xd4/0x160 [ 297.525316][T19658] x64_sys_call+0x2999/0x2fb0 [ 297.525339][T19658] do_syscall_64+0xd2/0x200 [ 297.525358][T19658] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 297.525403][T19658] ? clear_bhb_loop+0x40/0x90 [ 297.525425][T19658] ? clear_bhb_loop+0x40/0x90 [ 297.525465][T19658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.525487][T19658] RIP: 0033:0x7fd5f634e929 [ 297.525502][T19658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.525519][T19658] RSP: 002b:00007fd5f49b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.525539][T19658] RAX: ffffffffffffffda RBX: 00007fd5f6575fa0 RCX: 00007fd5f634e929 [ 297.525583][T19658] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000006 [ 297.525597][T19658] RBP: 00007fd5f49b7090 R08: 0000000000000000 R09: 0000000000000000 [ 297.525608][T19658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 297.525619][T19658] R13: 0000000000000000 R14: 00007fd5f6575fa0 R15: 00007ffcfc389738 [ 297.525635][T19658] [ 297.933581][T19676] macvtap5: entered promiscuous mode [ 297.939142][T19676] macvtap5: entered allmulticast mode [ 297.959947][T19676] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 298.100967][T19685] 9pnet_fd: Insufficient options for proto=fd [ 298.192657][T19687] SET target dimension over the limit! [ 298.625906][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 298.625920][ T29] audit: type=1326 audit(807.328:25632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19694 comm="syz.4.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6c2ce929 code=0x7ffc0000 [ 298.626686][ T29] audit: type=1326 audit(807.328:25633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19694 comm="syz.4.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1d6c2ce929 code=0x7ffc0000 [ 298.754878][ T29] audit: type=1326 audit(807.328:25634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19694 comm="syz.4.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1d6c2ce963 code=0x7ffc0000 [ 298.777777][ T29] audit: type=1326 audit(807.337:25635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19694 comm="syz.4.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1d6c2cd3df code=0x7ffc0000 [ 298.777861][ T29] audit: type=1326 audit(807.337:25636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19694 comm="syz.4.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1d6c2ce9b7 code=0x7ffc0000 [ 298.777886][ T29] audit: type=1326 audit(807.346:25637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19694 comm="syz.4.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d6c2cd290 code=0x7ffc0000 [ 298.777989][ T29] audit: type=1326 audit(807.346:25638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19694 comm="syz.4.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1d6c2cd58a code=0x7ffc0000 [ 298.778016][ T29] audit: type=1326 audit(807.356:25639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19694 comm="syz.4.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6c2ce929 code=0x7ffc0000 [ 298.778040][ T29] audit: type=1326 audit(807.356:25640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19694 comm="syz.4.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6c2ce929 code=0x7ffc0000 [ 298.778061][ T29] audit: type=1326 audit(807.402:25641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19694 comm="syz.4.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1d6c2ce929 code=0x7ffc0000 [ 298.963335][T19702] bond1: entered promiscuous mode [ 298.963352][T19702] bond1: entered allmulticast mode [ 298.963547][T19702] 8021q: adding VLAN 0 to HW filter on device bond1 [ 298.990680][T19702] bond1 (unregistering): Released all slaves [ 299.521841][T19724] tipc: Enabling of bearer rejected, already enabled [ 299.600401][T19731] 9pnet_fd: Insufficient options for proto=fd [ 299.716273][T19743] loop9: detected capacity change from 0 to 2048 [ 299.716518][T19743] EXT4-fs: test_dummy_encryption option not supported [ 299.824320][T19752] siw: device registration error -23 [ 300.084495][T19766] 9pnet_fd: Insufficient options for proto=fd [ 300.123436][T19768] netlink: 'syz.8.4900': attribute type 1 has an invalid length. [ 300.294144][ T36] page_pool_release_retry() stalled pool shutdown: id 103, 2 inflight 60 sec [ 300.556826][T19784] siw: device registration error -23 [ 300.663414][T19798] loop9: detected capacity change from 0 to 512 [ 300.669951][T19798] EXT4-fs: Ignoring removed mblk_io_submit option [ 300.676607][T19798] EXT4-fs: Ignoring removed bh option [ 300.682278][T19798] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 300.693208][T19798] EXT4-fs (loop9): 1 truncate cleaned up [ 300.700707][T19798] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.715282][T19798] netlink: 'syz.9.4912': attribute type 1 has an invalid length. [ 300.715933][T19803] __nla_validate_parse: 18 callbacks suppressed [ 300.715974][T19803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4911'. [ 300.740101][T15033] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.753038][T19802] tipc: Enabling of bearer rejected, already enabled [ 300.762878][T19803] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4911'. [ 300.783548][T19806] 9pnet_fd: Insufficient options for proto=fd [ 300.834339][T19812] FAULT_INJECTION: forcing a failure. [ 300.834339][T19812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.834435][T19812] CPU: 0 UID: 0 PID: 19812 Comm: syz.9.4916 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 300.834460][T19812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 300.834472][T19812] Call Trace: [ 300.834478][T19812] [ 300.834485][T19812] __dump_stack+0x1d/0x30 [ 300.834506][T19812] dump_stack_lvl+0xe8/0x140 [ 300.834525][T19812] dump_stack+0x15/0x1b [ 300.834594][T19812] should_fail_ex+0x265/0x280 [ 300.834624][T19812] should_fail+0xb/0x20 [ 300.834651][T19812] should_fail_usercopy+0x1a/0x20 [ 300.834700][T19812] strncpy_from_user+0x25/0x230 [ 300.834727][T19812] strncpy_from_user_nofault+0x68/0xf0 [ 300.834763][T19812] bpf_probe_read_compat_str+0xb4/0x130 [ 300.834903][T19812] bpf_prog_d73d3bb03d5a037f+0x3e/0x44 [ 300.834920][T19812] bpf_trace_run2+0x104/0x1c0 [ 300.834950][T19812] ? phc_vclocks_cleanup_data+0x1f/0x30 [ 300.834973][T19812] ? skb_put+0xa9/0xf0 [ 300.835040][T19812] ? phc_vclocks_cleanup_data+0x1f/0x30 [ 300.835063][T19812] __traceiter_kfree+0x2e/0x50 [ 300.835102][T19812] ? phc_vclocks_cleanup_data+0x1f/0x30 [ 300.835124][T19812] kfree+0x27b/0x320 [ 300.835185][T19812] ? ethnl_fill_reply_header+0x1b1/0x1e0 [ 300.835275][T19812] phc_vclocks_cleanup_data+0x1f/0x30 [ 300.835299][T19812] ? __pfx_phc_vclocks_cleanup_data+0x10/0x10 [ 300.835321][T19812] ethnl_default_dump_one+0x3a1/0x460 [ 300.835344][T19812] ethnl_default_dumpit+0x130/0x280 [ 300.835365][T19812] genl_dumpit+0xa9/0x110 [ 300.835391][T19812] netlink_dump+0x44b/0x850 [ 300.835427][T19812] __netlink_dump_start+0x43e/0x520 [ 300.835471][T19812] genl_family_rcv_msg_dumpit+0x115/0x180 [ 300.835495][T19812] ? __pfx_genl_start+0x10/0x10 [ 300.835517][T19812] ? __pfx_genl_dumpit+0x10/0x10 [ 300.835619][T19812] ? __pfx_genl_done+0x10/0x10 [ 300.835669][T19812] genl_rcv_msg+0x3f0/0x460 [ 300.835688][T19812] ? __pfx_ethnl_default_start+0x10/0x10 [ 300.835765][T19812] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 300.835856][T19812] ? __pfx_ethnl_default_done+0x10/0x10 [ 300.835916][T19812] netlink_rcv_skb+0x120/0x220 [ 300.835946][T19812] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.836010][T19812] genl_rcv+0x28/0x40 [ 300.836028][T19812] netlink_unicast+0x5a5/0x680 [ 300.836055][T19812] netlink_sendmsg+0x58b/0x6b0 [ 300.836082][T19812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.836167][T19812] __sock_sendmsg+0x145/0x180 [ 300.836191][T19812] ____sys_sendmsg+0x31e/0x4e0 [ 300.836383][T19812] ___sys_sendmsg+0x17b/0x1d0 [ 300.836426][T19812] __x64_sys_sendmsg+0xd4/0x160 [ 300.836489][T19812] x64_sys_call+0x2999/0x2fb0 [ 300.836510][T19812] do_syscall_64+0xd2/0x200 [ 300.836528][T19812] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 300.836553][T19812] ? clear_bhb_loop+0x40/0x90 [ 300.836584][T19812] ? clear_bhb_loop+0x40/0x90 [ 300.836606][T19812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.836626][T19812] RIP: 0033:0x7fd5f634e929 [ 300.836641][T19812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.836660][T19812] RSP: 002b:00007fd5f49b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.836734][T19812] RAX: ffffffffffffffda RBX: 00007fd5f6575fa0 RCX: 00007fd5f634e929 [ 300.836747][T19812] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 300.836759][T19812] RBP: 00007fd5f49b7090 R08: 0000000000000000 R09: 0000000000000000 [ 300.836771][T19812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 300.836784][T19812] R13: 0000000000000000 R14: 00007fd5f6575fa0 R15: 00007ffcfc389738 [ 300.836802][T19812] [ 300.873919][T19816] loop9: detected capacity change from 0 to 2048 [ 300.874297][T19816] EXT4-fs: test_dummy_encryption option not supported [ 301.625199][T19835] loop9: detected capacity change from 0 to 512 [ 301.632306][T19835] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.638845][T19835] EXT4-fs: Ignoring removed bh option [ 301.646165][T19835] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 301.658179][T19835] EXT4-fs (loop9): 1 truncate cleaned up [ 301.658611][T19835] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.666489][T19835] netlink: 'syz.9.4934': attribute type 1 has an invalid length. [ 301.670026][T19841] tipc: Enabling of bearer rejected, already enabled [ 301.697896][T15033] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.784396][T19852] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 301.862425][T19859] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 301.990623][T19869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4938'. [ 302.001009][T19869] macvtap6: entered promiscuous mode [ 302.001247][T19869] macvtap6: entered allmulticast mode [ 302.004599][T19869] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 302.522067][T19881] loop9: detected capacity change from 0 to 512 [ 302.528573][T19881] EXT4-fs: Ignoring removed mblk_io_submit option [ 302.535019][T19881] EXT4-fs: Ignoring removed bh option [ 302.540732][T19881] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 302.551700][T19881] EXT4-fs (loop9): 1 truncate cleaned up [ 302.557731][T19881] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.586420][T19881] netlink: 'syz.9.4952': attribute type 1 has an invalid length. [ 302.605229][T19886] netlink: 'syz.8.4944': attribute type 4 has an invalid length. [ 302.615389][T15033] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.644534][T19892] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4945'. [ 302.661222][T19894] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 302.733281][T19901] tipc: Enabling of bearer rejected, already enabled [ 302.795020][T19909] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4955'. [ 302.852760][T19913] smc: net device bond0 applied user defined pnetid SYZ2 [ 302.866959][T19913] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 302.910842][T19920] netlink: 'syz.8.4959': attribute type 1 has an invalid length. [ 302.937716][T19925] FAULT_INJECTION: forcing a failure. [ 302.937716][T19925] name failslab, interval 1, probability 0, space 0, times 0 [ 302.950550][T19925] CPU: 1 UID: 0 PID: 19925 Comm: syz.8.4961 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 302.950576][T19925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 302.950587][T19925] Call Trace: [ 302.950640][T19925] [ 302.950649][T19925] __dump_stack+0x1d/0x30 [ 302.950671][T19925] dump_stack_lvl+0xe8/0x140 [ 302.950692][T19925] dump_stack+0x15/0x1b [ 302.950709][T19925] should_fail_ex+0x265/0x280 [ 302.950794][T19925] should_failslab+0x8c/0xb0 [ 302.950818][T19925] kmem_cache_alloc_node_noprof+0x57/0x320 [ 302.950846][T19925] ? __alloc_skb+0x101/0x320 [ 302.950877][T19925] __alloc_skb+0x101/0x320 [ 302.950957][T19925] netlink_alloc_large_skb+0xba/0xf0 [ 302.950989][T19925] netlink_sendmsg+0x3cf/0x6b0 [ 302.951011][T19925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.951064][T19925] __sock_sendmsg+0x145/0x180 [ 302.951088][T19925] ____sys_sendmsg+0x31e/0x4e0 [ 302.951117][T19925] ___sys_sendmsg+0x17b/0x1d0 [ 302.951235][T19925] __x64_sys_sendmsg+0xd4/0x160 [ 302.951268][T19925] x64_sys_call+0x2999/0x2fb0 [ 302.951289][T19925] do_syscall_64+0xd2/0x200 [ 302.951321][T19925] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 302.951345][T19925] ? clear_bhb_loop+0x40/0x90 [ 302.951364][T19925] ? clear_bhb_loop+0x40/0x90 [ 302.951383][T19925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.951405][T19925] RIP: 0033:0x7fe4833ce929 [ 302.951421][T19925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.951440][T19925] RSP: 002b:00007fe481a37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.951459][T19925] RAX: ffffffffffffffda RBX: 00007fe4835f5fa0 RCX: 00007fe4833ce929 [ 302.951472][T19925] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 302.951485][T19925] RBP: 00007fe481a37090 R08: 0000000000000000 R09: 0000000000000000 [ 302.951506][T19925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.951517][T19925] R13: 0000000000000000 R14: 00007fe4835f5fa0 R15: 00007ffcc786e1a8 [ 302.951537][T19925] [ 303.190572][T19932] vxcan1 speed is unknown, defaulting to 1000 [ 303.224579][T19932] lo speed is unknown, defaulting to 1000 [ 303.314898][T19945] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4966'. [ 303.329400][T19945] macvtap4: entered promiscuous mode [ 303.334849][T19945] macvtap4: entered allmulticast mode [ 303.345194][T19945] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 303.394768][T19951] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 303.422987][T19937] loop9: detected capacity change from 0 to 128 [ 303.455542][T19937] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 303.471811][T19954] FAULT_INJECTION: forcing a failure. [ 303.471811][T19954] name failslab, interval 1, probability 0, space 0, times 0 [ 303.484523][T19954] CPU: 0 UID: 0 PID: 19954 Comm: syz.6.4970 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 303.484551][T19954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.484636][T19954] Call Trace: [ 303.484643][T19954] [ 303.484651][T19954] __dump_stack+0x1d/0x30 [ 303.484674][T19954] dump_stack_lvl+0xe8/0x140 [ 303.484740][T19954] dump_stack+0x15/0x1b [ 303.484758][T19954] should_fail_ex+0x265/0x280 [ 303.484789][T19954] should_failslab+0x8c/0xb0 [ 303.484811][T19954] kmem_cache_alloc_noprof+0x50/0x310 [ 303.484898][T19954] ? getname_flags+0x80/0x3b0 [ 303.484922][T19954] getname_flags+0x80/0x3b0 [ 303.484945][T19954] do_sys_openat2+0x60/0x110 [ 303.485020][T19954] __x64_sys_openat+0xf2/0x120 [ 303.485048][T19954] x64_sys_call+0x1af/0x2fb0 [ 303.485072][T19954] do_syscall_64+0xd2/0x200 [ 303.485091][T19954] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 303.485172][T19954] ? clear_bhb_loop+0x40/0x90 [ 303.485195][T19954] ? clear_bhb_loop+0x40/0x90 [ 303.485310][T19954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.485333][T19954] RIP: 0033:0x7fd0516ae929 [ 303.485349][T19954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.485368][T19954] RSP: 002b:00007fd04fd17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 303.485384][T19954] RAX: ffffffffffffffda RBX: 00007fd0518d5fa0 RCX: 00007fd0516ae929 [ 303.485397][T19954] RDX: 0000000000000042 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 303.485433][T19954] RBP: 00007fd04fd17090 R08: 0000000000000000 R09: 0000000000000000 [ 303.485447][T19954] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000001 [ 303.485458][T19954] R13: 0000000000000000 R14: 00007fd0518d5fa0 R15: 00007ffd8d803bd8 [ 303.485476][T19954] [ 303.691546][T19959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4972'. [ 303.705210][T19959] macvtap7: entered promiscuous mode [ 303.710730][T19959] macvtap7: entered allmulticast mode [ 303.721770][T19959] 8021q: adding VLAN 0 to HW filter on device macvtap7 [ 303.739875][T19963] siw: device registration error -23 [ 303.772716][T19971] FAULT_INJECTION: forcing a failure. [ 303.772716][T19971] name failslab, interval 1, probability 0, space 0, times 0 [ 303.785447][T19971] CPU: 0 UID: 0 PID: 19971 Comm: syz.2.4978 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 303.785475][T19971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.785509][T19971] Call Trace: [ 303.785514][T19971] [ 303.785521][T19971] __dump_stack+0x1d/0x30 [ 303.785539][T19971] dump_stack_lvl+0xe8/0x140 [ 303.785556][T19971] dump_stack+0x15/0x1b [ 303.785573][T19971] should_fail_ex+0x265/0x280 [ 303.785643][T19971] should_failslab+0x8c/0xb0 [ 303.785665][T19971] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 303.785695][T19971] ? tcf_pedit_init+0x5d7/0x970 [ 303.785725][T19965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4973'. [ 303.785724][T19971] kmemdup_noprof+0x2b/0x70 [ 303.785749][T19971] tcf_pedit_init+0x5d7/0x970 [ 303.785782][T19971] tcf_action_init_1+0x367/0x4a0 [ 303.785854][T19971] tcf_action_init+0x267/0x6d0 [ 303.785904][T19971] tc_ctl_action+0x291/0x830 [ 303.785946][T19971] ? __pfx_tc_ctl_action+0x10/0x10 [ 303.786015][T19971] rtnetlink_rcv_msg+0x657/0x6d0 [ 303.786072][T19971] ? avc_has_perm_noaudit+0x1b1/0x200 [ 303.786101][T19971] netlink_rcv_skb+0x120/0x220 [ 303.786140][T19971] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 303.786169][T19971] rtnetlink_rcv+0x1c/0x30 [ 303.786188][T19971] netlink_unicast+0x5a5/0x680 [ 303.786233][T19971] netlink_sendmsg+0x58b/0x6b0 [ 303.786254][T19971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.786273][T19971] __sock_sendmsg+0x145/0x180 [ 303.786351][T19971] ____sys_sendmsg+0x31e/0x4e0 [ 303.786412][T19971] ___sys_sendmsg+0x17b/0x1d0 [ 303.786561][T19971] __x64_sys_sendmsg+0xd4/0x160 [ 303.786626][T19971] x64_sys_call+0x2999/0x2fb0 [ 303.786647][T19971] do_syscall_64+0xd2/0x200 [ 303.786663][T19971] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 303.786689][T19971] ? clear_bhb_loop+0x40/0x90 [ 303.786786][T19971] ? clear_bhb_loop+0x40/0x90 [ 303.786908][T19971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.786926][T19971] RIP: 0033:0x7fefef82e929 [ 303.786942][T19971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.786959][T19971] RSP: 002b:00007fefede97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.786977][T19971] RAX: ffffffffffffffda RBX: 00007fefefa55fa0 RCX: 00007fefef82e929 [ 303.786988][T19971] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 303.787042][T19971] RBP: 00007fefede97090 R08: 0000000000000000 R09: 0000000000000000 [ 303.787055][T19971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.787123][T19971] R13: 0000000000000000 R14: 00007fefefa55fa0 R15: 00007ffdb0d6cb68 [ 303.787142][T19971] [ 303.832976][T19962] loop9: detected capacity change from 0 to 2048 [ 303.875032][T19965] macvtap4: entered promiscuous mode [ 303.881604][T19978] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4982'. [ 303.886653][T19965] team0: entered promiscuous mode [ 303.901959][T19962] EXT4-fs: Ignoring removed bh option [ 303.909102][T19965] team_slave_0: entered promiscuous mode [ 303.936211][T19962] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.941033][T19965] team_slave_1: entered promiscuous mode [ 304.036904][T19962] EXT4-fs (loop9): shut down requested (1) [ 304.041982][T19965] macvtap4: entered allmulticast mode [ 304.118564][T19965] team0: entered allmulticast mode [ 304.124004][T15033] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.125175][T19965] team_slave_0: entered allmulticast mode [ 304.138743][T19965] team_slave_1: entered allmulticast mode [ 304.146603][T19965] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 304.155012][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 304.155024][ T29] audit: type=1400 audit(812.423:25752): avc: denied { unmount } for pid=15033 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 304.269724][ T29] audit: type=1400 audit(812.524:25753): avc: denied { name_bind } for pid=19994 comm="syz.2.4985" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 304.290636][ T29] audit: type=1400 audit(812.524:25754): avc: denied { write } for pid=20000 comm="syz.4.4986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 304.416003][ T29] audit: type=1326 audit(812.654:25755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19991 comm="syz.8.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4833ce929 code=0x7ffc0000 [ 304.439192][ T29] audit: type=1326 audit(812.654:25756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19991 comm="syz.8.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4833ce929 code=0x7ffc0000 [ 304.620704][ T29] audit: type=1400 audit(812.857:25757): avc: denied { setopt } for pid=19992 comm="syz.9.4983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 304.684736][T20011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4988'. [ 304.697228][T20011] macvtap8: entered promiscuous mode [ 304.702723][T20011] macvtap8: entered allmulticast mode [ 304.710480][T20011] 8021q: adding VLAN 0 to HW filter on device macvtap8 [ 304.779644][T20017] vxcan1 speed is unknown, defaulting to 1000 [ 304.807936][T20017] lo speed is unknown, defaulting to 1000 [ 304.827475][T20021] sch_tbf: burst 128 is lower than device ip6tnl0 mtu (1452) ! [ 305.144595][ T29] audit: type=1326 audit(813.337:25758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20028 comm="syz.8.4996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4833ce929 code=0x7ffc0000 [ 305.181931][ T29] audit: type=1326 audit(813.364:25759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20028 comm="syz.8.4996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4833ce929 code=0x7ffc0000 [ 305.205042][ T29] audit: type=1326 audit(813.364:25760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20028 comm="syz.8.4996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4833ce929 code=0x7ffc0000 [ 305.228126][ T29] audit: type=1326 audit(813.364:25761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20028 comm="syz.8.4996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4833ce929 code=0x7ffc0000 [ 305.542526][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b87d400: rx timeout, send abort [ 305.550784][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b87c400: rx timeout, send abort [ 305.559108][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b87d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 305.573415][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b87c400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 305.592381][T20038] macvtap5: entered promiscuous mode [ 305.597774][T20038] macvtap5: entered allmulticast mode [ 305.605565][T20038] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 305.620686][T20045] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 305.687228][T20047] macvtap6: entered promiscuous mode [ 305.692743][T20047] macvtap6: entered allmulticast mode [ 305.713759][T20047] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 305.961106][T20082] vxcan1 speed is unknown, defaulting to 1000 [ 306.005347][T20082] lo speed is unknown, defaulting to 1000 [ 306.142173][T20095] x_tables: duplicate underflow at hook 1 [ 306.149173][T20095] FAULT_INJECTION: forcing a failure. [ 306.149173][T20095] name failslab, interval 1, probability 0, space 0, times 0 [ 306.162135][T20095] CPU: 0 UID: 0 PID: 20095 Comm: syz.2.5018 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 306.162166][T20095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 306.162230][T20095] Call Trace: [ 306.162236][T20095] [ 306.162243][T20095] __dump_stack+0x1d/0x30 [ 306.162262][T20095] dump_stack_lvl+0xe8/0x140 [ 306.162338][T20095] dump_stack+0x15/0x1b [ 306.162355][T20095] should_fail_ex+0x265/0x280 [ 306.162397][T20095] should_failslab+0x8c/0xb0 [ 306.162418][T20095] kmem_cache_alloc_noprof+0x50/0x310 [ 306.162444][T20095] ? copy_mm+0xc6/0x370 [ 306.162472][T20095] copy_mm+0xc6/0x370 [ 306.162568][T20095] copy_process+0xcf1/0x1f90 [ 306.162623][T20095] kernel_clone+0x16c/0x5b0 [ 306.162647][T20095] ? vfs_write+0x75e/0x8e0 [ 306.162678][T20095] __x64_sys_clone+0xe6/0x120 [ 306.162781][T20095] x64_sys_call+0x2c59/0x2fb0 [ 306.162882][T20095] do_syscall_64+0xd2/0x200 [ 306.162918][T20095] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 306.162946][T20095] ? clear_bhb_loop+0x40/0x90 [ 306.162966][T20095] ? clear_bhb_loop+0x40/0x90 [ 306.162984][T20095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.163031][T20095] RIP: 0033:0x7fefef82e929 [ 306.163060][T20095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.163078][T20095] RSP: 002b:00007fefede96fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 306.163100][T20095] RAX: ffffffffffffffda RBX: 00007fefefa55fa0 RCX: 00007fefef82e929 [ 306.163112][T20095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 306.163123][T20095] RBP: 00007fefede97090 R08: 0000000000000000 R09: 0000000000000000 [ 306.163133][T20095] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 306.163144][T20095] R13: 0000000000000000 R14: 00007fefefa55fa0 R15: 00007ffdb0d6cb68 [ 306.163208][T20095] [ 306.367874][T20099] FAULT_INJECTION: forcing a failure. [ 306.367874][T20099] name failslab, interval 1, probability 0, space 0, times 0 [ 306.380587][T20099] CPU: 0 UID: 0 PID: 20099 Comm: syz.2.5019 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 306.380614][T20099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 306.380681][T20099] Call Trace: [ 306.380687][T20099] [ 306.380695][T20099] __dump_stack+0x1d/0x30 [ 306.380716][T20099] dump_stack_lvl+0xe8/0x140 [ 306.380750][T20099] dump_stack+0x15/0x1b [ 306.380768][T20099] should_fail_ex+0x265/0x280 [ 306.380809][T20099] should_failslab+0x8c/0xb0 [ 306.380833][T20099] __kmalloc_noprof+0xa5/0x3e0 [ 306.380858][T20099] ? pfkey_sadb2xfrm_user_sec_ctx+0x2e/0x120 [ 306.380987][T20099] pfkey_sadb2xfrm_user_sec_ctx+0x2e/0x120 [ 306.381025][T20099] pfkey_add+0x75e/0x12e0 [ 306.381057][T20099] pfkey_sendmsg+0x715/0x900 [ 306.381141][T20099] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 306.381172][T20099] __sock_sendmsg+0x145/0x180 [ 306.381196][T20099] ____sys_sendmsg+0x31e/0x4e0 [ 306.381232][T20099] ___sys_sendmsg+0x17b/0x1d0 [ 306.381276][T20099] __x64_sys_sendmsg+0xd4/0x160 [ 306.381378][T20099] x64_sys_call+0x2999/0x2fb0 [ 306.381398][T20099] do_syscall_64+0xd2/0x200 [ 306.381413][T20099] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 306.381500][T20099] ? clear_bhb_loop+0x40/0x90 [ 306.381519][T20099] ? clear_bhb_loop+0x40/0x90 [ 306.381536][T20099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.381554][T20099] RIP: 0033:0x7fefef82e929 [ 306.381568][T20099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.381582][T20099] RSP: 002b:00007fefede97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.381608][T20099] RAX: ffffffffffffffda RBX: 00007fefefa55fa0 RCX: 00007fefef82e929 [ 306.381618][T20099] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 306.381675][T20099] RBP: 00007fefede97090 R08: 0000000000000000 R09: 0000000000000000 [ 306.381685][T20099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.381695][T20099] R13: 0000000000000000 R14: 00007fefefa55fa0 R15: 00007ffdb0d6cb68 [ 306.381841][T20099] [ 306.655180][T20101] __nla_validate_parse: 5 callbacks suppressed [ 306.655194][T20101] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5020'. [ 306.740960][T20101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5020'. [ 306.767469][T20107] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 306.811322][T20111] siw: device registration error -23 [ 306.839406][T20113] FAULT_INJECTION: forcing a failure. [ 306.839406][T20113] name failslab, interval 1, probability 0, space 0, times 0 [ 306.839434][T20113] CPU: 0 UID: 0 PID: 20113 Comm: syz.8.5026 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 306.839458][T20113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 306.839468][T20113] Call Trace: [ 306.839473][T20113] [ 306.839479][T20113] __dump_stack+0x1d/0x30 [ 306.839499][T20113] dump_stack_lvl+0xe8/0x140 [ 306.839524][T20113] dump_stack+0x15/0x1b [ 306.839541][T20113] should_fail_ex+0x265/0x280 [ 306.839574][T20113] should_failslab+0x8c/0xb0 [ 306.839597][T20113] kmem_cache_alloc_noprof+0x50/0x310 [ 306.839633][T20113] ? copy_fs_struct+0x31/0x110 [ 306.839659][T20113] copy_fs_struct+0x31/0x110 [ 306.839683][T20113] copy_fs+0x58/0xf0 [ 306.839722][T20113] copy_process+0xc6e/0x1f90 [ 306.839753][T20113] kernel_clone+0x16c/0x5b0 [ 306.839800][T20113] ? vfs_write+0x75e/0x8e0 [ 306.839827][T20113] __x64_sys_clone+0xe6/0x120 [ 306.839861][T20113] x64_sys_call+0x2c59/0x2fb0 [ 306.839884][T20113] do_syscall_64+0xd2/0x200 [ 306.839979][T20113] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 306.840008][T20113] ? clear_bhb_loop+0x40/0x90 [ 306.840098][T20113] ? clear_bhb_loop+0x40/0x90 [ 306.840120][T20113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.840141][T20113] RIP: 0033:0x7fe4833ce929 [ 306.840157][T20113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.840174][T20113] RSP: 002b:00007fe481a36fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 306.840264][T20113] RAX: ffffffffffffffda RBX: 00007fe4835f5fa0 RCX: 00007fe4833ce929 [ 306.840275][T20113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7000 [ 306.840285][T20113] RBP: 00007fe481a37090 R08: 0000000000000000 R09: 0000000000000000 [ 306.840358][T20113] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 306.840369][T20113] R13: 0000000000000000 R14: 00007fe4835f5fa0 R15: 00007ffcc786e1a8 [ 306.840386][T20113] [ 306.872504][T20120] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5029'. [ 306.925208][ T36] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 306.947691][T20120] SELinux: failed to load policy [ 306.948695][ T36] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 307.088839][ T36] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 307.090090][T20129] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.134708][T20129] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.219168][ T36] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 307.230129][T20129] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.316360][T20142] loop9: detected capacity change from 0 to 512 [ 307.316675][T20142] EXT4-fs: Ignoring removed mblk_io_submit option [ 307.320738][T20129] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.351793][T20142] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.405148][T20145] FAULT_INJECTION: forcing a failure. [ 307.405148][T20145] name failslab, interval 1, probability 0, space 0, times 0 [ 307.418105][T20145] CPU: 1 UID: 0 PID: 20145 Comm: syz.6.5035 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 307.418203][T20145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.418214][T20145] Call Trace: [ 307.418219][T20145] [ 307.418225][T20145] __dump_stack+0x1d/0x30 [ 307.418243][T20145] dump_stack_lvl+0xe8/0x140 [ 307.418260][T20145] dump_stack+0x15/0x1b [ 307.418273][T20145] should_fail_ex+0x265/0x280 [ 307.418303][T20145] should_failslab+0x8c/0xb0 [ 307.418401][T20145] kmem_cache_alloc_node_noprof+0x57/0x320 [ 307.418425][T20145] ? __alloc_skb+0x101/0x320 [ 307.418451][T20145] __alloc_skb+0x101/0x320 [ 307.418525][T20145] ? audit_log_start+0x365/0x6c0 [ 307.418558][T20145] audit_log_start+0x380/0x6c0 [ 307.418617][T20145] audit_seccomp+0x48/0x100 [ 307.418643][T20145] ? __seccomp_filter+0x68c/0x10d0 [ 307.418667][T20145] __seccomp_filter+0x69d/0x10d0 [ 307.418716][T20145] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 307.418755][T20145] ? vfs_write+0x75e/0x8e0 [ 307.418791][T20145] __secure_computing+0x82/0x150 [ 307.418814][T20145] syscall_trace_enter+0xcf/0x1e0 [ 307.418840][T20145] do_syscall_64+0xac/0x200 [ 307.418855][T20145] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 307.418918][T20145] ? clear_bhb_loop+0x40/0x90 [ 307.418936][T20145] ? clear_bhb_loop+0x40/0x90 [ 307.418954][T20145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.418973][T20145] RIP: 0033:0x7fd0516ae929 [ 307.418990][T20145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.419031][T20145] RSP: 002b:00007fd04fd17038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 307.419049][T20145] RAX: ffffffffffffffda RBX: 00007fd0518d5fa0 RCX: 00007fd0516ae929 [ 307.419060][T20145] RDX: 0000000000000003 RSI: 0000200000000380 RDI: 0000000000000003 [ 307.419071][T20145] RBP: 00007fd04fd17090 R08: 0000000000000000 R09: 0000000000000000 [ 307.419081][T20145] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 307.419161][T20145] R13: 0000000000000000 R14: 00007fd0518d5fa0 R15: 00007ffd8d803bd8 [ 307.419180][T20145] [ 307.424917][T20129] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.687872][T20129] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.706305][T20129] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.732779][T20129] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.741594][T20156] tipc: Enabling of bearer rejected, already enabled [ 307.779360][T20160] siw: device registration error -23 [ 307.847038][T20169] netlink: 'syz.6.5044': attribute type 1 has an invalid length. [ 307.866243][T20172] syzkaller0: entered promiscuous mode [ 307.871873][T20172] syzkaller0: entered allmulticast mode [ 307.873639][T20174] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5046'. [ 307.923784][T20178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5047'. [ 307.939918][T20178] macvtap5: entered promiscuous mode [ 307.945542][T20178] macvtap5: entered allmulticast mode [ 307.953011][T20178] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 308.199545][T15033] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.256155][T20185] tipc: Enabling of bearer rejected, already enabled [ 308.313085][T20189] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.323028][T20189] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.388510][T20189] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.398340][T20189] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.413750][T20194] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5053'. [ 308.425793][T20194] macvtap5: entered promiscuous mode [ 308.431214][T20194] macvtap5: entered allmulticast mode [ 308.436873][T20194] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 308.464393][T20198] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5055'. [ 308.474396][T20189] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.484159][T20189] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.484950][T20200] netlink: 'syz.6.5056': attribute type 1 has an invalid length. [ 308.506309][T20198] macvtap6: entered promiscuous mode [ 308.511817][T20198] macvtap6: entered allmulticast mode [ 308.517732][T20198] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 308.541976][T20189] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.551798][T20189] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.579212][T20211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5060'. [ 308.654040][T20189] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.662308][T20189] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.688887][T20189] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.697167][T20189] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.744741][T20189] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.753159][T20189] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.796389][T20189] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.804796][T20189] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.900704][T20221] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 309.160813][T20233] xt_hashlimit: size too large, truncated to 1048576 [ 309.177349][T20234] 9pnet_fd: Insufficient options for proto=fd [ 309.185297][T20236] loop9: detected capacity change from 0 to 512 [ 309.192438][T20236] EXT4-fs: Ignoring removed mblk_io_submit option [ 309.198946][T20236] EXT4-fs: Ignoring removed bh option [ 309.205932][T20236] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 309.222538][T20236] EXT4-fs (loop9): 1 truncate cleaned up [ 309.231110][T20236] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.330256][T20236] netlink: 'syz.9.5068': attribute type 1 has an invalid length. [ 309.368115][T20244] FAULT_INJECTION: forcing a failure. [ 309.368115][T20244] name failslab, interval 1, probability 0, space 0, times 0 [ 309.380917][T20244] CPU: 0 UID: 0 PID: 20244 Comm: syz.4.5070 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 309.380944][T20244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 309.380957][T20244] Call Trace: [ 309.380963][T20244] [ 309.380970][T20244] __dump_stack+0x1d/0x30 [ 309.381002][T20244] dump_stack_lvl+0xe8/0x140 [ 309.381018][T20244] dump_stack+0x15/0x1b [ 309.381033][T20244] should_fail_ex+0x265/0x280 [ 309.381120][T20244] should_failslab+0x8c/0xb0 [ 309.381140][T20244] kmem_cache_alloc_noprof+0x50/0x310 [ 309.381166][T20244] ? sk_prot_alloc+0x3f/0x190 [ 309.381268][T20244] sk_prot_alloc+0x3f/0x190 [ 309.381301][T20244] sk_alloc+0x34/0x360 [ 309.381404][T20244] unix_create1+0xa5/0x430 [ 309.381427][T20244] ? inode_init_always_gfp+0x4cd/0x500 [ 309.381456][T20244] unix_create+0xff/0x130 [ 309.381478][T20244] __sock_create+0x2ec/0x5b0 [ 309.381564][T20244] __sys_socketpair+0x1bc/0x430 [ 309.381588][T20244] __x64_sys_socketpair+0x52/0x60 [ 309.381610][T20244] x64_sys_call+0x23f2/0x2fb0 [ 309.381630][T20244] do_syscall_64+0xd2/0x200 [ 309.381668][T20244] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 309.381693][T20244] ? clear_bhb_loop+0x40/0x90 [ 309.381760][T20244] ? clear_bhb_loop+0x40/0x90 [ 309.381778][T20244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.381874][T20244] RIP: 0033:0x7f1d6c2d087a [ 309.381890][T20244] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.381910][T20244] RSP: 002b:00007f1d6a936f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 309.381930][T20244] RAX: ffffffffffffffda RBX: 00007f1d6c4f5f00 RCX: 00007f1d6c2d087a [ 309.381942][T20244] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 309.381956][T20244] RBP: 00007f1d6a937090 R08: 0000000000000000 R09: 0000000000000000 [ 309.381979][T20244] R10: 00007f1d6a936f98 R11: 0000000000000246 R12: 0000000000000004 [ 309.381992][T20244] R13: 0000000000000000 R14: 00007f1d6c4f5fa0 R15: 00007ffd16820338 [ 309.382076][T20244] [ 309.598710][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 309.598760][ T29] audit: type=1326 audit(817.435:25980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20243 comm="syz.4.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1d6c2cd33c code=0x7ffc0000 [ 309.628408][ T29] audit: type=1326 audit(817.435:25981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20243 comm="syz.4.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1d6c2cd3df code=0x7ffc0000 [ 309.651240][ T29] audit: type=1326 audit(817.435:25982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20243 comm="syz.4.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1d6c2cd58a code=0x7ffc0000 [ 309.674343][ T29] audit: type=1326 audit(817.435:25983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20243 comm="syz.4.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6c2ce929 code=0x7ffc0000 [ 309.694520][T20247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5072'. [ 309.697432][ T29] audit: type=1326 audit(817.435:25984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20243 comm="syz.4.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6c2ce929 code=0x7ffc0000 [ 309.729287][ T29] audit: type=1326 audit(817.435:25985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20227 comm="syz.8.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4833ce929 code=0x7ffc0000 [ 309.752676][ T29] audit: type=1326 audit(817.435:25986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20227 comm="syz.8.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4833ce929 code=0x7ffc0000 [ 309.776936][T15033] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.778577][T20247] macvtap8: entered promiscuous mode [ 309.791413][T20247] bond0: entered promiscuous mode [ 309.796500][T20247] bond_slave_0: entered promiscuous mode [ 309.802261][T20247] bond_slave_1: entered promiscuous mode [ 309.806345][ T29] audit: type=1326 audit(817.453:25987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20227 comm="syz.8.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe4833ce929 code=0x7ffc0000 [ 309.808062][T20247] macvtap8: entered allmulticast mode [ 309.830775][ T29] audit: type=1326 audit(817.453:25988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20227 comm="syz.8.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4833ce929 code=0x7ffc0000 [ 309.836128][T20247] bond0: entered allmulticast mode [ 309.836144][T20247] bond_slave_0: entered allmulticast mode [ 309.836156][T20247] bond_slave_1: entered allmulticast mode [ 309.869512][T20247] 8021q: adding VLAN 0 to HW filter on device macvtap8 [ 309.870112][ T29] audit: type=1326 audit(817.453:25989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20227 comm="syz.8.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4833ce929 code=0x7ffc0000 [ 309.913530][T20253] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.930956][T20255] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5074'. [ 309.941110][T20255] SELinux: failed to load policy [ 309.972223][T20253] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.002087][T20265] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 310.044163][T20253] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.111183][T20253] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.202166][T20253] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.234796][T20253] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.261160][T20253] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.294680][T20253] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.334099][T20275] serio: Serial port ttyS3 [ 310.343854][T20281] netlink: 'syz.6.5082': attribute type 1 has an invalid length. [ 310.370694][T20273] macvtap6: entered promiscuous mode [ 310.376198][T20273] macvtap6: entered allmulticast mode [ 310.393794][T20273] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 310.733407][T20290] vxcan1 speed is unknown, defaulting to 1000 [ 310.765615][T20290] lo speed is unknown, defaulting to 1000 [ 311.396510][T20318] tipc: Enabling of bearer rejected, already enabled [ 311.433874][T20320] netlink: 'syz.8.5094': attribute type 1 has an invalid length. [ 311.517561][T20329] À: port 1(vlan1) entered blocking state [ 311.517592][T20329] À: port 1(vlan1) entered disabled state [ 311.517716][T20329] vlan1: entered allmulticast mode [ 311.517731][T20329] veth0_vlan: entered allmulticast mode [ 311.518328][T20329] vlan1: entered promiscuous mode [ 311.561877][T14616] page_pool_release_retry() stalled pool shutdown: id 109, 1 inflight 60 sec [ 311.664138][T20336] FAULT_INJECTION: forcing a failure. [ 311.664138][T20336] name failslab, interval 1, probability 0, space 0, times 0 [ 311.664169][T20336] CPU: 0 UID: 0 PID: 20336 Comm: syz.6.5099 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 311.664202][T20336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.664270][T20336] Call Trace: [ 311.664275][T20336] [ 311.664281][T20336] __dump_stack+0x1d/0x30 [ 311.664308][T20336] dump_stack_lvl+0xe8/0x140 [ 311.664329][T20336] dump_stack+0x15/0x1b [ 311.664347][T20336] should_fail_ex+0x265/0x280 [ 311.664447][T20336] should_failslab+0x8c/0xb0 [ 311.664467][T20336] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 311.664491][T20336] ? __d_alloc+0x3d/0x350 [ 311.664566][T20336] __d_alloc+0x3d/0x350 [ 311.664588][T20336] ? unlock_new_inode+0x76/0xa0 [ 311.664609][T20336] d_make_root+0x2a/0xb0 [ 311.664631][T20336] kernfs_get_tree+0x311/0x490 [ 311.664663][T20336] sysfs_get_tree+0x26/0xa0 [ 311.664710][T20336] vfs_get_tree+0x57/0x1d0 [ 311.664786][T20336] do_new_mount+0x207/0x680 [ 311.664820][T20336] path_mount+0x4a4/0xb20 [ 311.664851][T20336] ? user_path_at+0x109/0x130 [ 311.664938][T20336] __se_sys_mount+0x28f/0x2e0 [ 311.664968][T20336] ? fput+0x8f/0xc0 [ 311.664995][T20336] __x64_sys_mount+0x67/0x80 [ 311.665055][T20336] x64_sys_call+0xd36/0x2fb0 [ 311.665077][T20336] do_syscall_64+0xd2/0x200 [ 311.665096][T20336] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 311.665166][T20336] ? clear_bhb_loop+0x40/0x90 [ 311.665189][T20336] ? clear_bhb_loop+0x40/0x90 [ 311.665213][T20336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.665233][T20336] RIP: 0033:0x7fd0516ae929 [ 311.665246][T20336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.665270][T20336] RSP: 002b:00007fd04fd17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 311.665287][T20336] RAX: ffffffffffffffda RBX: 00007fd0518d5fa0 RCX: 00007fd0516ae929 [ 311.665306][T20336] RDX: 0000200000000100 RSI: 00002000000006c0 RDI: 0000000000000000 [ 311.665358][T20336] RBP: 00007fd04fd17090 R08: 0000000000000000 R09: 0000000000000000 [ 311.665371][T20336] R10: 0000000000004014 R11: 0000000000000246 R12: 0000000000000002 [ 311.665382][T20336] R13: 0000000000000000 R14: 00007fd0518d5fa0 R15: 00007ffd8d803bd8 [ 311.665537][T20336] [ 312.273062][T20356] netlink: 'syz.2.5107': attribute type 1 has an invalid length. [ 312.311722][T20358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 312.319086][T20358] IPv6: NLM_F_CREATE should be set when creating new route [ 312.326298][T20358] IPv6: NLM_F_CREATE should be set when creating new route [ 312.333485][T20358] IPv6: NLM_F_CREATE should be set when creating new route [ 312.364508][T20361] À: port 1(vlan1) entered blocking state [ 312.370404][T20361] À: port 1(vlan1) entered disabled state [ 312.376300][T20361] vlan1: entered allmulticast mode [ 312.381411][T20361] veth0_vlan: entered allmulticast mode [ 312.387721][T20361] vlan1: entered promiscuous mode [ 312.401894][T20359] __nla_validate_parse: 4 callbacks suppressed [ 312.401905][T20359] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5106'. [ 312.628371][T20366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5110'. [ 312.841946][T20375] FAULT_INJECTION: forcing a failure. [ 312.841946][T20375] name failslab, interval 1, probability 0, space 0, times 0 [ 312.854605][T20375] CPU: 1 UID: 0 PID: 20375 Comm: syz.6.5113 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 312.854628][T20375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.854637][T20375] Call Trace: [ 312.854642][T20375] [ 312.854652][T20375] __dump_stack+0x1d/0x30 [ 312.854665][T20375] dump_stack_lvl+0xe8/0x140 [ 312.854676][T20375] dump_stack+0x15/0x1b [ 312.854761][T20375] should_fail_ex+0x265/0x280 [ 312.854795][T20375] should_failslab+0x8c/0xb0 [ 312.854808][T20375] kmem_cache_alloc_node_noprof+0x57/0x320 [ 312.854825][T20375] ? __alloc_skb+0x101/0x320 [ 312.854898][T20375] __alloc_skb+0x101/0x320 [ 312.854917][T20375] netlink_alloc_large_skb+0xba/0xf0 [ 312.855023][T20375] netlink_sendmsg+0x3cf/0x6b0 [ 312.855090][T20375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.855104][T20375] __sock_sendmsg+0x145/0x180 [ 312.855166][T20375] ____sys_sendmsg+0x31e/0x4e0 [ 312.855185][T20375] ___sys_sendmsg+0x17b/0x1d0 [ 312.855288][T20375] __x64_sys_sendmsg+0xd4/0x160 [ 312.855308][T20375] x64_sys_call+0x2999/0x2fb0 [ 312.855320][T20375] do_syscall_64+0xd2/0x200 [ 312.855331][T20375] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 312.855384][T20375] ? clear_bhb_loop+0x40/0x90 [ 312.855439][T20375] ? clear_bhb_loop+0x40/0x90 [ 312.855451][T20375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.855463][T20375] RIP: 0033:0x7fd0516ae929 [ 312.855472][T20375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.855483][T20375] RSP: 002b:00007fd04fd17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.855560][T20375] RAX: ffffffffffffffda RBX: 00007fd0518d5fa0 RCX: 00007fd0516ae929 [ 312.855567][T20375] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 312.855575][T20375] RBP: 00007fd04fd17090 R08: 0000000000000000 R09: 0000000000000000 [ 312.855581][T20375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.855588][T20375] R13: 0000000000000000 R14: 00007fd0518d5fa0 R15: 00007ffd8d803bd8 [ 312.855599][T20375] [ 313.161353][T20388] netlink: 100 bytes leftover after parsing attributes in process `syz.9.5117'. [ 313.220819][T20390] loop9: detected capacity change from 0 to 512 [ 313.228943][T20390] EXT4-fs: Ignoring removed mblk_io_submit option [ 313.235512][T20390] EXT4-fs: Ignoring removed bh option [ 313.242841][T20390] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 313.255234][T20390] EXT4-fs (loop9): 1 truncate cleaned up [ 313.264808][T20390] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.279063][T20390] netlink: 'syz.9.5118': attribute type 1 has an invalid length. [ 313.297914][T15033] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.314630][T20401] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 313.381854][T20404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5122'. [ 313.405518][T20404] macvtap9: entered promiscuous mode [ 313.410963][T20404] macvtap9: entered allmulticast mode [ 313.417037][T20404] 8021q: adding VLAN 0 to HW filter on device macvtap9 [ 313.531271][T20409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5124'. [ 313.545867][T20409] macvtap10: entered promiscuous mode [ 313.551358][T20409] macvtap10: entered allmulticast mode [ 313.718880][T20424] À: port 1(vlan1) entered blocking state [ 313.724708][T20424] À: port 1(vlan1) entered disabled state [ 313.731621][T20424] vlan1: entered allmulticast mode [ 313.736812][T20424] veth0_vlan: entered allmulticast mode [ 313.743342][T20424] vlan1: entered promiscuous mode [ 313.815152][T13564] page_pool_release_retry() stalled pool shutdown: id 110, 2 inflight 61 sec [ 313.841933][T20428] siw: device registration error -23 [ 313.906617][T20433] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5128'. [ 314.360748][T20451] netlink: 'syz.6.5140': attribute type 1 has an invalid length. [ 314.456557][T20453] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5141'. [ 314.694299][T20467] siw: device registration error -23 [ 314.903691][T20485] loop9: detected capacity change from 0 to 512 [ 314.920556][T20485] EXT4-fs: Ignoring removed mblk_io_submit option [ 314.928789][T20485] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.085217][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 315.085287][ T29] audit: type=1326 audit(822.511:26054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20481 comm="syz.6.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0516ae929 code=0x7ffc0000 [ 315.128190][ T29] audit: type=1326 audit(822.511:26055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20481 comm="syz.6.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0516ae929 code=0x7ffc0000 [ 315.172568][T20495] 9pnet_fd: Insufficient options for proto=fd [ 315.181266][ T29] audit: type=1400 audit(822.594:26056): avc: denied { bind } for pid=20494 comm="syz.6.5153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 315.185338][T20498] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 315.250475][T20503] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 315.412486][T20506] FAULT_INJECTION: forcing a failure. [ 315.412486][T20506] name failslab, interval 1, probability 0, space 0, times 0 [ 315.425156][T20506] CPU: 0 UID: 0 PID: 20506 Comm: syz.6.5156 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 315.425248][T20506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.425318][T20506] Call Trace: [ 315.425322][T20506] [ 315.425327][T20506] __dump_stack+0x1d/0x30 [ 315.425352][T20506] dump_stack_lvl+0xe8/0x140 [ 315.425362][T20506] dump_stack+0x15/0x1b [ 315.425444][T20506] should_fail_ex+0x265/0x280 [ 315.425461][T20506] should_failslab+0x8c/0xb0 [ 315.425475][T20506] kmem_cache_alloc_node_noprof+0x57/0x320 [ 315.425491][T20506] ? __alloc_skb+0x101/0x320 [ 315.425561][T20506] __alloc_skb+0x101/0x320 [ 315.425578][T20506] tc_ctl_action+0x64b/0x830 [ 315.425601][T20506] ? __pfx_tc_ctl_action+0x10/0x10 [ 315.425623][T20506] rtnetlink_rcv_msg+0x657/0x6d0 [ 315.425638][T20506] netlink_rcv_skb+0x120/0x220 [ 315.425655][T20506] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.425671][T20506] rtnetlink_rcv+0x1c/0x30 [ 315.425699][T20506] netlink_unicast+0x5a5/0x680 [ 315.425733][T20506] netlink_sendmsg+0x58b/0x6b0 [ 315.425744][T20506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.425755][T20506] __sock_sendmsg+0x145/0x180 [ 315.425769][T20506] ____sys_sendmsg+0x31e/0x4e0 [ 315.425834][T20506] ___sys_sendmsg+0x17b/0x1d0 [ 315.425859][T20506] __x64_sys_sendmsg+0xd4/0x160 [ 315.425925][T20506] x64_sys_call+0x2999/0x2fb0 [ 315.426011][T20506] do_syscall_64+0xd2/0x200 [ 315.426022][T20506] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 315.426037][T20506] ? clear_bhb_loop+0x40/0x90 [ 315.426127][T20506] ? clear_bhb_loop+0x40/0x90 [ 315.426209][T20506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.426226][T20506] RIP: 0033:0x7fd0516ae929 [ 315.426301][T20506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.426320][T20506] RSP: 002b:00007fd04fd17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.426339][T20506] RAX: ffffffffffffffda RBX: 00007fd0518d5fa0 RCX: 00007fd0516ae929 [ 315.426352][T20506] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 315.426365][T20506] RBP: 00007fd04fd17090 R08: 0000000000000000 R09: 0000000000000000 [ 315.426378][T20506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.426387][T20506] R13: 0000000000000000 R14: 00007fd0518d5fa0 R15: 00007ffd8d803bd8 [ 315.426463][T20506] [ 315.687991][ T29] audit: type=1107 audit(823.065:26057): pid=20509 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 315.712489][T20512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5159'. [ 315.728676][T20516] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 315.744204][T15033] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.842930][ T29] audit: type=1326 audit(823.213:26058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.9.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f634e929 code=0x7ffc0000 [ 315.842957][ T29] audit: type=1326 audit(823.213:26059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.9.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f634e929 code=0x7ffc0000 [ 315.845426][T20522] tipc: Enabling of bearer rejected, already enabled [ 315.845605][ T29] audit: type=1326 audit(823.213:26060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.9.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fd5f634e929 code=0x7ffc0000 [ 315.845688][ T29] audit: type=1326 audit(823.213:26061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.9.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f634e929 code=0x7ffc0000 [ 315.845711][ T29] audit: type=1326 audit(823.213:26062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.9.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f634e929 code=0x7ffc0000 [ 315.845742][ T29] audit: type=1326 audit(823.213:26063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.9.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5f634e929 code=0x7ffc0000 [ 315.909644][T20527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.909757][T20527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.486371][T20548] netlink: 830 bytes leftover after parsing attributes in process `syz.9.5171'. [ 316.537094][T20553] xt_hashlimit: size too large, truncated to 1048576 [ 316.775633][T20567] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5178'. [ 316.902406][T20588] netlink: 'syz.8.5184': attribute type 10 has an invalid length. [ 317.153076][T20603] siw: device registration error -23 [ 317.200236][T20607] loop9: detected capacity change from 0 to 2048 [ 317.217447][T20607] EXT4-fs: test_dummy_encryption option not supported [ 317.558579][T20645] xt_hashlimit: max too large, truncated to 1048576 [ 317.599882][T20644] macvtap7: entered promiscuous mode [ 317.599934][T20644] macvtap7: entered allmulticast mode [ 317.601714][T20644] 8021q: adding VLAN 0 to HW filter on device macvtap7 [ 317.792508][T20663] vhci_hcd: invalid port number 11 [ 317.792541][T20663] vhci_hcd: default hub control req: 6031 v0000 i000b l1 [ 317.909720][T20667] xt_hashlimit: max too large, truncated to 1048576 [ 317.950568][T20669] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 318.038741][T20673] netlink: 'syz.2.5216': attribute type 1 has an invalid length. [ 318.322104][ T36] page_pool_release_retry() stalled pool shutdown: id 117, 2 inflight 60 sec [ 318.604089][T20684] vlan2: entered allmulticast mode [ 318.662632][T20684] __nla_validate_parse: 5 callbacks suppressed [ 318.662647][T20684] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5220'. [ 318.737272][T20694] netlink: 'syz.4.5222': attribute type 10 has an invalid length. [ 318.745181][T20694] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5222'. [ 318.790096][T20698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5225'. [ 318.953237][T20708] vxcan1 speed is unknown, defaulting to 1000 [ 319.051102][T20708] lo speed is unknown, defaulting to 1000 [ 320.393712][T20741] Invalid ELF header magic: != ELF [ 320.417662][T20745] siw: device registration error -23 [ 320.512456][ T29] kauditd_printk_skb: 634 callbacks suppressed [ 320.512473][ T29] audit: type=1326 audit(827.523:26698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20742 comm="syz.8.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4833ce929 code=0x7ffc0000 [ 320.543098][ T29] audit: type=1326 audit(827.542:26699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20742 comm="syz.8.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe4833c58e7 code=0x7ffc0000 [ 320.566110][ T29] audit: type=1326 audit(827.542:26700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20742 comm="syz.8.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe48336ab19 code=0x7ffc0000 [ 320.589140][ T29] audit: type=1326 audit(827.542:26701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20742 comm="syz.8.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe4833c58e7 code=0x7ffc0000 [ 320.612165][ T29] audit: type=1326 audit(827.542:26702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20742 comm="syz.8.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe48336ab19 code=0x7ffc0000 [ 320.635081][ T29] audit: type=1326 audit(827.542:26703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20742 comm="syz.8.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe4833c58e7 code=0x7ffc0000 [ 320.658095][ T29] audit: type=1326 audit(827.542:26704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20742 comm="syz.8.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe48336ab19 code=0x7ffc0000 [ 320.681031][ T29] audit: type=1326 audit(827.542:26705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20742 comm="syz.8.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe4833c58e7 code=0x7ffc0000 [ 320.704011][ T29] audit: type=1326 audit(827.542:26706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20742 comm="syz.8.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe48336ab19 code=0x7ffc0000 [ 320.726941][ T29] audit: type=1326 audit(827.542:26707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20742 comm="syz.8.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe4833c58e7 code=0x7ffc0000 [ 320.940704][T20759] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5247'. [ 320.955027][T20759] macvtap7: entered promiscuous mode [ 320.960523][T20759] macvtap7: entered allmulticast mode [ 320.971294][T20760] can0: slcan on ttyS3. [ 321.010472][T20760] can0 (unregistered): slcan off ttyS3. [ 321.113788][T20776] netlink: 'syz.4.5252': attribute type 1 has an invalid length. [ 321.129858][T20778] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 321.163031][T20780] vxcan1 speed is unknown, defaulting to 1000 [ 321.194897][T20780] lo speed is unknown, defaulting to 1000 [ 321.788020][T20786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5256'. [ 321.817060][T20788] FAULT_INJECTION: forcing a failure. [ 321.817060][T20788] name failslab, interval 1, probability 0, space 0, times 0 [ 321.829791][T20788] CPU: 0 UID: 0 PID: 20788 Comm: syz.2.5257 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 321.829818][T20788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.829831][T20788] Call Trace: [ 321.829837][T20788] [ 321.829845][T20788] __dump_stack+0x1d/0x30 [ 321.829942][T20788] dump_stack_lvl+0xe8/0x140 [ 321.829959][T20788] dump_stack+0x15/0x1b [ 321.829973][T20788] should_fail_ex+0x265/0x280 [ 321.830001][T20788] should_failslab+0x8c/0xb0 [ 321.830042][T20788] kmem_cache_alloc_noprof+0x50/0x310 [ 321.830107][T20788] ? audit_log_start+0x365/0x6c0 [ 321.830135][T20788] audit_log_start+0x365/0x6c0 [ 321.830198][T20788] ? vfs_readv+0x541/0x690 [ 321.830219][T20788] audit_seccomp+0x48/0x100 [ 321.830245][T20788] ? __seccomp_filter+0x68c/0x10d0 [ 321.830361][T20788] __seccomp_filter+0x69d/0x10d0 [ 321.830391][T20788] __secure_computing+0x82/0x150 [ 321.830409][T20788] syscall_trace_enter+0xcf/0x1e0 [ 321.830432][T20788] do_syscall_64+0xac/0x200 [ 321.830451][T20788] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 321.830541][T20788] ? clear_bhb_loop+0x40/0x90 [ 321.830563][T20788] ? clear_bhb_loop+0x40/0x90 [ 321.830591][T20788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.830614][T20788] RIP: 0033:0x7fefef82d33c [ 321.830629][T20788] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 321.830646][T20788] RSP: 002b:00007fefede97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 321.830663][T20788] RAX: ffffffffffffffda RBX: 00007fefefa55fa0 RCX: 00007fefef82d33c [ 321.830688][T20788] RDX: 000000000000000f RSI: 00007fefede970a0 RDI: 0000000000000004 [ 321.830701][T20788] RBP: 00007fefede97090 R08: 0000000000000000 R09: 0000000000000000 [ 321.830712][T20788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.830723][T20788] R13: 0000000000000000 R14: 00007fefefa55fa0 R15: 00007ffdb0d6cb68 [ 321.830775][T20788] [ 322.144151][T20799] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.5262' sets config #1 [ 322.157052][T20801] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5261'. [ 322.170362][T20801] macvtap9: entered promiscuous mode [ 322.175951][T20801] macvtap9: entered allmulticast mode [ 322.294522][T20809] loop9: detected capacity change from 0 to 512 [ 322.304362][T20809] EXT4-fs: Ignoring removed mblk_io_submit option [ 322.310940][T20809] EXT4-fs: Ignoring removed bh option [ 322.320910][T20809] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 322.343888][T20809] EXT4-fs (loop9): 1 truncate cleaned up [ 322.361657][T20809] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.403949][T20809] netlink: 'syz.9.5264': attribute type 1 has an invalid length. [ 322.447170][T15033] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.464583][T20813] netlink: 100 bytes leftover after parsing attributes in process `syz.9.5265'. [ 322.544111][T20821] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5269'. [ 322.560215][T20817] FAULT_INJECTION: forcing a failure. [ 322.560215][T20817] name failslab, interval 1, probability 0, space 0, times 0 [ 322.572939][T20817] CPU: 0 UID: 0 PID: 20817 Comm: syz.2.5268 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 322.573027][T20817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.573039][T20817] Call Trace: [ 322.573045][T20817] [ 322.573053][T20817] __dump_stack+0x1d/0x30 [ 322.573093][T20817] dump_stack_lvl+0xe8/0x140 [ 322.573109][T20817] dump_stack+0x15/0x1b [ 322.573123][T20817] should_fail_ex+0x265/0x280 [ 322.573205][T20817] should_failslab+0x8c/0xb0 [ 322.573224][T20817] __kmalloc_noprof+0xa5/0x3e0 [ 322.573244][T20817] ? __crypto_alloc_tfmgfp+0xb6/0x220 [ 322.573265][T20817] __crypto_alloc_tfmgfp+0xb6/0x220 [ 322.573363][T20817] __crypto_alloc_tfm+0x25/0x30 [ 322.573381][T20817] crypto_spawn_tfm+0x62/0xb0 [ 322.573408][T20817] skcipher_init_tfm_simple+0x30/0x70 [ 322.573486][T20817] ? __pfx_skcipher_init_tfm_simple+0x10/0x10 [ 322.573507][T20817] crypto_skcipher_init_tfm+0x105/0x120 [ 322.573528][T20817] crypto_create_tfm_node+0x108/0x250 [ 322.573597][T20817] crypto_spawn_tfm2+0x43/0x80 [ 322.573619][T20817] crypto_gcm_init_tfm+0x56/0x120 [ 322.573715][T20817] ? __pfx_crypto_gcm_init_tfm+0x10/0x10 [ 322.573740][T20817] crypto_aead_init_tfm+0x9d/0xc0 [ 322.573766][T20817] crypto_create_tfm_node+0x108/0x250 [ 322.573864][T20817] crypto_alloc_tfm_node+0xdc/0x2b0 [ 322.573885][T20817] crypto_alloc_aead+0x2d/0x40 [ 322.573914][T20817] tipc_crypto_key_init+0xc6/0x560 [ 322.573982][T20817] ? tipc_node_find_by_id+0x188/0x1c0 [ 322.574004][T20817] tipc_nl_node_set_key+0x539/0x670 [ 322.574031][T20817] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 322.574056][T20817] genl_family_rcv_msg_doit+0x140/0x1b0 [ 322.574162][T20817] genl_rcv_msg+0x422/0x460 [ 322.574181][T20817] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 322.574207][T20817] netlink_rcv_skb+0x120/0x220 [ 322.574254][T20817] ? __pfx_genl_rcv_msg+0x10/0x10 [ 322.574278][T20817] genl_rcv+0x28/0x40 [ 322.574296][T20817] netlink_unicast+0x5a5/0x680 [ 322.574321][T20817] netlink_sendmsg+0x58b/0x6b0 [ 322.574366][T20817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.574381][T20817] __sock_sendmsg+0x145/0x180 [ 322.574403][T20817] ____sys_sendmsg+0x31e/0x4e0 [ 322.574433][T20817] ___sys_sendmsg+0x17b/0x1d0 [ 322.574470][T20817] __x64_sys_sendmsg+0xd4/0x160 [ 322.574507][T20817] x64_sys_call+0x2999/0x2fb0 [ 322.574571][T20817] do_syscall_64+0xd2/0x200 [ 322.574621][T20817] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 322.574642][T20817] ? clear_bhb_loop+0x40/0x90 [ 322.574660][T20817] ? clear_bhb_loop+0x40/0x90 [ 322.574678][T20817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.574769][T20817] RIP: 0033:0x7fefef82e929 [ 322.574781][T20817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.574845][T20817] RSP: 002b:00007fefede97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.574861][T20817] RAX: ffffffffffffffda RBX: 00007fefefa55fa0 RCX: 00007fefef82e929 [ 322.574872][T20817] RDX: 0000000004008014 RSI: 0000200000000100 RDI: 0000000000000009 [ 322.574883][T20817] RBP: 00007fefede97090 R08: 0000000000000000 R09: 0000000000000000 [ 322.574893][T20817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 322.574973][T20817] R13: 0000000000000000 R14: 00007fefefa55fa0 R15: 00007ffdb0d6cb68 [ 322.575000][T20817] [ 322.969156][T20829] netlink: 'syz.9.5272': attribute type 6 has an invalid length. [ 323.022107][T20837] netlink: 'syz.4.5275': attribute type 1 has an invalid length. [ 323.063621][T20841] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5277'. [ 323.095813][T20845] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 323.192968][T20852] netlink: 'syz.4.5281': attribute type 10 has an invalid length. [ 323.200865][T20852] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5281'. [ 323.343530][T20860] FAULT_INJECTION: forcing a failure. [ 323.343530][T20860] name failslab, interval 1, probability 0, space 0, times 0 [ 323.356273][T20860] CPU: 0 UID: 0 PID: 20860 Comm: syz.4.5284 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 323.356291][T20860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.356299][T20860] Call Trace: [ 323.356303][T20860] [ 323.356307][T20860] __dump_stack+0x1d/0x30 [ 323.356435][T20860] dump_stack_lvl+0xe8/0x140 [ 323.356446][T20860] dump_stack+0x15/0x1b [ 323.356455][T20860] should_fail_ex+0x265/0x280 [ 323.356472][T20860] should_failslab+0x8c/0xb0 [ 323.356485][T20860] __kmalloc_noprof+0xa5/0x3e0 [ 323.356559][T20860] ? alloc_pipe_info+0x1c9/0x350 [ 323.356577][T20860] alloc_pipe_info+0x1c9/0x350 [ 323.356628][T20860] splice_direct_to_actor+0x592/0x680 [ 323.356677][T20860] ? kstrtouint_from_user+0x9f/0xf0 [ 323.356693][T20860] ? __pfx_direct_splice_actor+0x10/0x10 [ 323.356708][T20860] ? __rcu_read_unlock+0x4f/0x70 [ 323.356757][T20860] ? get_pid_task+0x96/0xd0 [ 323.356776][T20860] ? avc_policy_seqno+0x15/0x30 [ 323.356790][T20860] ? selinux_file_permission+0x1e4/0x320 [ 323.356803][T20860] do_splice_direct+0xda/0x150 [ 323.356882][T20860] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 323.356913][T20860] do_sendfile+0x380/0x650 [ 323.357002][T20860] __x64_sys_sendfile64+0x105/0x150 [ 323.357027][T20860] x64_sys_call+0xb39/0x2fb0 [ 323.357043][T20860] do_syscall_64+0xd2/0x200 [ 323.357054][T20860] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 323.357069][T20860] ? clear_bhb_loop+0x40/0x90 [ 323.357153][T20860] ? clear_bhb_loop+0x40/0x90 [ 323.357165][T20860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.357177][T20860] RIP: 0033:0x7f1d6c2ce929 [ 323.357193][T20860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.357240][T20860] RSP: 002b:00007f1d6a937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 323.357251][T20860] RAX: ffffffffffffffda RBX: 00007f1d6c4f5fa0 RCX: 00007f1d6c2ce929 [ 323.357259][T20860] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 323.357265][T20860] RBP: 00007f1d6a937090 R08: 0000000000000000 R09: 0000000000000000 [ 323.357272][T20860] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000001 [ 323.357280][T20860] R13: 0000000000000000 R14: 00007f1d6c4f5fa0 R15: 00007ffd16820338 [ 323.357290][T20860] [ 323.708382][T20866] netlink: 'syz.4.5287': attribute type 1 has an invalid length. [ 323.926704][T20875] vlan0: entered allmulticast mode [ 324.142033][T20879] __nla_validate_parse: 1 callbacks suppressed [ 324.142051][T20879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5292'. [ 324.244084][T20887] netlink: 'syz.6.5293': attribute type 10 has an invalid length. [ 324.251997][T20887] netlink: 168 bytes leftover after parsing attributes in process `syz.6.5293'. [ 324.333082][T20893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20893 comm=syz.8.5296 [ 324.387994][T20900] netlink: 'syz.9.5299': attribute type 10 has an invalid length. [ 324.395925][T20900] netlink: 168 bytes leftover after parsing attributes in process `syz.9.5299'. [ 324.399257][T20897] can: request_module (can-proto-0) failed. [ 324.431814][T20902] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5300'. [ 324.444970][T20904] netlink: 'syz.9.5301': attribute type 10 has an invalid length. [ 324.461437][T20902] macvtap8: entered promiscuous mode [ 324.472966][T20902] macvtap8: entered allmulticast mode [ 324.487171][T20904] macvlan1: entered allmulticast mode [ 324.503857][T20904] veth1_vlan: entered allmulticast mode [ 324.511336][T20904] macvlan1: entered promiscuous mode [ 324.517605][T20904] team0: Port device macvlan1 added [ 324.545442][T20909] xt_hashlimit: size too large, truncated to 1048576 [ 324.639984][T20916] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5306'. [ 324.650576][T20918] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5307'. [ 324.814091][T20938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5312'. [ 324.843682][T20938] macvtap11: entered promiscuous mode [ 324.855571][T20938] macvtap11: entered allmulticast mode [ 324.897154][T20943] netlink: 'syz.6.5315': attribute type 1 has an invalid length. [ 324.933875][T20946] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 325.071015][T20950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5318'. [ 325.088348][T20950] macvtap12: entered promiscuous mode [ 325.094488][T20950] macvtap12: entered allmulticast mode [ 325.109293][T20952] netlink: 'syz.8.5319': attribute type 10 has an invalid length. [ 325.117281][T20952] netlink: 168 bytes leftover after parsing attributes in process `syz.8.5319'. [ 325.177661][T20963] FAULT_INJECTION: forcing a failure. [ 325.177661][T20963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.190739][T20963] CPU: 1 UID: 0 PID: 20963 Comm: syz.2.5323 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 325.190764][T20963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.190775][T20963] Call Trace: [ 325.190782][T20963] [ 325.190789][T20963] __dump_stack+0x1d/0x30 [ 325.190826][T20963] dump_stack_lvl+0xe8/0x140 [ 325.190845][T20963] dump_stack+0x15/0x1b [ 325.190929][T20963] should_fail_ex+0x265/0x280 [ 325.190956][T20963] should_fail+0xb/0x20 [ 325.190980][T20963] should_fail_usercopy+0x1a/0x20 [ 325.191019][T20963] _copy_from_user+0x1c/0xb0 [ 325.191035][T20963] memdup_user+0x5e/0xd0 [ 325.191056][T20963] strndup_user+0x68/0xb0 [ 325.191077][T20963] __se_sys_mount+0x4d/0x2e0 [ 325.191109][T20963] ? fput+0x8f/0xc0 [ 325.191137][T20963] ? ksys_write+0x192/0x1a0 [ 325.191170][T20963] __x64_sys_mount+0x67/0x80 [ 325.191260][T20963] x64_sys_call+0xd36/0x2fb0 [ 325.191281][T20963] do_syscall_64+0xd2/0x200 [ 325.191297][T20963] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 325.191323][T20963] ? clear_bhb_loop+0x40/0x90 [ 325.191344][T20963] ? clear_bhb_loop+0x40/0x90 [ 325.191421][T20963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.191444][T20963] RIP: 0033:0x7fefef82e929 [ 325.191475][T20963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.191491][T20963] RSP: 002b:00007fefede97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 325.191507][T20963] RAX: ffffffffffffffda RBX: 00007fefefa55fa0 RCX: 00007fefef82e929 [ 325.191518][T20963] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 325.191600][T20963] RBP: 00007fefede97090 R08: 0000200000000140 R09: 0000000000000000 [ 325.191614][T20963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.191628][T20963] R13: 0000000000000000 R14: 00007fefefa55fa0 R15: 00007ffdb0d6cb68 [ 325.191645][T20963] [ 325.393480][T20958] Restarting kernel threads ... [ 325.407190][T20958] Done restarting kernel threads. [ 325.443720][T20970] siw: device registration error -23 [ 325.498877][T20985] netlink: 'syz.9.5331': attribute type 10 has an invalid length. [ 325.506794][T20985] netlink: 168 bytes leftover after parsing attributes in process `syz.9.5331'. [ 325.566647][T20997] FAULT_INJECTION: forcing a failure. [ 325.566647][T20997] name failslab, interval 1, probability 0, space 0, times 0 [ 325.579479][T20997] CPU: 1 UID: 0 PID: 20997 Comm: syz.8.5338 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 325.579510][T20997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.579559][T20997] Call Trace: [ 325.579583][T20997] [ 325.579592][T20997] __dump_stack+0x1d/0x30 [ 325.579614][T20997] dump_stack_lvl+0xe8/0x140 [ 325.579636][T20997] dump_stack+0x15/0x1b [ 325.579653][T20997] should_fail_ex+0x265/0x280 [ 325.579688][T20997] ? legacy_init_fs_context+0x31/0x80 [ 325.579789][T20997] should_failslab+0x8c/0xb0 [ 325.579808][T20997] __kmalloc_cache_noprof+0x4c/0x320 [ 325.579836][T20997] legacy_init_fs_context+0x31/0x80 [ 325.579865][T20997] alloc_fs_context+0x3ec/0x4e0 [ 325.579946][T20997] fs_context_for_mount+0x22/0x30 [ 325.579971][T20997] do_new_mount+0xe9/0x680 [ 325.579999][T20997] path_mount+0x4a4/0xb20 [ 325.580053][T20997] ? user_path_at+0x109/0x130 [ 325.580077][T20997] __se_sys_mount+0x28f/0x2e0 [ 325.580107][T20997] ? fput+0x8f/0xc0 [ 325.580131][T20997] __x64_sys_mount+0x67/0x80 [ 325.580182][T20997] x64_sys_call+0xd36/0x2fb0 [ 325.580204][T20997] do_syscall_64+0xd2/0x200 [ 325.580246][T20997] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 325.580273][T20997] ? clear_bhb_loop+0x40/0x90 [ 325.580295][T20997] ? clear_bhb_loop+0x40/0x90 [ 325.580314][T20997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.580385][T20997] RIP: 0033:0x7fe4833ce929 [ 325.580398][T20997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.580414][T20997] RSP: 002b:00007fe481a37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 325.580430][T20997] RAX: ffffffffffffffda RBX: 00007fe4835f5fa0 RCX: 00007fe4833ce929 [ 325.580441][T20997] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 325.580451][T20997] RBP: 00007fe481a37090 R08: 0000200000000180 R09: 0000000000000000 [ 325.580464][T20997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.580549][T20997] R13: 0000000000000000 R14: 00007fe4835f5fa0 R15: 00007ffcc786e1a8 [ 325.580570][T20997] [ 325.893187][T21007] siw: device registration error -23 [ 325.911805][T21009] loop9: detected capacity change from 0 to 512 [ 325.920302][T21009] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.934236][T21015] netlink: 'syz.8.5344': attribute type 4 has an invalid length. [ 325.942119][ T29] kauditd_printk_skb: 1866 callbacks suppressed [ 325.942133][ T29] audit: type=1400 audit(832.526:28572): avc: denied { read open } for pid=21008 comm="syz.9.5342" path="/382/file0/bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 325.970940][ T29] audit: type=1400 audit(832.526:28573): avc: denied { write } for pid=21008 comm="syz.9.5342" name="bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 326.197090][T21016] ================================================================== [ 326.205210][T21016] BUG: KCSAN: data-race in __xa_set_mark / filemap_write_and_wait_range [ 326.213555][T21016] [ 326.215879][T21016] write to 0xffff88810c1546e4 of 4 bytes by task 21009 on cpu 1: [ 326.223594][T21016] __xa_set_mark+0x172/0x1a0 [ 326.228197][T21016] __folio_mark_dirty+0x3af/0x4d0 [ 326.233234][T21016] mark_buffer_dirty+0x11e/0x210 [ 326.238182][T21016] block_write_end+0x12e/0x210 [ 326.242962][T21016] ext4_write_end+0x13a/0x730 [ 326.247655][T21016] ext4_da_write_end+0x70/0x810 [ 326.252522][T21016] generic_perform_write+0x30f/0x490 [ 326.257994][T21016] ext4_buffered_write_iter+0x1ee/0x3c0 [ 326.263552][T21016] ext4_file_write_iter+0xdbf/0xf00 [ 326.268761][T21016] iter_file_splice_write+0x5f2/0x970 [ 326.274144][T21016] direct_splice_actor+0x156/0x2a0 [ 326.279269][T21016] splice_direct_to_actor+0x312/0x680 [ 326.284655][T21016] do_splice_direct+0xda/0x150 [ 326.289436][T21016] do_sendfile+0x380/0x650 [ 326.293874][T21016] __x64_sys_sendfile64+0x105/0x150 [ 326.299083][T21016] x64_sys_call+0xb39/0x2fb0 [ 326.303684][T21016] do_syscall_64+0xd2/0x200 [ 326.308195][T21016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.314091][T21016] [ 326.316413][T21016] read to 0xffff88810c1546e4 of 4 bytes by task 21016 on cpu 0: [ 326.324056][T21016] filemap_write_and_wait_range+0xfc/0x340 [ 326.329881][T21016] ext4_file_write_iter+0xe04/0xf00 [ 326.335095][T21016] iter_file_splice_write+0x5f2/0x970 [ 326.340480][T21016] direct_splice_actor+0x156/0x2a0 [ 326.345608][T21016] splice_direct_to_actor+0x312/0x680 [ 326.350990][T21016] do_splice_direct+0xda/0x150 [ 326.355769][T21016] do_sendfile+0x380/0x650 [ 326.360195][T21016] __x64_sys_sendfile64+0x105/0x150 [ 326.365398][T21016] x64_sys_call+0xb39/0x2fb0 [ 326.370008][T21016] do_syscall_64+0xd2/0x200 [ 326.374513][T21016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.380401][T21016] [ 326.382715][T21016] value changed: 0x00000021 -> 0x0a000021 [ 326.388425][T21016] [ 326.390742][T21016] Reported by Kernel Concurrency Sanitizer on: [ 326.396879][T21016] CPU: 0 UID: 0 PID: 21016 Comm: syz.9.5342 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 326.409372][T21016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.419425][T21016] ================================================================== [ 326.840486][T15033] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.