last executing test programs: 1m53.364574905s ago: executing program 3 (id=11968): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40050) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x100000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000280)=ANY=[], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/685], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x20008000) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000fc0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x22, 0x0, 0x14}, @mpls={[{0x1}], @ipv6=@dccp_packet={0x4, 0x6, "80cc05", 0x3a4, 0x21, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[@hopopts={0x29, 0x45, '\x00', [@ra={0x5, 0x2, 0x8000}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x1, 0x2c, "04b046ab57e18db918f86a8c2d83fa5b58a41d20e707f3b87c7c44985a87cf120412a24f9b4d700ffbd84dc7"}, @generic={0x40, 0x1f6, "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"}]}, @srh={0x33, 0x8, 0x4, 0x4, 0x4, 0x40, 0x1, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x3b}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}]}, @routing={0x62, 0x2, 0x1, 0x5, 0x0, [@mcast2]}, @hopopts={0x6, 0x3, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ra={0x5, 0x2, 0x26ad}, @pad1, @enc_lim={0x4, 0x1, 0x7}]}, @fragment={0x33, 0x0, 0x4b, 0x0, 0x0, 0x2, 0x65}, @srh={0x3a, 0xa, 0x4, 0x5, 0xa1, 0x10, 0x0, [@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], {{0x4e22, 0x4e24, 0x4, 0x1, 0x5, 0x0, 0x0, 0x9, 0x0, "d6c804", 0xe, "f19d16"}, "6ffd17951d1f5f00ae88bc48ceaedff66eeec53206c0e98a4b73be44f91a092677b9830cb7d741b7ffc68917e4a1ed7fc79354000c77817f5eb54b1b26e5168c35b8c0ed3a0cbfe1cca68dda80a2d8556f92265db43d079083c7208e3899a95bd230e1550d23708d665bf1b99147b614e508d3e6"}}}}}, 0x3de) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$nl_generic(0x10, 0x3, 0x10) 1m52.875427502s ago: executing program 3 (id=11972): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r3, 0x0, 0x50) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r5 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, &(0x7f00000003c0), 0x0, 0x8) tkill(r5, 0x7) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000a00)={0x0, 0xffffffff, 0x1, [0x8, 0x9, 0x6, 0x1, 0x7], [0x401, 0x1, 0xb, 0xc1f6, 0x4, 0x4, 0x1, 0xfffffffffffffffb, 0xa, 0xffffffffffffff98, 0x7e, 0xd, 0x3, 0x7, 0x2, 0x5, 0x3, 0x800, 0x9, 0xfc, 0x2, 0xff, 0x9, 0x3, 0x5, 0x4, 0x1, 0x8, 0x0, 0x3, 0x2, 0x4, 0xfffffffffffffff8, 0x33, 0x2, 0x0, 0x2, 0x40, 0xa1f9, 0x7ff, 0xc98, 0x9, 0x1, 0xfffffffffffffff3, 0x0, 0x371817c0, 0xc, 0xfaba96c, 0x7, 0x3ff, 0x5, 0x8000000000000001, 0x101, 0x1, 0x8404, 0xffff, 0x3, 0x2, 0x2d, 0x0, 0x1, 0xee7a, 0x8000000000000001, 0x1, 0x3c0000, 0x99ca, 0xffffffffffffffff, 0x9, 0x1, 0x8001, 0xe846, 0x40, 0xfff, 0x7046385, 0xfffffffffffffff1, 0x1, 0x7, 0x7ff, 0x1ff, 0x16400000, 0x100000001, 0x7, 0x5, 0xd2, 0xc1b, 0x4, 0x1, 0xfffffffffffffffa, 0x0, 0x40, 0x2, 0x6, 0x5, 0x9, 0x9, 0x4, 0x100000001, 0x0, 0x65e, 0x7, 0x6, 0x800, 0x3, 0xfffffffffffffffb, 0x10000, 0x2, 0x8000000000000001, 0xffffffffffff8601, 0xfffffffffffffff0, 0x40, 0x5, 0xfffffffffffffff9, 0x6, 0x7, 0x8, 0x1, 0x6, 0x8, 0x0, 0x81, 0xe]}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000001fc0)={0x0, 0x4, 0x401, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000023c0)={0x0, "a79e707588bfc8de091af8e93750354d"}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000003800)={0x8, 0x0, {0x400000000, @usage=0x6, r6, 0x8, 0x37fa75d8, 0x9, 0x6bc1, 0xf, 0xa0, @usage=0x2, 0x0, 0x9, [0xffffffffffffffff, 0x0, 0x5, 0x9, 0x7, 0xd7]}, {0x4, @struct={0x7}, r7, 0x6b5f, 0x3, 0x8, 0xe3f3, 0x7, 0xc1, @struct={0x84}, 0x1, 0x6, [0x7fffffff, 0x10001, 0x9, 0x8, 0x6, 0x1]}, {0x5, @struct={0x2, 0x3}, r8, 0x3, 0x8000000000000000, 0x8, 0x0, 0x3, 0x46b, @struct={0x2, 0xfffffffe}, 0x0, 0x1, [0x8, 0x8, 0x101, 0xd7, 0x5, 0xfffffffffffffff8]}, {0x4, 0x7fffffffffffffff}}) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "df1cd007725c59f703000000cf8aca036ba5ec99a3374fc96065bbcfcb88eb99e8960dd65f31"}, 0x31) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140), 0x14) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, 0x0) syz_clone(0x4001200, 0x0, 0x35, 0x0, 0x0, 0x0) 1m52.530774696s ago: executing program 3 (id=11979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0106000500000000000009000000240004801300010062726f"], 0x38}}, 0x0) (async) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES64=r0, @ANYRESHEX], 0xf8}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="850000008b00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000007000000000000000080000000000000", @ANYRES32, @ANYBLOB="00f00806fd132c0beba6263bb38eaf5dabd84d864b9e30eb160977ae23f27536c8460e7fd3121d7dc3c096d4bcf5b4995a5ed70ae254e22008a796a088deccf4d5ef97e3ff8f98269069c24f3c51c2fbecb8b6c3545ece11939efd4fbe73c7d473429e27054bb75a767125b5fbb0b4e5ee63a91f570f53abf5cc3f814ccbb5cf48d145c7429ead1ac441340675edd2e9b043cf95ff8f5d2bc3b2da9e2d7db0a31b8e21ce49fd330303e998786fc10cb9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0xb, &(0x7f0000001080)=ANY=[@ANYBLOB="95000000000000001800190000f8ffff000000004d7e00001801caf3742e2fcf730806ce63eb9f6a2d130000696c6c2500000000002020207b1af8ff00000000bfa100004000000007010000f8ffffffb702000008000000b7030000020000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000c00)='dlm_send\x00', r4, 0x0, 0xeb6}, 0x18) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') (async) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006040a0000000d0085a168d0bf46d32345653600648d04000b000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) dup(r8) r9 = syz_open_pts(r6, 0x0) poll(&(0x7f00000004c0)=[{0xffffffffffffffff, 0x2001}, {r9, 0x20}], 0x2, 0x2) ioctl$TCSETS2(r9, 0x402c542b, &(0x7f0000000000)={0x2, 0xf, 0x0, 0x7, 0x8, "9afce4aeac9acbb49b00541d7d6a304eb7f873", 0xffff, 0x3}) (async) sendmsg$nl_generic(r7, &(0x7f0000000c80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="4c0000009f820105c957095abd5a8318c010892d2306f3fb0cf7e8498ee8084f029e72955b3f35cb509316ca1173dbb80d92be6bf531edeadd6a25cf0edc78a3ad6710e8a3ff89c196c4e55c42ffff913f62d0b09034cb440d8f2456e46f46fe5c222073285af11c7048233590879c9fedb893b18f5107c78695f104f41e8002d0dbac743e7652147f95c922ad05debc75fb717b5d8b2eca34ae27e9735e3721d8edb3eac7af3e52a4b1887b0d737f5b4cd723feeb413e424aafc8bfd4135f5683dc9e8c1fee83cfc55363db4c89f99c567509004b0c00ac800400c729bd6b53c9a9b26f92a1e6c35dfe95688004009b8008003580040001803554249b90c6a596b60a4bf7089e1239929eb42446744a62ea552c2b4e754d9ce9d77b5a8da231b0422e425a6b0e52cf94a75ce2b744bba316e7a93792af98ad641c11000000000000000000000000000000006b9521bb38cc6676b96bcf0b37d92164970f4c4ab4bca544ed1fdc0cb51293f89ace659d277eb608100ccb12027069ad9bbf643e9a3ca922358cf244c0f1d3ddfb2d6a828cee50361974d090b190706bc4e2e5e227f91f3be23a752fa497cfe6572e0d568e4f394b9ccc5f51cc3543669be8ded6529b74be681a394d68edb59fc20faadcb00d65da018f5fc00ee345a1d5f513031ab610618107fca669f103b6af4407a426c64a100bfb0ab2b9b50352a06d86a70b81b1b92355dd7ca3063e16c6e640dc94e8f02f5e0282c689acd8d1f5152926aee6c3b866f6123e071aed3b97da"], 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) r10 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r10, &(0x7f0000000a40)=[{&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x7fffffff, @mcast1, 0x8}, 0x1c, &(0x7f0000000500), 0x0, &(0x7f0000000580), 0x0, 0x404c800}, {&(0x7f0000000600)=@in6={0xa, 0x4e20, 0x7, @local, 0xfff}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000640)="479072ff4c30a8ab416b698cf91541d85b33c73bff2915b52c31013b71f89f17585feb17139632576cb75015391905b3", 0x30}, {&(0x7f0000000680)="a6ccbc3b33d4cff1b3f7c80dc787570409711ca20d7f9e3674c1885e84ff9463f2cc6a0a5d11fa1607b285c4f2b2f9adcbbe9cb6c01eb77c31144b3e6f85daccdbe24f8179342e276f52d4f081a4d0fe59bab4233682975e397aa7deb97fd8187d30deb691147e728544aefbd5df3a76b8d2fccae0c15c9c3d410d11b47c87f050e7bc396dba5df0936d90b2fef7f023cae7f5e31a4361bd86184457f0fd62080240ab1d524fb9f186721cbaeea290d37a69b335d14503f8b3f124f1f30543fd929e766653f09671440400092b602d03c67bb742", 0xd4}, {&(0x7f0000000780)="5ae3e3e986caea0e638f572d0138f4b632e2cfa75c78a600482d29891631ee0cd178d0e1b1cf5ad7d85fc2e472e039b7455f42f6fbddb647ba5a2b7882046f766e364c8397c5925b161f25278ff7a5a853adc6837460b70fb4360b7046924e175a5b6f4a", 0x64}, {&(0x7f0000001100)="a164821b3911b17692434955b729a184188271fdaf5972047b9213ac016969fecf5395a49022fac7e7be309c4d498b1d1bafe43e9a6ad7e8a551dfd8818b27a6dec7d874def50350c77a4d56f14231cf7154f8a9fe261cd45790dfd9e7476662359891c982af099bebca9b0b", 0x6c}, {&(0x7f0000000840)="17a01a7593058ee33de6229cfdf26350be718101171a215387a751a1babc72c40ce489e7ad1af9788114860040804f56ee6de29d656cfec24b64e5fe4e6c6660af187849f73399c102e9f1ec8656d1c5acc2", 0x52}, {&(0x7f00000008c0)="37f400fd0b2971760de8800248cf9b381f394566cc8640af0654dbfd360a58e97aa8ae665b1b87efd58fb1cd1ceabbab89bb2a49139a9a24799f5cf12289011c93967eefc9b87b93cc316b1efac58cfb643e111ace7853771ddf52e3651a9d2e1f5af87018b3430bed4051a601d2b4df55045a624fced2d0620e354cc2075bcf937e4bb45f202572c35052cc540f629d2212b978184e907d69c7a77c635a6a903258be4e2d39e22e42512e89dbb9c9f0c103d9c4b2", 0xb5}], 0x6, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r8], 0x38, 0x20008000}], 0x2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000ac0)='rxrpc_notify_socket\x00', r3, 0x0, 0x80}, 0x18) 1m52.468292987s ago: executing program 3 (id=11984): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001180)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x1c, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000002000010000000000000000000200200003000000000000000c000200ac1e0001080018004e204e20"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bind$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}, 0x24) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000db4600000000004eed09a560543013653a120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x18) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) setreuid(0x0, 0xee00) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r6, 0x400, 0x1) (async) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="64000000002c9d90567956f45d6575805f01010300000000000000000300000420001640ea00000e0000000000000009fffffff9000000070000000b0000000714001980080001001000000008000200840000001c001700000000050000000500000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20004844) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000000000000000000000bfa200000000000007020000f8ffffffb703000008000000b70480000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000380), &(0x7f00000003c0)=r8}, 0x20) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) (async) umount2(&(0x7f0000000580)='./file0\x00', 0x8) (async) fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 1m52.23314716s ago: executing program 3 (id=11987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) dup(0xffffffffffffffff) mq_open(&(0x7f00000004c0)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) 1m51.880944155s ago: executing program 3 (id=11994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000005140500000000000000000001003d0000000000080003000000000008003d00000000000800030000000000080001"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) dup(0xffffffffffffffff) mq_open(&(0x7f00000004c0)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m51.880280215s ago: executing program 32 (id=11994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000005140500000000000000000001003d0000000000080003000000000008003d00000000000800030000000000080001"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) dup(0xffffffffffffffff) mq_open(&(0x7f00000004c0)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 55.82585904s ago: executing program 2 (id=12781): set_mempolicy(0x3, &(0x7f00000000c0)=0x5, 0xa) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) shutdown(0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x2000011, 0x0, 0x71, 0x0, 0x0, 0x0) 55.716371771s ago: executing program 2 (id=12782): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) dup3(r3, r2, 0x0) 55.600482283s ago: executing program 2 (id=12784): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',version=9p2000']) 54.661688045s ago: executing program 2 (id=12794): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) dup3(r3, r2, 0x0) 54.585926706s ago: executing program 2 (id=12797): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x40) 54.27194261s ago: executing program 2 (id=12802): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 39.215836247s ago: executing program 33 (id=12802): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 4.676663039s ago: executing program 5 (id=13608): set_mempolicy(0x3, &(0x7f00000000c0)=0x5, 0xa) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) shutdown(0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x3}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) preadv(r4, &(0x7f0000000480)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x1, 0x700) ioctl$MON_IOCX_GETX(r4, 0x80089203, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0) write$selinux_load(r8, &(0x7f0000000000)=ANY=[], 0xffa8) 3.733396081s ago: executing program 5 (id=13620): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_bp={0x0, 0xc}, 0x115428, 0x0, 0x0, 0x7, 0x5f4b, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB], 0x64}}, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x10) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, 0xffffffffffffffff, 0x1, 0x2}}, 0x20) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, &(0x7f0000001b80)=[{&(0x7f00000003c0)=ANY=[], 0x14}, {0x0}, {0x0}, {&(0x7f0000001b40)=ANY=[@ANYBLOB], 0x24}], 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1c00000000b239158024d0cb55000000", @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYRES32=r4, @ANYRES32=r7], 0x50, 0x24040094}, 0x80) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r8) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x7, 0x3, "f4"}, @timestamp_addr={0x44, 0xc, 0x9, 0x1, 0x0, [{@empty}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000003c0)='jbd2_submit_inode_data\x00', r1, 0x0, 0x18}, 0x18) r10 = getegid() fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000840)={{}, {}, [{0x2, 0x5}, {0x2, 0x4}, {0x2, 0x2}, {0x2, 0x5}, {0x2, 0x6}, {}, {0x2, 0x3}, {0x2, 0x2, 0xee00}], {0x4, 0x7}, [{0x8, 0x2}, {0x8, 0x4}, {0x8, 0x2}, {0x8, 0x6, r8}, {0x8, 0x3, 0xee00}, {0x8, 0x4, r10}], {0x10, 0x4}}, 0x94, 0x1) chown(&(0x7f0000000180)='./file0\x00', r2, r8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x6, 0x6, 0x702b, 0x9, 0x9, 0x0, 0xffff1250, {0x0, @in6={{0xa, 0x4e20, 0x9, @private2, 0xc}}, 0x6, 0x1, 0xf702, 0x2000, 0x2e338b72}}, &(0x7f0000000700)=0xb0) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) 3.661777442s ago: executing program 6 (id=13622): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000001c00)={{0x1, 0x0, 0x9, 0xc7d1, 0x60000, 0x3ff}, 0x247, [0x46dc, 0x8, 0x4, 0x2, 0x6d5, 0x4, 0x6, 0x4, 0x6, 0x6, 0x0, 0x5, 0x4, 0x80000000, 0x1467, 0x7, 0x7ff, 0x5, 0x8, 0x4, 0x1, 0x9, 0x9, 0x9, 0x9, 0x4, 0x5, 0x2, 0x5, 0x294d, 0x3, 0x6, 0x9, 0x8, 0xf, 0xfffffffc, 0x4, 0x0, 0x8, 0x3, 0x6, 0x6, 0xf, 0x1, 0x7, 0x2, 0x0, 0x35, 0x7ab, 0x7, 0x7fff, 0x7fffffff, 0x2, 0x4, 0x1, 0x200, 0xf, 0xff92, 0x9, 0x5, 0xd, 0x1, 0x9, 0x6, 0x40, 0x833, 0x2, 0x8, 0x1000, 0x2, 0xfffffff8, 0x178, 0x1, 0x2, 0xffffc551, 0x3, 0x6, 0x9, 0x7fffffff, 0x8000, 0x3, 0x4, 0x2, 0x4, 0x1, 0x3, 0x3, 0x0, 0x9, 0x8d3, 0x0, 0x1, 0x200, 0xd, 0x800, 0x8001, 0x3ff, 0x5, 0x7, 0x4624, 0x8, 0x1, 0xaa7, 0x10, 0x4, 0x5, 0x7, 0x401, 0x1b63cc3e, 0x5, 0x8001, 0x1, 0x3, 0x7, 0x3, 0xfffffff7, 0xb, 0x5, 0x4, 0xa, 0x9, 0x0, 0xffff, 0x1034, 0x0, 0x9, 0x9, 0x4, 0x8, 0x7fff, 0xe3d7, 0x6, 0x400, 0x5, 0x0, 0xb, 0xffffdbe3, 0x20000000, 0x2, 0x1, 0x3, 0x6, 0x100, 0x3, 0x0, 0x3, 0xe9, 0x3, 0x3, 0x1, 0x0, 0x0, 0x7fffffff, 0x10001, 0xa, 0x5, 0x6, 0x2d, 0x6, 0x6, 0xc000, 0x3, 0x73e9, 0x7, 0x3, 0x0, 0xffffff00, 0x4, 0x9, 0x7, 0x0, 0x1, 0x7, 0x9, 0xc8c, 0x80000001, 0x0, 0x8, 0xa3db, 0x6, 0x0, 0x0, 0x43e7, 0x8001, 0x95, 0x2, 0x2, 0x9, 0x9, 0x5, 0x3, 0x9, 0x6, 0x0, 0xffff, 0x40b, 0xd970, 0x99, 0x1, 0x7, 0x4, 0xffffffff, 0x4, 0x80000001, 0x4, 0x1, 0x5, 0x8, 0x101, 0x5, 0xffff, 0x800, 0x7ff, 0x2, 0x800, 0x4, 0x343, 0x80000000, 0xa0e8, 0xb172, 0x9, 0x200, 0x8, 0x3, 0x3, 0x5, 0x80d, 0xc0000000, 0x100, 0x9, 0x10000, 0x5, 0x9, 0x7f, 0x4, 0x8001, 0x3, 0x4, 0x5, 0x0, 0xda, 0x4, 0xd8, 0xffffffff, 0x4, 0x5, 0x9, 0xfffffffb, 0xfffffffd, 0x9b4e, 0xc57, 0x6, 0xc, 0x3ff, 0x2, 0x2, 0x3, 0x4, 0x0, 0x401, 0x3, 0x7, 0x674b, 0x9, 0x80000, 0x0, 0x0, 0x5, 0xb784, 0x99a, 0x1, 0x18bc, 0x8, 0x10001, 0xff2f, 0x4, 0x7, 0x9, 0x9, 0x9, 0x5, 0xffffffff, 0x5cf, 0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x9, 0x9fc2, 0xb, 0x7, 0x9, 0x2, 0x1f7, 0x17, 0x2, 0x5, 0x4, 0x3, 0x9, 0x9, 0x3d5, 0x2, 0xf0, 0x9d, 0x4010000, 0x7173, 0x8000, 0x4, 0x7, 0xb, 0x0, 0x800, 0xfffffffb, 0x7, 0x16a, 0x3, 0x2, 0x400, 0x2, 0x5, 0x80000001, 0x2, 0xfffffffd, 0x1db, 0x3, 0x4, 0x5ec110a7, 0x5, 0x0, 0x401, 0x2, 0x100, 0x9, 0xfffffbff, 0x200, 0xcc, 0x4, 0x1ff, 0x9, 0x9, 0x8, 0xc, 0x4, 0x80000000, 0x3, 0x794a70aa, 0x401, 0x2, 0x4, 0x761, 0x6, 0x1, 0x302f, 0x17993fdd, 0x4, 0x0, 0x81, 0x6bf8, 0x4, 0x1, 0x2, 0xffffff4d, 0x4, 0x7, 0x8, 0x1, 0x100, 0xfffe, 0x7, 0x2, 0x9, 0x2, 0x6, 0xffff8000, 0x2, 0x4a52, 0x5, 0x0, 0x80, 0x6000000, 0x7, 0x7, 0x5, 0xffff, 0x600000, 0xffffffff, 0x49b, 0x3, 0x4a9, 0x1, 0x1000, 0x8, 0x4, 0x9, 0x6, 0x6, 0xffffff80, 0x3d9c000, 0x4d, 0x449f89b0, 0x2, 0x7, 0x6, 0x2, 0xecbe, 0x5, 0x5, 0xfffffb87, 0x2, 0x61, 0x7, 0x9, 0x0, 0x9f7, 0x8, 0x3, 0xfffff370, 0x5, 0x5, 0x40, 0x900, 0x30f6ea9e, 0x6, 0x6, 0x2, 0x62, 0x9, 0x2, 0x9, 0x9, 0x5, 0x9, 0x4, 0x94, 0x7fffffff, 0x8, 0x10000, 0x101, 0x1, 0x80, 0x2, 0x7fff, 0x8, 0x1, 0x2, 0x4, 0x8, 0xe9a2, 0x9, 0x8, 0x80, 0x2, 0x3, 0x46bc5aee, 0x400, 0x55ee0, 0xa7d, 0xff, 0x8, 0x800, 0xd, 0x7, 0x100, 0xaf3b, 0xb84, 0x5, 0x1, 0x2, 0x6, 0x4, 0x6, 0x8000, 0x4, 0xff, 0xfffff01b, 0x42, 0x65aa, 0x8, 0x1, 0x2, 0x4, 0x1, 0x2, 0x9, 0x7fffffff, 0x0, 0x400, 0x4, 0x3, 0x40, 0xeda, 0x3, 0x2, 0x4, 0x0, 0x8, 0x81, 0x1, 0x1, 0x7, 0x7e, 0xfffffe01, 0x2, 0x7, 0x10000, 0x7f, 0x0, 0x7, 0xefdf, 0x10000, 0x4, 0x80000001, 0x6, 0xfff, 0x5, 0x9, 0xfff, 0x800, 0x6, 0x6e95, 0x5, 0x4a8, 0x6, 0xa, 0x4, 0x3, 0xfffffff3, 0x4a, 0xff, 0x6, 0xe3, 0x6000, 0xc8, 0xa68, 0x1, 0x7, 0x9, 0xad, 0x7, 0x8, 0x1, 0x3, 0x6, 0x3, 0x8, 0x5, 0x2, 0xc08, 0x0, 0x5, 0x4, 0xe, 0x8, 0x2d5, 0x5, 0x5, 0x2f, 0xa, 0x3, 0xda0e, 0x10000, 0x23d, 0x101, 0xfffffff9, 0xb81e, 0x9, 0xfffffff9, 0x5, 0x6, 0x6b3c, 0x1, 0x3, 0x40, 0x8, 0x9, 0x3, 0x6, 0x6, 0x8, 0x2, 0xb, 0x5, 0x2, 0x68cad995, 0x7f, 0x4, 0x1, 0x8, 0x5, 0x2, 0x3, 0x0, 0x1ff, 0x9, 0x8, 0x5, 0x609e9f8e, 0x3c7, 0x4, 0x7ff, 0x2, 0x7fff, 0x2, 0x5, 0x6, 0x800, 0x9, 0x6, 0x13e, 0x3, 0xdb, 0x80, 0x12c8000, 0x6, 0x7fffffff, 0x9cc, 0x4d7, 0xfffffc00, 0x5, 0x22a, 0x2, 0x4, 0x1, 0x400, 0x3b, 0x3, 0x5, 0x7, 0xe3c, 0x1, 0x7, 0xffff0abe, 0x7, 0x4, 0x2, 0x8, 0xffffff16, 0xbf, 0x800, 0x5, 0x5, 0x1ff, 0xa1fb, 0xfffffff8, 0x6, 0xc5ad, 0x3, 0x8, 0x7, 0x3, 0x9, 0xfff, 0x3, 0x4, 0xc4, 0x9, 0x1, 0x40, 0xffff2742, 0xe881, 0x200, 0x0, 0x2, 0xfffffffc, 0x1, 0x800, 0x47ab, 0x7fffffff, 0x7, 0x7, 0x7fffffff, 0x7, 0x1893, 0x5, 0x7fffffff, 0xffffffff, 0x9, 0x3, 0x1, 0xcc, 0x80000001, 0x8, 0x8, 0x4, 0x8, 0x101, 0x1d, 0x3, 0x8757, 0x9, 0x47c2, 0x9, 0x7, 0x5, 0xe0d, 0x7ff, 0x700000, 0xe, 0x2, 0x10100, 0x9, 0x8, 0x3, 0x1ff, 0x5, 0x4a73, 0x7fffffff, 0x764, 0x81, 0x200, 0x8001, 0x7fffffff, 0x7, 0x5, 0x0, 0xfc, 0xa, 0x54a2f254, 0x8, 0x3, 0x80000000, 0x0, 0x6, 0x0, 0x3, 0x3, 0x9c69, 0xa6, 0x1, 0x8, 0x40, 0x8, 0x1, 0x5, 0x5, 0x3dc674d5, 0x5, 0x2, 0x8, 0x479, 0x3, 0xffffc5bc, 0x7, 0x8, 0x2, 0x3b3a, 0xffffff96, 0x6, 0x5, 0xa, 0x7ff, 0x8001, 0x5, 0x0, 0x4, 0x2900, 0xfe6, 0x5, 0x9, 0x2, 0x7, 0x9, 0x3, 0x3, 0x7ff, 0x6, 0x6, 0xffff7fff, 0x4, 0x6, 0xd3, 0x2, 0x3, 0x7fffffff, 0x7b6, 0x7, 0x2, 0x1, 0x10, 0x6, 0x800, 0x9, 0x372, 0x2, 0xfff, 0x8, 0x348a8e49, 0x8, 0xff000000, 0x7fff, 0xe0c, 0xcb2, 0x9, 0x3, 0x1, 0x9, 0x81, 0x98ba, 0x2a5, 0x80000001, 0x6, 0x7a0, 0xfffffffc, 0x401, 0x101, 0x0, 0x46a, 0x669e, 0x73da, 0x3, 0x8, 0x6, 0x84, 0x8001, 0x3ff, 0x5, 0x100, 0x7, 0x5, 0xe6, 0x0, 0x7, 0xffff, 0x80000000, 0x400, 0x1, 0x7fffffff, 0x9, 0x81, 0x5e, 0x7, 0x2968, 0x4b3, 0x9, 0xfff, 0x9f, 0x9a, 0x489c, 0xfffffffd, 0x9, 0x5, 0x10, 0x8, 0x800, 0x2, 0x1, 0x569, 0x2, 0xa, 0x0, 0x6, 0x5, 0x59ed, 0x4, 0x3, 0xff, 0x5ac, 0x67e74b46, 0x1, 0x7, 0x3ff, 0x7, 0x7, 0x4, 0x81, 0x7, 0x6099, 0x3, 0x80000000, 0x5, 0x1, 0x0, 0x7fffffff, 0x8a, 0x7, 0x7fff, 0xe, 0x8, 0x9, 0x5, 0x4, 0x9, 0x3, 0xfff, 0x4, 0x9, 0x1, 0x7, 0x5, 0x6, 0xffffffff, 0x3c27, 0x7, 0x1, 0x2, 0x5, 0x7, 0x2, 0xfffffff3, 0x3, 0xe5, 0xfffffff7, 0x0, 0x2, 0xa, 0x9, 0x9, 0x1, 0x8ee7, 0x81, 0x25, 0x3, 0x6, 0x4, 0x8, 0x5046, 0x5, 0xb5de, 0x8, 0x2ab, 0x7b3a, 0x52c8, 0x6, 0x6, 0x3, 0x5, 0x7, 0x0, 0x6, 0x2, 0x2d, 0x1, 0x200, 0xd, 0x5, 0x7fff, 0x5, 0xffff, 0x100, 0x9, 0x7f, 0x4, 0x7fffffff, 0x0, 0xd8f, 0x9, 0xfff, 0xce7, 0x7, 0x0, 0x635c, 0x8, 0xfffffffa, 0xfffffff0, 0x9, 0x0, 0xfffffff9, 0x818, 0x1, 0x3, 0x0, 0x2, 0x5, 0x10000, 0xfd, 0x6, 0x800, 0x3, 0xfffffffa, 0x9, 0x3, 0x2, 0x1, 0x6, 0x2, 0x10, 0x1, 0x7, 0x0, 0x4d, 0x2, 0x9, 0x4, 0x5, 0x1, 0xf, 0x2, 0x8, 0x5, 0x87d, 0x8, 0x10001, 0x1ff, 0x9, 0x43, 0x10000, 0xc, 0x3f100, 0xfff, 0x0, 0xcb4, 0x3, 0x5, 0x4, 0x5, 0xa8cf, 0x2, 0x8, 0xfffffffe, 0x5, 0x1, 0x0, 0x4, 0x2, 0x1ff, 0x1, 0x4, 0x8000, 0xdb1c, 0x8, 0x80000000, 0x5]}) getgroups(0x1, &(0x7f0000000140)=[0xffffffffffffffff]) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000580)=""/182) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000004240)=""/4096, 0x1000}], 0x1, &(0x7f0000000800)=""/103, 0x67}, 0x7}, {{&(0x7f0000000880)=@phonet, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000900)=""/136, 0x88}, {&(0x7f00000009c0)=""/6, 0x6}, {&(0x7f0000003c40)=""/176, 0xb0}, {&(0x7f0000003d00)=""/184, 0xb8}, {&(0x7f0000000a00)=""/117, 0x75}, {&(0x7f0000003dc0)=""/71, 0x47}], 0x6, &(0x7f0000003ec0)=""/157, 0x9d}, 0x3}], 0x2, 0x0, &(0x7f0000004000)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000700)={0x0, 0xfffffffffffffffd, 0xbd, 0x2, @scatter={0x1, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/120, 0x78}]}, &(0x7f0000000640)="d1ec89e2b239c6ef22a6c1cfe504c16ca518b319ebb97510cf763596f600123d47641027ac0646b71798427e5d573e9fb8c47ac2fa3a78e11c2dc0f5a533da3ab2affc77ea1a1a850b3a62de297e2b65faccd4d3d296843922017e13216a5f95777e243278c7624c48093e541e3d3051a370701c97598b53794a507b7a4758c5f0c8d82f10918f7452a55e29bcbfa7d3d40386f82a1af8844ede89614964af3731274ca56c6abf77168b69b6bc682e1cd00de7974acd41a4324be7ee12", &(0x7f0000002c40)=""/4096, 0x8d, 0x10001, 0x2, &(0x7f0000000300)}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0xff) 3.304113537s ago: executing program 5 (id=13624): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300"], 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x1023}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r6, @ANYRESHEX, @ANYBLOB="00000000000000001c001a800800058008000200080000003e12"], 0x44}}, 0x20048840) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(r8, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x8, 0x70bd29, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000054}, 0x854) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$caif_seqpacket(0x25, 0x5, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r11, 0x8982, &(0x7f0000000400)={0x7, 'veth1_to_batadv\x00', {0x8}, 0x8}) sendmsg$inet(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r9, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x10003) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffff7}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) 2.964972211s ago: executing program 5 (id=13630): set_mempolicy(0x3, &(0x7f00000000c0)=0x5, 0xa) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) shutdown(0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) syz_clone(0x2000011, 0x0, 0x71, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x1, 0x700) ioctl$MON_IOCX_GETX(r3, 0x80089203, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0xffa8) 2.751246354s ago: executing program 6 (id=13633): set_mempolicy(0x3, &(0x7f00000000c0)=0x5, 0xa) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) syz_clone(0x2000011, 0x0, 0x71, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x1, 0x700) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x80089203, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0xffa8) 2.593876926s ago: executing program 1 (id=13638): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000900)='kfree\x00', r0, 0x0, 0x3}, 0x18) request_key(0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="c1c56fbf325b9ed0205a4231413c4cfe6cf2bb937809b1ca42da4448c6d7a707331b4f2985ef05d998f2c8394288475a285669e45eb57bdd7bd4f9982c35f83c3afcb459697bf231ee6929270c2f97e0dba222f84cd37f4cd4ef5d8a87d4dc4b0801ccec86f29cc84942eab159c000473fe27e77603b5c7a1552c16a32dc41bc009d0d0e84f392757049db02361a1597d406bfcabeffd59ebd8a0de5f0c24308c97ddd496fcd", 0xa6) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x17, 0xa, 0xa01, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x800) r4 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x20, 0x0, 0x7, 0x0, {{0x18, 0x4, 0x2, 0x5, 0x60, 0x65, 0x0, 0xfd, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@generic={0x86, 0xc, "b641ee14043221d7dcd0"}, @rr={0x7, 0x13, 0xcb, [@rand_addr=0x64010101, @multicast2, @multicast1, @remote]}, @ssrr={0x89, 0xf, 0x13, [@private=0xa010101, @remote, @multicast2]}, @generic={0x88, 0xc, "2fc972fbf6d76048240f"}, @end, @end, @timestamp_addr={0x44, 0xc, 0xf4, 0x1, 0x4, [{@loopback}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) fcntl$setown(r3, 0x8, r4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x16, 0x0, 0x3, 0xb14, 0x10000, r5, 0x6, '\x00', r7, r1, 0x0, 0x3, 0x0, 0x0, @void, @value, @value=r1}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r10, 0x0, 0x8) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) 2.507667147s ago: executing program 1 (id=13641): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '{%'}}]}}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) readv(r4, &(0x7f0000001bc0)=[{&(0x7f0000000a00)=""/87, 0x57}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) read$qrtrtun(r4, &(0x7f0000000040)=""/15, 0xf) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f00000000c0)=0x5, 0x4) sendmmsg$inet(r5, &(0x7f0000000580)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x1, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r6, &(0x7f0000001440)=""/126, 0x7e, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x0) 2.401107598s ago: executing program 1 (id=13642): socket(0xa, 0x3, 0x3a) open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.333760529s ago: executing program 4 (id=13643): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) 2.214043731s ago: executing program 1 (id=13644): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x40, 0x3, 0xa0, 0x3}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x8) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendfile(r2, r1, 0x0, 0x3a) 2.163458171s ago: executing program 4 (id=13646): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000640)=ANY=[], 0x0, 0x400003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)=0x81) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x6, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_pts(r2, 0x440) r5 = dup3(r4, r2, 0x0) ioctl$TCSETSW2(r5, 0x5437, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0xb, 0x3, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x11, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x10000000, 0x0, 0x2}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x4, 0x0, 0x0, 0x0, 0x8, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000580), 0x6}, 0x1320, 0x4, 0x3, 0x9, 0x0, 0x800001, 0xfff9, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095", @ANYRES32=r9, @ANYRESHEX=r6, @ANYRESOCT=r0, @ANYBLOB="d0be75c3af02b80f26f9bf8fc9", @ANYRESDEC=r7], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@mcast1, r11}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) 2.158727932s ago: executing program 6 (id=13647): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x140802, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x10) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) io_setup(0xffff, &(0x7f0000001080)) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x30}, 0x40880) 1.997033994s ago: executing program 5 (id=13648): set_mempolicy(0x3, &(0x7f00000000c0)=0x5, 0xa) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) shutdown(0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x2000011, 0x0, 0x71, 0x0, 0x0, 0x0) 1.973321164s ago: executing program 4 (id=13649): openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGETLED(r0, 0x4b31, 0x0) 1.964588704s ago: executing program 0 (id=13650): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.915769895s ago: executing program 0 (id=13651): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x30}, 0x40880) (fail_nth: 2) 1.714688628s ago: executing program 4 (id=13652): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000900)='kfree\x00', r0, 0x0, 0x3}, 0x18) request_key(0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="c1c56fbf325b9ed0205a4231413c4cfe6cf2bb937809b1ca42da4448c6d7a707331b4f2985ef05d998f2c8394288475a285669e45eb57bdd7bd4f9982c35f83c3afcb459697bf231ee6929270c2f97e0dba222f84cd37f4cd4ef5d8a87d4dc4b0801ccec86f29cc84942eab159c000473fe27e77603b5c7a1552c16a32dc41bc009d0d0e84f392757049db02361a1597d406bfcabeffd59ebd8a0de5f0c24308c97ddd496fcd", 0xa6) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x17, 0xa, 0xa01, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x800) r4 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x20, 0x0, 0x7, 0x0, {{0x18, 0x4, 0x2, 0x5, 0x60, 0x65, 0x0, 0xfd, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@generic={0x86, 0xc, "b641ee14043221d7dcd0"}, @rr={0x7, 0x13, 0xcb, [@rand_addr=0x64010101, @multicast2, @multicast1, @remote]}, @ssrr={0x89, 0xf, 0x13, [@private=0xa010101, @remote, @multicast2]}, @generic={0x88, 0xc, "2fc972fbf6d76048240f"}, @end, @end, @timestamp_addr={0x44, 0xc, 0xf4, 0x1, 0x4, [{@loopback}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) fcntl$setown(r3, 0x8, r4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x16, 0x0, 0x3, 0xb14, 0x10000, r5, 0x6, '\x00', r7, r1, 0x0, 0x3, 0x0, 0x0, @void, @value, @value=r1}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r10, 0x0, 0x8) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) 1.707765768s ago: executing program 0 (id=13653): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/../file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x9}, 0x18) r3 = add_key$keyring(0x0, &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r3) perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffe27, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x590, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x2, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6952}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x2004, &(0x7f0000000680)) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) memfd_create(0x0, 0x4) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$inet(0x2, 0x4, 0x7a0) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") write$UHID_INPUT(r4, &(0x7f0000000d00)={0x8, {"0f0546ae6e36c69bb1d165b58f3d3ecead067d71facb44feb6f4a1847c7d2c8a21cac202d0a4d7f78cabe404d14df3d75991efb2c68b1edcc8807f3ab9a0d3293af78c6f0c3e568c985ba804510a2b80365f4bc64ca05a2b40e6e0159960e5b2cbb7ce5095cd02394345bb3c52b1789ca4cd314a038336f64de523ef626d2bafe125b1d603442af5587f59a4ec2074f365b8a6136afd0514c03ce1b165dbe7162f076db0ee61df3e03c0478a7874bdb440bb94f8611219fae83be04a502ab5fdd70d01a4c2389a0a5b1207d9f6408cff9ca1079326d69a3910850b18fb592390a1e64783448689d841722ac790e2361e83d72c3f6ac3c7bc8ef30278c2e1ef6f7a6f4eb17fd0d212ea43bb92f9687277930656b26c733fc9bc08e93c07d6d439269500fc328987e720e87106917add3214822000271fcfcf282fbd809ef0d5554e20080d12779cd0425fc2fa985a96570b9dfa76b5b990a9884f9d0bbec0b34269c781fd73460e8f5039247d5a2799b2dd1f99b29ca3116490ca0c43ce0449515dda40ebb70b7696ee68318ea1d0e3c172f2c64880cf09df5cf2a56ea7fc18c5493295b680f780ae26e68e37e6d54c37c77207fc0fe0f5eb1bed59d3f27cb9dcd8d33514d751259abe0a0c63765f49c0f0b823687b039f9eba139a0f8827e577514a31790210a210ba68b431c96816e48502ff332bddb59b1b32431a61302ddb401a52685d45dbb067ec53f11c0a72168db37477c863d7f0a9b1eeeae7de47b9983e742aa816f7e5854612796e553b534d16fbde9d863a677762687459683ed7ebfbbfbdff4f38cbf1be6e2adabf53e732691a2f381b305e09b9897a292b66a65c514b68ad7c55427bed042c49fc8f6149e6397cc9b845c483f1bea0fa87b1bb7ca0216957739a9e0f74cede91c2dba2e24c8d0776d5e83f166da3ea2f74f91eb8ff61d286d75ca23a05f6f778d37d4f2594f9e257da22c19506fb2898cc8718ee95c29dca111a3830d72aab856a185da90a1e39980e477280e2fa6ed0a10e2be5a28f27ada5f8f81d14b88630fc1a4a2ff85d9b770724624c9b1a190db17f46ebf2b3ee940a1cb95c63bdbc8e1ee56e96d512b47b773fc3ec4736a41bd2084a248f5737b0636e3302b08be42a74dde35aa0d19a014250076a905e0dd291e6dc3994993f64265e7bdaa22af8569086c2af173b2981c70bc6bef436310bca2fcd57801a99000b2e1ba1c44c83e29ca3f9acb204b8dbec45114a642a0c031d36b5f74ae36c06519f66adf4f84f1bd8bac63d9da149882642c3cdccf46cce661729c2eb5aa07e12a62a9ed8673b45c5cc05bbb275178c1781e4f1d710b4b82c16e616a6926c29656a72fbb983564f327e653888485e40db75aa023c1af9b0cebc7538eaf5d5450ea536dbb2709b3eb462801eaceb0ff6b68455eac2825f8349c2637cc5aede93f8b64a48dbd200ee5ae846b8f2efc2cf8af538a6b537b03848fabd42cce9ea05a012fecdf8abac036592f90348f7d33a4f0129479cc0130b0feb2e2e8b1ad3aaa3530a701fc22876e9756bdf39c7c41d1ac27aae1dbc8b29846bc7dc0280986f5c7872b212e5533c7ee1bc80cbf8e3fdd8fbd7cd90af34612a553b3721ddaccfd2d1ca575ddd98623e7083cbf22880f240b817c9156952b85ab0a5c2fd5aa198c0f234813cf6ce2c214d4a93dd1b92bbaf71afe428539167ab6b2957071b2393e159fcd2f60459b1478d5fcd50235b256e2aed64b95a7edd01edfb0559f19fd1db7a841fd11aacbb8b719ec2c6f16baa2d4dbba47e9ca01038d31b7f807e72e65259bf5ae1bafb320198e7f876a705b9b5ba4b5143036acc7573d7dc7a8fb9d4e9c2250fd061bc1b50a5a3c7600681f94d1293e1c8667c4e1290789b926fa47833481e3dff22f10f265a1b268b2792dbcf069fa58a38d0d9f52f605e93275cce39d31ede6cda4ba90ef3029cefb6fb10ae1f65bae9b7012644c8064bd803a8476b0bfd885874daa83e0db0dc08bbdeee20da3c5bb56ab02a481baa1864318ca751bc92b9f30ec0e23f1c5fbdfd27dc69a486b028b86e02995beea4caad771b9ee9cb127430ab362e0aa418db5bbff610d9f2a460fd030776e7fc84aab0bc29acc5d4d7e25c09765798c82b98a7a37ac6149e4751133de912d3b534891d66707e5158ec940cbae265dc3d8ecef5980a8967374a966b96722848e8af8e8be3d06a2328b505d599539c4bdbab5f25d9d0954994c5622ac9118bd7c6de8ebc354b909e83ed455263a431b093af2486a2665bfc8833e1c05ea63ad289d7e0d56aba8a91194e7b788b272ac23ce7534e56f6e6c47179d4151c1293a4cb35ce85dabc9b22aded5d6696ba66b93dcc4e43ab3df84894529a486b80ea946c3b3cf6db6582422a4a5c1edee199a0b4fbe3df294fa669cc6bb0767e37444d07f9623d969638e21739c30e0caa807a186f70c39174f399c198a224640d608446dc39b9078fc9e2a44a013e966545e76bc877d230af6965dc9dec4caec2d0073d8a28f3483b3bb849208348e26a0a601e4811a5af2120ef003c14e89d218dd0059495e9192bebe3640a419ac448b9b6a8b5ffb1e6083f95118c6e5f5377558a46e10551c4abab10ceb3967dd6859dfc7688a47f28e079dd5a286be2f273dc04cb1330a3f889b9b4bbe3159bbb91a7d2b9824d88db237045dc6b927fe3589c9e991962e3082ae0a9ea804a36d2376338489396d507d309aeb58eb5c4e2e4ccf732d95ebde824714167d251bd397ba744af93c76488b63488e2d0d594eeb7d6c800128e0a3cf7897987aad78ac12745384fa3e81838a7455847d2227a0f32ef49806348736cd8e0ff9649f117fe0d4b6e3422e4f498f6afa41fff006ceec0ae6191842da95fd70126f89690fb0c9102ed67fa884fcfb2e0c16971d9f24a7bc5f905e9f689c04d0beb02756dc01ecc2c32e9e1f055e02a05de88c40745a23b30b63b5266bcdb93cd146cf3e978d5aa0f1db5df88a8cb8bc04a571fc7d466e959523100a50af0a731d1c9ee3425c4574f1a929a08c8ad82f1f0ff524eab0ee4da8f82480d3058464698fae1402cd27fa37849f93e3bb39e73746f4dab13475e0e2916d650cc2197728d9cfbe0186913945fa6566001234321fa744992b063744d301b9068311f13474ed75d4960bb197913af5460e40123bbfaf35cc0f49c54cb116d1e29c2d5d4c9f245a538b83475ec2d15cea6f4b16421755130925c98e8a1b8a97118c05a1a38daee7b1ede4d8860625c756456f80641cd91a80d0f3251de09e6c9381fe60794f7fa2c80e59ccbf6dd6876ac87fdb4e7cc83a49ad1cd7f51720e229af7e4a90ca92989039daae8239c7eb225966c45f9aab2593f983aa6b24da8ded2d1e40743096bdb68aa3e714a779a42a5552b1096320eded7d247522855ae288322f4996655fa41ed13f4c79a834582faf43998db5725694093a3270aea594e4b02e75fae422805ca8199e55b84b2ba5678ac9a74ccb508ddd28c46186072d7f9598adcf8dddd89e54d420b4707b3691843548f5824b969dc2cb958b8132c1237680fe1cda67b3d92932b008d13a404f43096de837f81fa6a1a9c016d1e06748c8f1823a58847a3edccd83f2d504b71d5a1778fa31aaac4100d9624506174eb80a04d8180c8786932ce3678892eaccfe270c62b5fdcc91da78f188b157641b1ea1860deb37e1674bc99de19ed8595f31732ee934d2ca929f6f15e5949b520ab5b856e6d6bf14143544c293c941948312ea284c4c8ac7b44cdb326046a4f6090cb66a336fb98a87b9ef59e738511369e7e634cf978ee1902868f4e247ed5d6ab3ed58707ac474b0ee1163eb345bfcae2f6178da8aa0561f0da316af3378c8558c4461fde6c3ebbe92ea22adc60abfa7b9fa7dc7bcdf82f2c35f3311c9bc950c09a71899b285205f995afac5dd0010c6a4deb0682553cf32651daf13a29a4eaf5d015c8086c1f7a6213d32e316113746775afd3391d1ad2d9535140267049e0b4a2f5b4bfde7a78f425cb270f3800b5d5d081c3097c7425385dcf230289f64dd592b745901ea58101d5dc0504b82b45e8a59c7d815305afa8d1558280d197f7aeb4724d276e3ca7c7084479bfbba62a8401538caf3afd994f52869d07457be2805114aa18bcc3d9fb2a6a7f1ce2d3c60d18c91a8b037f3d424d6c75efe69334d096620d58a3a2781d9f317872c0fc88fc42ab1a81b25ea08ba61cbdf001ed9e9db3da1ed1b115e1ca9a18a3b46ad2cf2aadf056b6117a1d92bc75f552310ed37d9d944142d0c8391d3f29bbcca0e04b4ab4d30964f24dbc468d39d6b6472a4f586d354bb4c47e42bda8ebbf4cbfdb5e406d7db03cd521275835a0194692d3eb6ec0008ccb17fba4b727965c872e23b2f9f7f7840de398e35520de24df236412ed3edf6291b0f8b1b7cb89d0b0162efb41062996c80fa0a0eb1c71dd7222bf9fd177bebf230a9aa89d74aa94afd01d08cd4f2b01f0411901b7d59e69ca203091aa244fd50c78b266cc1e89fe2636f24ac5f1173f0af485e0808b42f594932384b02578a7ce0919f4fadb2b8562757c874b0384f65b854dcb6f0efd8ac127e0a8e381b0188672f3a1f5d7cf58510a491fcc3f379ee67e2d5aae7dc01c0d04cb639b905127524fb9f5bc885ae97a6467ad51e1ea8eba31eacabfad8e4e39a2768c8a203cdab6ac3d5b9d5dcced1b76120c456ffbddf5ba266e1cef13def7d9443323868d5c1c7b910b55fa5f7c79f18c4f8b169c7c5ac34627d9ab59b3f7517ee34d6a8192ac60e9927904cc3bf5e02fcf60d94462b8cda31f0391bcc4f9550123cc56ce3202e78a02b4bf4ba33e86972715814bf8dd3ddc73fceeb4d004f9b1d1abc204ebe06aba0d2683fcaea1cad605622ce85951809debc39c418c881d83c7dd7c36a85eaf7687b55c9146aebfd90c2a4ca3f9fbd4b8c1c54f5dac57fa6d2a3bbd50ac64972c14d3b388bc45685265aa370d6053830b43f37b74d79eccedca70e0e9505baa57298419fcddfee1cad87b65aadc2ad28cfc4228fd4ad00e983844b4ee43325ca90769f025000e362a72ce353abd8c144dc902b91abdee0914afbf208dcc8f0b9bf0083492c849caa86ee114dd446d969823c7caf0b2ae88c50aec1f58df4d22fc646702662553d89dc9982074e685fa1c301fb3da83831f2f873c9524f926360f61c7ee510984d5b441914a060a07240fe23754d89235127105e7160e160fd8e1939a934b3cff28abaac9a24611cf784e0f2d05a7dbd106ddc443418e790a493255b64d6cf2a3b618c4cd0613ffb7fe4f61a4273a04696e5faa84e80cc603957d553670e40d7c74033a7a67bf41ee7e99e4e9721c53dd76fafc8afa0c1ad806e9d8617d7a9b0d9017b2bb8720f345e08bd8b5c60e907022667bfef40d79e543c687d76eae60c04c95e43cc9ab49c87f281816677be727efdf0ef47f4ec12f80b642a0d2126cc73728e0eef7bf744abc654a6ec851a0cc142d43ff333b3093278c55ab22b46a17163617ecd6ae131037ecbc11f550a0c8c96527e9d5fb2a92c355ba8deca0f6f9952b75f738731ab44da42b50dacd49e2c809d8c71fa62286983064dd96d15283c261fd1c849268da5600bb3ff346438d7d0cf9154b35f371b80ac813fa409dbc01d53d9d88a34647ad6835e773116647a4dae51a9b3815e741000421efcb798a0095752ccfe0e904e0097a43ea40e8062e46aefd7e529faca88bc068e620bd1eb47b5c2872545e9b76f1ad75a30903b89158f52e", 0x1000}}, 0x1006) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x2, 0x15, 0x1, 0x7, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_address={0x5, 0x7, 0xff, 0xa0, 0x0, @in6={0xa, 0x4e22, 0x0, @empty, 0x401}}]}, 0x38}}, 0x90) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 1.645259548s ago: executing program 4 (id=13654): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0x24, 0x0, "43cad7244bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) flistxattr(r8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x8, &(0x7f0000004200)=0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000020900020073797a32000000000900010073797a3000000000080005400000001f5c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe0}}, 0x0) io_submit(r9, 0x1, &(0x7f00000004c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x1, 0xffffffffffffffff, 0x0}]) eventfd(0x39ea46a6) r12 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r12, 0x0) r13 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r13, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) r14 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616ea3ce807ae148f303ed532ecd7eccef26733d66642c7266646e6f3d", @ANYRESHEX=r14, @ANYBLOB=',wfdno=', @ANYRESHEX=r14, @ANYBLOB=',\x00']) 1.597808599s ago: executing program 6 (id=13655): socket(0xa, 0x3, 0x3a) open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.52586981s ago: executing program 5 (id=13656): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000004c0)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) read(0xffffffffffffffff, &(0x7f0000000240)=""/28, 0xffd2) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x1, &(0x7f0000000240)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000280)='GPL\x00', 0x10, 0x1000, &(0x7f0000000e40)=""/4096, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000300), &(0x7f0000000380)=[{0x4, 0x3, 0xe, 0x1}, {0x0, 0x5, 0xb, 0x5}], 0x10, 0x2000000, @void, @value}, 0x94) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffbf4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) syz_emit_ethernet(0x8e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x24, 0x0, {0x19, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0xc, 0x56, 0x0, 0x0, [0x0, 0x0]}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x10001, @private0, 0x3}, {0xa, 0x4e24, 0x400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, r6, 0xffffffff}}, 0x48) syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0x0], 0x1}, 0x58) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @broadcast, 0x9, 0x10}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) 1.437023721s ago: executing program 4 (id=13657): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x1, 0x5ac, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0xf4, 0xd6, 0x35, 0x10, 0x506, 0x11f8, 0x9feb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59a, 0x2, 0x1, 0x7, 0xa0, 0xd, [{{0x9, 0x4, 0x67, 0x0, 0x8, 0x9, 0xe0, 0xd8, 0x1, [], [{{0x9, 0x5, 0x1, 0x0, 0x410, 0xf, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x10}]}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x1, 0x9, 0xf}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0xf9, 0x8, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5d, 0x8d}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x2, 0x1, 0x5}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x4, 0x8, 0x0, 0xfd, 0x2, 0x3}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0xf, 0xe9, 0x3, [@generic={0x88, 0x11, "a15b33a1545456fce10aaa0a6b9ab5830dbede1c16848cb40e5ff84c0c7957149e0010e21c8cef1a6189d332dc70964792cca77aa818d549a03f3ca833f849013a9ac70fb8690518c63c38c4ac0d8410f48441c61c184431065a9564a71c19e6469467a8d79a36a8cdab3de6507d0d6d1049e91aea4473e855228211eb584c3d85cffb3ea896"}]}}, {{0x9, 0x5, 0xb, 0x4cf1c900f53c890, 0x200, 0x9, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x3}]}}]}}, {{0x9, 0x4, 0x45, 0x81, 0xf, 0x25, 0xdc, 0xea, 0x7, [@hid_hid={0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0xd68}}], [{{0x9, 0x5, 0xa, 0x0, 0x8, 0x0, 0x2}}, {{0x9, 0x5, 0x4, 0x1b, 0x0, 0x7a, 0x2, 0xb}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x0, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xd4}]}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x7, 0x7, 0x22, [@generic={0x14, 0xb, "1e8c25dfc757cdcffcb00314ad47cc2dc694"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x9}]}}, {{0x9, 0x5, 0xb, 0x3, 0x0, 0x3, 0x80, 0x6}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x2, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x8}, @generic={0x13, 0x11, "fa8be1dc3b2ce832e9592091d6b02bf759"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x0, 0x4, 0x2}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x40, 0x3f, 0x6c, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0x7, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x81}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x8, 0xd5, 0x1f}}, {{0x9, 0x5, 0xf, 0x1, 0x200, 0xf0, 0x9, 0x7, [@generic={0x19, 0x5, "3ff6ae1b78a1550770a27c48fc89d58cc78ca2cbe0d281"}, @generic={0x4d, 0x22, "a8b3effbcd31a3a75f9cde24b98e393477a5b22850427925e2becf364b43191b146846f724fbc5beaf22009f6657c35fc198ec96146777d47e34c0fcebc565da949f48f39e379d1ec58b38"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7, 0x5, 0x8, [@generic={0xa0, 0xd, "2178c6b0319891ce7b89991cd309d92dd0fa77e95e610793f2b1e03e6e2f5b092434ec9bf8cfe9e0b495729c9c054fdaa71e39a26b2f66d124719b1f5720d3152c5c57ffb475bd67f037a22f5fb56a30c9e6dd7106ef5451f18346ef37ea883a580f4226eb4279ff9939131fab11020fe31ce87c5e83d4fa3ff822d76c527f5daad0a1b98e20b96abca5c6e9402f14e7a6fd405b01b775d3096184f0b790"}, @generic={0x8a, 0x5, "5d66130e2d0f8bccac23c014e0bc292934d1e71b7ae5d696816449544496b88f824588d8b40ebc738b1929a5e2394bf7865b3dedbf6475cbae6c1bb0b7636973fa73b6f3c49a536bc5720d82d48414f8bbc0644cef640dd445199d628812ea7269133cfefc5c7c32ad633037f99f5d250788fe879d192c13d19db71b679c97060c79ca2f840b25ee"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0x3c, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x8}, @generic={0xfc, 0x22, "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"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x0, 0x1, 0x3, [@generic={0x2c, 0x21, "ecbcd7911e1daef5c2d7ae2cb781a0ff23187e40c0e7e3bbfd0446793a89376e09321082e8823a2ba203"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x1af, 0x0, 0xe, 0xfc, [@generic={0xec, 0x5, "878d412e6174156a5acf4ac9e920ca82c6a93c607ec270f46edf1344b00bdb9df9f9448686d8745dbdf4b4042b4462b99bc9ee31e48121b820fe223919579992662789a17a7a6955d053061da72554612b4faa643d457dfb29655732c0dec2ee345225978cec8ea25f9b2b47decc2e5b594b10f6ae8cdfa9eb940e20b5c2656e171b5798a62f217c048c8e709685fde66ed1ec6b5340221395d89a4b4a426b7e41708767c47b27f9747e67242b84bf2fe03b5a877392ac3f89fc8c5469f5ae87ec54f0aa9ad48990f4aa3fca663bc7362b417862762bbaed5c08114e2bb35ec6bf227fcf4034d0fa9092"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3}]}}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x4, 0x7f, 0x9, 0x40, 0x5}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41d}}, {0x39, &(0x7f0000000200)=@string={0x39, 0x3, "8e2d3875800a89ff9d797c411bb2f311f2333b63435a361c03b0b9fc621bfdab3adfc0d31bbeee12bf2049131cd2a0e544e19126415ed6"}}]}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x1, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r1, r1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") sendmsg$key(r8, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) pwrite64(r5, &(0x7f00000002c0)="81ede865e64b481018ae39400e04edb13e6649bfdbcc950356cfdcb8a9ec87589504b75a590452b03a", 0x29, 0xffff) sendto$inet6(r4, 0x0, 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x398, @empty}, 0x1c) shutdown(r4, 0x1) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f0, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xba) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r0, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x0) 1.363957662s ago: executing program 1 (id=13658): set_mempolicy(0x3, &(0x7f00000000c0)=0x5, 0xa) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) shutdown(0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) syz_clone(0x2000011, 0x0, 0x71, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, 0x1, 0x700) ioctl$MON_IOCX_GETX(r3, 0x80089203, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0xffa8) 1.082943476s ago: executing program 6 (id=13659): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000099000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x5) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3, 0x0, 0x415}, 0x18) unshare(0x64000600) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x0) shutdown(r7, 0x0) connect$unix(r7, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r9 = accept(r8, 0x0, 0x0) (fail_nth: 1) sendto$inet6(r9, &(0x7f00000007c0)="16b2adfdf17410", 0x7, 0x640408e9, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 371.008275ms ago: executing program 0 (id=13660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r2) 217.116487ms ago: executing program 6 (id=13661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000640)=ANY=[], 0x0, 0x400003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)=0x81) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x6, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_pts(r2, 0x440) r5 = dup3(r4, r2, 0x0) ioctl$TCSETSW2(r5, 0x5437, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0xb, 0x3, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x11, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x10000000, 0x0, 0x2}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x4, 0x0, 0x0, 0x0, 0x8, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000580), 0x6}, 0x1320, 0x4, 0x3, 0x9, 0x0, 0x800001, 0xfff9, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095", @ANYRES32=r9, @ANYRESHEX=r6, @ANYRESOCT=r0, @ANYBLOB="d0be75c3af02b80f26f9bf8fc9", @ANYRESDEC=r7], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@mcast1, r11}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) 185.943548ms ago: executing program 0 (id=13662): openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGETLED(r0, 0x4b31, 0x0) 154.567978ms ago: executing program 0 (id=13663): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef01"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x18) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r5, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="90010000305200001c00120300000100626f6e6400000000000000000000000000000000ed4763808aad6849df68f2d58280d94aef3c187347080bac404ca991fde2f15e68fd178075016d7ee500a7c5e20aa83237"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) open(&(0x7f0000000000)='./file2\x00', 0x280, 0x21) unlink(&(0x7f0000000180)='./file1\x00') mlockall(0x3) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) syz_io_uring_setup(0x3338, &(0x7f0000000180)={0x0, 0xdd99, 0x10, 0x1, 0x10e}, &(0x7f0000000200), &(0x7f0000000340)) brk(0x400000ffc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x75, 0x1, 0x3, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x1, 0x8000, 0x400, 0x9}}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x10) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr, 0x0}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="dc0000001a00000329bd7000fddbdf251c800008fd03c8040030000084001300000000000000000000000000000000000000000000000100000000000001000000000000000f0f000000000000000000000000000000000000000000000f0f00000f0f000000000000000c00000000000000000000000000000009000000000000000800000000000000000000f7ff0000000000000e0c000000010000000000140012002900ecdabb296b937921354c5883955e0c00090009000d02", @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32=r8, @ANYBLOB="140012000100bbbb89aee764d83acf3a982b05f3"], 0xdc}}, 0x4000084) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000000206010200000000006000000020000005000500000000000900020073797a3100000000100003006269746d61703a706f72740014000780060005404e230000060004400000000005000100070000000500040000000000"], 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 1 (id=13664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000004c0)='rpc_clnt_clone_err\x00', r2, 0x0, 0x3}, 0x18) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b40000000e00000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, r3, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x0, 0x4, &(0x7f0000000300)=ANY=[@ANYRESOCT=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) (async) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x18) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) (async) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000030601010000000000000000010000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) (async) r13 = syz_io_uring_complete(0x0) ioctl$TUNSETLINK(r13, 0x400454cd, 0x305) r14 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) write$UHID_DESTROY(r14, &(0x7f0000000140), 0x4) (async) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r15 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r15, 0x40286608, &(0x7f0000000040)={0x19, 0x3, 0xb, 0x3, 0x7, 0xd}) (async) ioctl$TUNSETSTEERINGEBPF(r15, 0x800454e0, &(0x7f0000000200)=r1) kernel console output (not intermixed with test programs): fer I/O error on dev loop0, logical block 132, lost async page write [ 1039.059861][T10525] chnl_net:caif_netlink_parms(): no params data found [ 1039.067977][T10524] syz.0.13043: attempt to access beyond end of device [ 1039.067977][T10524] loop0: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 1039.081481][T10524] Buffer I/O error on dev loop0, logical block 133, lost async page write [ 1039.161022][T10524] syz.0.13043: attempt to access beyond end of device [ 1039.161022][T10524] loop0: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 1039.174544][T10524] Buffer I/O error on dev loop0, logical block 150, lost async page write [ 1039.198598][T10524] Buffer I/O error on dev loop0, logical block 151, lost async page write [ 1039.209666][T10525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.216734][T10525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.272903][T10525] bridge_slave_0: entered allmulticast mode [ 1039.302406][T10525] bridge_slave_0: entered promiscuous mode [ 1039.310329][T10521] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 1039.336998][T20755] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1039.340909][T10525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.351574][T10525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.360003][T20755] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1039.376430][T10521] SELinux: failed to load policy [ 1039.390182][T10563] loop0: detected capacity change from 0 to 512 [ 1039.397589][T10525] bridge_slave_1: entered allmulticast mode [ 1039.403973][T10525] bridge_slave_1: entered promiscuous mode [ 1039.431886][T10563] EXT4-fs (loop0): shut down requested (0) [ 1039.549131][T10560] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.570214][T10569] loop4: detected capacity change from 0 to 512 [ 1039.578703][T10525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.590163][T10525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.666424][T10560] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.700646][T10573] loop1: detected capacity change from 0 to 128 [ 1039.709374][T10525] team0: Port device team_slave_0 added [ 1039.716035][T10525] team0: Port device team_slave_1 added [ 1039.746299][T10560] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.772503][T10525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.779535][T10525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.805465][T10525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.818493][T10525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.825440][T10525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.851644][T10525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.912851][T10525] hsr_slave_0: entered promiscuous mode [ 1039.929186][T10577] siw: device registration error -23 [ 1039.929994][T10525] hsr_slave_1: entered promiscuous mode [ 1039.961745][T10525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1039.981780][T10525] Cannot create hsr debugfs directory [ 1039.988126][T10560] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.020898][T10580] loop5: detected capacity change from 0 to 128 [ 1040.029072][T10580] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1040.063994][T10580] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1040.108352][T23324] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1040.122350][T10560] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.182805][T10560] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.204165][T10584] syz2: rxe_newlink: already configured on veth0_to_bond [ 1040.225704][T10560] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.249491][T10560] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.266945][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1040.280782][T10525] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1040.308992][T10525] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1040.328829][T10525] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1040.357675][T10525] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1040.418983][T10525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.451929][T10525] 8021q: adding VLAN 0 to HW filter on device team0 [ 1040.474756][T23331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.481934][T23331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.504472][T23331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.511541][T23331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1040.577702][T10598] netlink: 'syz.1.13061': attribute type 4 has an invalid length. [ 1040.616202][T10596] bond2: entered promiscuous mode [ 1040.621448][T10596] bond2: entered allmulticast mode [ 1040.636340][T10596] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1040.662881][T10603] loop0: detected capacity change from 0 to 1024 [ 1040.679132][T10596] bond2 (unregistering): Released all slaves [ 1040.797163][T10525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1040.958272][T10619] FAULT_INJECTION: forcing a failure. [ 1040.958272][T10619] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.970951][T10619] CPU: 1 UID: 0 PID: 10619 Comm: syz.1.13065 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 1040.971031][T10619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1040.971042][T10619] Call Trace: [ 1040.971047][T10619] [ 1040.971052][T10619] __dump_stack+0x1d/0x30 [ 1040.971070][T10619] dump_stack_lvl+0xe8/0x140 [ 1040.971089][T10619] dump_stack+0x15/0x1b [ 1040.971107][T10619] should_fail_ex+0x265/0x280 [ 1040.971125][T10619] should_failslab+0x8c/0xb0 [ 1040.971176][T10619] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 1040.971257][T10619] ? __d_alloc+0x3d/0x350 [ 1040.971282][T10619] __d_alloc+0x3d/0x350 [ 1040.971317][T10619] ? mpol_shared_policy_init+0xbd/0x4c0 [ 1040.971346][T10619] d_alloc_pseudo+0x1e/0x80 [ 1040.971371][T10619] alloc_file_pseudo+0x71/0x160 [ 1040.971410][T10619] __shmem_file_setup+0x1de/0x210 [ 1040.971451][T10619] shmem_file_setup+0x3b/0x50 [ 1040.971477][T10619] __se_sys_memfd_create+0x2c3/0x590 [ 1040.971500][T10619] __x64_sys_memfd_create+0x31/0x40 [ 1040.971521][T10619] x64_sys_call+0x122f/0x2fb0 [ 1040.971592][T10619] do_syscall_64+0xd2/0x200 [ 1040.971691][T10619] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1040.971794][T10619] ? clear_bhb_loop+0x40/0x90 [ 1040.971818][T10619] ? clear_bhb_loop+0x40/0x90 [ 1040.971908][T10619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.971927][T10619] RIP: 0033:0x7fc009f9e969 [ 1040.971940][T10619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1040.972031][T10619] RSP: 002b:00007fc008606e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1040.972070][T10619] RAX: ffffffffffffffda RBX: 00000000000007f1 RCX: 00007fc009f9e969 [ 1040.972085][T10619] RDX: 00007fc008606ef0 RSI: 0000000000000000 RDI: 00007fc00a021444 [ 1040.972096][T10619] RBP: 00002000000008c0 R08: 00007fc008606bb7 R09: 00007fc008606e40 [ 1040.972107][T10619] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000840 [ 1040.972119][T10619] R13: 00007fc008606ef0 R14: 00007fc008606eb0 R15: 0000200000000880 [ 1040.972190][T10619] [ 1041.298411][T10525] veth0_vlan: entered promiscuous mode [ 1041.306592][T10525] veth1_vlan: entered promiscuous mode [ 1041.353215][T10525] veth0_macvtap: entered promiscuous mode [ 1041.365765][T10611] loop0: detected capacity change from 0 to 1024 [ 1041.376156][T10525] veth1_macvtap: entered promiscuous mode [ 1041.411975][T10525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1041.428569][T10525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1041.457909][T10525] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.466635][T10525] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.475506][T10525] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.484229][T10525] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.583493][T10643] siw: device registration error -23 [ 1041.614714][T10645] netlink: 'syz.0.13073': attribute type 30 has an invalid length. [ 1041.712992][ T6081] block device autoloading is deprecated and will be removed. [ 1041.733407][T10656] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1041.745688][T10654] __nla_validate_parse: 15 callbacks suppressed [ 1041.745763][T10654] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13077'. [ 1041.799007][T10663] FAULT_INJECTION: forcing a failure. [ 1041.799007][T10663] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.811813][T10663] CPU: 0 UID: 0 PID: 10663 Comm: syz.0.13078 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 1041.811841][T10663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1041.811855][T10663] Call Trace: [ 1041.811862][T10663] [ 1041.811870][T10663] __dump_stack+0x1d/0x30 [ 1041.811894][T10663] dump_stack_lvl+0xe8/0x140 [ 1041.811944][T10663] dump_stack+0x15/0x1b [ 1041.811958][T10663] should_fail_ex+0x265/0x280 [ 1041.811976][T10663] should_failslab+0x8c/0xb0 [ 1041.811996][T10663] kmem_cache_alloc_noprof+0x50/0x310 [ 1041.812042][T10663] ? skb_clone+0x151/0x1f0 [ 1041.812075][T10663] skb_clone+0x151/0x1f0 [ 1041.812100][T10663] __netlink_deliver_tap+0x2c9/0x500 [ 1041.812170][T10663] netlink_unicast+0x64c/0x670 [ 1041.812268][T10663] netlink_sendmsg+0x58b/0x6b0 [ 1041.812299][T10663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1041.812419][T10663] __sock_sendmsg+0x145/0x180 [ 1041.812436][T10663] ____sys_sendmsg+0x31e/0x4e0 [ 1041.812534][T10663] ___sys_sendmsg+0x17b/0x1d0 [ 1041.812640][T10663] __x64_sys_sendmsg+0xd4/0x160 [ 1041.812667][T10663] x64_sys_call+0x2999/0x2fb0 [ 1041.812765][T10663] do_syscall_64+0xd2/0x200 [ 1041.812791][T10663] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1041.812891][T10663] ? clear_bhb_loop+0x40/0x90 [ 1041.812908][T10663] ? clear_bhb_loop+0x40/0x90 [ 1041.812926][T10663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.813021][T10663] RIP: 0033:0x7fed8729e969 [ 1041.813037][T10663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1041.813057][T10663] RSP: 002b:00007fed85907038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1041.813083][T10663] RAX: ffffffffffffffda RBX: 00007fed874c5fa0 RCX: 00007fed8729e969 [ 1041.813148][T10663] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 1041.813158][T10663] RBP: 00007fed85907090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.813168][T10663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.813181][T10663] R13: 0000000000000000 R14: 00007fed874c5fa0 R15: 00007ffd9d9aaf98 [ 1041.813234][T10663] [ 1042.056754][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 1042.056768][ T29] audit: type=1326 audit(1042.023:70406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10662 comm="syz.5.13080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57759e969 code=0x7ffc0000 [ 1042.086223][ T29] audit: type=1326 audit(1042.023:70407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10662 comm="syz.5.13080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb57759e969 code=0x7ffc0000 [ 1042.109334][ T29] audit: type=1326 audit(1042.023:70408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10662 comm="syz.5.13080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57759e969 code=0x7ffc0000 [ 1042.132480][ T29] audit: type=1326 audit(1042.023:70409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10662 comm="syz.5.13080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb57759e969 code=0x7ffc0000 [ 1042.155694][ T29] audit: type=1326 audit(1042.023:70410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10662 comm="syz.5.13080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57759e969 code=0x7ffc0000 [ 1042.178838][ T29] audit: type=1326 audit(1042.023:70411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10662 comm="syz.5.13080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb57759e969 code=0x7ffc0000 [ 1042.193912][T10664] bond1: entered promiscuous mode [ 1042.201967][ T29] audit: type=1326 audit(1042.023:70412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10662 comm="syz.5.13080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57759e969 code=0x7ffc0000 [ 1042.207051][T10664] bond1: entered allmulticast mode [ 1042.309500][ T29] audit: type=1326 audit(1042.043:70413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10662 comm="syz.5.13080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb57759e969 code=0x7ffc0000 [ 1042.332628][ T29] audit: type=1326 audit(1042.043:70414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10662 comm="syz.5.13080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57759e969 code=0x7ffc0000 [ 1042.355807][ T29] audit: type=1326 audit(1042.043:70415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10662 comm="syz.5.13080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57759e969 code=0x7ffc0000 [ 1042.392973][T10664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1042.421634][T10664] bond1 (unregistering): Released all slaves [ 1042.434780][T10686] loop5: detected capacity change from 0 to 1024 [ 1042.444215][T10683] FAULT_INJECTION: forcing a failure. [ 1042.444215][T10683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1042.457333][T10683] CPU: 1 UID: 0 PID: 10683 Comm: syz.6.13088 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 1042.457360][T10683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1042.457420][T10683] Call Trace: [ 1042.457426][T10683] [ 1042.457432][T10683] __dump_stack+0x1d/0x30 [ 1042.457454][T10683] dump_stack_lvl+0xe8/0x140 [ 1042.457534][T10683] dump_stack+0x15/0x1b [ 1042.457550][T10683] should_fail_ex+0x265/0x280 [ 1042.457572][T10683] should_fail+0xb/0x20 [ 1042.457590][T10683] should_fail_usercopy+0x1a/0x20 [ 1042.457636][T10683] _copy_to_user+0x20/0xa0 [ 1042.457794][T10683] simple_read_from_buffer+0xb5/0x130 [ 1042.457837][T10683] proc_fail_nth_read+0x100/0x140 [ 1042.457990][T10683] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1042.458014][T10683] vfs_read+0x1a0/0x6f0 [ 1042.458032][T10683] ? __rcu_read_unlock+0x4f/0x70 [ 1042.458071][T10683] ? __fget_files+0x184/0x1c0 [ 1042.458103][T10683] ksys_read+0xda/0x1a0 [ 1042.458163][T10683] __x64_sys_read+0x40/0x50 [ 1042.458188][T10683] x64_sys_call+0x2d77/0x2fb0 [ 1042.458215][T10683] do_syscall_64+0xd2/0x200 [ 1042.458246][T10683] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1042.458333][T10683] ? clear_bhb_loop+0x40/0x90 [ 1042.458355][T10683] ? clear_bhb_loop+0x40/0x90 [ 1042.458411][T10683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.458437][T10683] RIP: 0033:0x7f2a299ad37c [ 1042.458456][T10683] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1042.458474][T10683] RSP: 002b:00007f2a28017030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1042.458492][T10683] RAX: ffffffffffffffda RBX: 00007f2a29bd5fa0 RCX: 00007f2a299ad37c [ 1042.458504][T10683] RDX: 000000000000000f RSI: 00007f2a280170a0 RDI: 0000000000000004 [ 1042.458577][T10683] RBP: 00007f2a28017090 R08: 0000000000000000 R09: 0000000000000000 [ 1042.458592][T10683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.458607][T10683] R13: 0000000000000000 R14: 00007f2a29bd5fa0 R15: 00007ffc90253898 [ 1042.458628][T10683] [ 1042.679717][T20784] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1042.722332][T20784] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1042.773730][T10688] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.797108][T10692] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13091'. [ 1042.806140][T10692] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13091'. [ 1042.829790][T10693] loop1: detected capacity change from 0 to 512 [ 1042.860006][T10692] siw: device registration error -23 [ 1042.869911][T10693] EXT4-fs mount: 32 callbacks suppressed [ 1042.869928][T10693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1042.908367][T10688] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.980318][T10688] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.029544][T10688] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.095538][T10688] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.107228][T10688] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.118278][T10688] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.129602][T10688] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.259176][ T6795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1043.321190][T10732] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13106'. [ 1043.330283][T10732] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13106'. [ 1043.375452][T10734] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13107'. [ 1043.418397][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1043.429292][T10732] siw: device registration error -23 [ 1043.435682][T10738] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.446297][ T36] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1043.477501][T10740] FAULT_INJECTION: forcing a failure. [ 1043.477501][T10740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1043.491242][T10740] CPU: 0 UID: 0 PID: 10740 Comm: syz.5.13110 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 1043.491370][T10740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1043.491380][T10740] Call Trace: [ 1043.491386][T10740] [ 1043.491393][T10740] __dump_stack+0x1d/0x30 [ 1043.491416][T10740] dump_stack_lvl+0xe8/0x140 [ 1043.491435][T10740] dump_stack+0x15/0x1b [ 1043.491508][T10740] should_fail_ex+0x265/0x280 [ 1043.491530][T10740] should_fail+0xb/0x20 [ 1043.491548][T10740] should_fail_usercopy+0x1a/0x20 [ 1043.491570][T10740] _copy_to_user+0x20/0xa0 [ 1043.491596][T10740] simple_read_from_buffer+0xb5/0x130 [ 1043.491724][T10740] proc_fail_nth_read+0x100/0x140 [ 1043.491787][T10740] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1043.491807][T10740] vfs_read+0x1a0/0x6f0 [ 1043.491823][T10740] ? __rcu_read_unlock+0x4f/0x70 [ 1043.491879][T10740] ? __fget_files+0x184/0x1c0 [ 1043.491902][T10740] ksys_read+0xda/0x1a0 [ 1043.491921][T10740] __x64_sys_read+0x40/0x50 [ 1043.491973][T10740] x64_sys_call+0x2d77/0x2fb0 [ 1043.492024][T10740] do_syscall_64+0xd2/0x200 [ 1043.492049][T10740] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1043.492135][T10740] ? clear_bhb_loop+0x40/0x90 [ 1043.492153][T10740] ? clear_bhb_loop+0x40/0x90 [ 1043.492201][T10740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.492219][T10740] RIP: 0033:0x7fb57759d37c [ 1043.492232][T10740] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1043.492259][T10740] RSP: 002b:00007fb575c07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1043.492275][T10740] RAX: ffffffffffffffda RBX: 00007fb5777c5fa0 RCX: 00007fb57759d37c [ 1043.492286][T10740] RDX: 000000000000000f RSI: 00007fb575c070a0 RDI: 0000000000000004 [ 1043.492297][T10740] RBP: 00007fb575c07090 R08: 0000000000000000 R09: 0000000000000000 [ 1043.492307][T10740] R10: 0000000000010041 R11: 0000000000000246 R12: 0000000000000001 [ 1043.492326][T10740] R13: 0000000000000000 R14: 00007fb5777c5fa0 R15: 00007ffe8b297938 [ 1043.492343][T10740] [ 1043.495075][T10741] loop1: detected capacity change from 0 to 512 [ 1043.560519][T10730] loop0: detected capacity change from 0 to 8192 [ 1043.699844][T10741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1043.777722][T10738] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.839871][T10751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10751 comm=syz.6.13113 [ 1043.853982][T10738] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.910306][T10754] loop6: detected capacity change from 0 to 1024 [ 1043.923076][T10738] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.949395][T10754] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 1044.023070][T10754] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1044.440029][T10730] SELinux: failed to load policy [ 1044.687024][T10525] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.756480][T10777] geneve0: entered promiscuous mode [ 1044.776915][T10777] macsec1: entered promiscuous mode [ 1044.782256][T10777] macsec1: entered allmulticast mode [ 1044.787628][T10777] geneve0: entered allmulticast mode [ 1044.835290][T10782] loop6: detected capacity change from 0 to 128 [ 1045.705374][T10802] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1045.889392][T10810] loop0: detected capacity change from 0 to 8192 [ 1046.130992][T10815] lo speed is unknown, defaulting to 1000 [ 1046.219894][T10817] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.318139][T10817] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.384440][T10817] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.433652][T10817] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.551984][T10817] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.576345][T10829] FAULT_INJECTION: forcing a failure. [ 1046.576345][T10829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1046.589043][T10817] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.589496][T10829] CPU: 1 UID: 0 PID: 10829 Comm: syz.4.13138 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 1046.589525][T10829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1046.589536][T10829] Call Trace: [ 1046.589543][T10829] [ 1046.589626][T10829] __dump_stack+0x1d/0x30 [ 1046.589652][T10829] dump_stack_lvl+0xe8/0x140 [ 1046.589675][T10829] dump_stack+0x15/0x1b [ 1046.589696][T10829] should_fail_ex+0x265/0x280 [ 1046.589722][T10829] should_fail+0xb/0x20 [ 1046.589741][T10829] should_fail_usercopy+0x1a/0x20 [ 1046.589789][T10829] _copy_from_user+0x1c/0xb0 [ 1046.589816][T10829] __ia32_sys_rt_sigreturn+0x128/0x350 [ 1046.589852][T10829] x64_sys_call+0x2e8a/0x2fb0 [ 1046.589940][T10829] do_syscall_64+0xd2/0x200 [ 1046.589972][T10829] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1046.590076][T10829] ? clear_bhb_loop+0x40/0x90 [ 1046.590100][T10829] ? clear_bhb_loop+0x40/0x90 [ 1046.590187][T10829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.590248][T10829] RIP: 0033:0x7fdf681eab39 [ 1046.590266][T10829] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 1046.590330][T10829] RSP: 002b:00007fdf668b6a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 1046.590351][T10829] RAX: ffffffffffffffda RBX: 00007fdf68475fa0 RCX: 00007fdf681eab39 [ 1046.590414][T10829] RDX: 00007fdf668b6a80 RSI: 00007fdf668b6bb0 RDI: 0000000000000021 [ 1046.590428][T10829] RBP: 00007fdf668b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.590442][T10829] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 1046.590455][T10829] R13: 0000000000000000 R14: 00007fdf68475fa0 R15: 00007ffcaa1a7cd8 [ 1046.590476][T10829] [ 1046.808884][T10817] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.836004][T10817] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.912001][T10844] loop0: detected capacity change from 0 to 1024 [ 1046.922195][T10844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1047.289266][T10856] loop5: detected capacity change from 0 to 128 [ 1047.367001][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 1047.367013][ T29] audit: type=1400 audit(1047.323:70709): avc: denied { mount } for pid=10855 comm="syz.5.13145" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1047.580884][ T29] audit: type=1400 audit(1047.563:70710): avc: denied { unmount } for pid=7208 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1047.610527][T10860] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13146'. [ 1047.668158][T10864] netlink: 'syz.4.13148': attribute type 30 has an invalid length. [ 1047.678939][ T29] audit: type=1400 audit(1047.663:70711): avc: denied { write } for pid=10863 comm="syz.4.13148" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1047.705512][T10862] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1047.714967][ T29] audit: type=1400 audit(1047.683:70712): avc: denied { create } for pid=10861 comm="syz.5.13147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1047.734117][ T29] audit: type=1400 audit(1047.683:70713): avc: denied { bind } for pid=10861 comm="syz.5.13147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1047.754376][ T29] audit: type=1400 audit(1047.743:70714): avc: denied { write } for pid=10861 comm="syz.5.13147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1047.776639][T10862] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13147'. [ 1047.795366][ T29] audit: type=1400 audit(1047.763:70715): avc: denied { read } for pid=10861 comm="syz.5.13147" dev="nsfs" ino=4026532396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1047.816258][ T29] audit: type=1400 audit(1047.763:70716): avc: denied { open } for pid=10861 comm="syz.5.13147" path="net:[4026532396]" dev="nsfs" ino=4026532396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1047.839409][ T29] audit: type=1400 audit(1047.773:70717): avc: denied { unmount } for pid=6081 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1047.851537][ T6081] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.878178][T10870] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13152'. [ 1047.889785][T10871] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13151'. [ 1047.895960][ T29] audit: type=1400 audit(1047.853:70718): avc: denied { open } for pid=10868 comm="syz.6.13152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1047.946916][ T36] IPVS: starting estimator thread 0... [ 1047.996410][T10890] loop6: detected capacity change from 0 to 1024 [ 1048.006687][T10890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1048.011943][T10738] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.031280][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13161'. [ 1048.056906][T10878] IPVS: using max 2736 ests per chain, 136800 per kthread [ 1048.065480][T10738] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.074782][T10893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13161'. [ 1048.084418][T10738] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.099257][T10898] loop5: detected capacity change from 0 to 1024 [ 1048.102757][T10738] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.127990][T10898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1048.232270][ T6795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1048.286185][T10912] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13165'. [ 1048.300517][T10910] loop4: detected capacity change from 0 to 512 [ 1048.307289][T10910] EXT4-fs: Ignoring removed oldalloc option [ 1048.370900][T10910] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1048.379481][T10910] EXT4-fs (loop4): 1 truncate cleaned up [ 1048.387042][T10910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1048.436715][ T6592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.621439][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13173'. [ 1048.631988][T10927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13173'. [ 1048.817184][T10939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.819457][T10937] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13177'. [ 1048.825837][T10939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.844297][ T6081] block device autoloading is deprecated and will be removed. [ 1048.864335][T10525] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.955648][ T5270] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1048.965544][ T5270] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1048.977108][T10949] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.988125][ T7208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.010281][T10939] loop1: detected capacity change from 0 to 512 [ 1049.010323][T10957] loop5: detected capacity change from 0 to 512 [ 1049.010705][T10957] EXT4-fs: Ignoring removed oldalloc option [ 1049.032532][T10959] loop0: detected capacity change from 0 to 512 [ 1049.038431][T10939] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1049.054216][T10957] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1049.063071][T10939] EXT4-fs (loop1): mount failed [ 1049.069108][T10957] EXT4-fs (loop5): 1 truncate cleaned up [ 1049.069313][T10949] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.075415][T10957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1049.088341][T10959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1049.124395][T10959] EXT4-fs (loop0): shut down requested (0) [ 1049.132717][T20784] IPVS: starting estimator thread 0... [ 1049.138694][ T7208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.168381][T10949] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.195943][T10975] loop5: detected capacity change from 0 to 1024 [ 1049.204723][T10975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1049.227029][T10969] IPVS: using max 2592 ests per chain, 129600 per kthread [ 1049.235171][T10949] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.532606][T10993] loop4: detected capacity change from 0 to 8192 [ 1049.721330][T10993] SELinux: failed to load policy [ 1049.764910][T11000] loop1: detected capacity change from 0 to 128 [ 1049.896987][T11007] siw: device registration error -23 [ 1050.075806][ T7208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.102700][ T41] bio_check_eod: 9 callbacks suppressed [ 1050.102711][ T41] kworker/u8:2: attempt to access beyond end of device [ 1050.102711][ T41] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 1050.123440][ T41] kworker/u8:2: attempt to access beyond end of device [ 1050.123440][ T41] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 1050.139081][ T41] kworker/u8:2: attempt to access beyond end of device [ 1050.139081][ T41] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 1050.164477][ T41] kworker/u8:2: attempt to access beyond end of device [ 1050.164477][ T41] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 1050.187291][ T41] kworker/u8:2: attempt to access beyond end of device [ 1050.187291][ T41] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 1050.200879][ T41] kworker/u8:2: attempt to access beyond end of device [ 1050.200879][ T41] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 1050.214346][ T41] kworker/u8:2: attempt to access beyond end of device [ 1050.214346][ T41] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 1050.227795][ T41] kworker/u8:2: attempt to access beyond end of device [ 1050.227795][ T41] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 1050.250173][ T41] kworker/u8:2: attempt to access beyond end of device [ 1050.250173][ T41] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 1050.265118][ T41] kworker/u8:2: attempt to access beyond end of device [ 1050.265118][ T41] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 1050.290503][T11017] siw: device registration error -23 [ 1050.352989][T11021] syz2: rxe_newlink: already configured on veth0_to_bond [ 1050.381468][T11028] loop5: detected capacity change from 0 to 512 [ 1050.395841][T11028] EXT4-fs: Ignoring removed oldalloc option [ 1050.432740][T11028] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1050.451856][T11028] EXT4-fs (loop5): 1 truncate cleaned up [ 1050.476230][T11028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.514384][ T7208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.541231][T11038] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1050.543191][T11036] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1050.576431][T11047] loop4: detected capacity change from 0 to 512 [ 1050.589027][T11047] EXT4-fs: Ignoring removed oldalloc option [ 1050.609715][T11047] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1050.647085][T11047] EXT4-fs (loop4): 1 truncate cleaned up [ 1050.653414][T11047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.657795][T11049] loop1: detected capacity change from 0 to 512 [ 1050.700109][T11059] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1050.701116][T11049] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.13218: Failed to acquire dquot type 1 [ 1050.724872][ T6592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.734810][T11049] EXT4-fs (loop1): 1 truncate cleaned up [ 1050.736578][T11066] siw: device registration error -23 [ 1050.742041][T11049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.791502][ T6795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.873432][T11076] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1050.975023][ T23] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1050.983065][ T23] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1051.009743][T11097] siw: device registration error -23 [ 1051.009918][T11095] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.027493][T11100] loop4: detected capacity change from 0 to 512 [ 1051.034171][T11100] EXT4-fs: Ignoring removed oldalloc option [ 1051.041661][T11100] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1051.051073][T11100] EXT4-fs (loop4): 1 truncate cleaned up [ 1051.057279][T11100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.084522][T11102] loop5: detected capacity change from 0 to 512 [ 1051.127772][T11095] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.150915][ T6592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.168476][T11102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1051.199608][T11102] EXT4-fs (loop5): shut down requested (0) [ 1051.208447][ T6795] block device autoloading is deprecated and will be removed. [ 1051.233723][T11095] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.266793][T11117] FAULT_INJECTION: forcing a failure. [ 1051.266793][T11117] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.279488][T11117] CPU: 0 UID: 0 PID: 11117 Comm: syz.6.13244 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 1051.279513][T11117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1051.279527][T11117] Call Trace: [ 1051.279534][T11117] [ 1051.279541][T11117] __dump_stack+0x1d/0x30 [ 1051.279636][T11117] dump_stack_lvl+0xe8/0x140 [ 1051.279734][T11117] dump_stack+0x15/0x1b [ 1051.279749][T11117] should_fail_ex+0x265/0x280 [ 1051.279844][T11117] ? selinux_bpf_map_create+0x36/0xd0 [ 1051.279874][T11117] should_failslab+0x8c/0xb0 [ 1051.279901][T11117] __kmalloc_cache_noprof+0x4c/0x320 [ 1051.279934][T11117] selinux_bpf_map_create+0x36/0xd0 [ 1051.280030][T11117] security_bpf_map_create+0x54/0xa0 [ 1051.280054][T11117] map_create+0xae3/0xb90 [ 1051.280068][T11117] ? security_bpf+0x2b/0x90 [ 1051.280104][T11117] __sys_bpf+0x5ab/0x790 [ 1051.280151][T11117] __x64_sys_bpf+0x41/0x50 [ 1051.280205][T11117] x64_sys_call+0x2478/0x2fb0 [ 1051.280223][T11117] do_syscall_64+0xd2/0x200 [ 1051.280246][T11117] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1051.280303][T11117] ? clear_bhb_loop+0x40/0x90 [ 1051.280326][T11117] ? clear_bhb_loop+0x40/0x90 [ 1051.280375][T11117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.280395][T11117] RIP: 0033:0x7f2a299ae969 [ 1051.280409][T11117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1051.280425][T11117] RSP: 002b:00007f2a28017038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1051.280440][T11117] RAX: ffffffffffffffda RBX: 00007f2a29bd5fa0 RCX: 00007f2a299ae969 [ 1051.280464][T11117] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 0000000000000000 [ 1051.280474][T11117] RBP: 00007f2a28017090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.280487][T11117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.280500][T11117] R13: 0000000000000000 R14: 00007f2a29bd5fa0 R15: 00007ffc90253898 [ 1051.280521][T11117] [ 1051.488552][T11095] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.684435][T11095] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.743480][T11134] loop4: detected capacity change from 0 to 512 [ 1051.754744][T11095] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.774851][T11134] EXT4-fs: Ignoring removed oldalloc option [ 1051.787966][T11134] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1051.802496][T11134] EXT4-fs (loop4): 1 truncate cleaned up [ 1051.812536][T11095] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.831180][T11134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.881176][T11095] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.899986][ T6592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.950217][T10949] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.963025][T10949] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.975148][T10949] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.987739][T10949] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.019538][ T7208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1052.070188][T11145] bond1: entered promiscuous mode [ 1052.075222][T11145] bond1: entered allmulticast mode [ 1052.081063][ T6081] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1052.083073][T11145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1052.123719][T11153] loop1: detected capacity change from 0 to 1024 [ 1052.167949][T11145] bond1 (unregistering): Released all slaves [ 1052.200781][T11155] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1052.298425][T11173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11173 comm=syz.0.13266 [ 1052.329040][T11172] loop4: detected capacity change from 0 to 1024 [ 1052.427190][ T29] kauditd_printk_skb: 455 callbacks suppressed [ 1052.427203][ T29] audit: type=1400 audit(1052.413:71171): avc: denied { egress } for pid=11178 comm="syz.5.13269" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1052.475814][T11179] lo speed is unknown, defaulting to 1000 [ 1052.488570][T11172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.534981][T11188] siw: device registration error -23 [ 1052.558855][ T29] audit: type=1400 audit(1052.413:71172): avc: denied { sendto } for pid=11178 comm="syz.5.13269" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1052.613372][T11191] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1052.625073][T11191] __nla_validate_parse: 23 callbacks suppressed [ 1052.625087][T11191] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13271'. [ 1052.714783][T11199] loop6: detected capacity change from 0 to 128 [ 1053.041051][T11212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11212 comm=syz.5.13278 [ 1053.056145][ T29] audit: type=1326 audit(1053.023:71173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.5.13278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57759e969 code=0x7ffc0000 [ 1053.079749][ T29] audit: type=1326 audit(1053.023:71174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.5.13278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57759e969 code=0x7ffc0000 [ 1053.103165][ T29] audit: type=1326 audit(1053.023:71175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.5.13278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb57759e969 code=0x7ffc0000 [ 1053.126352][ T29] audit: type=1326 audit(1053.023:71176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.5.13278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57759e969 code=0x7ffc0000 [ 1053.149666][ T29] audit: type=1326 audit(1053.023:71177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.5.13278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57759e969 code=0x7ffc0000 [ 1053.149810][ T29] audit: type=1326 audit(1053.023:71178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.5.13278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb57759e969 code=0x7ffc0000 [ 1053.149841][ T29] audit: type=1326 audit(1053.023:71179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.5.13278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57759e969 code=0x7ffc0000 [ 1053.149870][ T29] audit: type=1326 audit(1053.023:71180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.5.13278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57759e969 code=0x7ffc0000 [ 1053.180352][T11201] loop0: detected capacity change from 0 to 8192 [ 1053.216208][T11216] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13279'. [ 1053.302602][T11201] SELinux: failed to load policy [ 1053.348547][T11223] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1053.351484][T11223] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13282'. [ 1053.517009][T11228] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13284'. [ 1053.526051][T11228] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13284'. [ 1053.557668][T11228] siw: device registration error -23 [ 1053.559541][ T6592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.673714][T11238] lo speed is unknown, defaulting to 1000 [ 1053.772292][T11255] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13294'. [ 1054.053388][T11272] loop1: detected capacity change from 0 to 1024 [ 1054.083374][T11272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1054.561834][T11297] lo speed is unknown, defaulting to 1000 [ 1054.906430][T11306] lo speed is unknown, defaulting to 1000 [ 1055.026549][ T6795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.121393][T11320] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13313'. [ 1055.251448][T11337] loop1: detected capacity change from 0 to 128 [ 1055.468198][T11350] lo speed is unknown, defaulting to 1000 [ 1055.538235][T11353] loop0: detected capacity change from 0 to 8192 [ 1055.629051][T11360] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13329'. [ 1055.698100][ T36] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1055.705930][ T36] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1055.722497][T11367] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.771466][T11372] loop5: detected capacity change from 0 to 512 [ 1055.784851][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1055.795636][ T9] hid-generic 0000:0000:0000.0012: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1055.796055][T11367] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.857153][T11372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1055.872603][T11379] loop4: detected capacity change from 0 to 512 [ 1055.877084][T11353] SELinux: failed to load policy [ 1055.890866][T11379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1055.920144][T11372] EXT4-fs (loop5): shut down requested (0) [ 1055.952198][T11375] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.952329][T11379] EXT4-fs (loop4): shut down requested (0) [ 1056.017586][T11378] loop1: detected capacity change from 0 to 8192 [ 1056.028972][T11367] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.060293][T11375] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.099172][T11367] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.160236][T11375] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.218686][T11367] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.258239][T11367] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.328574][T11378] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 1056.369288][T11378] SELinux: failed to load policy [ 1056.411517][T11387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13338'. [ 1056.420613][T11387] netlink: 108 bytes leftover after parsing attributes in process `syz.0.13338'. [ 1056.536833][T11375] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.565022][T11367] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.577483][T11367] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.640662][T11375] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.675835][T11375] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.708243][ T7208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1056.800490][T11398] loop0: detected capacity change from 0 to 8192 [ 1056.810210][T11375] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.830279][T11375] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.965260][ T6592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1057.046237][T11387] SELinux: failed to load policy [ 1057.208727][T11413] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1057.431113][T11426] loop0: detected capacity change from 0 to 128 [ 1057.521637][T24769] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1057.530854][T24769] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1057.546977][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1057.556672][T11435] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.608253][T11437] loop4: detected capacity change from 0 to 512 [ 1057.618828][T11435] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.631652][T11437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1057.655883][T11437] EXT4-fs (loop4): shut down requested (0) [ 1057.668616][T11435] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.718206][T23334] bio_check_eod: 212 callbacks suppressed [ 1057.718216][T23334] kworker/u8:20: attempt to access beyond end of device [ 1057.718216][T23334] loop0: rw=1, sector=145, nr_sectors = 16 limit=128 [ 1057.740086][T23334] kworker/u8:20: attempt to access beyond end of device [ 1057.740086][T23334] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 1057.755098][T11435] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.765441][T11442] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1057.793412][T23334] kworker/u8:20: attempt to access beyond end of device [ 1057.793412][T23334] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 1057.809821][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 1057.809831][ T29] audit: type=1400 audit(1057.793:71327): avc: denied { create } for pid=11444 comm="syz.1.13356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1057.839308][T23334] kworker/u8:20: attempt to access beyond end of device [ 1057.839308][T23334] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 1057.866917][ T29] audit: type=1400 audit(1057.823:71328): avc: denied { create } for pid=11444 comm="syz.1.13356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1057.876922][T23334] kworker/u8:20: attempt to access beyond end of device [ 1057.876922][T23334] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 1057.886129][ T29] audit: type=1400 audit(1057.823:71329): avc: denied { setopt } for pid=11444 comm="syz.1.13356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1057.968010][T11451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.976455][T23334] kworker/u8:20: attempt to access beyond end of device [ 1057.976455][T23334] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 1057.983056][ T29] audit: type=1400 audit(1057.903:71330): avc: denied { sys_module } for pid=11448 comm="syz.5.13358" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1057.993538][T11451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.020951][T23334] kworker/u8:20: attempt to access beyond end of device [ 1058.020951][T23334] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 1058.036520][T23334] kworker/u8:20: attempt to access beyond end of device [ 1058.036520][T23334] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 1058.054746][T23334] kworker/u8:20: attempt to access beyond end of device [ 1058.054746][T23334] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 1058.054776][T23334] kworker/u8:20: attempt to access beyond end of device [ 1058.054776][T23334] loop0: rw=1, sector=297, nr_sectors = 8 limit=128 [ 1058.097606][ T29] audit: type=1400 audit(1058.083:71331): avc: denied { read append } for pid=11444 comm="syz.1.13356" name="event2" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1058.097679][ T29] audit: type=1400 audit(1058.083:71332): avc: denied { open } for pid=11444 comm="syz.1.13356" path="/dev/input/event2" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1058.097879][ T29] audit: type=1400 audit(1058.083:71333): avc: denied { ioctl } for pid=11444 comm="syz.1.13356" path="/dev/input/event2" dev="devtmpfs" ino=249 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1058.098922][ T29] audit: type=1400 audit(1058.083:71334): avc: denied { mount } for pid=11444 comm="syz.1.13356" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1058.107085][ T29] audit: type=1400 audit(1058.093:71335): avc: denied { unmount } for pid=11444 comm="syz.1.13356" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1058.182246][T11451] loop6: detected capacity change from 0 to 512 [ 1058.260801][ T29] audit: type=1400 audit(1058.203:71336): avc: denied { sys_module } for pid=11455 comm="syz.0.13355" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1058.307632][T11451] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1058.336061][T11451] EXT4-fs (loop6): mount failed [ 1058.345887][T11471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11471 comm=syz.1.13365 [ 1058.369542][T11451] __nla_validate_parse: 8 callbacks suppressed [ 1058.369553][T11451] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13359'. [ 1058.387799][T24769] IPVS: starting estimator thread 0... [ 1058.416431][T11475] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1058.421291][ T3390] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1058.432100][ T3390] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1058.451860][T11472] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.483651][T11473] IPVS: using max 2544 ests per chain, 127200 per kthread [ 1058.509171][T11481] loop0: detected capacity change from 0 to 512 [ 1058.511168][T11472] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.529412][T11481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1058.552483][T11481] EXT4-fs (loop0): shut down requested (0) [ 1058.565285][T11486] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13370'. [ 1058.574348][T11486] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13370'. [ 1058.584317][T11486] siw: device registration error -23 [ 1058.592342][T11472] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.628315][T11472] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.684531][T11491] loop5: detected capacity change from 0 to 512 [ 1058.691390][T11491] EXT4-fs: Ignoring removed oldalloc option [ 1058.698585][T11491] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1058.706960][T11491] EXT4-fs (loop5): 1 truncate cleaned up [ 1058.712313][T11472] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.714114][T11491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1058.724066][T11472] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.744449][T11472] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.754489][ T7208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.755993][T11472] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.780314][T11494] FAULT_INJECTION: forcing a failure. [ 1058.780314][T11494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1058.793457][T11494] CPU: 0 UID: 0 PID: 11494 Comm: syz.5.13373 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 1058.793528][T11494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1058.793558][T11494] Call Trace: [ 1058.793565][T11494] [ 1058.793572][T11494] __dump_stack+0x1d/0x30 [ 1058.793594][T11494] dump_stack_lvl+0xe8/0x140 [ 1058.793613][T11494] dump_stack+0x15/0x1b [ 1058.793637][T11494] should_fail_ex+0x265/0x280 [ 1058.793687][T11494] should_fail+0xb/0x20 [ 1058.793703][T11494] should_fail_usercopy+0x1a/0x20 [ 1058.793724][T11494] _copy_to_user+0x20/0xa0 [ 1058.793749][T11494] simple_read_from_buffer+0xb5/0x130 [ 1058.793836][T11494] proc_fail_nth_read+0x100/0x140 [ 1058.793871][T11494] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1058.793895][T11494] vfs_read+0x1a0/0x6f0 [ 1058.793945][T11494] ? __rcu_read_unlock+0x4f/0x70 [ 1058.793967][T11494] ? __fget_files+0x184/0x1c0 [ 1058.794042][T11494] ? finish_task_switch+0xad/0x2b0 [ 1058.794066][T11494] ksys_read+0xda/0x1a0 [ 1058.794087][T11494] __x64_sys_read+0x40/0x50 [ 1058.794107][T11494] x64_sys_call+0x2d77/0x2fb0 [ 1058.794139][T11494] do_syscall_64+0xd2/0x200 [ 1058.794168][T11494] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1058.794193][T11494] ? clear_bhb_loop+0x40/0x90 [ 1058.794279][T11494] ? clear_bhb_loop+0x40/0x90 [ 1058.794305][T11494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.794396][T11494] RIP: 0033:0x7fb57759d37c [ 1058.794411][T11494] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1058.794490][T11494] RSP: 002b:00007fb575c07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1058.794509][T11494] RAX: ffffffffffffffda RBX: 00007fb5777c5fa0 RCX: 00007fb57759d37c [ 1058.794541][T11494] RDX: 000000000000000f RSI: 00007fb575c070a0 RDI: 0000000000000004 [ 1058.794553][T11494] RBP: 00007fb575c07090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.794569][T11494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.794581][T11494] R13: 0000000000000000 R14: 00007fb5777c5fa0 R15: 00007ffe8b297938 [ 1058.794625][T11494] [ 1059.078764][ T6081] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1059.112402][T11510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11510 comm=syz.0.13378 [ 1059.140207][T11515] FAULT_INJECTION: forcing a failure. [ 1059.140207][T11515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1059.141423][T11516] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1059.153414][T11515] CPU: 0 UID: 0 PID: 11515 Comm: syz.0.13380 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 1059.153448][T11515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1059.153462][T11515] Call Trace: [ 1059.153469][T11515] [ 1059.153555][T11515] __dump_stack+0x1d/0x30 [ 1059.153578][T11515] dump_stack_lvl+0xe8/0x140 [ 1059.153601][T11515] dump_stack+0x15/0x1b [ 1059.153620][T11515] should_fail_ex+0x265/0x280 [ 1059.153643][T11515] should_fail+0xb/0x20 [ 1059.153681][T11515] should_fail_usercopy+0x1a/0x20 [ 1059.153706][T11515] _copy_from_user+0x1c/0xb0 [ 1059.153734][T11515] ___sys_sendmsg+0xc1/0x1d0 [ 1059.153823][T11515] __x64_sys_sendmsg+0xd4/0x160 [ 1059.153862][T11515] x64_sys_call+0x2999/0x2fb0 [ 1059.153886][T11515] do_syscall_64+0xd2/0x200 [ 1059.153918][T11515] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1059.153980][T11515] ? clear_bhb_loop+0x40/0x90 [ 1059.154003][T11515] ? clear_bhb_loop+0x40/0x90 [ 1059.154028][T11515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.154052][T11515] RIP: 0033:0x7fed8729e969 [ 1059.154068][T11515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1059.154125][T11515] RSP: 002b:00007fed85907038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1059.154145][T11515] RAX: ffffffffffffffda RBX: 00007fed874c5fa0 RCX: 00007fed8729e969 [ 1059.154160][T11515] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 1059.154174][T11515] RBP: 00007fed85907090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.154188][T11515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1059.154201][T11515] R13: 0000000000000000 R14: 00007fed874c5fa0 R15: 00007ffd9d9aaf98 [ 1059.154233][T11515] [ 1059.230145][T11523] loop0: detected capacity change from 0 to 512 [ 1059.241967][T11519] lo speed is unknown, defaulting to 1000 [ 1059.256237][T11523] EXT4-fs: Ignoring removed oldalloc option [ 1059.371075][T11527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13384'. [ 1059.380280][T11527] netlink: 108 bytes leftover after parsing attributes in process `syz.5.13384'. [ 1059.390289][T11523] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1059.398520][T11523] EXT4-fs (loop0): 1 truncate cleaned up [ 1059.406133][T11523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1059.421175][T11532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.429628][T11532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.439010][T11527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13384'. [ 1059.449388][T11527] netlink: 108 bytes leftover after parsing attributes in process `syz.5.13384'. [ 1059.458613][T11527] netlink: 84 bytes leftover after parsing attributes in process `syz.5.13384'. [ 1059.482941][ T6081] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.502708][T11532] loop1: detected capacity change from 0 to 512 [ 1059.520147][T11532] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1059.535145][T11532] EXT4-fs (loop1): mount failed [ 1059.544485][T11532] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13386'. [ 1059.554505][T11536] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1059.589937][T11541] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1059.599176][T11527] loop5: detected capacity change from 0 to 8192 [ 1059.690184][T11527] SELinux: failed to load policy [ 1060.009312][T11557] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1060.036223][T11565] loop0: detected capacity change from 0 to 512 [ 1060.042818][T11565] EXT4-fs: Ignoring removed oldalloc option [ 1060.053194][T11565] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1060.061021][T11568] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13398'. [ 1060.070510][T11565] EXT4-fs (loop0): 1 truncate cleaned up [ 1060.087291][T11565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1060.113248][T11570] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1060.125353][ T6081] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.140270][T11572] siw: device registration error -23 [ 1060.155505][T11575] FAULT_INJECTION: forcing a failure. [ 1060.155505][T11575] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.168177][T11575] CPU: 0 UID: 0 PID: 11575 Comm: syz.0.13401 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 1060.168212][T11575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1060.168293][T11575] Call Trace: [ 1060.168359][T11575] [ 1060.168366][T11575] __dump_stack+0x1d/0x30 [ 1060.168388][T11575] dump_stack_lvl+0xe8/0x140 [ 1060.168407][T11575] dump_stack+0x15/0x1b [ 1060.168481][T11575] should_fail_ex+0x265/0x280 [ 1060.168501][T11575] should_failslab+0x8c/0xb0 [ 1060.168525][T11575] kmem_cache_alloc_noprof+0x50/0x310 [ 1060.168553][T11575] ? audit_log_start+0x365/0x6c0 [ 1060.168657][T11575] audit_log_start+0x365/0x6c0 [ 1060.168693][T11575] audit_seccomp+0x48/0x100 [ 1060.168788][T11575] ? __seccomp_filter+0x68c/0x10d0 [ 1060.168895][T11575] __seccomp_filter+0x69d/0x10d0 [ 1060.168919][T11575] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1060.168942][T11575] ? vfs_write+0x75e/0x8e0 [ 1060.168969][T11575] __secure_computing+0x82/0x150 [ 1060.169038][T11575] syscall_trace_enter+0xcf/0x1e0 [ 1060.169063][T11575] do_syscall_64+0xac/0x200 [ 1060.169092][T11575] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1060.169130][T11575] ? clear_bhb_loop+0x40/0x90 [ 1060.169162][T11575] ? clear_bhb_loop+0x40/0x90 [ 1060.169184][T11575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.169208][T11575] RIP: 0033:0x7fed8729e969 [ 1060.169228][T11575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1060.169270][T11575] RSP: 002b:00007fed85907038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d0 [ 1060.169289][T11575] RAX: ffffffffffffffda RBX: 00007fed874c5fa0 RCX: 00007fed8729e969 [ 1060.169301][T11575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fed858d6000 [ 1060.169313][T11575] RBP: 00007fed85907090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.169325][T11575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.169337][T11575] R13: 0000000000000000 R14: 00007fed874c5fa0 R15: 00007ffd9d9aaf98 [ 1060.169356][T11575] [ 1060.489911][T11588] siw: device registration error -23 [ 1060.507140][T11591] lo speed is unknown, defaulting to 1000 [ 1060.548659][T11590] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1060.575570][T11595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.584384][T11595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.604737][T11595] loop1: detected capacity change from 0 to 512 [ 1060.638220][T11595] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1060.658316][T11595] EXT4-fs (loop1): mount failed [ 1060.701544][T11611] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1060.722645][T11606] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1060.805851][T11624] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1061.003245][T11642] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1061.047826][T11649] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1061.090781][T11653] loop0: detected capacity change from 0 to 512 [ 1061.097873][T11653] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1061.109300][T11653] EXT4-fs (loop0): 1 truncate cleaned up [ 1061.115464][T11653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1061.141075][T11653] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 1061.239363][T11660] FAULT_INJECTION: forcing a failure. [ 1061.239363][T11660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1061.252489][T11660] CPU: 1 UID: 0 PID: 11660 Comm: syz.5.13429 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 1061.252568][T11660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1061.252582][T11660] Call Trace: [ 1061.252589][T11660] [ 1061.252596][T11660] __dump_stack+0x1d/0x30 [ 1061.252619][T11660] dump_stack_lvl+0xe8/0x140 [ 1061.252639][T11660] dump_stack+0x15/0x1b [ 1061.252654][T11660] should_fail_ex+0x265/0x280 [ 1061.252728][T11660] should_fail+0xb/0x20 [ 1061.252816][T11660] should_fail_usercopy+0x1a/0x20 [ 1061.252839][T11660] _copy_to_user+0x20/0xa0 [ 1061.252865][T11660] simple_read_from_buffer+0xb5/0x130 [ 1061.252977][T11660] proc_fail_nth_read+0x100/0x140 [ 1061.253003][T11660] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1061.253027][T11660] vfs_read+0x1a0/0x6f0 [ 1061.253047][T11660] ? __rcu_read_unlock+0x4f/0x70 [ 1061.253084][T11660] ? __fget_files+0x184/0x1c0 [ 1061.253163][T11660] ksys_read+0xda/0x1a0 [ 1061.253180][T11660] __x64_sys_read+0x40/0x50 [ 1061.253197][T11660] x64_sys_call+0x2d77/0x2fb0 [ 1061.253294][T11660] do_syscall_64+0xd2/0x200 [ 1061.253324][T11660] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1061.253351][T11660] ? clear_bhb_loop+0x40/0x90 [ 1061.253393][T11660] ? clear_bhb_loop+0x40/0x90 [ 1061.253420][T11660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.253513][T11660] RIP: 0033:0x7fb57759d37c [ 1061.253542][T11660] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1061.253564][T11660] RSP: 002b:00007fb575c07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1061.253583][T11660] RAX: ffffffffffffffda RBX: 00007fb5777c5fa0 RCX: 00007fb57759d37c [ 1061.253594][T11660] RDX: 000000000000000f RSI: 00007fb575c070a0 RDI: 0000000000000004 [ 1061.253648][T11660] RBP: 00007fb575c07090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.253661][T11660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.253675][T11660] R13: 0000000000000000 R14: 00007fb5777c5fa0 R15: 00007ffe8b297938 [ 1061.253760][T11660] [ 1061.574602][T11673] netlink: 'syz.1.13437': attribute type 30 has an invalid length. [ 1061.595542][T11669] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1061.622437][T11676] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1061.623845][T11678] FAULT_INJECTION: forcing a failure. [ 1061.623845][T11678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1061.643202][T11678] CPU: 0 UID: 0 PID: 11678 Comm: syz.6.13439 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 1061.643258][T11678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1061.643269][T11678] Call Trace: [ 1061.643274][T11678] [ 1061.643280][T11678] __dump_stack+0x1d/0x30 [ 1061.643299][T11678] dump_stack_lvl+0xe8/0x140 [ 1061.643328][T11678] dump_stack+0x15/0x1b [ 1061.643342][T11678] should_fail_ex+0x265/0x280 [ 1061.643360][T11678] should_fail+0xb/0x20 [ 1061.643417][T11678] should_fail_usercopy+0x1a/0x20 [ 1061.643508][T11678] _copy_to_user+0x20/0xa0 [ 1061.643529][T11678] simple_read_from_buffer+0xb5/0x130 [ 1061.643560][T11678] proc_fail_nth_read+0x100/0x140 [ 1061.643635][T11678] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1061.643653][T11678] vfs_read+0x1a0/0x6f0 [ 1061.643671][T11678] ? selinux_socket_shutdown+0x175/0x1b0 [ 1061.643690][T11678] ? __rcu_read_unlock+0x4f/0x70 [ 1061.643714][T11678] ksys_read+0xda/0x1a0 [ 1061.643735][T11678] __x64_sys_read+0x40/0x50 [ 1061.643801][T11678] x64_sys_call+0x2d77/0x2fb0 [ 1061.643882][T11678] do_syscall_64+0xd2/0x200 [ 1061.643907][T11678] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1061.643930][T11678] ? clear_bhb_loop+0x40/0x90 [ 1061.643960][T11678] ? clear_bhb_loop+0x40/0x90 [ 1061.643979][T11678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.643996][T11678] RIP: 0033:0x7f2a299ad37c [ 1061.644009][T11678] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1061.644075][T11678] RSP: 002b:00007f2a28017030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1061.644091][T11678] RAX: ffffffffffffffda RBX: 00007f2a29bd5fa0 RCX: 00007f2a299ad37c [ 1061.644102][T11678] RDX: 000000000000000f RSI: 00007f2a280170a0 RDI: 0000000000000005 [ 1061.644112][T11678] RBP: 00007f2a28017090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.644122][T11678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.644208][T11678] R13: 0000000000000000 R14: 00007f2a29bd5fa0 R15: 00007ffc90253898 [ 1061.644292][T11678] [ 1061.890819][T11684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.898262][T11684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.905978][T11684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.906769][ T6081] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.913515][T11684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.939948][T11435] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.951955][T11435] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.963552][T11435] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.976132][T11435] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.095088][T11690] lo speed is unknown, defaulting to 1000 [ 1062.179750][ T6592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1062.184036][T11692] lo speed is unknown, defaulting to 1000 [ 1062.213334][T11694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11694 comm=syz.4.13444 [ 1062.350587][T11704] netlink: 'syz.4.13448': attribute type 30 has an invalid length. [ 1062.440282][T11711] serio: Serial port ptm0 [ 1062.565222][T11712] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 1062.655260][T20755] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1062.665062][T20755] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1062.677251][T11718] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.718688][T11719] loop4: detected capacity change from 0 to 512 [ 1062.737845][T11721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11721 comm=syz.1.13455 [ 1062.761926][T11719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1062.825491][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 1062.825505][ T29] audit: type=1326 audit(1062.803:71729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11725 comm="syz.0.13457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8729e969 code=0x7ffc0000 [ 1062.860828][T11718] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.875027][T11719] EXT4-fs (loop4): shut down requested (0) [ 1062.913933][ T29] audit: type=1326 audit(1062.843:71730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11725 comm="syz.0.13457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fed8729e969 code=0x7ffc0000 [ 1062.936210][T11726] bond2: entered promiscuous mode [ 1062.937078][ T29] audit: type=1326 audit(1062.843:71731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11725 comm="syz.0.13457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8729e969 code=0x7ffc0000 [ 1062.941996][T11726] bond2: entered allmulticast mode [ 1062.965098][ T29] audit: type=1326 audit(1062.843:71732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11725 comm="syz.0.13457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed8729e969 code=0x7ffc0000 [ 1062.993505][ T29] audit: type=1326 audit(1062.843:71733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11725 comm="syz.0.13457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8729e969 code=0x7ffc0000 [ 1063.016732][ T29] audit: type=1326 audit(1062.843:71734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11725 comm="syz.0.13457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed8729e969 code=0x7ffc0000 [ 1063.039799][ T29] audit: type=1326 audit(1062.873:71735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11725 comm="syz.0.13457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8729e969 code=0x7ffc0000 [ 1063.045619][T11726] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1063.062938][ T29] audit: type=1326 audit(1062.873:71736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11725 comm="syz.0.13457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed8729e969 code=0x7ffc0000 [ 1063.062972][ T29] audit: type=1326 audit(1062.873:71737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11725 comm="syz.0.13457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8729e969 code=0x7ffc0000 [ 1063.077924][T11739] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1063.092667][ T29] audit: type=1326 audit(1062.873:71738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11725 comm="syz.0.13457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8729e969 code=0x7ffc0000 [ 1063.115927][T11737] loop0: detected capacity change from 0 to 1024 [ 1063.162797][T11726] bond2 (unregistering): Released all slaves [ 1063.190952][T11718] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.282863][T11718] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.433417][T11750] FAULT_INJECTION: forcing a failure. [ 1063.433417][T11750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1063.446487][T11750] CPU: 0 UID: 0 PID: 11750 Comm: syz.5.13464 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 1063.446584][T11750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1063.446599][T11750] Call Trace: [ 1063.446605][T11750] [ 1063.446613][T11750] __dump_stack+0x1d/0x30 [ 1063.446670][T11750] dump_stack_lvl+0xe8/0x140 [ 1063.446685][T11750] dump_stack+0x15/0x1b [ 1063.446701][T11750] should_fail_ex+0x265/0x280 [ 1063.446721][T11750] should_fail+0xb/0x20 [ 1063.446744][T11750] should_fail_usercopy+0x1a/0x20 [ 1063.446786][T11750] _copy_from_user+0x1c/0xb0 [ 1063.446813][T11750] ___sys_sendmsg+0xc1/0x1d0 [ 1063.446863][T11750] __sys_sendmmsg+0x178/0x300 [ 1063.447000][T11750] __x64_sys_sendmmsg+0x57/0x70 [ 1063.447025][T11750] x64_sys_call+0x2f2f/0x2fb0 [ 1063.447092][T11750] do_syscall_64+0xd2/0x200 [ 1063.447123][T11750] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1063.447213][T11750] ? clear_bhb_loop+0x40/0x90 [ 1063.447237][T11750] ? clear_bhb_loop+0x40/0x90 [ 1063.447264][T11750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.447280][T11750] RIP: 0033:0x7fb57759e969 [ 1063.447292][T11750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1063.447307][T11750] RSP: 002b:00007fb575c07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1063.447322][T11750] RAX: ffffffffffffffda RBX: 00007fb5777c5fa0 RCX: 00007fb57759e969 [ 1063.447335][T11750] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000006 [ 1063.447417][T11750] RBP: 00007fb575c07090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.447430][T11750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.447440][T11750] R13: 0000000000000000 R14: 00007fb5777c5fa0 R15: 00007ffe8b297938 [ 1063.447455][T11750] [ 1063.629021][T11748] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1063.665117][T11755] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1063.688622][T11757] __nla_validate_parse: 15 callbacks suppressed [ 1063.688634][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13467'. [ 1063.707539][T11757] loop5: detected capacity change from 0 to 512 [ 1063.714310][T11757] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1063.727882][T11757] EXT4-fs (loop5): 1 truncate cleaned up [ 1063.733924][T11757] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1063.752638][T11757] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 1064.093434][ T7208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.263434][T11774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.283521][T11774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.321442][T11774] loop5: detected capacity change from 0 to 512 [ 1064.340135][T11772] loop1: detected capacity change from 0 to 8192 [ 1064.369687][T11774] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1064.404702][T11774] EXT4-fs (loop5): mount failed [ 1064.432045][T11774] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13473'. [ 1064.441895][ T3390] IPVS: starting estimator thread 0... [ 1064.451624][T11781] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1064.457853][T11772] SELinux: failed to load policy [ 1064.539964][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13478'. [ 1064.549111][T11784] IPVS: using max 2784 ests per chain, 139200 per kthread [ 1064.564962][T11793] loop6: detected capacity change from 0 to 512 [ 1064.572606][T11793] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1064.587931][T11793] EXT4-fs (loop6): 1 truncate cleaned up [ 1064.593990][T11793] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1064.612822][T11793] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 1064.649549][T11801] loop1: detected capacity change from 0 to 128 [ 1064.891549][T11806] loop1: detected capacity change from 0 to 512 [ 1064.904145][T11806] EXT4-fs: Ignoring removed oldalloc option [ 1064.914915][T11806] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1064.923305][T11806] EXT4-fs (loop1): 1 truncate cleaned up [ 1064.930636][T11806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1064.967454][ T6795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.008612][T11812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.029499][T11812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.060675][T11812] loop1: detected capacity change from 0 to 512 [ 1065.089464][T11812] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1065.113379][T10525] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.125269][T11812] EXT4-fs (loop1): mount failed [ 1065.349234][T11812] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13485'. [ 1065.367383][T11821] lo speed is unknown, defaulting to 1000 [ 1065.858540][T11831] syz2: rxe_newlink: already configured on veth0_to_bond [ 1065.880311][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13490'. [ 1065.889694][T11834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13490'. [ 1065.943240][T11840] loop5: detected capacity change from 0 to 128 [ 1065.969151][T11842] loop1: detected capacity change from 0 to 512 [ 1065.975874][T11842] EXT4-fs: Ignoring removed oldalloc option [ 1065.982923][T11842] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1065.991479][T11842] EXT4-fs (loop1): 1 truncate cleaned up [ 1065.997840][T11842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1066.046664][ T6795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.062815][T11846] loop6: detected capacity change from 0 to 1024 [ 1066.077612][T11848] loop1: detected capacity change from 0 to 512 [ 1066.082473][T11846] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1066.084274][T11848] EXT4-fs: Ignoring removed oldalloc option [ 1066.107824][T11848] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1066.116049][T11848] EXT4-fs (loop1): 1 truncate cleaned up [ 1066.122332][T11848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1066.138680][T11855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11855 comm=syz.5.13498 [ 1066.167499][T11846] FAULT_INJECTION: forcing a failure. [ 1066.167499][T11846] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.169060][ T6795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.180198][T11846] CPU: 1 UID: 0 PID: 11846 Comm: syz.6.13496 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 1066.180231][T11846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1066.180246][T11846] Call Trace: [ 1066.180254][T11846] [ 1066.180262][T11846] __dump_stack+0x1d/0x30 [ 1066.180316][T11846] dump_stack_lvl+0xe8/0x140 [ 1066.180338][T11846] dump_stack+0x15/0x1b [ 1066.180423][T11846] should_fail_ex+0x265/0x280 [ 1066.180447][T11846] should_failslab+0x8c/0xb0 [ 1066.180474][T11846] kmem_cache_alloc_noprof+0x50/0x310 [ 1066.180506][T11846] ? audit_log_start+0x365/0x6c0 [ 1066.180567][T11846] audit_log_start+0x365/0x6c0 [ 1066.180607][T11846] audit_seccomp+0x48/0x100 [ 1066.180637][T11846] ? __seccomp_filter+0x68c/0x10d0 [ 1066.180664][T11846] __seccomp_filter+0x69d/0x10d0 [ 1066.180723][T11846] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1066.180749][T11846] ? vfs_write+0x75e/0x8e0 [ 1066.180772][T11846] ? __rcu_read_unlock+0x4f/0x70 [ 1066.180819][T11846] ? __fget_files+0x184/0x1c0 [ 1066.180848][T11846] __secure_computing+0x82/0x150 [ 1066.180994][T11846] syscall_trace_enter+0xcf/0x1e0 [ 1066.181067][T11846] do_syscall_64+0xac/0x200 [ 1066.181099][T11846] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1066.181196][T11846] ? clear_bhb_loop+0x40/0x90 [ 1066.181219][T11846] ? clear_bhb_loop+0x40/0x90 [ 1066.181285][T11846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.181339][T11846] RIP: 0033:0x7f2a299ae969 [ 1066.181356][T11846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1066.181377][T11846] RSP: 002b:00007f2a28017038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1066.181494][T11846] RAX: ffffffffffffffda RBX: 00007f2a29bd5fa0 RCX: 00007f2a299ae969 [ 1066.181509][T11846] RDX: 0000000000000000 RSI: 0000000000000d81 RDI: 000000000000000a [ 1066.181522][T11846] RBP: 00007f2a28017090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.181537][T11846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1066.181550][T11846] R13: 0000000000000000 R14: 00007f2a29bd5fa0 R15: 00007ffc90253898 [ 1066.181589][T11846] [ 1066.184923][T11846] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1066.415591][T11846] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 1066.427905][T11846] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1066.427905][T11846] [ 1066.437577][T11846] EXT4-fs (loop6): Total free blocks count 0 [ 1066.443570][T11846] EXT4-fs (loop6): Free/Dirty block details [ 1066.449475][T11846] EXT4-fs (loop6): free_blocks=68451041280 [ 1066.455285][T11846] EXT4-fs (loop6): dirty_blocks=64 [ 1066.460419][T11846] EXT4-fs (loop6): Block reservation details [ 1066.466394][T11846] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 1066.489083][T11864] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1066.534962][T11874] loop6: detected capacity change from 0 to 128 [ 1066.628636][T11879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13507'. [ 1066.658215][T11885] loop5: detected capacity change from 0 to 512 [ 1066.679232][T11887] loop1: detected capacity change from 0 to 512 [ 1066.685834][T11887] EXT4-fs: Ignoring removed oldalloc option [ 1066.700633][T11880] lo speed is unknown, defaulting to 1000 [ 1066.776301][T11887] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1066.787450][T11887] EXT4-fs (loop1): 1 truncate cleaned up [ 1066.836811][T11718] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.882219][T11718] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.901840][T11718] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.933782][T11718] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.011334][T11899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13512'. [ 1067.020457][T11899] netlink: 108 bytes leftover after parsing attributes in process `syz.1.13512'. [ 1067.100310][T11899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13512'. [ 1067.445214][T11899] loop1: detected capacity change from 0 to 8192 [ 1067.549339][T11917] FAULT_INJECTION: forcing a failure. [ 1067.549339][T11917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1067.562434][T11917] CPU: 0 UID: 0 PID: 11917 Comm: syz.4.13516 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 1067.562457][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1067.562478][T11917] Call Trace: [ 1067.562485][T11917] [ 1067.562493][T11917] __dump_stack+0x1d/0x30 [ 1067.562516][T11917] dump_stack_lvl+0xe8/0x140 [ 1067.562539][T11917] dump_stack+0x15/0x1b [ 1067.562557][T11917] should_fail_ex+0x265/0x280 [ 1067.562581][T11917] should_fail+0xb/0x20 [ 1067.562597][T11917] should_fail_usercopy+0x1a/0x20 [ 1067.562672][T11917] _copy_from_user+0x1c/0xb0 [ 1067.562700][T11917] vmemdup_user+0x59/0xd0 [ 1067.562740][T11917] path_setxattrat+0x1b6/0x310 [ 1067.562787][T11917] __x64_sys_fsetxattr+0x6b/0x80 [ 1067.562822][T11917] x64_sys_call+0x2f7c/0x2fb0 [ 1067.562839][T11917] do_syscall_64+0xd2/0x200 [ 1067.562866][T11917] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1067.562926][T11917] ? clear_bhb_loop+0x40/0x90 [ 1067.562943][T11917] ? clear_bhb_loop+0x40/0x90 [ 1067.562961][T11917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.562981][T11917] RIP: 0033:0x7fdf6824e969 [ 1067.563003][T11917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1067.563023][T11917] RSP: 002b:00007fdf66896038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 1067.563038][T11917] RAX: ffffffffffffffda RBX: 00007fdf68476080 RCX: 00007fdf6824e969 [ 1067.563048][T11917] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 000000000000000c [ 1067.563058][T11917] RBP: 00007fdf66896090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.563068][T11917] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 1067.563124][T11917] R13: 0000000000000000 R14: 00007fdf68476080 R15: 00007ffcaa1a7cd8 [ 1067.563147][T11917] [ 1067.628724][T11918] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 1067.768392][T11922] netlink: 'syz.6.13517': attribute type 21 has an invalid length. [ 1067.783748][T11922] netlink: 'syz.6.13517': attribute type 6 has an invalid length. [ 1067.786884][T11918] SELinux: failed to load policy [ 1067.861186][T11929] FAULT_INJECTION: forcing a failure. [ 1067.861186][T11929] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.873829][T11929] CPU: 1 UID: 0 PID: 11929 Comm: syz.4.13518 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 1067.873858][T11929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1067.873871][T11929] Call Trace: [ 1067.873879][T11929] [ 1067.873886][T11929] __dump_stack+0x1d/0x30 [ 1067.873903][T11929] dump_stack_lvl+0xe8/0x140 [ 1067.873921][T11929] dump_stack+0x15/0x1b [ 1067.873944][T11929] should_fail_ex+0x265/0x280 [ 1067.873968][T11929] should_failslab+0x8c/0xb0 [ 1067.873994][T11929] kmem_cache_alloc_noprof+0x50/0x310 [ 1067.874017][T11929] ? mas_alloc_nodes+0x265/0x520 [ 1067.874044][T11929] mas_alloc_nodes+0x265/0x520 [ 1067.874071][T11929] mas_preallocate+0x32b/0x510 [ 1067.874109][T11929] __split_vma+0x239/0x610 [ 1067.874143][T11929] vma_modify+0x3e9/0xc60 [ 1067.874168][T11929] vma_modify_flags+0x101/0x130 [ 1067.874195][T11929] mprotect_fixup+0x2cc/0x570 [ 1067.874227][T11929] do_mprotect_pkey+0x6d6/0x980 [ 1067.874273][T11929] __x64_sys_mprotect+0x48/0x60 [ 1067.874302][T11929] x64_sys_call+0x2794/0x2fb0 [ 1067.874325][T11929] do_syscall_64+0xd2/0x200 [ 1067.874348][T11929] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1067.874370][T11929] ? clear_bhb_loop+0x40/0x90 [ 1067.874386][T11929] ? clear_bhb_loop+0x40/0x90 [ 1067.874407][T11929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.874429][T11929] RIP: 0033:0x7fdf6824e969 [ 1067.874445][T11929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1067.874464][T11929] RSP: 002b:00007fdf668b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 1067.874485][T11929] RAX: ffffffffffffffda RBX: 00007fdf68475fa0 RCX: 00007fdf6824e969 [ 1067.874498][T11929] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000000000 [ 1067.874511][T11929] RBP: 00007fdf668b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.874524][T11929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.874536][T11929] R13: 0000000000000001 R14: 00007fdf68475fa0 R15: 00007ffcaa1a7cd8 [ 1067.874561][T11929] [ 1068.134158][T11933] loop4: detected capacity change from 0 to 128 [ 1068.410598][T23324] bio_check_eod: 101 callbacks suppressed [ 1068.410615][T23324] kworker/u8:10: attempt to access beyond end of device [ 1068.410615][T23324] loop4: rw=1, sector=145, nr_sectors = 16 limit=128 [ 1068.451563][T23324] kworker/u8:10: attempt to access beyond end of device [ 1068.451563][T23324] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 1068.465518][T23324] kworker/u8:10: attempt to access beyond end of device [ 1068.465518][T23324] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 1068.480185][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 1068.480199][ T29] audit: type=1400 audit(1068.463:72092): avc: denied { bind } for pid=11953 comm="syz.0.13530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1068.506486][T23324] kworker/u8:10: attempt to access beyond end of device [ 1068.506486][T23324] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 1068.514497][T11942] lo speed is unknown, defaulting to 1000 [ 1068.521089][ T29] audit: type=1400 audit(1068.463:72093): avc: denied { bind } for pid=11955 comm="syz.1.13531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1068.545998][T23324] kworker/u8:10: attempt to access beyond end of device [ 1068.545998][T23324] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 1068.591642][ T29] audit: type=1400 audit(1068.543:72094): avc: denied { create } for pid=11953 comm="syz.0.13530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1068.626160][T11963] FAULT_INJECTION: forcing a failure. [ 1068.626160][T11963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.628419][T23324] kworker/u8:10: attempt to access beyond end of device [ 1068.628419][T23324] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 1068.639289][T11963] CPU: 0 UID: 0 PID: 11963 Comm: syz.0.13532 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 1068.639329][T11963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1068.639344][T11963] Call Trace: [ 1068.639351][T11963] [ 1068.639360][T11963] __dump_stack+0x1d/0x30 [ 1068.639430][T11963] dump_stack_lvl+0xe8/0x140 [ 1068.639453][T11963] dump_stack+0x15/0x1b [ 1068.639472][T11963] should_fail_ex+0x265/0x280 [ 1068.639496][T11963] should_fail+0xb/0x20 [ 1068.639514][T11963] should_fail_usercopy+0x1a/0x20 [ 1068.639542][T11963] _copy_to_user+0x20/0xa0 [ 1068.639570][T11963] simple_read_from_buffer+0xb5/0x130 [ 1068.639610][T11963] proc_fail_nth_read+0x100/0x140 [ 1068.639664][T11963] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1068.639689][T11963] vfs_read+0x1a0/0x6f0 [ 1068.639711][T11963] ? __rcu_read_unlock+0x4f/0x70 [ 1068.639736][T11963] ? __fget_files+0x184/0x1c0 [ 1068.639782][T11963] ksys_read+0xda/0x1a0 [ 1068.639843][T11963] __x64_sys_read+0x40/0x50 [ 1068.639867][T11963] x64_sys_call+0x2d77/0x2fb0 [ 1068.639891][T11963] do_syscall_64+0xd2/0x200 [ 1068.639934][T11963] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1068.640030][T11963] ? clear_bhb_loop+0x40/0x90 [ 1068.640053][T11963] ? clear_bhb_loop+0x40/0x90 [ 1068.640149][T11963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.640203][T11963] RIP: 0033:0x7fed8729d37c [ 1068.640219][T11963] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1068.640239][T11963] RSP: 002b:00007fed85907030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1068.640260][T11963] RAX: ffffffffffffffda RBX: 00007fed874c5fa0 RCX: 00007fed8729d37c [ 1068.640275][T11963] RDX: 000000000000000f RSI: 00007fed859070a0 RDI: 0000000000000003 [ 1068.640288][T11963] RBP: 00007fed85907090 R08: 0000000000000000 R09: 0000000000000000 [ 1068.640302][T11963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1068.640349][T11963] R13: 0000000000000001 R14: 00007fed874c5fa0 R15: 00007ffd9d9aaf98 [ 1068.640365][T11963] [ 1068.718009][ T29] audit: type=1400 audit(1068.573:72095): avc: denied { getopt } for pid=11953 comm="syz.0.13530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1068.876888][T23324] kworker/u8:10: attempt to access beyond end of device [ 1068.876888][T23324] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 1068.890346][T23324] kworker/u8:10: attempt to access beyond end of device [ 1068.890346][T23324] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 1068.903887][T23324] kworker/u8:10: attempt to access beyond end of device [ 1068.903887][T23324] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 1068.917490][T23324] kworker/u8:10: attempt to access beyond end of device [ 1068.917490][T23324] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 1068.963507][T11965] loop0: detected capacity change from 0 to 8192 [ 1068.999738][ T29] audit: type=1326 audit(1068.983:72096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11970 comm="syz.4.13527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6824e969 code=0x7ffc0000 [ 1069.056904][ T29] audit: type=1326 audit(1068.983:72097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11970 comm="syz.4.13527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf6824e969 code=0x7ffc0000 [ 1069.080409][ T29] audit: type=1326 audit(1068.983:72098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11970 comm="syz.4.13527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6824e969 code=0x7ffc0000 [ 1069.092397][T11976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.103697][ T29] audit: type=1326 audit(1068.983:72099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11970 comm="syz.4.13527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6824e969 code=0x7ffc0000 [ 1069.135210][ T29] audit: type=1326 audit(1068.983:72100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11970 comm="syz.4.13527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf6824e969 code=0x7ffc0000 [ 1069.147961][T11976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.158503][ T29] audit: type=1326 audit(1068.983:72101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11970 comm="syz.4.13527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6824e969 code=0x7ffc0000 [ 1069.328192][T11983] loop4: detected capacity change from 0 to 128 [ 1069.357882][T11965] SELinux: failed to load policy [ 1069.432941][T11990] loop6: detected capacity change from 0 to 1024 [ 1069.649645][T12004] __nla_validate_parse: 5 callbacks suppressed [ 1069.649657][T12004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13545'. [ 1069.664909][T12004] netlink: 108 bytes leftover after parsing attributes in process `syz.4.13545'. [ 1069.718642][T12004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13545'. [ 1069.727870][T12004] netlink: 108 bytes leftover after parsing attributes in process `syz.4.13545'. [ 1069.737016][T12004] netlink: 84 bytes leftover after parsing attributes in process `syz.4.13545'. [ 1069.769926][T12010] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1069.867303][T12013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13548'. [ 1069.876408][T12013] netlink: 108 bytes leftover after parsing attributes in process `syz.1.13548'. [ 1069.942820][T12011] loop4: detected capacity change from 0 to 8192 [ 1069.962664][T12013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13548'. [ 1070.051730][T12013] netlink: 108 bytes leftover after parsing attributes in process `syz.1.13548'. [ 1070.056901][T12017] SELinux: failed to load policy [ 1070.060949][T12013] netlink: 84 bytes leftover after parsing attributes in process `syz.1.13548'. [ 1070.182590][T12016] loop1: detected capacity change from 0 to 8192 [ 1070.214182][T12021] 9pnet: Unknown protocol version 9p2 [ 1070.278021][T12016] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 1070.313836][T12016] SELinux: failed to load policy [ 1070.366234][T12027] 9pnet: Unknown protocol version 9p2 [ 1070.381397][T12030] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1070.459621][T12043] loop6: detected capacity change from 0 to 512 [ 1070.466406][T12041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.487735][T12043] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1070.490766][T12047] loop5: detected capacity change from 0 to 512 [ 1070.509792][T12043] EXT4-fs (loop6): 1 truncate cleaned up [ 1070.516347][T12047] EXT4-fs: Ignoring removed oldalloc option [ 1070.528586][T12041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.538491][T12051] 9pnet: Unknown protocol version 9p2 [ 1070.544565][T12053] loop4: detected capacity change from 0 to 1024 [ 1070.555160][T12043] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 1070.575127][T12047] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1070.603311][T12041] loop1: detected capacity change from 0 to 512 [ 1070.635636][T12047] EXT4-fs (loop5): 1 truncate cleaned up [ 1070.751915][T12067] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1071.140648][T12041] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1071.276214][T12041] EXT4-fs (loop1): mount failed [ 1071.405670][T12087] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1071.499552][T12100] loop5: detected capacity change from 0 to 512 [ 1071.510976][T12100] EXT4-fs: Ignoring removed oldalloc option [ 1071.516102][T12101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12101 comm=syz.0.13576 [ 1071.531867][T12100] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1071.540638][T12100] EXT4-fs (loop5): 1 truncate cleaned up [ 1071.550711][T12103] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1071.696387][T12105] loop6: detected capacity change from 0 to 8192 [ 1071.742336][T12117] loop5: detected capacity change from 0 to 1024 [ 1071.783093][T12105] SELinux: failed to load policy [ 1072.084479][T12141] loop0: detected capacity change from 0 to 128 [ 1072.208322][T12150] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1072.317545][T12153] netlink: 'syz.4.13596': attribute type 29 has an invalid length. [ 1072.379910][T12163] loop1: detected capacity change from 0 to 512 [ 1072.386599][T12163] EXT4-fs: Ignoring removed oldalloc option [ 1072.429559][T12163] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1072.438528][T12163] EXT4-fs (loop1): 1 truncate cleaned up [ 1072.481359][T12170] FAULT_INJECTION: forcing a failure. [ 1072.481359][T12170] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.494178][T12170] CPU: 0 UID: 0 PID: 12170 Comm: syz.4.13602 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 1072.494259][T12170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1072.494270][T12170] Call Trace: [ 1072.494275][T12170] [ 1072.494281][T12170] __dump_stack+0x1d/0x30 [ 1072.494302][T12170] dump_stack_lvl+0xe8/0x140 [ 1072.494324][T12170] dump_stack+0x15/0x1b [ 1072.494342][T12170] should_fail_ex+0x265/0x280 [ 1072.494418][T12170] should_failslab+0x8c/0xb0 [ 1072.494446][T12170] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 1072.494477][T12170] ? sock_alloc_inode+0x34/0xa0 [ 1072.494501][T12170] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1072.494598][T12170] sock_alloc_inode+0x34/0xa0 [ 1072.494620][T12170] alloc_inode+0x3d/0x170 [ 1072.494643][T12170] __sock_create+0x122/0x5b0 [ 1072.494669][T12170] __sys_socket+0xb0/0x180 [ 1072.494694][T12170] __x64_sys_socket+0x3f/0x50 [ 1072.494770][T12170] x64_sys_call+0x285a/0x2fb0 [ 1072.494822][T12170] do_syscall_64+0xd2/0x200 [ 1072.494917][T12170] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1072.494944][T12170] ? clear_bhb_loop+0x40/0x90 [ 1072.494963][T12170] ? clear_bhb_loop+0x40/0x90 [ 1072.495064][T12170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.495082][T12170] RIP: 0033:0x7fdf68250887 [ 1072.495120][T12170] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1072.495148][T12170] RSP: 002b:00007fdf668b5fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1072.495169][T12170] RAX: ffffffffffffffda RBX: 00007fdf68475fa0 RCX: 00007fdf68250887 [ 1072.495183][T12170] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1072.495197][T12170] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1072.495249][T12170] R10: 0000200000000180 R11: 0000000000000286 R12: 0000000000000001 [ 1072.495259][T12170] R13: 0000000000000001 R14: 00007fdf68475fa0 R15: 00007ffcaa1a7cd8 [ 1072.495275][T12170] [ 1072.495281][T12170] socket: no more sockets [ 1072.792114][T12178] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 1073.075916][T12192] loop5: detected capacity change from 0 to 8192 [ 1073.172024][T12192] SELinux: failed to load policy [ 1073.198152][T12198] FAULT_INJECTION: forcing a failure. [ 1073.198152][T12198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1073.211323][T12198] CPU: 0 UID: 0 PID: 12198 Comm: syz.6.13613 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 1073.211386][T12198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1073.211401][T12198] Call Trace: [ 1073.211408][T12198] [ 1073.211417][T12198] __dump_stack+0x1d/0x30 [ 1073.211441][T12198] dump_stack_lvl+0xe8/0x140 [ 1073.211464][T12198] dump_stack+0x15/0x1b [ 1073.211501][T12198] should_fail_ex+0x265/0x280 [ 1073.211565][T12198] should_fail+0xb/0x20 [ 1073.211585][T12198] should_fail_usercopy+0x1a/0x20 [ 1073.211616][T12198] _copy_from_user+0x1c/0xb0 [ 1073.211645][T12198] __sys_bpf+0x178/0x790 [ 1073.211753][T12198] __x64_sys_bpf+0x41/0x50 [ 1073.211784][T12198] x64_sys_call+0x2478/0x2fb0 [ 1073.211825][T12198] do_syscall_64+0xd2/0x200 [ 1073.211850][T12198] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1073.211888][T12198] ? clear_bhb_loop+0x40/0x90 [ 1073.211964][T12198] ? clear_bhb_loop+0x40/0x90 [ 1073.211990][T12198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.212067][T12198] RIP: 0033:0x7f2a299ae969 [ 1073.212084][T12198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1073.212105][T12198] RSP: 002b:00007f2a28017038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1073.212122][T12198] RAX: ffffffffffffffda RBX: 00007f2a29bd5fa0 RCX: 00007f2a299ae969 [ 1073.212133][T12198] RDX: 0000000000000038 RSI: 0000200000000340 RDI: 0000000000000018 [ 1073.212144][T12198] RBP: 00007f2a28017090 R08: 0000000000000000 R09: 0000000000000000 [ 1073.212154][T12198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1073.212236][T12198] R13: 0000000000000000 R14: 00007f2a29bd5fa0 R15: 00007ffc90253898 [ 1073.212329][T12198] [ 1073.399379][T12200] loop0: detected capacity change from 0 to 512 [ 1073.405981][T12200] EXT4-fs: Ignoring removed oldalloc option [ 1073.428101][T12200] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1073.436561][T12200] EXT4-fs (loop0): 1 truncate cleaned up [ 1073.447516][T12200] EXT4-fs mount: 20 callbacks suppressed [ 1073.447531][T12200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1073.448008][T12203] FAULT_INJECTION: forcing a failure. [ 1073.448008][T12203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1073.478826][T12203] CPU: 0 UID: 0 PID: 12203 Comm: syz.6.13615 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 1073.478849][T12203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1073.478860][T12203] Call Trace: [ 1073.478865][T12203] [ 1073.478870][T12203] __dump_stack+0x1d/0x30 [ 1073.478892][T12203] dump_stack_lvl+0xe8/0x140 [ 1073.478914][T12203] dump_stack+0x15/0x1b [ 1073.478992][T12203] should_fail_ex+0x265/0x280 [ 1073.479023][T12203] should_fail+0xb/0x20 [ 1073.479042][T12203] should_fail_usercopy+0x1a/0x20 [ 1073.479068][T12203] strncpy_from_user+0x25/0x230 [ 1073.479095][T12203] ? kmem_cache_alloc_noprof+0x186/0x310 [ 1073.479180][T12203] ? getname_flags+0x80/0x3b0 [ 1073.479210][T12203] getname_flags+0xae/0x3b0 [ 1073.479239][T12203] vfs_fstatat+0x43/0x170 [ 1073.479289][T12203] __se_sys_newfstatat+0x55/0x260 [ 1073.479344][T12203] ? __fget_files+0x184/0x1c0 [ 1073.479378][T12203] ? fput+0x8f/0xc0 [ 1073.479476][T12203] ? ksys_write+0x192/0x1a0 [ 1073.479512][T12203] __x64_sys_newfstatat+0x55/0x70 [ 1073.479561][T12203] x64_sys_call+0x2c22/0x2fb0 [ 1073.479585][T12203] do_syscall_64+0xd2/0x200 [ 1073.479628][T12203] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1073.479658][T12203] ? clear_bhb_loop+0x40/0x90 [ 1073.479682][T12203] ? clear_bhb_loop+0x40/0x90 [ 1073.479785][T12203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.479805][T12203] RIP: 0033:0x7f2a299ae969 [ 1073.479830][T12203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1073.479849][T12203] RSP: 002b:00007f2a28017038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 1073.479930][T12203] RAX: ffffffffffffffda RBX: 00007f2a29bd5fa0 RCX: 00007f2a299ae969 [ 1073.479954][T12203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1073.479967][T12203] RBP: 00007f2a28017090 R08: 0000000000000000 R09: 0000000000000000 [ 1073.479981][T12203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1073.479994][T12203] R13: 0000000000000001 R14: 00007f2a29bd5fa0 R15: 00007ffc90253898 [ 1073.480086][T12203] [ 1073.770582][ T6081] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.812049][T12212] loop1: detected capacity change from 0 to 1024 [ 1073.848424][T12215] siw: device registration error -23 [ 1073.859755][ T29] kauditd_printk_skb: 462 callbacks suppressed [ 1073.859766][ T29] audit: type=1326 audit(1073.843:72563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12205 comm="syz.4.13617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6824e969 code=0x7ffc0000 [ 1073.918178][T12221] loop6: detected capacity change from 0 to 1024 [ 1073.958287][ T29] audit: type=1326 audit(1073.843:72564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12205 comm="syz.4.13617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6824e969 code=0x7ffc0000 [ 1073.981464][ T29] audit: type=1326 audit(1073.853:72565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12205 comm="syz.4.13617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf6824e969 code=0x7ffc0000 [ 1074.004616][ T29] audit: type=1326 audit(1073.853:72566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12205 comm="syz.4.13617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6824e969 code=0x7ffc0000 [ 1074.027759][ T29] audit: type=1326 audit(1073.853:72567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12205 comm="syz.4.13617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6824e969 code=0x7ffc0000 [ 1074.050876][ T29] audit: type=1326 audit(1073.853:72568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12205 comm="syz.4.13617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf6824e969 code=0x7ffc0000 [ 1074.074057][ T29] audit: type=1326 audit(1073.853:72569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12205 comm="syz.4.13617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6824e969 code=0x7ffc0000 [ 1074.095650][T12212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1074.097192][ T29] audit: type=1326 audit(1073.853:72570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12205 comm="syz.4.13617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6824e969 code=0x7ffc0000 [ 1074.132778][ T29] audit: type=1326 audit(1073.853:72571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12205 comm="syz.4.13617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf6824e969 code=0x7ffc0000 [ 1074.155972][ T29] audit: type=1326 audit(1073.853:72572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12205 comm="syz.4.13617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6824e969 code=0x7ffc0000 [ 1074.191638][T12221] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1074.352014][T12236] 9pnet: Unknown protocol version 9p200 [ 1074.498125][ T6795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.571903][T12248] loop1: detected capacity change from 0 to 512 [ 1074.600754][T12248] EXT4-fs: Ignoring removed oldalloc option [ 1074.625675][T12248] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1074.637897][T12248] EXT4-fs (loop1): 1 truncate cleaned up [ 1074.644108][T12248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1074.777820][T10525] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.834722][ T6795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.861863][T12261] __nla_validate_parse: 35 callbacks suppressed [ 1074.861901][T12261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13635'. [ 1074.951151][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13637'. [ 1074.990710][T12277] loop0: detected capacity change from 0 to 512 [ 1075.017203][T12273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13637'. [ 1075.036792][T12263] loop5: detected capacity change from 0 to 8192 [ 1075.083368][T12277] ext4: Unknown parameter 'a' [ 1075.154290][T12265] loop6: detected capacity change from 0 to 8192 [ 1075.277225][T12265] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 1075.287608][T12265] SELinux: failed to load policy [ 1075.347087][T12288] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 1075.408063][T12288] SELinux: failed to load policy [ 1075.576279][T12302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12302 comm=syz.0.13650 [ 1075.611080][T12305] FAULT_INJECTION: forcing a failure. [ 1075.611080][T12305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1075.624191][T12305] CPU: 0 UID: 0 PID: 12305 Comm: syz.0.13651 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 1075.624218][T12305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1075.624231][T12305] Call Trace: [ 1075.624317][T12305] [ 1075.624325][T12305] __dump_stack+0x1d/0x30 [ 1075.624347][T12305] dump_stack_lvl+0xe8/0x140 [ 1075.624366][T12305] dump_stack+0x15/0x1b [ 1075.624379][T12305] should_fail_ex+0x265/0x280 [ 1075.624399][T12305] should_fail+0xb/0x20 [ 1075.624418][T12305] should_fail_usercopy+0x1a/0x20 [ 1075.624517][T12305] _copy_from_user+0x1c/0xb0 [ 1075.624538][T12305] __copy_msghdr+0x244/0x300 [ 1075.624565][T12305] ___sys_sendmsg+0x109/0x1d0 [ 1075.624612][T12305] __x64_sys_sendmsg+0xd4/0x160 [ 1075.624687][T12305] x64_sys_call+0x2999/0x2fb0 [ 1075.624716][T12305] do_syscall_64+0xd2/0x200 [ 1075.624803][T12305] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1075.624832][T12305] ? clear_bhb_loop+0x40/0x90 [ 1075.624851][T12305] ? clear_bhb_loop+0x40/0x90 [ 1075.624869][T12305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.624930][T12305] RIP: 0033:0x7fed8729e969 [ 1075.624943][T12305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1075.624962][T12305] RSP: 002b:00007fed85907038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1075.624986][T12305] RAX: ffffffffffffffda RBX: 00007fed874c5fa0 RCX: 00007fed8729e969 [ 1075.625000][T12305] RDX: 0000000000040880 RSI: 0000200000007940 RDI: 0000000000000005 [ 1075.625013][T12305] RBP: 00007fed85907090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.625027][T12305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.625040][T12305] R13: 0000000000000000 R14: 00007fed874c5fa0 R15: 00007ffd9d9aaf98 [ 1075.625061][T12305] [ 1075.825338][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1075.833118][ T23] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1075.845490][T12310] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.897526][T12316] loop0: detected capacity change from 0 to 512 [ 1075.909051][T12310] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.949825][T12316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1075.997705][T12310] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.059433][T12322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.079491][T12310] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.137894][T12322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.163979][T12310] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.206310][T12310] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.263385][T12326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13658'. [ 1076.272488][T12326] netlink: 108 bytes leftover after parsing attributes in process `syz.1.13658'. [ 1076.350551][T12330] loop4: detected capacity change from 0 to 512 [ 1076.379490][T12326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13658'. [ 1076.408829][T12330] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1076.466909][T12326] netlink: 108 bytes leftover after parsing attributes in process `syz.1.13658'. [ 1076.476034][T12326] netlink: 84 bytes leftover after parsing attributes in process `syz.1.13658'. [ 1076.509990][T12330] EXT4-fs (loop4): mount failed [ 1076.616186][T12310] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.653440][T12332] loop1: detected capacity change from 0 to 8192 [ 1076.739362][T12339] lo speed is unknown, defaulting to 1000 [ 1076.919705][T12310] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.999433][T12322] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13657'. [ 1077.185085][ T6081] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1077.385370][T12332] SELinux: failed to load policy [ 1077.398205][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13663'. [ 1077.439463][T12349] loop0: detected capacity change from 0 to 512 [ 1077.454691][T12349] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1077.526797][T12349] EXT4-fs (loop0): 1 truncate cleaned up [ 1077.532863][T12349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1077.546916][ C0] ================================================================== [ 1077.554980][ C0] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 1077.561987][ C0] [ 1077.564294][ C0] read-write to 0xffff888237d2b664 of 4 bytes by task 23 on cpu 1: [ 1077.572164][ C0] wq_worker_running+0x95/0x120 [ 1077.576999][ C0] schedule_timeout+0xb7/0x170 [ 1077.581760][ C0] msleep+0x50/0x90 [ 1077.585556][ C0] nsim_fib_event_work+0x14a2/0x21a0 [ 1077.590831][ C0] process_scheduled_works+0x4cb/0x9d0 [ 1077.596283][ C0] worker_thread+0x582/0x770 [ 1077.600863][ C0] kthread+0x486/0x510 [ 1077.604914][ C0] ret_from_fork+0xda/0x150 [ 1077.609403][ C0] ret_from_fork_asm+0x1a/0x30 [ 1077.614156][ C0] [ 1077.616463][ C0] read to 0xffff888237d2b664 of 4 bytes by interrupt on cpu 0: [ 1077.623986][ C0] kick_pool+0x49/0x2d0 [ 1077.628123][ C0] __queue_work+0x8d6/0xb60 [ 1077.632607][ C0] queue_work_on+0xd1/0x160 [ 1077.637093][ C0] wg_packet_send_staged_packets+0x83d/0xab0 [ 1077.643069][ C0] wg_packet_send_keepalive+0xeb/0x100 [ 1077.648524][ C0] wg_expired_send_persistent_keepalive+0x3c/0x50 [ 1077.654932][ C0] call_timer_fn+0x3b/0x2c0 [ 1077.659423][ C0] __run_timer_base+0x415/0x610 [ 1077.664270][ C0] run_timer_softirq+0x31/0x70 [ 1077.669027][ C0] handle_softirqs+0xb7/0x290 [ 1077.673687][ C0] __irq_exit_rcu+0x3a/0xc0 [ 1077.678175][ C0] sysvec_apic_timer_interrupt+0x74/0x80 [ 1077.683794][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1077.689760][ C0] kcsan_setup_watchpoint+0x415/0x430 [ 1077.695128][ C0] batadv_mcast_mla_update+0x107c/0x1850 [ 1077.700762][ C0] process_scheduled_works+0x4cb/0x9d0 [ 1077.706213][ C0] worker_thread+0x582/0x770 [ 1077.710793][ C0] kthread+0x486/0x510 [ 1077.714844][ C0] ret_from_fork+0xda/0x150 [ 1077.719349][ C0] ret_from_fork_asm+0x1a/0x30 [ 1077.724104][ C0] [ 1077.726408][ C0] value changed: 0x00000000 -> 0x00000001 [ 1077.732104][ C0] [ 1077.734406][ C0] Reported by Kernel Concurrency Sanitizer on: [ 1077.740534][ C0] CPU: 0 UID: 0 PID: 23324 Comm: kworker/u8:10 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 1077.752928][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1077.762966][ C0] Workqueue: bat_events batadv_mcast_mla_update [ 1077.769209][ C0] ================================================================== [ 1077.922999][T12349] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 1078.059144][T12324] lo speed is unknown, defaulting to 1000 [ 1078.503764][ T6081] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.