last executing test programs: 53.963296462s ago: executing program 0 (id=131): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r4, 0x4}, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, 0x0}, 0x0) 53.781925185s ago: executing program 0 (id=134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x9, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r1, &(0x7f0000000200)=@isdn={0x22, 0x2, 0x32, 0xf, 0x4}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) unshare(0x200) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 53.301395562s ago: executing program 0 (id=139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r0) 53.190871604s ago: executing program 0 (id=144): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) move_mount(r3, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) statx(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x1000, 0x800, &(0x7f00000003c0)) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000c000000200001801400020073797a5f74756e00000000000000000008000300030000001400038010"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) r6 = syz_io_uring_setup(0x5efe, &(0x7f00000002c0)={0x0, 0xcb51, 0x8, 0x1, 0x2cd, 0x0, r0}, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_enter(r6, 0x4e38, 0xaae, 0x1, &(0x7f0000000400)={[0x1]}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="4401000010000100000000001900200064010101000001000000000000000000ac1e00010000000000000000080000000000000000000000d400000032000040", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r10, @ANYBLOB="04000000"], 0x144}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x3c, 0x26, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xf, 0xd}, {0x2, 0x3}, {0xa, 0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44880) preadv(r0, 0x0, 0x0, 0x33, 0x0) 53.143590564s ago: executing program 0 (id=145): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) rename(&(0x7f0000000780)='./file1\x00', 0x0) (fail_nth: 1) 52.883192228s ago: executing program 0 (id=154): chdir(&(0x7f0000000000)='./file0\x00') lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getnetconf={0x14, 0x52, 0x10, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x2000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f00000012c0)={&(0x7f0000001280)={&(0x7f0000000280)="0da376e92a4111a10a21f7686d17c0b26eb4354f1de0a8b940e042a3bfd9ddb4f908044f2347b2b340910e487832df899655035af669d2ecfc589522adffe9f85c43b310390e27a9882390c31e952cda7e5e150ca87b39f4cac967f2c152a2ca20d8b871e00aa323d8ee15c6f563705dff88f1f050c23d8990d19aebc3540e710db30428ce2686761aa75fd63ab035aa72e7e1a1ef2156790fbd656ee8de3ebfef18f423b4a3b46779ef91c005972f5dfdc0ac09a8866acd3db8bb68459b97dbe9defb30930855ec143cd6b9cf27a57c7dc2b0f1cf6e973106805989a51f3c222dac1ae956f9d5fd7b530e7d96ef9a40ac85ade116669f37c994671c390ef100000e3fedd7eb5e478b4f2c1123a7292f4196707a07355e7b29749b9b14e0ae2aab2b9d5b62b1f55a8866f36c20d02c61bd13123e14b916f3ded0b9c1e53098e97276ffe93734d8c873ec74429309f8d2d871366cc0f86f08e5a1b21af2f4d3e87e8ed3ff95924f45168bea1065e3722f1461fe0c98b71dae9d9cfc9985708ed157968a74fd8b3b60988ffe7301541c3c8bbd8955096bd7b82dec68360fb2e077a8acd2c466394f819678dbd1171156413d5a7c254f96d6020f9d083e3c17bca1d6aff096ac46b75a3a0062b42d4456b240492aab3398de5f11cbafcb04da0aed877673d96c6a8b53cdf2aaabe5f5c5550c0c6c05f98fe6b12c1def5ceea7177521fe23b1bed51cc758c77ac89f58b44da671f60a6db26a052407ed4c674b42aee8cb0ee0ecfbb36e412bcc72077c5ed598f8654ad42d877f035d8b1d38654744812eb531eba258d15a629a73d99446ef0f5ff0160e01a8ac13e49e51e7011805754e5b61add2997929dd0a2032b2a6419cb3ddf0e03e4b9025592faaea42986b3719b121534b6b5d3fabe475cb65f924265bf181ddcf7838b92eb1ab73eb4d79803fcdc26431155fdbbdaf87cc3c8c5fd6bdb97a40a02d1a4bfe6a9c24b9db761af5cc5d30f3b9aff12463fea1ad75bc29c79f4158ead0482bd4ec26093bb563664572f8d1b90ff90670a2e97b39847dd5691762fac2e39a113361928923b5b46e013021a9adf660a0bddef5f41d041535ce07cb3829a2597f1430c06336339d2ca2a18913c29e7f41fac1bc740cc8bf7098bdde4e832dbaef9ab57291439f8b82b3e2bb43aa2b03d211db220cd3a5f3c92e0fcb988bda2166c17fd382cb9447fd4e4cc7016c4934fb40f6c2f81030599ce5c862960c4dc2eec4791f00e0dd526d3a0e40a1d598d3f619c54f7a17a4557e4a57c5da6a3e492df96dcaa5634e6b9b264528b5b698eb252d7045b56bbd25ebb7ab8ebad339fa018ed8a27c9f240aeda9bd4e0c8fe644a6350fd08097e8f0d8180264154da1564beebee96e307ecd53b43b9dcc944a69d82948ee7b25784120ef9b7c64a8723ce56ea6b19b5bb12d29a72d7e9b4a447a12ec0478a3df65f20feb2680b77fb006fda9fc1b0db1bfdbc42664b412f083dd5ae1c85d04bae974e6564dd422f121af4bf0c6c5977ef94f36e4712948d9d7faac99459a675699ab98efb8db4a2a5b5720c16ec9ca2448c7f1ede0cda0b55232e8e08a1e2b36183bb8f459ba796c716e3be98c5d0d3bbf1924aac5b55e4a7a8feeba36809b5eb6764bd284e26d29549b318236feb4c15b2684347b4368333b99acc76d475eec535ecb8b3c542a5e63abd0c37f5746cd71327447185961534d63d70baf0a5423e1c1bdcb9a9d8c581f0b9ed5dff91218032009893a56af80abe1012f64894e6754a5294535196c44cd03978ad5bbd9c89ff981eeb1ffae79084efa95f673ee27bb87ebe3226e1fc9658f797c8929327f5680e8db485773702ea22a61a79ec8826ee9a26467bd9ee238aeb24708d199ba1d50ba594f1e8e32ea2720edda41ff1cfbcfb84d476ceb2c73e82d0d2ccfbe1d0a07adc8106189418afc15ffb663e7cf397d95f8b818f7430fd24618a0ee555fd345dd597e6c7c18ebb368fda60069d5fa30b1e18813388c046929a42cc8c43bea39292d8dc88d992c27ad0ca442d15ab52555930014cf4254a25b2b9bef12f23351ac18523ec073925eebc686776877260d183caaae65af163b27512ab0eb32764efbcb0b3c73252b152563255a10b76e826a614e15c0eecad8da6ff90aed9dd3f0cb6f6debd00530f23107cf8a2697ee8ab02d7d6cd3e77309dcd23773121232a830a9312efd050e0cc4884c09c01a6f2e98ea405ea415c67991e94a15ce4750c19ede013452e94c10d8fa3683f712fb3d3f55d6b3c7006ed096c79f759db04a2576e6cce3b72fa786d53286d0af230f1af2d349c7e13a4788a6111ac414a7aafda4faaccb087a206ab40f76a4a83fd4ba9b2b2ea15d9ec836a32fc33d7e63253114230bd1ed1087b1036f3e941f5ee78328e209d8f3e8f04de81cd66f671921a6133561a0c922753d82e54ac7252b2dec4505d2ccaa32e1ce48782394b327904bb8def208f8e03e05f65ed1c60fa1a9c12080ae7965c8c15d975b62d91c6cddf2b6e6a4b648fc8877a047b757f641fb9f7b08c3974933b001b6b15f165797ca62d1c987dec0204b4b158cdd8c96f3d3ef74ca47be871c11ace1a4815f22c43b79b7d241efde4ff6c8a9f572987d23ec7906d3f86e791fede39aadb5104b960b7d2cf155842ccf4e69668d3a8d9d583735089854ebad1dbf20035e5cb84f05a3f8f53b2bbc3810dc72e94dafe24682914d620cb84bae4129d2b1bce1105ec58f8e13eb4abcd348c5e9237e71c2597a32de7e5b90f7fe61f8b5be303ffcb12965944c394493197de5064c9f7fbd3ea097b69fcc4e58e4d8f4bc5623d4a027f9700b45c4714ee595e64acbee788d6aae57412d41f22b95fd4a68a923279602fadbd2efae493b1292ef6e693c9e3434d1923286b6fa73f99c9ee3a23b37c94a2a92a7b7ce46840bdc929cc73c29c78d7ea4e29f7b78ec8dd65b739c403cc8bf0c42cfbb7f07bbe4b332361007fe92169046a5da06e701dea928d138a3ff60355113b8e974bfc873a9111eeb6938dba73a21bcaba95d286ca0d92b3c9e004da0cf0168df3ac751f0bb2983a850671dd3bf343ce33599d0d1ff8a6e5b34637d2997442f2c64400a34fa5102cde740d9225a03cfe4ea9e11bc42185cb0c2f30e72a39fa9c44b3e4726a5e7cde84500ef20c1435868950025cd61058b1766639365e99e3cb14c9757d30442a8cbccc87cdffbb30c367465cfecaecc8a798e2bf7f18fdf6c653813df3b1cae4dd8e7b746f4e97d03b5f9863c2403dfd88a40ab054d5577a668e757c3956fd921c9ed035df57816d7ad899af0b7edaada14ebd0dcef1dca5dc1918471ccccdb52d26e074c6a68ce635069f96c83a510ca9172e01afff483fc8b7ebd30fd6720c919effaf6a130f08ec0ac0c09fc24abc7cf4a809073719cf28632881e48b7eceeb7192b964173bf753326f94e6e02680b272aaf89e10e38eb0f2425781fc8c73363cecce1a116104a0225d2ba2921ddecb082f88c6f2ed82fc0396ecbe10bab7feaeb509167a9d9a7421836eb65e5c5eb2c44fd50f4c4ba399393513935aad4efd8c749aa15f637014869974598fcd7f465addd26426f8ac7f780313817b297f008ea508571236d5ec7f52f114134d26d7d17e469705a7dc93df98ca0ba09092c7809fee9a5e50c1772b63f3b9c8a2b30449e8d2a5665835c9b1fd880869d3775c88d793b8a465ff79eb3bc1a6e16348575f9050946453bbd1199a50cfe73147a062fa615eb922609b386f2b6cc9b4ac30550b9452034d8a85d063117e58ec07204f9110d0e18543b6efe1e16f4a42a892ef4e1eaa383437af53ae1dd01a138781226bdc61a27b412f2f7250421489900d6622f0232b4cefabfc2ee45643b40c856e85e9fc691eb83d91e62da6cba36e81deb38f0616911b8e10a6a27a78e696e3b9361d00f29009d6e2d632338c01830233c457341592563658873cc3feafea4dca586ff81463e6fb19692ee7b300f48b3fcf9c22810cd32a9063d56b62802bab27e06052bb4b2e55e3d1e5a02c0942192dc9d63d34421bd64090d133fdf33f7fc0c1b6d260971bad101efc52e5227b104f4846aca69b3c530b193f8361d640c6d2d3ff9f2c449f0b698d6c910de4c9ebab135f46a63388ef10a498825a6bc14b008adaebd370b8632f7f6e8049069d55ed5d5002ad87516cdf26febe2d0f6fcf835404c5371e794e4efa66583126bcaebf341bdba9e243f91af27236b4211b2efd159d13323438ea6cbcbea690f021013d678d111628471b5613caa9258a9ee014882796420de45dfda59d9290f999198eb1d43df481510c194a583ebfff37cfef01de68a52a4288837429ded1dd6af27d431f62e5a75fea91f6273f927affa33038d616c02b80f4adff2a23c7c132efeb0cefbc9e5ed4578b0775405d6af6de8dc86b2590a456926fb4ea60f17d398a4da335ddcb1d1693a023a0678c5422f9c5479f68e38c77aba60c3d42c088ae2245196b0536f8d86e9423990d3190ac4a8b89bdbda767baa453145e61351d601b23e3304134193a7a50b787c863c063163d7105f478ad014c9890cde0217556bf6fd3e87918f2ff82d8afba5d9978c72fa91082d4fe1a8d7c68465f4beb5051602a81679050ccca095d8e3b0792a81060924e387e9669ef270d477314ebde2d8e2e33325fda79bd47fc1b85b7b6287abb856b1386b935a0707e798c6cb8400cadf2ef2509a584c64ea767ca6d82ee62c978574f88719dd4e1d0bface2e2f0fcce56bf3eeca7eba9919b5079931a6ea4fc26081de25ca825c72dcd3af151e07d3aa2d50c80c7f6daaf29ac88e900ebbb03e2bd9b5a31a208200ccf0b537870df62b9617a2065b6a7081f8b779fd2fc23d602b56c2640655ecc4089d3b50673a9da0451b6e1ffc34dfb3524485c54648d30ecdab590d85fb64a894d0a6cfaded0a25e841dbc9fa4f01c65d8143fb6723c39935f7304bdb7fe59104540b84253646242f867291886f99e10f0d8b9a7bcab61fb056d4b01192fe988bc0e840e200dfdcde240e605e7c6be5e0c05a0245b9da0d23308797e43c80c326273b6de72c739ef9136cd68fd3ecb62e0a0308dd36ef9c38ff2674dee7f32fb561e6b5da3ef9021056855b0b8b93b05ab58d27d71d111567e5580fa9c39a74728f31a9cb38833adfa361263ada44f0185fbeaf099a05c3c713da1ab1a7f6e13537b6ab66bde2847021080f1919c9a26240e9dce68240fab9f784a4bf6bb550739bf4f5115dc1ee2f2720a7524ccd9c3b5da212ffd5237a27f8757964665bdb02f8549c99dfedad412b880adfef3667e29b496c12dd8a5f9fdecf1390750a628931ae4c864948142fe64aa0d9616928ca9427258feadffebf0a61e90c32b4cb27f620dc717d7cf552b46a1544b9380910084624461463b7ec3e6c98317346f5f2bfc27157b0afd84caac116c6dd690abecc00d2f9592605a726624d7e6699701c22c8b90ef43998b2b20532407f7ccb1366da1137e1481ee6973fecf9fefc67288b044a0aaf00f5498ce200aa7d425b2cce0a933176f0d9ec170ff48041e22b88df2b42afd37a34b618ae326715916d5edc0fe492935568f868a921ec6837d49d306e19ecb367aceda8c2025f58856a570dcd9be0601f226f0d4cea2aaebfaa6fea73c019d37f50caef05f4e60f58f5a390896258491d1887f6cea32a61ef025798d2d17a0809207741e52b7e01f60319022edd0fc4aa746bf24a51f5c52672c506e48e602d8a241a2e295d1eece6", 0x1000, 0x0, 0x1}, 0x1}, 0x1) getsockopt$MRT(r2, 0x0, 0xd0, &(0x7f0000001300), &(0x7f0000001340)=0x4) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000001380)={0x2c, @dev={0xac, 0x14, 0x14, 0x25}, 0x4e23, 0x2, 'ovf\x00', 0x24, 0x3b, 0x18}, 0x2c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), r2) getpeername$packet(r2, &(0x7f0000001480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000014c0)=0x14) getsockname$packet(r3, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001540)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001600)={'syztnl1\x00', &(0x7f0000001580)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x7, 0x8, 0x60, @empty, @private1, 0x80, 0x20, 0x2, 0x92}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001640)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001700)={'syztnl0\x00', &(0x7f0000001680)={'sit0\x00', 0x0, 0x10, 0x80, 0x6, 0x80, {{0xe, 0x4, 0x0, 0x36, 0x38, 0x66, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x7, 0xe, "d04c432832b7e3d471a02385"}, @generic={0x83, 0x2}, @generic={0x83, 0xe, "e103cf4967dc3bf49df3dbbc"}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000017c0)={'syztnl1\x00', &(0x7f0000001740)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x8, 0x53f57241, 0x40, @dev={0xfe, 0x80, '\x00', 0x28}, @private0, 0x7800, 0x40, 0x20000, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001900)={'tunl0\x00', &(0x7f0000001800)={'syztnl2\x00', 0x0, 0x700, 0x20, 0xffffffff, 0x11, {{0x29, 0x4, 0x2, 0x38, 0xa4, 0x65, 0x0, 0x7, 0x2f, 0x0, @local, @multicast2, {[@lsrr={0x83, 0x1f, 0x30, [@multicast1, @loopback, @loopback, @local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x25}, @loopback]}, @end, @cipso={0x86, 0x15, 0x2, [{0x5, 0xb, "b679e7de6ef1640aca"}, {0x1, 0x4, "51f4"}]}, @end, @cipso={0x86, 0x47, 0x2, [{0x5, 0x4, "bd43"}, {0x5, 0x8, "b308d6f58742"}, {0x0, 0x7, "b44c2aea13"}, {0x2, 0xe, "66b249bb691abf84c7022af3"}, {0x0, 0x2}, {0x5, 0x2}, {0x2, 0x2}, {0x6, 0x11, "65a6a593837b694a1619bb65bb2bb2"}, {0x2, 0x9, "68bdacfa402105"}]}, @ssrr={0x89, 0x13, 0x26, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) getsockname$packet(r2, &(0x7f0000001940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001980)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000019c0)={'veth0_vlan\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001a00)={'vxcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001a40)={'gretap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000001c40)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c00)={&(0x7f0000001a80)={0x154, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x24000001}, 0x24008880) mknod$loop(&(0x7f0000001c80)='./file0\x00', 0x1850, 0x1) r16 = accept$inet6(r2, &(0x7f0000001cc0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000001d00)=0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r16, 0x894b, &(0x7f0000001d40)) socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001dc0), 0x4) 52.761983329s ago: executing program 32 (id=154): chdir(&(0x7f0000000000)='./file0\x00') lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getnetconf={0x14, 0x52, 0x10, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r1, 0x4, 0x2000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f00000012c0)={&(0x7f0000001280)={&(0x7f0000000280)="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", 0x1000, 0x0, 0x1}, 0x1}, 0x1) getsockopt$MRT(r2, 0x0, 0xd0, &(0x7f0000001300), &(0x7f0000001340)=0x4) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000001380)={0x2c, @dev={0xac, 0x14, 0x14, 0x25}, 0x4e23, 0x2, 'ovf\x00', 0x24, 0x3b, 0x18}, 0x2c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), r2) getpeername$packet(r2, &(0x7f0000001480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000014c0)=0x14) getsockname$packet(r3, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001540)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001600)={'syztnl1\x00', &(0x7f0000001580)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x7, 0x8, 0x60, @empty, @private1, 0x80, 0x20, 0x2, 0x92}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001640)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001700)={'syztnl0\x00', &(0x7f0000001680)={'sit0\x00', 0x0, 0x10, 0x80, 0x6, 0x80, {{0xe, 0x4, 0x0, 0x36, 0x38, 0x66, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x7, 0xe, "d04c432832b7e3d471a02385"}, @generic={0x83, 0x2}, @generic={0x83, 0xe, "e103cf4967dc3bf49df3dbbc"}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000017c0)={'syztnl1\x00', &(0x7f0000001740)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x8, 0x53f57241, 0x40, @dev={0xfe, 0x80, '\x00', 0x28}, @private0, 0x7800, 0x40, 0x20000, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001900)={'tunl0\x00', &(0x7f0000001800)={'syztnl2\x00', 0x0, 0x700, 0x20, 0xffffffff, 0x11, {{0x29, 0x4, 0x2, 0x38, 0xa4, 0x65, 0x0, 0x7, 0x2f, 0x0, @local, @multicast2, {[@lsrr={0x83, 0x1f, 0x30, [@multicast1, @loopback, @loopback, @local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x25}, @loopback]}, @end, @cipso={0x86, 0x15, 0x2, [{0x5, 0xb, "b679e7de6ef1640aca"}, {0x1, 0x4, "51f4"}]}, @end, @cipso={0x86, 0x47, 0x2, [{0x5, 0x4, "bd43"}, {0x5, 0x8, "b308d6f58742"}, {0x0, 0x7, "b44c2aea13"}, {0x2, 0xe, "66b249bb691abf84c7022af3"}, {0x0, 0x2}, {0x5, 0x2}, {0x2, 0x2}, {0x6, 0x11, "65a6a593837b694a1619bb65bb2bb2"}, {0x2, 0x9, "68bdacfa402105"}]}, @ssrr={0x89, 0x13, 0x26, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) getsockname$packet(r2, &(0x7f0000001940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001980)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000019c0)={'veth0_vlan\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001a00)={'vxcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001a40)={'gretap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000001c40)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c00)={&(0x7f0000001a80)={0x154, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x24000001}, 0x24008880) mknod$loop(&(0x7f0000001c80)='./file0\x00', 0x1850, 0x1) r16 = accept$inet6(r2, &(0x7f0000001cc0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000001d00)=0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r16, 0x894b, &(0x7f0000001d40)) socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001dc0), 0x4) 43.708521757s ago: executing program 1 (id=285): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010300000000fdffffff000400800fff00000000000000040100"/56, @ANYRES32=0x0, @ANYBLOB="070000000000000080fffff000000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x20040849}, 0x8010) sendmmsg(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561f18c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7228c040c757e6ce437d7853ac2cca9605a2e18bf6553fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d", 0x90}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66828f43a4f66e274175218e8e3f", 0x7f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002880)="13d0dc432d3d3391fafe26160c215d30a476f4ac80d634079b6b579bb04ade2653f8c0f6b1a55451ddad18f6d9a81e8bc2121377f7a87a5e076ea2c1e4b0094d472684241faf30ebff5e58a61ba1c2ce470b99036209", 0x56}], 0x1}}], 0x2, 0x4000) close(r0) 43.663275958s ago: executing program 1 (id=287): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x401, 0x1, [0x2]}, 0xa) 43.598195968s ago: executing program 1 (id=289): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1e4, &(0x7f00000003c0)={[{0x97, 0x4e00, "25ee3774993d1c0507055b8be8ecc01f5b49d0116e6a91c70b6f622df85eb0f4f9b60c045b57211ef1236acca7a4016072fe39bc9a08908968c0e031e7dcd92b74a0ef2798adb760270d571f1db6fcf9038af4f9d2316c7719aaae2126ee531a77b3142ba32963ba54f2c8f6999acff94725a9a5a42b5d622ef5c402bd1ee56902435ee1f1d032ebb04fa28bd56e3f5bab7718107080b0"}, {0xb5, 0x4e00, "7ada42d169ef9dd52199353e39fe8e01eeee776dfcaad7c23a87f44042cf4eec686b9fa74f82fe8cb8adde2f043039b69c9bdfc522072f3bf2f6028b92be5582b249eaf1c15e8acb414c6f55da5586dca5d91d4594a669607a96a0e2d11a5ab55ddae5d0526413d00d8d43a43252366cfe810f763e2e521b6ab2ab5ce3c5c4d1cfc4d7a6c68158b997259f60f848403bfc3315518558a4916437514f997168f1c20918ac39d2adab8f356700e526b890e256c3e689"}, {0x87, 0x4e00, "5b3d5d39af9edb655f9eb5c3c05a0bdde7ecff7a0460df17ddb5dd6d63b139725ffc4c68d1bb229fab7142b7952e540e8a20f01c4c5adda69efc7e60cb65d451b77c6b9c73038d1d7fe7be8a929d9199321df75135bf64c41f5c749f3c77210cedf62b655939c04871d7611b36beb8533abceaf58e7a16a55d55be0f4e6c41e06f52fd597626d4"}]}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) unshare(0x20040400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x3}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000010140)=0x1) write$ppp(r0, &(0x7f0000000080)="2f12", 0x2) 42.609729522s ago: executing program 1 (id=304): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000440)=@ethtool_rxnfc={0x2e, 0x0, 0xfff, {0xe, @udp_ip6_spec={@ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x4e22, 0x8c}, {0x0, @local, 0xfff8, 0x2, [0x80007fff, 0xd]}, @udp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast2, 0x4e23, 0x4e21, 0x9}, {0x0, @remote, 0x5, 0x3, [0xfffffffe, 0x8000]}, 0x73, 0x50}}}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'gretap0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x7800, 0x80, 0xfffffffd, 0x200, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x65, 0x0, 0x5, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x4, 0xe9, 0x1, 0x5}]}}}}}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x401, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x7, &(0x7f0000000380)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x1c}, @call={0x85, 0x0, 0x0, 0xcc}], &(0x7f00000003c0)='GPL\x00', 0x9, 0x82, &(0x7f0000000400)=""/130, 0x41000, 0x44, '\x00', r7, @fallback=0x12, r9, 0x8, &(0x7f0000000500)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xc, 0xc2, 0x47}, 0x10, r10, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[r4, r4], 0x0, 0x10, 0x1ff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xb, &(0x7f0000000240)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x8, 0xa, 0x0, 0x10, 0xfffffffffffffff0}], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x41, &(0x7f0000000340)=""/65, 0x41100, 0x22, '\x00', r3, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x9, 0x7, 0x8}, 0x10, r10, r2, 0x3, &(0x7f0000000540)=[r1], &(0x7f0000000580)=[{0x4, 0x1, 0x8, 0x3}, {0x4, 0x4, 0x2, 0x1}, {0x4, 0x2, 0xf, 0x4}], 0x10, 0xb, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r11}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1d, 0x5, &(0x7f0000000180)=ANY=[@ANYRES32=r4], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) r14 = msgget(0x1, 0xb) statx(r12, &(0x7f0000000740)='./file0/../file0/../file0\x00', 0x0, 0x400, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000900)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = syz_clone3(&(0x7f0000000c80)={0x1100400, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40), {0x8}, &(0x7f0000000a80)=""/17, 0x11, &(0x7f0000000bc0)=""/82, &(0x7f0000000ac0)=[0xffffffffffffffff, 0x0, 0x0, 0x0], 0x4, {r5}}, 0x58) msgctl$IPC_SET(r14, 0x1, &(0x7f0000000d80)={{0x3, r15, 0x0, r16, r17, 0x100, 0xd}, 0x0, 0x0, 0x38d3, 0x2, 0x8001, 0x10001, 0x983b, 0xc, 0x8, 0x4c6, r18, 0xffffffffffffffff}) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000d00)=0x4, 0x4) 42.456698264s ago: executing program 4 (id=306): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3E0XlSfvX/7ga402VXR+v9Xh3nfuPXm3TbLJeZ+/Mh3ffZDE2dMnkaZJdI7iKM6T2I9ONL6JbgAA/x/neR6/5mWY5JUNM7udGy0MALgx1ef/X/rgBwD+4z78+JP3B8fHdz7IsjRe6j+eDZOImD6eDav5wf34MiZxL25HPy4i8oUqfve94zvRzQr78fp0PhsWmdPPfqzXH/wSUeYfRj/22/MPs8pK/nw23I3nI4vB/d2m1H682J7/Zkt+DHvxxmsr9R9EP376Ih7EJO5GkbvM//owy97Jv3361afFNkV+0onhXnldKfcFCQAAAAAAAAAAAAAAAAAAAACA7TrIsqRq31P27ymG6v47Oxfl/EHW2F/vz1PlJ81CVX+gvOmWM8/ju6a/zu0sy/L6wmV+N17uerAAAAAAAAAAAAAAAAAAAAAAFE4ePbk1mkzuPTx5dDq+dtB0A2h+1v931zlaGXk1TsejncsX3Nt8r9VuA0WtV14c3W5s6ba0B2eLkeeKera+xV4sRj6KKmgOZqt7vfB2tejpeJTVU81NHo+SP9srbQ7u+9WpXly3sLz8k7jI1880XZS6ntXb0t3o3Wqd+i3P883Weevn6ozqkaRssbHZ7rt10PoCiyAtziJd/OMXUz9cvuClbxk7137TAQAAAAAAAAAAAAAAAAAAWi1/9NsyeXZlaufGigIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9jy+f9NkEbE+sgfgnmdfNU1ddCLhyf/8ksEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGfB7AAAA//8rlFqg") r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xf0, 0x1, 0x0, 0x6, 0x0, 0x4, 0x33956, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x1, @perf_config_ext={0x4, 0x5}, 0x20c37e, 0x49b1eb73, 0x0, 0x3, 0x4, 0x10008, 0xfffb, 0x0, 0x8}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0], 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x200000a9, &(0x7f0000000480)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41000, 0x70ca33230639f212, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='bcache_invalidate\x00', r1, 0x0, 0x200007}, 0xd0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x8011) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x8011) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002700), 0x0, 0x800025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x50) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r5, 0x29, 0x40, &(0x7f0000000340)=ANY=[], 0x60) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffaa) (async) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffaa) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5", 0x4a) (async) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5", 0x4a) socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000003c0), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r8}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e000100697036677265746170000000080002800400120008000300", @ANYRES32=r11], 0x44}, 0x1, 0xd}, 0x0) 42.184563588s ago: executing program 4 (id=311): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xae5a2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x1ffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) setitimer(0x2, &(0x7f0000000140)={{}, {0xfffffffffffffffd, 0x8000}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x10044081}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000002c0)={0x0, 0x34000, &(0x7f0000000280)={&(0x7f0000000080)={0x2c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @private}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0xfc, "ac4eb71f1100"}) r4 = syz_open_pts(r3, 0x8080) r5 = dup(r4) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 42.169000018s ago: executing program 1 (id=312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080)}, 0x400, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 41.472465728s ago: executing program 1 (id=315): timer_create(0x8, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000380), &(0x7f00000003c0)={{0x0}, {0x0, 0x0}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x38}, 0x1, 0x0, 0x0, 0x4c015}, 0x404c840) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES64=r0, @ANYRES8=r3, @ANYRESOCT=r2, @ANYRES64=r3, @ANYRESOCT=r3, @ANYRES64=r1], 0x48) (async) socket$tipc(0x1e, 0x1, 0x0) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x60, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf63, 0x100000001}, 0x1100, 0x5dd8, 0x3a62, 0x5, 0x0, 0x7, 0xfffb, 0x0, 0x0, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket(0x11, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r6, 0x0, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) (async) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r11 = dup2(r10, r10) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) (async) ioctl$BLKTRACESETUP(r11, 0x1276, 0x0) 41.29691772s ago: executing program 33 (id=315): timer_create(0x8, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000380), &(0x7f00000003c0)={{0x0}, {0x0, 0x0}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x38}, 0x1, 0x0, 0x0, 0x4c015}, 0x404c840) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES64=r0, @ANYRES8=r3, @ANYRESOCT=r2, @ANYRES64=r3, @ANYRESOCT=r3, @ANYRES64=r1], 0x48) (async) socket$tipc(0x1e, 0x1, 0x0) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x60, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf63, 0x100000001}, 0x1100, 0x5dd8, 0x3a62, 0x5, 0x0, 0x7, 0xfffb, 0x0, 0x0, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket(0x11, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r6, 0x0, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) (async) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r11 = dup2(r10, r10) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) (async) ioctl$BLKTRACESETUP(r11, 0x1276, 0x0) 41.293147681s ago: executing program 4 (id=321): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 41.143961953s ago: executing program 4 (id=323): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x201001c, &(0x7f00000005c0)=ANY=[], 0xfe, 0x731, &(0x7f0000001f80)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5}, 0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0), 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000008100000000000000fe7f000085100000000000009500220000008000"], &(0x7f0000000380)='syzkaller\x00', 0x7fff, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xb, 0x8, 0xf318}, 0x10, 0x307cb, r0, 0x6, 0x0, &(0x7f0000000600)=[{0x0, 0x5, 0x7, 0x2}, {0x2, 0x1, 0x6, 0xc}, {0x1, 0x1, 0xd, 0x1}, {0x0, 0x4, 0x10, 0x6}, {0x5, 0x2, 0xa, 0x9}, {0x5, 0x1, 0x3, 0x5}], 0x10, 0x5d7b, @void, @value}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r3], 0x50) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b50281338f4c8f658efc5f55374d4db81c9dc04d89adc9b68442ce2905d016daa9403ea614b66233456b04f05b3e99a5c60f924b06247e0e705dae444394d9b75078f170e922c3fd65115b346e", 0x4d, 0x4008841, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4000040) ptrace(0x10, r6) ptrace$setregs(0xf, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r6, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r5, 0xffffffffffffffff}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r7, 0x0, 0x8000000000000}, 0x18) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX, @ANYRES32=r8, @ANYRESHEX, @ANYBLOB=',msize=0']) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd']) r9 = syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYRES64=r9], 0x74}}, 0x0) fstatfs(r7, &(0x7f00000002c0)=""/14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r4, 0x0, 0x0}, 0x10) 39.182389661s ago: executing program 4 (id=350): pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unshare(0x400) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) 38.620906198s ago: executing program 4 (id=356): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) fremovexattr(0xffffffffffffffff, 0x0) socket$packet(0x11, 0xa, 0x300) socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 38.216222474s ago: executing program 34 (id=356): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) fremovexattr(0xffffffffffffffff, 0x0) socket$packet(0x11, 0xa, 0x300) socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 25.096298958s ago: executing program 5 (id=548): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 24.95911325s ago: executing program 5 (id=550): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[], 0xff2e) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x42, 0x5c}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) write(r0, &(0x7f0000000240)="2338dcfa67c78a50095e74401b6cc0914ab28f7554d2f66e4932ccbd9df4aa717439252e20a2196296f5328f0800000000d05807f47d5d5db836f81553dae5", 0xfffffd5f) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000480)={0x0, 0xf, 0xa, 0x6, 0x1a, "607f30ec133d135e"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x5d) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140), 0x800000, &(0x7f0000000340)=ANY=[@ANYBLOB="6867653d77697468696e5f73697a652c687567653d0464766973652c687567653d6e657665722c687567653d616c776179732c75737271756f003ae25cba11b4b6ac5703600933ac79f22f0348cf41dd9bec16f7464c609b1e"]) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 24.676232044s ago: executing program 5 (id=554): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x3c1002, 0x12) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000640)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100), 0x10) 24.499930136s ago: executing program 5 (id=557): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x818f0c, &(0x7f0000000200), 0x3, 0x44a, &(0x7f0000000400)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x10e, &(0x7f0000000140)={[{@inlinecrypt}, {@nodelalloc}, {@jqfmt_vfsold}, {@bh}, {@block_validity}, {@debug}]}, 0xb, 0x46e, &(0x7f0000000680)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304c24, &(0x7f0000000140)='usrjquota=') syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 24.377928328s ago: executing program 5 (id=560): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 24.032511493s ago: executing program 5 (id=566): r0 = socket$inet6(0xa, 0x4, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) r1 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) 23.971679314s ago: executing program 35 (id=566): r0 = socket$inet6(0xa, 0x4, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) r1 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) 3.237967535s ago: executing program 7 (id=982): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xd571012c}, 0x114) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r1, r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf001}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4, 0x0, 0x4}}}}}}}, 0x0) 3.125713896s ago: executing program 7 (id=985): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x4}, 0x18) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) close(r0) 2.19590654s ago: executing program 2 (id=1000): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000440)=[{0x3, 0x0, {0x0, 0xf1, 0x3}, {0x2, 0xff, 0x2}, 0xfe, 0x2}], 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = socket$inet(0x2, 0x2, 0x1) connect$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0xa8a, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x1}, 0x20) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) sendmmsg$inet6(r1, &(0x7f000000d100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14008, &(0x7f0000000400)={[{@bsdgroups}]}, 0x1, 0x51c, &(0x7f0000001300)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) r6 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r6, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) 2.14275025s ago: executing program 6 (id=1002): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r1) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) fsetxattr(r2, &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000180)='/selinux/policy\x00', 0x10, 0x3) r3 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r3, 0x409, 0xb) 2.059388471s ago: executing program 7 (id=1005): socket$inet_dccp(0x2, 0x6, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = syz_io_uring_setup(0x164, &(0x7f0000000480)={0x0, 0xd814, 0x8, 0x80000000, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r5 = syz_io_uring_setup(0x7d9e, &(0x7f00000008c0)={0x0, 0x92b2, 0x10100, 0xfffffffe, 0x21a}, &(0x7f0000000980)=0x0, &(0x7f00000001c0)=0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9}, 0x10) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x14a8}}) io_uring_enter(r5, 0x2ded, 0xf85a, 0x2d, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffffd, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fgetxattr(r10, &(0x7f00000001c0)=@random={'security.', '.}(}--\x00'}, &(0x7f00000004c0)=""/70, 0x46) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 2.036144832s ago: executing program 6 (id=1007): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x401}, 0x8) 1.990438762s ago: executing program 6 (id=1009): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r1) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) fsetxattr(r2, &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000180)='/selinux/policy\x00', 0x10, 0x3) r3 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0xfffffffffffffffe, 0x100000000, 0x0, 0x0, 0x2, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffffffffffc, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x100000000009}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) 1.951631783s ago: executing program 2 (id=1011): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu<00\t&&') socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0xf5ff}, 0x0) 1.603558798s ago: executing program 6 (id=1015): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x4}, 0x18) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) close(r0) 1.341899282s ago: executing program 8 (id=1017): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r1) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) fsetxattr(r2, &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000180)='/selinux/policy\x00', 0x10, 0x3) r3 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0xfffffffffffffffe, 0x100000000, 0x0, 0x0, 0x2, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffffffffffc, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x100000000009}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r3, 0x409, 0xb) 1.188644024s ago: executing program 7 (id=1022): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040849}, 0x8010) sendmmsg(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002880)="13d0dc432d3d3391fafe26160c215d30a476f4ac80d634079b6b579bb04ade2653f8c0f6b1a55451ddad18f6d9a81e8bc2121377f7a87a5e076ea2c1e4b0094d472684241faf30ebff5e58a61ba1c2ce470b99036209", 0x56}], 0x1}}], 0x1, 0x4000) close(r0) 1.144468294s ago: executing program 7 (id=1023): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu<00\t&&') socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0xf5ff}, 0x0) (fail_nth: 1) 1.139908474s ago: executing program 3 (id=1024): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unshare(0x4000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600), 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) unshare(0x280) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = msgget$private(0x0, 0x95) msgrcv(r5, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) msgsnd(r5, &(0x7f0000000000)={0x3}, 0x8, 0x800) getresgid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r6, 0xee01) 1.112776015s ago: executing program 8 (id=1025): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x2904c, 0x3, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x3}, {0xffffffff}], ['\x00', '\x00', '\x00']}) 833.239269ms ago: executing program 2 (id=1026): creat(&(0x7f0000000280)='./bus\x00', 0x4) io_setup(0x2, &(0x7f0000002380)=0x0) io_submit(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./bus\x00', 0x4528, &(0x7f0000000200)={[{@grpquota}, {@test_dummy_encryption}, {@nodiscard}, {@nombcache}]}, 0x2, 0x508, &(0x7f000001a240)="$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") openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r1, 0xffffffffffffffff, 0x0) 765.9531ms ago: executing program 3 (id=1027): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) 765.82935ms ago: executing program 3 (id=1028): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000600)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '\xda\'|\xa8o\xcc\xed\xc1\xa3\xa8\xd6\xcd\x93\x83\x90h]\t\x1d\x1bj@\xaa\xde\"\xd1\xd3\"\xc2H\x8a\x04\xe9zlI2t}\xf8/\x89\x86b\xb10\xaf\x1d\xf1\xb3\v\xa8j\xa08\xf8\xfc\xba\xa2\xe79\xf0J\x877\xd6\xbd\x99\x15\xd5\xf4\x9cH\x02\xd6s\x84\xc7[\x93-4\xff{f\x80Q\xc7k\x91\x10\xe3\xff', 0x3a, './file2'}, 0x85) 740.20556ms ago: executing program 6 (id=1029): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000001c0)=0x3, 0x4) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 722.59859ms ago: executing program 6 (id=1030): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x20) ioprio_set$pid(0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x1a00001a}]) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x2800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$eJzs3U1sG2UaAOB3xvH2L9t0pV1pd9VDtYtUpKpO0h8onNorolKlHpC4lMhxoyhOHMUONFEO6b1C9IAA9VJucOAI4sABcUHiwpULiDNSRSOQmh7AyH9pm9jBKXWdxs8jjT3ffON5v2/G73hmNCMHMLCO1V7SiP9ExKUkYuShuqFoVh5rzLe+tpK/v7aST6JavfxzEklE3FtbybfmT5rvhyJiNSL+HRFfZSNOpFvjlpeWZyaKxcJCszxamZ0fLS8tn5yenZgqTBXmTr/40tlzZ86Onxrv3Pjszvp644ebb9/49pXbNz/+5Ohq/t2JJM7HcLPu4X48SY11ko3zm6af6UWwPkr63QAeS6aZ57VU+leMRKaZ9e1UR55q04Aeq+6LqO5Esrqj2YHdLNlZ/gN7Rus4oHb+2xoeOUDI9Pb4486FxglILe56c2jUDDWuTcT++rnJwV+SR85MauebR3rbNAbA6vWIGBsa2vr9T5rfv8c39iQaSE99eaGxobZu/3Rj/xNt9j/DrWunf1Fr/7e+Zf/3IH6mw/7vUpcxfnv9xw86xr8e8d+28ZON+Emb+GlEvNFl/FuvfX6uU131w4jj0T5+S7L99eHRq9PFwljjtW2ML44ffXm7/h/sEL9xzXZ//Wem3fqf77L/n3396f9Wt4n//P+33/7t1v+BiHiny/j/uPfRq53q7lxP7taOAna6/WvTbncZ/4Xzx77vUHWgy0UAAAAAAAAAAABtpPV72ZI0tzGeprlc4xnef8bBtFgqV05cLS3OTTbueTsS2bR1p9VIo5zUyuPN+3Fb5VObyqdb9xFnDtTLuXypONnnvgMAAAAAAAAAAAAAAAAAAMBucWjT8/+/ZurP/2/+u2pgr+r8l9/AXif/YXA9mv9JxL6+NQV4yvz+w8Cqyn8YXPIfBpf8h8El/2FwyX8YXPIfBpf8BwAAAAAAAAAAAAAAAAAAAAAAAACAnrh08WJtqN5fW8nXypNDS4szpTdPThbKM7nZxXwuX1qYz02VSlPFQi5fmv2z5RVLpfmxmFu8NloplCuj5aXlK7OlxbnKlenZianClUL2qfQKAAAAAAAAAAAAAAAAAAAAni3D9SFJcxGR1sfTNJeL+HtEHIlscnW6WBiLiMMR8V0mu69WHu93owEAAAAAAAAAAAAAAAAAAGCPKS8tz0wUi4WFARkZ2jLlm84zR8Tqk21GbYk7/lS2ua12yzp81kYObz9PJvrewt040ucdEwAAAAAAAAAAAAAAAAAADKAHD/12+4nfe9sgAAAAAAAAAAAAAAAAAAAAGEjpT0lE1IbjI88Nb679W7Keqb9HxFu3Lr93baJSWRivTb+7Mb3yfnP6qX60H+hWK09beQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8UF5anpkoFgsLPRzpdx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHscfAQAA//+aXtbd") setgroups(0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000200)=0xdd68) ioctl$EVIOCGABS20(r7, 0x40044591, 0x0) pwrite64(r5, &(0x7f0000000140)='Q', 0x1, 0x200980) 670.554901ms ago: executing program 3 (id=1031): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x401}, 0x8) 666.706291ms ago: executing program 8 (id=1032): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa18a21428c6c08586dd61bcc1d700006cffdc00000000000000000000000000060100000000000000000000000000000001"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 593.844602ms ago: executing program 3 (id=1033): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000100)) (fail_nth: 6) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 576.974923ms ago: executing program 8 (id=1034): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000001600)=@ethtool_regs={0x4, 0x0, 0x1d, "f42a97b96d020391dd3f75fdda624457ad3d0700389c30857020426271"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x1a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r5}, 0x8) bind$packet(r0, &(0x7f0000000080)={0x11, 0x4, r1, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xffee}, {0xfff1, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) 344.518256ms ago: executing program 3 (id=1035): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r1) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) fsetxattr(r2, &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000180)='/selinux/policy\x00', 0x10, 0x3) r3 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0xfffffffffffffffe, 0x100000000, 0x0, 0x0, 0x2, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffffffffffc, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x100000000009}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r3, 0x409, 0xb) 260.442097ms ago: executing program 8 (id=1036): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 259.841047ms ago: executing program 2 (id=1037): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x38}}, 0x0) 189.338498ms ago: executing program 2 (id=1038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x300, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x3000000, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 189.166318ms ago: executing program 7 (id=1039): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 185.546358ms ago: executing program 8 (id=1040): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x4}, 0x18) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) close(r0) 0s ago: executing program 2 (id=1041): r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x21) wait4(r0, 0x0, 0x40000000, 0x0) wait4(r0, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x40000000, 0x0) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.284641][ T5005] netlink: 4 bytes leftover after parsing attributes in process `syz.7.401'. [ 58.380133][ T5016] loop2: detected capacity change from 0 to 1024 [ 58.560013][ T5030] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 58.926685][ T5056] netlink: 16 bytes leftover after parsing attributes in process `syz.5.410'. [ 58.935922][ T5056] netlink: 16 bytes leftover after parsing attributes in process `syz.5.410'. [ 58.956360][ T5057] loop2: detected capacity change from 0 to 512 [ 58.970593][ T5057] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.409: iget: bad extended attribute block 1 [ 58.999882][ T5056] netlink: 16 bytes leftover after parsing attributes in process `syz.5.410'. [ 59.035715][ T5057] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.409: couldn't read orphan inode 15 (err -117) [ 59.126198][ T5069] netlink: 16 bytes leftover after parsing attributes in process `syz.7.413'. [ 59.135575][ T5069] netlink: 16 bytes leftover after parsing attributes in process `syz.7.413'. [ 59.138886][ T5057] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 59.159715][ T5069] netlink: 16 bytes leftover after parsing attributes in process `syz.7.413'. [ 59.255382][ T5081] loop6: detected capacity change from 0 to 512 [ 59.317270][ T5081] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm : Failed to acquire dquot type 1 [ 59.337171][ T5081] EXT4-fs (loop6): 1 truncate cleaned up [ 59.348755][ T5081] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.407720][ T5081] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.497902][ T5081] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.567875][ T5081] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.622274][ T5081] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.696422][ T5081] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.722722][ T5081] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.753581][ T5081] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.776422][ T5081] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.808185][ T5129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'. [ 59.978721][ T5155] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 60.204279][ T5173] process 'syz.7.433' launched './file0' with NULL argv: empty string added [ 60.240148][ T5173] loop7: detected capacity change from 0 to 128 [ 60.292046][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ee5e800: rx timeout, send abort [ 60.510937][ T5193] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 60.519523][ T5193] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 60.790554][ T5220] loop2: detected capacity change from 0 to 512 [ 60.792081][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ee5ea00: rx timeout, send abort [ 60.805171][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ee5e800: abort rx timeout. Force session deactivation [ 60.870421][ T5220] ext4 filesystem being mounted at /107/file0 (deleted) supports timestamps until 2038-01-19 (0x7fffffff) [ 61.077516][ T5253] IPv6: NLM_F_CREATE should be specified when creating new route [ 61.141842][ T5259] netlink: 'syz.2.448': attribute type 1 has an invalid length. [ 61.180797][ T5263] loop7: detected capacity change from 0 to 512 [ 61.202202][ T5259] loop2: detected capacity change from 0 to 512 [ 61.210117][ T5259] EXT4-fs: Ignoring removed bh option [ 61.224109][ T5259] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 61.255232][ T5263] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.449: iget: bad extended attribute block 1 [ 61.292747][ T5259] EXT4-fs (loop2): 1 truncate cleaned up [ 61.305148][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ee5ea00: abort rx timeout. Force session deactivation [ 61.323379][ T5263] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.449: couldn't read orphan inode 15 (err -117) [ 61.409351][ T5263] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 61.566946][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 61.566963][ T29] audit: type=1400 audit(1746676860.083:1163): avc: denied { read } for pid=5298 comm="syz.7.453" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 61.621919][ T29] audit: type=1400 audit(1746676860.113:1164): avc: denied { open } for pid=5298 comm="syz.7.453" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 61.750512][ T29] audit: type=1326 audit(1746676860.233:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38c20e969 code=0x7ffc0000 [ 61.774726][ T29] audit: type=1326 audit(1746676860.233:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fb38c20e969 code=0x7ffc0000 [ 61.798740][ T29] audit: type=1326 audit(1746676860.233:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38c20e969 code=0x7ffc0000 [ 61.822279][ T29] audit: type=1326 audit(1746676860.233:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb38c20e969 code=0x7ffc0000 [ 61.845957][ T29] audit: type=1326 audit(1746676860.233:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38c20e969 code=0x7ffc0000 [ 61.869324][ T29] audit: type=1326 audit(1746676860.233:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb38c20e969 code=0x7ffc0000 [ 61.892811][ T29] audit: type=1326 audit(1746676860.233:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38c20e969 code=0x7ffc0000 [ 61.916400][ T29] audit: type=1326 audit(1746676860.233:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5310 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38c20e969 code=0x7ffc0000 [ 62.016474][ T5333] FAULT_INJECTION: forcing a failure. [ 62.016474][ T5333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.029652][ T5333] CPU: 0 UID: 0 PID: 5333 Comm: syz.5.465 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) [ 62.029681][ T5333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 62.029696][ T5333] Call Trace: [ 62.029703][ T5333] [ 62.029712][ T5333] __dump_stack+0x1d/0x30 [ 62.029768][ T5333] dump_stack_lvl+0xe8/0x140 [ 62.029793][ T5333] dump_stack+0x15/0x1b [ 62.029814][ T5333] should_fail_ex+0x265/0x280 [ 62.029882][ T5333] should_fail+0xb/0x20 [ 62.029993][ T5333] should_fail_usercopy+0x1a/0x20 [ 62.030016][ T5333] _copy_from_iter+0xcf/0xdd0 [ 62.030038][ T5333] ? __build_skb_around+0x1a0/0x200 [ 62.030139][ T5333] ? __alloc_skb+0x223/0x320 [ 62.030288][ T5333] netlink_sendmsg+0x471/0x6b0 [ 62.030327][ T5333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.030413][ T5333] __sock_sendmsg+0x142/0x180 [ 62.030445][ T5333] ____sys_sendmsg+0x31e/0x4e0 [ 62.030473][ T5333] ___sys_sendmsg+0x17b/0x1d0 [ 62.030557][ T5333] __x64_sys_sendmsg+0xd4/0x160 [ 62.030582][ T5333] x64_sys_call+0x2999/0x2fb0 [ 62.030605][ T5333] do_syscall_64+0xd0/0x1a0 [ 62.030697][ T5333] ? clear_bhb_loop+0x25/0x80 [ 62.030723][ T5333] ? clear_bhb_loop+0x25/0x80 [ 62.030743][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.030826][ T5333] RIP: 0033:0x7f324075e969 [ 62.030845][ T5333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.030943][ T5333] RSP: 002b:00007f323edc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.030967][ T5333] RAX: ffffffffffffffda RBX: 00007f3240985fa0 RCX: 00007f324075e969 [ 62.030992][ T5333] RDX: 0000000000040000 RSI: 0000200000000100 RDI: 0000000000000006 [ 62.031007][ T5333] RBP: 00007f323edc7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.031022][ T5333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.031037][ T5333] R13: 0000000000000000 R14: 00007f3240985fa0 R15: 00007fffd7734098 [ 62.031141][ T5333] [ 62.261812][ T5331] IPv6: NLM_F_CREATE should be specified when creating new route [ 62.452171][ T5366] loop6: detected capacity change from 0 to 512 [ 62.463687][ T5366] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.493216][ T5374] loop7: detected capacity change from 0 to 512 [ 62.500985][ T5366] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 62.502254][ T5374] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 62.534951][ T5366] EXT4-fs (loop6): 1 truncate cleaned up [ 62.555332][ T5374] EXT4-fs (loop7): 1 truncate cleaned up [ 62.757185][ T5399] loop6: detected capacity change from 0 to 1024 [ 62.775042][ T5399] EXT4-fs: Ignoring removed nobh option [ 62.780689][ T5399] EXT4-fs: Ignoring removed bh option [ 62.873438][ T5408] loop3: detected capacity change from 0 to 512 [ 62.928448][ T5408] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.941485][ T5408] EXT4-fs (loop3): 1 truncate cleaned up [ 63.130310][ T5424] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 63.169509][ T5424] SELinux: failed to load policy [ 63.180768][ T5428] FAULT_INJECTION: forcing a failure. [ 63.180768][ T5428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.193910][ T5428] CPU: 0 UID: 0 PID: 5428 Comm: +}[@ Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) [ 63.193973][ T5428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 63.193987][ T5428] Call Trace: [ 63.193995][ T5428] [ 63.194004][ T5428] __dump_stack+0x1d/0x30 [ 63.194029][ T5428] dump_stack_lvl+0xe8/0x140 [ 63.194074][ T5428] dump_stack+0x15/0x1b [ 63.194151][ T5428] should_fail_ex+0x265/0x280 [ 63.194192][ T5428] should_fail+0xb/0x20 [ 63.194234][ T5428] should_fail_usercopy+0x1a/0x20 [ 63.194257][ T5428] _copy_to_user+0x20/0xa0 [ 63.194281][ T5428] simple_read_from_buffer+0xb5/0x130 [ 63.194307][ T5428] proc_fail_nth_read+0x100/0x140 [ 63.194375][ T5428] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 63.194405][ T5428] vfs_read+0x19d/0x6f0 [ 63.194442][ T5428] ksys_read+0xda/0x1a0 [ 63.194547][ T5428] __x64_sys_read+0x40/0x50 [ 63.194646][ T5428] x64_sys_call+0x2d77/0x2fb0 [ 63.194672][ T5428] do_syscall_64+0xd0/0x1a0 [ 63.194765][ T5428] ? clear_bhb_loop+0x25/0x80 [ 63.194792][ T5428] ? clear_bhb_loop+0x25/0x80 [ 63.194840][ T5428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.194913][ T5428] RIP: 0033:0x7f324075d37c [ 63.194991][ T5428] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 63.195007][ T5428] RSP: 002b:00007f323edc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 63.195025][ T5428] RAX: ffffffffffffffda RBX: 00007f3240985fa0 RCX: 00007f324075d37c [ 63.195037][ T5428] RDX: 000000000000000f RSI: 00007f323edc70a0 RDI: 0000000000000004 [ 63.195052][ T5428] RBP: 00007f323edc7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.195067][ T5428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.195081][ T5428] R13: 0000000000000000 R14: 00007f3240985fa0 R15: 00007fffd7734098 [ 63.195117][ T5428] [ 63.195296][ T5424] loop3: detected capacity change from 0 to 128 [ 63.311123][ T5430] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 63.357440][ T5424] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.426228][ T5430] __nla_validate_parse: 10 callbacks suppressed [ 63.426248][ T5430] netlink: 56 bytes leftover after parsing attributes in process `syz.6.486'. [ 63.451821][ T5430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.486'. [ 63.491385][ T5441] loop7: detected capacity change from 0 to 512 [ 63.513785][ T5444] loop6: detected capacity change from 0 to 512 [ 63.521059][ T5441] random: crng reseeded on system resumption [ 63.523873][ T5444] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 63.546213][ T5446] loop5: detected capacity change from 0 to 512 [ 63.607006][ T5444] EXT4-fs (loop6): 1 truncate cleaned up [ 63.616053][ T5446] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.491: iget: bad extended attribute block 1 [ 63.641976][ T5450] siw: device registration error -23 [ 63.661345][ T5446] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.491: couldn't read orphan inode 15 (err -117) [ 63.767260][ T5467] Invalid ELF header magic: != ELF [ 63.780336][ T5463] netlink: 32 bytes leftover after parsing attributes in process `syz.6.496'. [ 63.798283][ T5470] Driver unsupported XDP return value 0 on prog (id 356) dev N/A, expect packet loss! [ 63.827972][ T5453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 63.899390][ T5481] netlink: 'syz.2.501': attribute type 3 has an invalid length. [ 63.907168][ T5481] netlink: 132 bytes leftover after parsing attributes in process `syz.2.501'. [ 63.916538][ T5481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5481 comm=syz.2.501 [ 63.949678][ T5485] FAULT_INJECTION: forcing a failure. [ 63.949678][ T5485] name failslab, interval 1, probability 0, space 0, times 0 [ 63.962521][ T5485] CPU: 1 UID: 0 PID: 5485 Comm: syz.2.502 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) [ 63.962601][ T5485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 63.962615][ T5485] Call Trace: [ 63.962624][ T5485] [ 63.962632][ T5485] __dump_stack+0x1d/0x30 [ 63.962688][ T5485] dump_stack_lvl+0xe8/0x140 [ 63.962707][ T5485] dump_stack+0x15/0x1b [ 63.962723][ T5485] should_fail_ex+0x265/0x280 [ 63.962755][ T5485] should_failslab+0x8c/0xb0 [ 63.962794][ T5485] kmem_cache_alloc_node_noprof+0x57/0x320 [ 63.962830][ T5485] ? alloc_vmap_area+0x200/0x1950 [ 63.962852][ T5485] alloc_vmap_area+0x200/0x1950 [ 63.962929][ T5485] ? should_failslab+0x8c/0xb0 [ 63.962957][ T5485] ? __kmalloc_cache_node_noprof+0x18a/0x320 [ 63.962979][ T5485] __get_vm_area_node+0x164/0x1c0 [ 63.963003][ T5485] __vmalloc_node_range_noprof+0x26a/0xdf0 [ 63.963054][ T5485] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 63.963087][ T5485] ? avc_has_perm_noaudit+0x1b1/0x200 [ 63.963123][ T5485] ? selinux_capable+0x1f9/0x270 [ 63.963255][ T5485] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 63.963362][ T5485] __vmalloc_noprof+0x5f/0x70 [ 63.963384][ T5485] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 63.963446][ T5485] bpf_prog_alloc_no_stats+0x47/0x390 [ 63.963473][ T5485] ? bpf_prog_alloc+0x2a/0x150 [ 63.963575][ T5485] bpf_prog_alloc+0x3c/0x150 [ 63.963603][ T5485] bpf_prog_load+0x514/0x1070 [ 63.963661][ T5485] ? security_bpf+0x2b/0x90 [ 63.963687][ T5485] __sys_bpf+0x51d/0x790 [ 63.963758][ T5485] __x64_sys_bpf+0x41/0x50 [ 63.963859][ T5485] x64_sys_call+0x2478/0x2fb0 [ 63.963881][ T5485] do_syscall_64+0xd0/0x1a0 [ 63.963904][ T5485] ? clear_bhb_loop+0x25/0x80 [ 63.963925][ T5485] ? clear_bhb_loop+0x25/0x80 [ 63.964011][ T5485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.964054][ T5485] RIP: 0033:0x7fb38c20e969 [ 63.964070][ T5485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.964087][ T5485] RSP: 002b:00007fb38a877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.964150][ T5485] RAX: ffffffffffffffda RBX: 00007fb38c435fa0 RCX: 00007fb38c20e969 [ 63.964163][ T5485] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 63.964174][ T5485] RBP: 00007fb38a877090 R08: 0000000000000000 R09: 0000000000000000 [ 63.964186][ T5485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.964197][ T5485] R13: 0000000000000000 R14: 00007fb38c435fa0 R15: 00007fffe573a308 [ 63.964216][ T5485] [ 64.217220][ T5485] syz.2.502: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 64.233182][ T5485] CPU: 1 UID: 0 PID: 5485 Comm: syz.2.502 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) [ 64.233210][ T5485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 64.233222][ T5485] Call Trace: [ 64.233229][ T5485] [ 64.233237][ T5485] __dump_stack+0x1d/0x30 [ 64.233322][ T5485] dump_stack_lvl+0xe8/0x140 [ 64.233346][ T5485] dump_stack+0x15/0x1b [ 64.233365][ T5485] warn_alloc+0x12b/0x1a0 [ 64.233397][ T5485] __vmalloc_node_range_noprof+0x28e/0xdf0 [ 64.233443][ T5485] ? avc_has_perm_noaudit+0x1b1/0x200 [ 64.233484][ T5485] ? selinux_capable+0x1f9/0x270 [ 64.233553][ T5485] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 64.233588][ T5485] __vmalloc_noprof+0x5f/0x70 [ 64.233615][ T5485] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 64.233722][ T5485] bpf_prog_alloc_no_stats+0x47/0x390 [ 64.233755][ T5485] ? bpf_prog_alloc+0x2a/0x150 [ 64.233788][ T5485] bpf_prog_alloc+0x3c/0x150 [ 64.233845][ T5485] bpf_prog_load+0x514/0x1070 [ 64.233896][ T5485] ? security_bpf+0x2b/0x90 [ 64.233922][ T5485] __sys_bpf+0x51d/0x790 [ 64.233978][ T5485] __x64_sys_bpf+0x41/0x50 [ 64.234003][ T5485] x64_sys_call+0x2478/0x2fb0 [ 64.234024][ T5485] do_syscall_64+0xd0/0x1a0 [ 64.234083][ T5485] ? clear_bhb_loop+0x25/0x80 [ 64.234109][ T5485] ? clear_bhb_loop+0x25/0x80 [ 64.234151][ T5485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.234177][ T5485] RIP: 0033:0x7fb38c20e969 [ 64.234194][ T5485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.234216][ T5485] RSP: 002b:00007fb38a877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 64.234253][ T5485] RAX: ffffffffffffffda RBX: 00007fb38c435fa0 RCX: 00007fb38c20e969 [ 64.234268][ T5485] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 64.234283][ T5485] RBP: 00007fb38a877090 R08: 0000000000000000 R09: 0000000000000000 [ 64.234369][ T5485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.234384][ T5485] R13: 0000000000000000 R14: 00007fb38c435fa0 R15: 00007fffe573a308 [ 64.234408][ T5485] [ 64.445005][ T5485] Mem-Info: [ 64.448129][ T5485] active_anon:9015 inactive_anon:6 isolated_anon:0 [ 64.448129][ T5485] active_file:16415 inactive_file:2229 isolated_file:0 [ 64.448129][ T5485] unevictable:0 dirty:226 writeback:0 [ 64.448129][ T5485] slab_reclaimable:3223 slab_unreclaimable:14391 [ 64.448129][ T5485] mapped:29590 shmem:307 pagetables:1399 [ 64.448129][ T5485] sec_pagetables:0 bounce:0 [ 64.448129][ T5485] kernel_misc_reclaimable:0 [ 64.448129][ T5485] free:1896053 free_pcp:1503 free_cma:0 [ 64.493151][ T5485] Node 0 active_anon:36176kB inactive_anon:24kB active_file:65660kB inactive_file:8916kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118360kB dirty:904kB writeback:0kB shmem:1228kB writeback_tmp:0kB kernel_stack:3392kB pagetables:5596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 64.522047][ T5485] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 64.548979][ T5485] lowmem_reserve[]: 0 2884 7863 7863 [ 64.554514][ T5485] Node 0 DMA32 free:2950036kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 64.583029][ T5485] lowmem_reserve[]: 0 0 4978 4978 [ 64.588214][ T5485] Node 0 Normal free:4610644kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:36308kB inactive_anon:24kB active_file:65660kB inactive_file:8848kB unevictable:0kB writepending:940kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:3900kB local_pcp:1472kB free_cma:0kB [ 64.618362][ T5485] lowmem_reserve[]: 0 0 0 0 [ 64.622933][ T5485] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 64.635904][ T5485] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950036kB [ 64.652032][ T5485] Node 0 Normal: 1266*4kB (ME) 945*8kB (UME) 503*16kB (ME) 474*32kB (UME) 288*64kB (UME) 57*128kB (UME) 16*256kB (UME) 11*512kB (UME) 13*1024kB (UME) 6*2048kB (UM) 1101*4096kB (UM) = 4606592kB [ 64.671389][ T5485] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 64.680798][ T5485] 18920 total pagecache pages [ 64.685556][ T5485] 6 pages in swap cache [ 64.689737][ T5485] Free swap = 124972kB [ 64.693949][ T5485] Total swap = 124996kB [ 64.698175][ T5485] 2097051 pages RAM [ 64.702024][ T5485] 0 pages HighMem/MovableOnly [ 64.706780][ T5485] 80258 pages reserved [ 64.823210][ T5506] Invalid ELF header magic: != ELF [ 65.098490][ T5534] siw: device registration error -23 [ 65.151061][ T5539] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.211134][ T5543] loop5: detected capacity change from 0 to 128 [ 65.222518][ T5539] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.298102][ T5539] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.344642][ T37] kworker/u8:2: attempt to access beyond end of device [ 65.344642][ T37] loop5: rw=1, sector=145, nr_sectors = 8 limit=128 [ 65.359053][ T37] kworker/u8:2: attempt to access beyond end of device [ 65.359053][ T37] loop5: rw=1, sector=161, nr_sectors = 8 limit=128 [ 65.373623][ T37] kworker/u8:2: attempt to access beyond end of device [ 65.373623][ T37] loop5: rw=1, sector=177, nr_sectors = 8 limit=128 [ 65.388499][ T37] kworker/u8:2: attempt to access beyond end of device [ 65.388499][ T37] loop5: rw=1, sector=193, nr_sectors = 8 limit=128 [ 65.403544][ T37] kworker/u8:2: attempt to access beyond end of device [ 65.403544][ T37] loop5: rw=1, sector=209, nr_sectors = 8 limit=128 [ 65.417968][ T5539] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.429382][ T37] kworker/u8:2: attempt to access beyond end of device [ 65.429382][ T37] loop5: rw=1, sector=225, nr_sectors = 8 limit=128 [ 65.442984][ T37] kworker/u8:2: attempt to access beyond end of device [ 65.442984][ T37] loop5: rw=1, sector=241, nr_sectors = 8 limit=128 [ 65.456464][ T37] kworker/u8:2: attempt to access beyond end of device [ 65.456464][ T37] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 65.469933][ T37] kworker/u8:2: attempt to access beyond end of device [ 65.469933][ T37] loop5: rw=1, sector=273, nr_sectors = 8 limit=128 [ 65.485042][ T37] kworker/u8:2: attempt to access beyond end of device [ 65.485042][ T37] loop5: rw=1, sector=289, nr_sectors = 8 limit=128 [ 65.503697][ T5539] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.515816][ T5539] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.527639][ T5539] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.539608][ T5539] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.098410][ T5601] loop6: detected capacity change from 0 to 8192 [ 66.219479][ T5613] bridge0: port 3(syz_tun) entered blocking state [ 66.226024][ T5613] bridge0: port 3(syz_tun) entered disabled state [ 66.243139][ T5613] syz_tun: entered allmulticast mode [ 66.255837][ T5613] syz_tun: entered promiscuous mode [ 66.266899][ T5613] bridge0: port 3(syz_tun) entered blocking state [ 66.273456][ T5613] bridge0: port 3(syz_tun) entered forwarding state [ 66.295379][ T5616] 9pnet: Unknown protocol version rÚð [ 66.387533][ T5620] netlink: 'syz.3.544': attribute type 1 has an invalid length. [ 66.400456][ T5622] loop5: detected capacity change from 0 to 512 [ 66.426630][ T5622] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.545: iget: bad extended attribute block 1 [ 66.445301][ T5620] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.449497][ T5622] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.545: couldn't read orphan inode 15 (err -117) [ 66.454200][ T5620] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.474942][ T5620] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.483972][ T5620] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.495555][ T5629] loop3: detected capacity change from 0 to 512 [ 66.503383][ T5620] bond2: (slave geneve2): making interface the new active one [ 66.511521][ T5620] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 66.525168][ T5629] EXT4-fs: Ignoring removed bh option [ 66.531294][ T5622] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 66.588919][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 66.588937][ T29] audit: type=1400 audit(1746676865.103:1529): avc: denied { listen } for pid=5633 comm="syz.7.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.614804][ T29] audit: type=1400 audit(1746676865.103:1530): avc: denied { accept } for pid=5633 comm="syz.7.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.637095][ T5629] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 66.638672][ T29] audit: type=1326 audit(1746676865.113:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5634 comm="syz.6.547" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f967298e969 code=0x0 [ 66.683596][ T5629] EXT4-fs (loop3): 1 truncate cleaned up [ 66.768786][ T5643] loop2: detected capacity change from 0 to 512 [ 66.802828][ T5643] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.804645][ T5651] loop3: detected capacity change from 0 to 512 [ 66.816730][ T5651] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.823496][ T5651] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.823527][ T5643] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.867204][ T5643] EXT4-fs (loop2): 1 truncate cleaned up [ 66.868839][ T5651] EXT4-fs (loop3): 1 truncate cleaned up [ 66.890206][ T29] audit: type=1400 audit(1746676865.403:1532): avc: denied { mount } for pid=5646 comm="syz.5.550" name="/" dev="configfs" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 66.913788][ T29] audit: type=1400 audit(1746676865.423:1533): avc: denied { search } for pid=5646 comm="syz.5.550" name="/" dev="configfs" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.918438][ T29] audit: type=1400 audit(1746676865.433:1534): avc: denied { mounton } for pid=5646 comm="syz.5.550" path="/" dev="configfs" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.989587][ T29] audit: type=1400 audit(1746676865.503:1535): avc: denied { unmount } for pid=3903 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 67.036452][ T5659] loop5: detected capacity change from 0 to 512 [ 67.044027][ T5659] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 67.060385][ T5659] EXT4-fs (loop5): 1 truncate cleaned up [ 67.069230][ T29] audit: type=1326 audit(1746676865.583:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.5.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3240755927 code=0x7ffc0000 [ 67.094034][ T29] audit: type=1326 audit(1746676865.603:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.5.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f32406fab39 code=0x7ffc0000 [ 67.117328][ T29] audit: type=1326 audit(1746676865.603:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.5.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3240755927 code=0x7ffc0000 [ 67.181082][ T5669] loop5: detected capacity change from 0 to 512 [ 67.199542][ T5669] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.557: corrupted in-inode xattr: invalid ea_ino [ 67.214239][ T5669] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.557: couldn't read orphan inode 15 (err -117) [ 67.235989][ T5669] EXT4-fs: Ignoring removed bh option [ 67.243573][ T5669] EXT4-fs (loop5): can't disable delalloc during remount [ 67.287943][ T3903] EXT4-fs error (device loop5): htree_dirblock_to_tree:1082: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 67.311351][ T3903] EXT4-fs error (device loop5): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 15 [ 67.321625][ T5677] loop2: detected capacity change from 0 to 512 [ 67.331311][ T3903] EXT4-fs error (device loop5): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 15 [ 67.363713][ T5677] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.559: iget: bad extended attribute block 1 [ 67.377203][ T5677] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.559: couldn't read orphan inode 15 (err -117) [ 67.392462][ T5677] EXT4-fs mount: 38 callbacks suppressed [ 67.392490][ T5677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.443166][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.482451][ T5684] netlink: 'syz.2.562': attribute type 1 has an invalid length. [ 67.526736][ T3903] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.542214][ T5684] loop2: detected capacity change from 0 to 512 [ 67.561385][ T51] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.568208][ T5684] EXT4-fs: Ignoring removed bh option [ 67.582353][ T5684] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 67.604300][ T5692] loop7: detected capacity change from 0 to 164 [ 67.627323][ T5684] EXT4-fs (loop2): 1 truncate cleaned up [ 67.643963][ T5684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.668149][ T51] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.683567][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.733504][ T51] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.771180][ T5702] xt_connbytes: Forcing CT accounting to be enabled [ 67.778531][ T5702] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 67.790551][ T5702] xt_bpf: check failed: parse error [ 67.812078][ T51] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.918506][ T5741] loop6: detected capacity change from 0 to 512 [ 67.938741][ T51] bridge_slave_1: left allmulticast mode [ 67.944450][ T51] bridge_slave_1: left promiscuous mode [ 67.950271][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.989953][ T51] bridge_slave_0: left allmulticast mode [ 67.995749][ T51] bridge_slave_0: left promiscuous mode [ 68.001530][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.015241][ T5741] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.572: iget: bad extended attribute block 1 [ 68.044649][ T5741] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.572: couldn't read orphan inode 15 (err -117) [ 68.146488][ T5741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.231556][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.286290][ T4522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.313513][ T51] bond0 (unregistering): Released all slaves [ 68.322331][ T51] bond1 (unregistering): Released all slaves [ 68.380454][ T5774] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 68.403252][ T51] hsr_slave_0: left promiscuous mode [ 68.416472][ T51] hsr_slave_1: left promiscuous mode [ 68.433769][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.441296][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.462291][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.469863][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.483614][ T51] veth1_vlan: left promiscuous mode [ 68.489055][ T51] veth0_vlan: left promiscuous mode [ 68.609580][ T51] team0 (unregistering): Port device team_slave_1 removed [ 68.627308][ T51] team0 (unregistering): Port device team_slave_0 removed [ 68.669587][ T5789] netlink: 'syz.2.578': attribute type 1 has an invalid length. [ 68.697484][ T5789] loop2: detected capacity change from 0 to 512 [ 68.706321][ T5789] EXT4-fs: Ignoring removed bh option [ 68.712017][ T5789] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 68.757665][ T5791] loop6: detected capacity change from 0 to 128 [ 68.768405][ T5789] EXT4-fs (loop2): 1 truncate cleaned up [ 68.780539][ T5795] 8021q: adding VLAN 0 to HW filter on device bond3 [ 68.788575][ T5789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.821271][ T5713] chnl_net:caif_netlink_parms(): no params data found [ 68.891650][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.907436][ T5807] loop6: detected capacity change from 0 to 512 [ 68.918902][ T5809] netlink: 4 bytes leftover after parsing attributes in process `syz.7.584'. [ 68.927174][ T5713] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.934819][ T5713] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.942049][ T5713] bridge_slave_0: entered allmulticast mode [ 68.949504][ T5713] bridge_slave_0: entered promiscuous mode [ 68.961667][ T5807] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.582: iget: bad extended attribute block 1 [ 68.974233][ T5713] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.981506][ T5713] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.988836][ T5713] bridge_slave_1: entered allmulticast mode [ 68.997370][ T5713] bridge_slave_1: entered promiscuous mode [ 69.009983][ T5807] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.582: couldn't read orphan inode 15 (err -117) [ 69.023939][ T5807] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.039280][ T5713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.051337][ T5713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.078895][ T4522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.102838][ T5713] team0: Port device team_slave_0 added [ 69.110752][ T5713] team0: Port device team_slave_1 added [ 69.119355][ T5819] FAULT_INJECTION: forcing a failure. [ 69.119355][ T5819] name failslab, interval 1, probability 0, space 0, times 0 [ 69.132090][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: syz.6.586 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) [ 69.132119][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 69.132131][ T5819] Call Trace: [ 69.132137][ T5819] [ 69.132147][ T5819] __dump_stack+0x1d/0x30 [ 69.132242][ T5819] dump_stack_lvl+0xe8/0x140 [ 69.132267][ T5819] dump_stack+0x15/0x1b [ 69.132296][ T5819] should_fail_ex+0x265/0x280 [ 69.132337][ T5819] should_failslab+0x8c/0xb0 [ 69.132454][ T5819] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 69.132489][ T5819] ? shmem_alloc_inode+0x34/0x50 [ 69.132524][ T5819] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 69.132581][ T5819] shmem_alloc_inode+0x34/0x50 [ 69.132616][ T5819] alloc_inode+0x3d/0x170 [ 69.132644][ T5819] new_inode+0x1d/0xe0 [ 69.132697][ T5819] shmem_get_inode+0x244/0x750 [ 69.132727][ T5819] ? __se_sys_memfd_create+0x1cc/0x590 [ 69.132752][ T5819] __shmem_file_setup+0x122/0x1f0 [ 69.132780][ T5819] shmem_file_setup+0x3b/0x50 [ 69.132874][ T5819] __se_sys_memfd_create+0x2c3/0x590 [ 69.132903][ T5819] __x64_sys_memfd_create+0x31/0x40 [ 69.132973][ T5819] x64_sys_call+0x122f/0x2fb0 [ 69.133081][ T5819] do_syscall_64+0xd0/0x1a0 [ 69.133182][ T5819] ? clear_bhb_loop+0x25/0x80 [ 69.133225][ T5819] ? clear_bhb_loop+0x25/0x80 [ 69.133252][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.133279][ T5819] RIP: 0033:0x7f967298e969 [ 69.133298][ T5819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.133316][ T5819] RSP: 002b:00007f9670ff6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 69.133342][ T5819] RAX: ffffffffffffffda RBX: 0000000000000534 RCX: 00007f967298e969 [ 69.133354][ T5819] RDX: 00007f9670ff6ef0 RSI: 0000000000000000 RDI: 00007f9672a11444 [ 69.133366][ T5819] RBP: 0000200000000400 R08: 00007f9670ff6bb7 R09: 00007f9670ff6e40 [ 69.133382][ T5819] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 69.133471][ T5819] R13: 00007f9670ff6ef0 R14: 00007f9670ff6eb0 R15: 00002000000003c0 [ 69.133495][ T5819] [ 69.380038][ T5713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.387077][ T5713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.413213][ T5713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.430283][ T5713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.437362][ T5713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.463380][ T5713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.496100][ T5826] loop6: detected capacity change from 0 to 512 [ 69.504751][ T5826] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 69.517986][ T5713] hsr_slave_0: entered promiscuous mode [ 69.527107][ T5713] hsr_slave_1: entered promiscuous mode [ 69.528091][ T5826] EXT4-fs (loop6): 1 truncate cleaned up [ 69.533065][ T5713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.540118][ T5826] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.583096][ T5713] Cannot create hsr debugfs directory [ 69.627627][ T4522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.677883][ T5834] loop3: detected capacity change from 0 to 512 [ 69.706636][ T5834] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.592: Failed to acquire dquot type 1 [ 69.722875][ T5842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 69.735748][ T5713] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 69.742761][ T5834] EXT4-fs (loop3): 1 truncate cleaned up [ 69.750873][ T5713] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 69.764437][ T5834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.793353][ T5713] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 69.819418][ T5713] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 69.827585][ T5834] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.894120][ T5713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.911758][ T5713] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.934140][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.948222][ T5851] netlink: 'syz.2.600': attribute type 10 has an invalid length. [ 69.958119][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.965249][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.976391][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.983567][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.993522][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.000657][ T5851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.008185][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.015291][ T5851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.027970][ T5851] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 70.044815][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.051962][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.070514][ T5853] loop7: detected capacity change from 0 to 8192 [ 70.125426][ T5853] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.145166][ T143] ------------[ cut here ]------------ [ 70.150699][ T143] RTNL: assertion failed at ./include/net/netdev_lock.h (56) [ 70.159214][ T143] WARNING: CPU: 1 PID: 143 at ./include/net/netdev_lock.h:56 __linkwatch_sync_dev+0x1f0/0x200 [ 70.169569][ T143] Modules linked in: [ 70.173525][ T143] CPU: 1 UID: 0 PID: 143 Comm: kworker/u8:4 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) [ 70.186116][ T143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 70.196308][ T143] Workqueue: bond0 bond_mii_monitor [ 70.201652][ T143] RIP: 0010:__linkwatch_sync_dev+0x1f0/0x200 [ 70.207786][ T143] Code: 15 50 d3 86 e8 71 1d 26 fd c6 05 9f fb 87 02 01 90 48 c7 c7 54 1b 5a 86 48 c7 c6 55 04 46 86 ba 38 00 00 00 e8 51 49 d6 fc 90 <0f> 0b 90 90 e9 d6 fe ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 [ 70.227886][ T143] RSP: 0018:ffffc90000eb3b70 EFLAGS: 00010246 [ 70.228841][ T5855] FAULT_INJECTION: forcing a failure. [ 70.228841][ T5855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.234004][ T143] RAX: 77eeb3097e6d6f00 RBX: ffff888118bb3000 RCX: ffff888101490000 [ 70.234021][ T143] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 70.234048][ T143] RBP: 0000000000000000 R08: 0001c90000eb39ef R09: 0000000000000000 [ 70.234063][ T143] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000000 [ 70.234077][ T143] R13: ffffffff85922c70 R14: ffffffff85922c70 R15: 0000000000000000 [ 70.247121][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: syz.3.598 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) [ 70.247157][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 70.247174][ T5855] Call Trace: [ 70.247182][ T5855] [ 70.247194][ T5855] __dump_stack+0x1d/0x30 [ 70.247290][ T5855] dump_stack_lvl+0xe8/0x140 [ 70.247316][ T5855] dump_stack+0x15/0x1b [ 70.247338][ T5855] should_fail_ex+0x265/0x280 [ 70.247379][ T5855] should_fail+0xb/0x20 [ 70.247464][ T5855] should_fail_usercopy+0x1a/0x20 [ 70.247488][ T5855] _copy_from_iter+0xcf/0xdd0 [ 70.247574][ T5855] ? __build_skb_around+0x1a0/0x200 [ 70.247643][ T5855] ? __alloc_skb+0x223/0x320 [ 70.247692][ T5855] netlink_sendmsg+0x471/0x6b0 [ 70.247781][ T5855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.247863][ T5855] __sock_sendmsg+0x142/0x180 [ 70.247897][ T5855] ____sys_sendmsg+0x31e/0x4e0 [ 70.247926][ T5855] ___sys_sendmsg+0x17b/0x1d0 [ 70.248043][ T5855] __x64_sys_sendmsg+0xd4/0x160 [ 70.248111][ T5855] x64_sys_call+0x2999/0x2fb0 [ 70.248139][ T5855] do_syscall_64+0xd0/0x1a0 [ 70.248166][ T5855] ? clear_bhb_loop+0x25/0x80 [ 70.248261][ T5855] ? clear_bhb_loop+0x25/0x80 [ 70.248289][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.248316][ T5855] RIP: 0033:0x7f3303d1e969 [ 70.248336][ T5855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.248424][ T5855] RSP: 002b:00007f3302387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.248479][ T5855] RAX: ffffffffffffffda RBX: 00007f3303f45fa0 RCX: 00007f3303d1e969 [ 70.248495][ T5855] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000006 [ 70.248511][ T5855] RBP: 00007f3302387090 R08: 0000000000000000 R09: 0000000000000000 [ 70.248526][ T5855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.248541][ T5855] R13: 0000000000000000 R14: 00007f3303f45fa0 R15: 00007ffdc2af21e8 [ 70.248567][ T5855] [ 70.406797][ T5713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.412581][ T143] FS: 0000000000000000(0000) GS:ffff8882aef50000(0000) knlGS:0000000000000000 [ 70.412606][ T143] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.510971][ T143] CR2: 0000000000000000 CR3: 000000010c638000 CR4: 00000000003506f0 [ 70.519000][ T143] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.527154][ T143] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.535185][ T143] Call Trace: [ 70.538525][ T143] [ 70.541481][ T143] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 70.547336][ T143] ethtool_op_get_link+0x15/0x50 [ 70.552327][ T143] bond_check_dev_link+0x292/0x430 [ 70.557525][ T143] bond_mii_monitor+0x2da/0x1770 [ 70.562586][ T143] ? __rtnl_unlock+0x95/0xb0 [ 70.567317][ T143] ? netdev_run_todo+0x7cc/0x820 [ 70.572374][ T143] ? ndisc_send_ns+0x78/0xe0 [ 70.577093][ T143] ? try_to_wake_up+0x212/0x630 [ 70.581996][ T143] process_scheduled_works+0x4cb/0x9d0 [ 70.587610][ T143] worker_thread+0x582/0x770 [ 70.592323][ T143] kthread+0x486/0x510 [ 70.596487][ T143] ? finish_task_switch+0xad/0x2b0 [ 70.601750][ T143] ? __pfx_worker_thread+0x10/0x10 [ 70.607085][ T143] ? __pfx_kthread+0x10/0x10 [ 70.611716][ T143] ret_from_fork+0x4b/0x60 [ 70.616217][ T143] ? __pfx_kthread+0x10/0x10 [ 70.620913][ T143] ret_from_fork_asm+0x1a/0x30 [ 70.625767][ T143] [ 70.628811][ T143] ---[ end trace 0000000000000000 ]--- [ 70.629004][ T5713] veth0_vlan: entered promiscuous mode [ 70.643692][ T5713] veth1_vlan: entered promiscuous mode [ 70.666853][ T5713] veth0_macvtap: entered promiscuous mode [ 70.677832][ T5713] veth1_macvtap: entered promiscuous mode [ 70.689363][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.699954][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.710011][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.713594][ T5897] loop6: detected capacity change from 0 to 512 [ 70.720608][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.737185][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.747880][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.757840][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.768476][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.780075][ T5713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.788439][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.799038][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.808953][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.819584][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.829510][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.840158][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.850056][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.860516][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.873942][ T5897] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 70.877682][ T5713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.892555][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.607'. [ 70.909720][ T5897] EXT4-fs (loop6): 1 truncate cleaned up [ 70.916128][ T5897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.927425][ T5713] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.937483][ T5713] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.946352][ T5713] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.955109][ T5713] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.973639][ T5887] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 71.035099][ T5887] EXT4-fs (loop6): Remounting filesystem read-only [ 71.041660][ T5887] EXT4-fs warning (device loop6): ext4_evict_inode:279: xattr delete (err -30) [ 71.075269][ T5911] FAULT_INJECTION: forcing a failure. [ 71.075269][ T5911] name failslab, interval 1, probability 0, space 0, times 0 [ 71.088000][ T5911] CPU: 1 UID: 0 PID: 5911 Comm: syz.7.610 Tainted: G W 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) [ 71.088107][ T5911] Tainted: [W]=WARN [ 71.088115][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 71.088185][ T5911] Call Trace: [ 71.088192][ T5911] [ 71.088200][ T5911] __dump_stack+0x1d/0x30 [ 71.088221][ T5911] dump_stack_lvl+0xe8/0x140 [ 71.088243][ T5911] dump_stack+0x15/0x1b [ 71.088259][ T5911] should_fail_ex+0x265/0x280 [ 71.088328][ T5911] ? audit_log_d_path+0x8d/0x150 [ 71.088364][ T5911] should_failslab+0x8c/0xb0 [ 71.088397][ T5911] __kmalloc_cache_noprof+0x4c/0x320 [ 71.088441][ T5911] audit_log_d_path+0x8d/0x150 [ 71.088470][ T5911] audit_log_d_path_exe+0x42/0x70 [ 71.088501][ T5911] audit_log_task+0x1e9/0x250 [ 71.088529][ T5911] audit_seccomp+0x61/0x100 [ 71.088611][ T5911] ? __seccomp_filter+0x68c/0x10d0 [ 71.088630][ T5911] __seccomp_filter+0x69d/0x10d0 [ 71.088714][ T5911] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 71.088738][ T5911] ? vfs_write+0x75e/0x8d0 [ 71.088768][ T5911] ? __rcu_read_unlock+0x4f/0x70 [ 71.088795][ T5911] ? __fget_files+0x184/0x1c0 [ 71.088864][ T5911] __secure_computing+0x82/0x150 [ 71.088883][ T5911] syscall_trace_enter+0xcf/0x1e0 [ 71.088908][ T5911] do_syscall_64+0xaa/0x1a0 [ 71.088989][ T5911] ? clear_bhb_loop+0x25/0x80 [ 71.089014][ T5911] ? clear_bhb_loop+0x25/0x80 [ 71.089042][ T5911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.089133][ T5911] RIP: 0033:0x7f5dce69e969 [ 71.089152][ T5911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.089174][ T5911] RSP: 002b:00007f5dccd07038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 71.089197][ T5911] RAX: ffffffffffffffda RBX: 00007f5dce8c5fa0 RCX: 00007f5dce69e969 [ 71.089210][ T5911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 71.089221][ T5911] RBP: 00007f5dccd07090 R08: 0000000000000000 R09: 0000000000000000 [ 71.089232][ T5911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.089246][ T5911] R13: 0000000000000000 R14: 00007f5dce8c5fa0 R15: 00007ffc9cb84b98 [ 71.089294][ T5911] [ 71.327351][ T5913] loop8: detected capacity change from 0 to 512 [ 71.342460][ T5913] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 71.367227][ T5913] EXT4-fs (loop8): 1 truncate cleaned up [ 71.373446][ T5913] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.408786][ T4522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.418839][ T5713] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.433627][ T5921] netlink: 'syz.7.614': attribute type 1 has an invalid length. [ 71.459655][ T5918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5918 comm=syz.2.613 [ 71.468250][ T5921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.480696][ T5930] netlink: 'syz.6.616': attribute type 1 has an invalid length. [ 71.492666][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.7.614'. [ 71.515691][ T5930] loop6: detected capacity change from 0 to 512 [ 71.516331][ T5921] bond1 (unregistering): Released all slaves [ 71.522511][ T5930] EXT4-fs: Ignoring removed bh option [ 71.539733][ T5930] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 71.569088][ T5930] EXT4-fs (loop6): 1 truncate cleaned up [ 71.578843][ T5930] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.654050][ T4522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.706772][ T5946] loop6: detected capacity change from 0 to 512 [ 71.716723][ T5946] random: crng reseeded on system resumption [ 71.741417][ T5950] FAULT_INJECTION: forcing a failure. [ 71.741417][ T5950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.754743][ T5950] CPU: 0 UID: 0 PID: 5950 Comm: syz.2.624 Tainted: G W 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) [ 71.754875][ T5950] Tainted: [W]=WARN [ 71.754882][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 71.754894][ T5950] Call Trace: [ 71.754900][ T5950] [ 71.754908][ T5950] __dump_stack+0x1d/0x30 [ 71.754932][ T5950] dump_stack_lvl+0xe8/0x140 [ 71.754955][ T5950] dump_stack+0x15/0x1b [ 71.754976][ T5950] should_fail_ex+0x265/0x280 [ 71.755062][ T5950] should_fail+0xb/0x20 [ 71.755142][ T5950] should_fail_usercopy+0x1a/0x20 [ 71.755164][ T5950] _copy_to_user+0x20/0xa0 [ 71.755185][ T5950] simple_read_from_buffer+0xb5/0x130 [ 71.755259][ T5950] proc_fail_nth_read+0x100/0x140 [ 71.755291][ T5950] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.755316][ T5950] vfs_read+0x19d/0x6f0 [ 71.755426][ T5950] ? __rcu_read_unlock+0x4f/0x70 [ 71.755451][ T5950] ? __fget_files+0x184/0x1c0 [ 71.755508][ T5950] ksys_read+0xda/0x1a0 [ 71.755543][ T5950] __x64_sys_read+0x40/0x50 [ 71.755567][ T5950] x64_sys_call+0x2d77/0x2fb0 [ 71.755587][ T5950] do_syscall_64+0xd0/0x1a0 [ 71.755613][ T5950] ? clear_bhb_loop+0x25/0x80 [ 71.755676][ T5950] ? clear_bhb_loop+0x25/0x80 [ 71.755703][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.755727][ T5950] RIP: 0033:0x7fb38c20d37c [ 71.755742][ T5950] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 71.755827][ T5950] RSP: 002b:00007fb38a877030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 71.755849][ T5950] RAX: ffffffffffffffda RBX: 00007fb38c435fa0 RCX: 00007fb38c20d37c [ 71.755866][ T5950] RDX: 000000000000000f RSI: 00007fb38a8770a0 RDI: 0000000000000006 [ 71.755928][ T5950] RBP: 00007fb38a877090 R08: 0000000000000000 R09: 0000000000000000 [ 71.755939][ T5950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.755953][ T5950] R13: 0000000000000000 R14: 00007fb38c435fa0 R15: 00007fffe573a308 [ 71.755977][ T5950] [ 71.908761][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.8.623'. [ 71.991302][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 71.991319][ T29] audit: type=1400 audit(1746676870.503:1851): avc: denied { firmware_load } for pid=5948 comm="syz.8.623" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 72.094007][ T5964] loop3: detected capacity change from 0 to 512 [ 72.101063][ T5964] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.226642][ T5964] EXT4-fs (loop3): 1 truncate cleaned up [ 72.232836][ T5964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.252161][ T5974] loop8: detected capacity change from 0 to 512 [ 72.285294][ T5974] EXT4-fs: Ignoring removed bh option [ 72.291014][ T5974] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 72.312232][ T29] audit: type=1326 audit(1746676870.823:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3303d1e969 code=0x7ffc0000 [ 72.335807][ T29] audit: type=1326 audit(1746676870.823:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3303d1e969 code=0x7ffc0000 [ 72.359123][ T29] audit: type=1326 audit(1746676870.823:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3303d1e969 code=0x7ffc0000 [ 72.382556][ T29] audit: type=1326 audit(1746676870.823:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3303d1e969 code=0x7ffc0000 [ 72.405828][ T29] audit: type=1326 audit(1746676870.823:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3303d1e969 code=0x7ffc0000 [ 72.429170][ T29] audit: type=1326 audit(1746676870.823:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3303d1e969 code=0x7ffc0000 [ 72.452642][ T29] audit: type=1326 audit(1746676870.823:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3303d1e969 code=0x7ffc0000 [ 72.476031][ T29] audit: type=1326 audit(1746676870.823:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3303d1e969 code=0x7ffc0000 [ 72.499395][ T29] audit: type=1326 audit(1746676870.823:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.3.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3303d1e969 code=0x7ffc0000 [ 72.535360][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.554684][ T5974] EXT4-fs (loop8): 1 truncate cleaned up [ 72.560787][ T5974] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.661598][ T5713] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.680006][ T5980] netlink: 'syz.7.631': attribute type 1 has an invalid length. [ 72.737931][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.7.631'. [ 72.753050][ T5980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.819512][ T5983] bond1 (unregistering): Released all slaves [ 73.042300][ T5998] Cannot find del_set index 0 as target [ 73.139693][ T6012] loop2: detected capacity change from 0 to 512 [ 73.160904][ T6012] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.189755][ T6012] EXT4-fs (loop2): 1 truncate cleaned up [ 73.201538][ T6016] netlink: 'syz.7.645': attribute type 1 has an invalid length. [ 73.211013][ T6012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.254204][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.7.645'. [ 73.277363][ T6023] loop6: detected capacity change from 0 to 512 [ 73.277956][ T6016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.291805][ T6023] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 73.304606][ T6023] EXT4-fs (loop6): 1 truncate cleaned up [ 73.312515][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.334822][ T6023] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.355018][ T6021] bond1 (unregistering): Released all slaves [ 73.396896][ T6027] Invalid ELF header magic: != ELF [ 73.449706][ T4522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.493690][ T6027] netlink: 'syz.2.648': attribute type 4 has an invalid length. [ 73.536138][ T6039] loop3: detected capacity change from 0 to 512 [ 73.542000][ T6037] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.550548][ T6036] loop8: detected capacity change from 0 to 512 [ 73.558689][ T6036] EXT4-fs: Ignoring removed bh option [ 73.564995][ T6036] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 73.576648][ T6036] EXT4-fs (loop8): 1 truncate cleaned up [ 73.582797][ T6036] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.583536][ T6042] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 73.604112][ T6042] SELinux: failed to load policy [ 73.617662][ T5713] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.792763][ T6064] netlink: 'syz.8.660': attribute type 1 has an invalid length. [ 73.801010][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.8.660'. [ 73.813530][ T6064] bond0: (slave bond_slave_1): Releasing backup interface [ 74.606226][ T6078] loop2: detected capacity change from 0 to 512 [ 74.624907][ T6078] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.637849][ T6078] EXT4-fs (loop2): 1 truncate cleaned up [ 74.643985][ T6078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.691163][ T6078] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 74.706130][ T6078] EXT4-fs (loop2): Remounting filesystem read-only [ 74.718373][ T6078] EXT4-fs warning (device loop2): ext4_evict_inode:279: xattr delete (err -30) [ 74.825577][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.835576][ T6094] netlink: 28 bytes leftover after parsing attributes in process `syz.7.670'. [ 74.891162][ T6098] netlink: 'syz.6.672': attribute type 1 has an invalid length. [ 74.894529][ T6103] FAULT_INJECTION: forcing a failure. [ 74.894529][ T6103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.912221][ T6103] CPU: 0 UID: 0 PID: 6103 Comm: syz.7.674 Tainted: G W 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) [ 74.912254][ T6103] Tainted: [W]=WARN [ 74.912260][ T6103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 74.912275][ T6103] Call Trace: [ 74.912289][ T6103] [ 74.912298][ T6103] __dump_stack+0x1d/0x30 [ 74.912346][ T6103] dump_stack_lvl+0xe8/0x140 [ 74.912370][ T6103] dump_stack+0x15/0x1b [ 74.912390][ T6103] should_fail_ex+0x265/0x280 [ 74.912468][ T6103] should_fail+0xb/0x20 [ 74.912502][ T6103] should_fail_usercopy+0x1a/0x20 [ 74.912519][ T6103] _copy_from_user+0x1c/0xb0 [ 74.912539][ T6103] ___sys_sendmsg+0xc1/0x1d0 [ 74.912581][ T6103] __x64_sys_sendmsg+0xd4/0x160 [ 74.912629][ T6103] x64_sys_call+0x2999/0x2fb0 [ 74.912656][ T6103] do_syscall_64+0xd0/0x1a0 [ 74.912682][ T6103] ? clear_bhb_loop+0x25/0x80 [ 74.912702][ T6103] ? clear_bhb_loop+0x25/0x80 [ 74.912750][ T6103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.912789][ T6103] RIP: 0033:0x7f5dce69e969 [ 74.912808][ T6103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.912897][ T6103] RSP: 002b:00007f5dccd07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.912919][ T6103] RAX: ffffffffffffffda RBX: 00007f5dce8c5fa0 RCX: 00007f5dce69e969 [ 74.912935][ T6103] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 74.912950][ T6103] RBP: 00007f5dccd07090 R08: 0000000000000000 R09: 0000000000000000 [ 74.912966][ T6103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.912981][ T6103] R13: 0000000000000000 R14: 00007f5dce8c5fa0 R15: 00007ffc9cb84b98 [ 74.913013][ T6103] [ 74.940249][ T6098] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 75.018260][ T3390] hid-generic 0000:381061:0000.0001: item fetching failed at offset 0/1 [ 75.019793][ T6098] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 75.040329][ T6107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.047884][ T6098] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 75.121170][ T3390] hid-generic 0000:381061:0000.0001: probe with driver hid-generic failed with error -22 [ 75.124657][ T6098] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 75.136562][ T6107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.144467][ T6098] bond3: (slave geneve2): making interface the new active one [ 75.167490][ T6098] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 75.176750][ T6109] loop6: detected capacity change from 0 to 512 [ 75.183280][ T6109] EXT4-fs: Ignoring removed bh option [ 75.195999][ T6109] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 75.241665][ T6109] EXT4-fs (loop6): 1 truncate cleaned up [ 75.249427][ T6109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.292862][ T4522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.365177][ T6130] netlink: 'syz.3.685': attribute type 1 has an invalid length. [ 75.388664][ T6130] 8021q: adding VLAN 0 to HW filter on device bond4 [ 75.399798][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 75.411363][ T6130] bond4 (unregistering): Released all slaves [ 75.495800][ T6145] loop3: detected capacity change from 0 to 512 [ 75.502830][ T6145] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.514941][ T6145] EXT4-fs (loop3): 1 truncate cleaned up [ 75.521152][ T6145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.551574][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.566763][ T6147] loop2: detected capacity change from 0 to 512 [ 75.573900][ T6147] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.578514][ T6149] netlink: 'syz.3.690': attribute type 1 has an invalid length. [ 75.584094][ T6147] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 75.601587][ T6147] EXT4-fs (loop2): group descriptors corrupted! [ 75.611638][ T6149] loop3: detected capacity change from 0 to 512 [ 75.618575][ T6149] EXT4-fs: Ignoring removed bh option [ 75.624470][ T6149] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 75.634194][ T6149] EXT4-fs (loop3): 1 truncate cleaned up [ 75.640330][ T6149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.664532][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.821373][ T6165] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.869687][ T6167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.878284][ T6167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.895341][ T6165] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.987327][ T6165] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.058624][ T6165] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.169489][ T6165] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.193450][ T6172] netlink: 'syz.7.698': attribute type 1 has an invalid length. [ 76.205651][ T6165] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.222065][ T6172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.245294][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.7.698'. [ 76.257197][ T6165] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.278203][ T6165] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.301136][ T6176] bond1 (unregistering): Released all slaves [ 76.442125][ T6181] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 76.450464][ T6181] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 76.458773][ T6181] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 76.467115][ T6181] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 76.488132][ T6181] bond1: (slave geneve2): making interface the new active one [ 76.498758][ T6181] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 76.526898][ T6181] loop7: detected capacity change from 0 to 512 [ 76.533436][ T6181] EXT4-fs: Ignoring removed bh option [ 76.547986][ T6181] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 76.566026][ T6181] EXT4-fs (loop7): 1 truncate cleaned up [ 76.581045][ T6187] loop2: detected capacity change from 0 to 512 [ 76.582662][ T6181] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.603475][ T6187] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.634460][ T6187] EXT4-fs (loop2): 1 truncate cleaned up [ 76.642056][ T6187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.660989][ T6194] netlink: 100 bytes leftover after parsing attributes in process `syz.6.705'. [ 76.673339][ T6192] loop3: detected capacity change from 0 to 512 [ 76.681324][ T4703] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.701889][ T6192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 76.716750][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.725899][ T6192] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.728525][ T6198] loop7: detected capacity change from 0 to 512 [ 76.794929][ T6198] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 76.808073][ T6198] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.819407][ T6192] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #19: comm syz.3.704: corrupted inode contents [ 76.835717][ T6198] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.706: Failed to acquire dquot type 0 [ 76.844961][ T6192] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #19: comm syz.3.704: mark_inode_dirty error [ 76.866924][ T6192] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #19: comm syz.3.704: corrupted inode contents [ 76.880776][ T6192] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.704: mark_inode_dirty error [ 76.893580][ T6192] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.704: mark inode dirty (error -117) [ 76.906883][ T6192] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117) [ 76.913773][ T6198] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #19: comm syz.7.706: corrupted inode contents [ 76.928050][ T6198] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #19: comm syz.7.706: mark_inode_dirty error [ 76.939574][ T6198] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #19: comm syz.7.706: corrupted inode contents [ 76.952028][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 76.952913][ T6198] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #19: comm syz.7.706: mark_inode_dirty error [ 76.973567][ T6198] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #19: comm syz.7.706: mark inode dirty (error -117) [ 76.986633][ T6198] EXT4-fs warning (device loop7): ext4_evict_inode:279: xattr delete (err -117) [ 77.008609][ T4703] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 77.021794][ T6217] validate_nla: 1 callbacks suppressed [ 77.021824][ T6217] netlink: 'syz.3.711': attribute type 1 has an invalid length. [ 77.040658][ T6217] 8021q: adding VLAN 0 to HW filter on device bond5 [ 77.049913][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.711'. [ 77.084912][ T6217] bond5 (unregistering): Released all slaves [ 77.150776][ T6229] netlink: 'syz.6.716': attribute type 1 has an invalid length. [ 77.172835][ T6232] loop3: detected capacity change from 0 to 512 [ 77.180627][ T6232] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.205687][ T6232] EXT4-fs (loop3): 1 truncate cleaned up [ 77.213000][ T6229] loop6: detected capacity change from 0 to 512 [ 77.220985][ T6232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.235310][ T6229] EXT4-fs: Ignoring removed bh option [ 77.241052][ T6229] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 77.271894][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.282987][ T6229] EXT4-fs (loop6): 1 truncate cleaned up [ 77.289344][ T6229] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.316501][ T4522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.336290][ T6238] netlink: 100 bytes leftover after parsing attributes in process `syz.3.718'. [ 77.369283][ T6240] loop6: detected capacity change from 0 to 512 [ 77.380640][ T6240] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 77.403462][ T6240] EXT4-fs (loop6): 1 truncate cleaned up [ 77.420970][ T6240] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.457243][ T6249] SELinux: Context system_u:object_r:devlog_t:s0 is not valid (left unmapped). [ 77.466913][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 77.466956][ T29] audit: type=1400 audit(1746676875.983:2022): avc: denied { relabelto } for pid=6248 comm="syz.3.723" name="file0" dev="tmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:devlog_t:s0" [ 77.499660][ T29] audit: type=1400 audit(1746676875.983:2023): avc: denied { associate } for pid=6248 comm="syz.3.723" name="file0" dev="tmpfs" ino=757 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:devlog_t:s0" [ 77.541315][ T29] audit: type=1400 audit(1746676876.043:2024): avc: denied { read write } for pid=6248 comm="syz.3.723" name="file0" dev="tmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:devlog_t:s0" [ 77.567901][ T29] audit: type=1400 audit(1746676876.043:2025): avc: denied { ioctl open } for pid=6248 comm="syz.3.723" path="/139/file0" dev="tmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:devlog_t:s0" [ 77.596247][ T4522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.597003][ T29] audit: type=1400 audit(1746676876.053:2026): avc: denied { unlink } for pid=3314 comm="syz-executor" name="file0" dev="tmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:devlog_t:s0" [ 77.717201][ T6260] netlink: 'syz.8.729': attribute type 1 has an invalid length. [ 77.748054][ T6264] loop6: detected capacity change from 0 to 512 [ 77.754564][ T6262] loop2: detected capacity change from 0 to 512 [ 77.759120][ T6264] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 77.773162][ T6264] EXT4-fs (loop6): 1 truncate cleaned up [ 77.779165][ T6262] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.780700][ T6264] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.822490][ T6270] FAULT_INJECTION: forcing a failure. [ 77.822490][ T6270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.835774][ T6270] CPU: 0 UID: 0 PID: 6270 Comm: syz.3.731 Tainted: G W 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) [ 77.835896][ T6270] Tainted: [W]=WARN [ 77.835904][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 77.835919][ T6270] Call Trace: [ 77.835928][ T6270] [ 77.835938][ T6270] __dump_stack+0x1d/0x30 [ 77.835992][ T6270] dump_stack_lvl+0xe8/0x140 [ 77.836010][ T6270] dump_stack+0x15/0x1b [ 77.836030][ T6270] should_fail_ex+0x265/0x280 [ 77.836071][ T6270] should_fail+0xb/0x20 [ 77.836106][ T6270] should_fail_usercopy+0x1a/0x20 [ 77.836141][ T6270] _copy_from_user+0x1c/0xb0 [ 77.836161][ T6270] ___sys_sendmsg+0xc1/0x1d0 [ 77.836199][ T6270] __x64_sys_sendmsg+0xd4/0x160 [ 77.836229][ T6270] x64_sys_call+0x2999/0x2fb0 [ 77.836279][ T6270] do_syscall_64+0xd0/0x1a0 [ 77.836307][ T6270] ? clear_bhb_loop+0x25/0x80 [ 77.836330][ T6270] ? clear_bhb_loop+0x25/0x80 [ 77.836357][ T6270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.836382][ T6270] RIP: 0033:0x7f3303d1e969 [ 77.836401][ T6270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.836447][ T6270] RSP: 002b:00007f3302366038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.836464][ T6270] RAX: ffffffffffffffda RBX: 00007f3303f46080 RCX: 00007f3303d1e969 [ 77.836475][ T6270] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 77.836486][ T6270] RBP: 00007f3302366090 R08: 0000000000000000 R09: 0000000000000000 [ 77.836519][ T6270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.836534][ T6270] R13: 0000000000000001 R14: 00007f3303f46080 R15: 00007ffdc2af21e8 [ 77.836558][ T6270] [ 77.836752][ T6262] EXT4-fs (loop2): 1 truncate cleaned up [ 77.855442][ T6260] loop8: detected capacity change from 0 to 512 [ 77.934696][ T6262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.970450][ T6260] EXT4-fs: Ignoring removed bh option [ 78.043347][ T6260] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 78.046791][ T4522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.068789][ T6260] EXT4-fs (loop8): 1 truncate cleaned up [ 78.082410][ T6260] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.146055][ T6282] loop7: detected capacity change from 0 to 128 [ 78.161653][ T5713] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.258082][ T29] audit: type=1326 audit(1746676876.773:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6287 comm="syz.8.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77aa04e969 code=0x7ffc0000 [ 78.281527][ T29] audit: type=1326 audit(1746676876.773:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6287 comm="syz.8.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77aa04e969 code=0x7ffc0000 [ 78.310465][ T29] audit: type=1326 audit(1746676876.793:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6287 comm="syz.8.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77aa04e969 code=0x7ffc0000 [ 78.316153][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.334020][ T29] audit: type=1326 audit(1746676876.793:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6287 comm="syz.8.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77aa04e969 code=0x7ffc0000 [ 78.366456][ T29] audit: type=1326 audit(1746676876.793:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6287 comm="syz.8.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77aa04e969 code=0x7ffc0000 [ 78.419518][ T6296] net_ratelimit: 11 callbacks suppressed [ 78.419538][ T6296] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 78.454824][ T6298] loop8: detected capacity change from 0 to 512 [ 78.462495][ T6299] IPv6: NLM_F_CREATE should be specified when creating new route [ 78.465440][ T6298] random: crng reseeded on system resumption [ 78.784459][ T6310] loop8: detected capacity change from 0 to 164 [ 78.791308][ T6310] iso9660: Unknown parameter 'ÿÿÿÿ ' [ 78.995252][ T5769] bio_check_eod: 77 callbacks suppressed [ 78.995270][ T5769] kworker/u8:60: attempt to access beyond end of device [ 78.995270][ T5769] loop7: rw=1, sector=145, nr_sectors = 8 limit=128 [ 79.014818][ T5769] kworker/u8:60: attempt to access beyond end of device [ 79.014818][ T5769] loop7: rw=1, sector=161, nr_sectors = 8 limit=128 [ 79.028799][ T5769] kworker/u8:60: attempt to access beyond end of device [ 79.028799][ T5769] loop7: rw=1, sector=177, nr_sectors = 8 limit=128 [ 79.043017][ T5769] kworker/u8:60: attempt to access beyond end of device [ 79.043017][ T5769] loop7: rw=1, sector=193, nr_sectors = 8 limit=128 [ 79.057022][ T5769] kworker/u8:60: attempt to access beyond end of device [ 79.057022][ T5769] loop7: rw=1, sector=209, nr_sectors = 8 limit=128 [ 79.072672][ T5769] kworker/u8:60: attempt to access beyond end of device [ 79.072672][ T5769] loop7: rw=1, sector=225, nr_sectors = 8 limit=128 [ 79.087654][ T5769] kworker/u8:60: attempt to access beyond end of device [ 79.087654][ T5769] loop7: rw=1, sector=241, nr_sectors = 8 limit=128 [ 79.101544][ T5769] kworker/u8:60: attempt to access beyond end of device [ 79.101544][ T5769] loop7: rw=1, sector=257, nr_sectors = 8 limit=128 [ 79.115321][ T5769] kworker/u8:60: attempt to access beyond end of device [ 79.115321][ T5769] loop7: rw=1, sector=273, nr_sectors = 8 limit=128 [ 79.129035][ T5769] kworker/u8:60: attempt to access beyond end of device [ 79.129035][ T5769] loop7: rw=1, sector=289, nr_sectors = 8 limit=128 [ 79.157872][ T6312] loop7: detected capacity change from 0 to 512 [ 79.166604][ T6312] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.746: iget: bad extended attribute block 1 [ 79.179369][ T6312] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.746: couldn't read orphan inode 15 (err -117) [ 79.191857][ T6312] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.210689][ T6312] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 79.263646][ T6316] netlink: 'syz.6.747': attribute type 1 has an invalid length. [ 79.285622][ T4703] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.326820][ T6316] loop6: detected capacity change from 0 to 512 [ 79.333462][ T6316] EXT4-fs: Ignoring removed bh option [ 79.351747][ T6316] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 79.365061][ T6316] EXT4-fs (loop6): 1 truncate cleaned up [ 79.371218][ T6316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.458594][ T4522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.499662][ T6328] netlink: 132 bytes leftover after parsing attributes in process `syz.6.752'. [ 79.521794][ T6332] loop7: detected capacity change from 0 to 512 [ 79.557255][ T6332] random: crng reseeded on system resumption [ 79.635805][ T36] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 79.643589][ T36] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 79.663889][ T36] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 79.671627][ T36] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 79.679399][ T36] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 79.687097][ T36] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 79.694925][ T36] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 79.697773][ T6346] loop8: detected capacity change from 0 to 512 [ 79.702759][ T36] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 79.710837][ T6346] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 79.716676][ T36] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 79.732647][ T36] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 79.740364][ T36] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 79.748057][ T36] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 79.755806][ T36] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 79.763476][ T36] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 79.771166][ T36] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 79.778854][ T36] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 79.789854][ T36] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 79.834447][ T6353] loop8: detected capacity change from 0 to 512 [ 79.874225][ T6353] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.762: iget: bad extended attribute block 1 [ 79.894770][ T6361] loop3: detected capacity change from 0 to 512 [ 79.905052][ T6353] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.762: couldn't read orphan inode 15 (err -117) [ 79.919984][ T6353] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.936378][ T6353] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 79.953424][ T6361] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.967201][ T6361] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 80.004452][ T6361] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 28 [ 80.016793][ T6361] EXT4-fs (loop3): This should not happen!! Data will be lost [ 80.016793][ T6361] [ 80.026716][ T6361] EXT4-fs (loop3): Total free blocks count 0 [ 80.032932][ T6361] EXT4-fs (loop3): Free/Dirty block details [ 80.038932][ T6361] EXT4-fs (loop3): free_blocks=65280 [ 80.044293][ T6361] EXT4-fs (loop3): dirty_blocks=3 [ 80.049331][ T6361] EXT4-fs (loop3): Block reservation details [ 80.055397][ T6361] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 80.264893][ T3567] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 80.272659][ T3567] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 80.286498][ T6386] loop3: detected capacity change from 0 to 164 [ 80.293107][ T6386] iso9660: Unknown parameter 'ÿÿÿÿ ' [ 80.301149][ T3567] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 80.308870][ T3567] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 80.316608][ T3567] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 80.324360][ T3567] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 80.332135][ T3567] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 80.340076][ T3567] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 80.347817][ T3567] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 80.355524][ T3567] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 80.363213][ T3567] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 80.370885][ T3567] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 80.378572][ T3567] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 80.386390][ T3567] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 80.394138][ T3567] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 80.401799][ T3567] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 80.505767][ T3567] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 80.662388][ T6405] netlink: 'syz.7.780': attribute type 1 has an invalid length. [ 80.719055][ T6414] loop7: detected capacity change from 0 to 512 [ 80.725816][ T6414] EXT4-fs: Ignoring removed bh option [ 80.756431][ T6414] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 80.770221][ T6414] EXT4-fs (loop7): 1 truncate cleaned up [ 80.783025][ T6422] loop6: detected capacity change from 0 to 512 [ 80.805124][ T6422] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 80.813490][ T6422] EXT4-fs (loop6): orphan cleanup on readonly fs [ 80.820321][ T6422] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.785: invalid indirect mapped block 256 (level 2) [ 80.834964][ T6422] EXT4-fs (loop6): 2 truncates cleaned up [ 80.861177][ T3567] IPVS: starting estimator thread 0... [ 80.868080][ T6428] loop6: detected capacity change from 0 to 512 [ 80.877898][ T6428] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 80.890198][ T6428] EXT4-fs (loop6): 1 truncate cleaned up [ 80.958876][ T6434] bond6: entered promiscuous mode [ 80.964065][ T6434] bond6: entered allmulticast mode [ 80.969717][ T6434] 8021q: adding VLAN 0 to HW filter on device bond6 [ 80.975089][ T6426] IPVS: using max 2064 ests per chain, 103200 per kthread [ 80.990646][ T6434] bond6 (unregistering): Released all slaves [ 81.031597][ T6442] loop8: detected capacity change from 0 to 512 [ 81.040052][ T6442] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.793: iget: bad extended attribute block 1 [ 81.052843][ T6442] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.793: couldn't read orphan inode 15 (err -117) [ 81.069366][ T6442] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 81.143348][ T6450] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 81.196479][ T6455] siw: device registration error -23 [ 81.323015][ T6473] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 81.323015][ T6473] The task syz.3.798 (6473) triggered the difference, watch for misbehavior. [ 81.402274][ T6476] netlink: 132 bytes leftover after parsing attributes in process `syz.8.807'. [ 81.525342][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.8.813'. [ 81.570539][ T6493] loop7: detected capacity change from 0 to 512 [ 81.579695][ T6493] random: crng reseeded on system resumption [ 81.728740][ T6505] loop2: detected capacity change from 0 to 164 [ 81.921001][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.826'. [ 82.094559][ T6534] FAULT_INJECTION: forcing a failure. [ 82.094559][ T6534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.107769][ T6534] CPU: 1 UID: 0 PID: 6534 Comm: syz.6.831 Tainted: G W 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) [ 82.107843][ T6534] Tainted: [W]=WARN [ 82.107883][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 82.107898][ T6534] Call Trace: [ 82.107905][ T6534] [ 82.107915][ T6534] __dump_stack+0x1d/0x30 [ 82.107950][ T6534] dump_stack_lvl+0xe8/0x140 [ 82.107980][ T6534] dump_stack+0x15/0x1b [ 82.108003][ T6534] should_fail_ex+0x265/0x280 [ 82.108121][ T6534] should_fail+0xb/0x20 [ 82.108156][ T6534] should_fail_usercopy+0x1a/0x20 [ 82.108174][ T6534] _copy_from_user+0x1c/0xb0 [ 82.108194][ T6534] ___sys_sendmsg+0xc1/0x1d0 [ 82.108264][ T6534] __x64_sys_sendmsg+0xd4/0x160 [ 82.108389][ T6534] x64_sys_call+0x2999/0x2fb0 [ 82.108467][ T6534] do_syscall_64+0xd0/0x1a0 [ 82.108488][ T6534] ? clear_bhb_loop+0x25/0x80 [ 82.108509][ T6534] ? clear_bhb_loop+0x25/0x80 [ 82.108589][ T6534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.108609][ T6534] RIP: 0033:0x7f967298e969 [ 82.108630][ T6534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.108647][ T6534] RSP: 002b:00007f9670ff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.108701][ T6534] RAX: ffffffffffffffda RBX: 00007f9672bb5fa0 RCX: 00007f967298e969 [ 82.108716][ T6534] RDX: 0000000004008800 RSI: 0000200000000840 RDI: 0000000000000003 [ 82.108732][ T6534] RBP: 00007f9670ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.108747][ T6534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.108761][ T6534] R13: 0000000000000000 R14: 00007f9672bb5fa0 R15: 00007ffd3bcec478 [ 82.108862][ T6534] [ 82.329845][ T6544] loop3: detected capacity change from 0 to 512 [ 82.344511][ T6544] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.357658][ T6544] EXT4-fs (loop3): 1 truncate cleaned up [ 82.375124][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.835'. [ 82.424305][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.7.838'. [ 82.550218][ T6569] FAULT_INJECTION: forcing a failure. [ 82.550218][ T6569] name failslab, interval 1, probability 0, space 0, times 0 [ 82.563213][ T6569] CPU: 0 UID: 0 PID: 6569 Comm: syz.8.843 Tainted: G W 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) [ 82.563256][ T6569] Tainted: [W]=WARN [ 82.563262][ T6569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 82.563274][ T6569] Call Trace: [ 82.563280][ T6569] [ 82.563288][ T6569] __dump_stack+0x1d/0x30 [ 82.563334][ T6569] dump_stack_lvl+0xe8/0x140 [ 82.563355][ T6569] dump_stack+0x15/0x1b [ 82.563415][ T6569] should_fail_ex+0x265/0x280 [ 82.563466][ T6569] should_failslab+0x8c/0xb0 [ 82.563503][ T6569] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 82.563607][ T6569] ? alloc_inode+0x9a/0x170 [ 82.563641][ T6569] alloc_inode+0x9a/0x170 [ 82.563671][ T6569] alloc_anon_inode+0x1e/0x170 [ 82.563746][ T6569] aio_setup_ring+0x91/0x740 [ 82.563783][ T6569] ioctx_alloc+0x2c4/0x4e0 [ 82.563809][ T6569] ? fput+0x8f/0xc0 [ 82.563826][ T6569] __se_sys_io_setup+0x6b/0x1b0 [ 82.563848][ T6569] __x64_sys_io_setup+0x31/0x40 [ 82.563910][ T6569] x64_sys_call+0x2f0e/0x2fb0 [ 82.563933][ T6569] do_syscall_64+0xd0/0x1a0 [ 82.563960][ T6569] ? clear_bhb_loop+0x25/0x80 [ 82.564029][ T6569] ? clear_bhb_loop+0x25/0x80 [ 82.564049][ T6569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.564075][ T6569] RIP: 0033:0x7f77aa04e969 [ 82.564094][ T6569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.564135][ T6569] RSP: 002b:00007f77a86b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 82.564152][ T6569] RAX: ffffffffffffffda RBX: 00007f77aa275fa0 RCX: 00007f77aa04e969 [ 82.564164][ T6569] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 82.564180][ T6569] RBP: 00007f77a86b7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.564254][ T6569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.564269][ T6569] R13: 0000000000000000 R14: 00007f77aa275fa0 R15: 00007ffe062437b8 [ 82.564294][ T6569] [ 82.812021][ T6572] loop7: detected capacity change from 0 to 512 [ 82.836087][ T6572] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 82.861280][ T6577] netlink: 100 bytes leftover after parsing attributes in process `syz.2.846'. [ 82.938572][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 82.938586][ T29] audit: type=1400 audit(1746676881.453:2327): avc: denied { getopt } for pid=6574 comm="syz.3.847" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.968284][ T6572] EXT4-fs (loop7): 1 truncate cleaned up [ 82.981650][ T6583] netlink: 48 bytes leftover after parsing attributes in process `syz.3.847'. [ 83.071105][ T6588] ipvlan2: entered promiscuous mode [ 83.102874][ T6588] bridge0: port 4(ipvlan2) entered blocking state [ 83.109496][ T6588] bridge0: port 4(ipvlan2) entered disabled state [ 83.136769][ T6588] ipvlan2: entered allmulticast mode [ 83.142122][ T6588] bridge0: entered allmulticast mode [ 83.165833][ T6588] ipvlan2: left allmulticast mode [ 83.170929][ T6588] bridge0: left allmulticast mode [ 83.206696][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.8.850'. [ 83.304625][ T6611] netlink: 100 bytes leftover after parsing attributes in process `syz.6.858'. [ 83.359998][ T6620] loop6: detected capacity change from 0 to 128 [ 83.371472][ T6621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6621 comm=syz.7.864 [ 83.397145][ T6625] binfmt_misc: register: failed to install interpreter file ./file2 [ 83.410754][ T29] audit: type=1400 audit(1746676881.923:2328): avc: denied { prog_load } for pid=6626 comm="syz.2.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.420913][ T6625] hsr0: entered promiscuous mode [ 83.430678][ T29] audit: type=1400 audit(1746676881.923:2329): avc: denied { bpf } for pid=6626 comm="syz.2.866" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.456938][ T29] audit: type=1400 audit(1746676881.923:2330): avc: denied { open } for pid=6626 comm="syz.2.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 83.476310][ T29] audit: type=1400 audit(1746676881.923:2331): avc: denied { perfmon } for pid=6626 comm="syz.2.866" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.497225][ T29] audit: type=1400 audit(1746676881.923:2332): avc: denied { kernel } for pid=6626 comm="syz.2.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 83.516670][ T29] audit: type=1400 audit(1746676881.923:2333): avc: denied { create } for pid=6626 comm="syz.2.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.536676][ T29] audit: type=1400 audit(1746676881.933:2334): avc: denied { map_create } for pid=6626 comm="syz.2.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.556067][ T29] audit: type=1400 audit(1746676881.933:2335): avc: denied { map_read map_write } for pid=6626 comm="syz.2.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.575865][ T29] audit: type=1400 audit(1746676881.953:2336): avc: denied { mount } for pid=6618 comm="syz.6.863" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 83.601023][ T6634] loop3: detected capacity change from 0 to 512 [ 83.698898][ T6634] EXT4-fs (loop3): failed to initialize system zone (-117) [ 83.717440][ T6634] EXT4-fs (loop3): mount failed [ 83.850000][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.869'. [ 83.956657][ T6663] loop3: detected capacity change from 0 to 512 [ 83.968363][ T6663] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.876: iget: bad extended attribute block 1 [ 83.981940][ T6663] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.876: couldn't read orphan inode 15 (err -117) [ 84.002920][ T6663] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 84.135631][ T6672] SELinux: failed to load policy [ 84.176983][ T6675] loop3: detected capacity change from 0 to 512 [ 84.202661][ T6675] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.880: Failed to acquire dquot type 1 [ 84.216600][ T5761] bio_check_eod: 47 callbacks suppressed [ 84.216615][ T5761] kworker/u8:53: attempt to access beyond end of device [ 84.216615][ T5761] loop6: rw=1, sector=145, nr_sectors = 8 limit=128 [ 84.239523][ T6675] EXT4-fs (loop3): 1 truncate cleaned up [ 84.245746][ T5761] kworker/u8:53: attempt to access beyond end of device [ 84.245746][ T5761] loop6: rw=1, sector=161, nr_sectors = 8 limit=128 [ 84.250850][ T6675] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.260124][ T5761] kworker/u8:53: attempt to access beyond end of device [ 84.260124][ T5761] loop6: rw=1, sector=177, nr_sectors = 8 limit=128 [ 84.284586][ T5761] kworker/u8:53: attempt to access beyond end of device [ 84.284586][ T5761] loop6: rw=1, sector=193, nr_sectors = 8 limit=128 [ 84.298753][ T5761] kworker/u8:53: attempt to access beyond end of device [ 84.298753][ T5761] loop6: rw=1, sector=209, nr_sectors = 8 limit=128 [ 84.312319][ T5761] kworker/u8:53: attempt to access beyond end of device [ 84.312319][ T5761] loop6: rw=1, sector=225, nr_sectors = 8 limit=128 [ 84.327981][ T5761] kworker/u8:53: attempt to access beyond end of device [ 84.327981][ T5761] loop6: rw=1, sector=241, nr_sectors = 8 limit=128 [ 84.341832][ T5761] kworker/u8:53: attempt to access beyond end of device [ 84.341832][ T5761] loop6: rw=1, sector=257, nr_sectors = 8 limit=128 [ 84.356019][ T5761] kworker/u8:53: attempt to access beyond end of device [ 84.356019][ T5761] loop6: rw=1, sector=273, nr_sectors = 8 limit=128 [ 84.369508][ T5761] kworker/u8:53: attempt to access beyond end of device [ 84.369508][ T5761] loop6: rw=1, sector=289, nr_sectors = 8 limit=128 [ 84.516986][ T6694] loop2: detected capacity change from 0 to 512 [ 84.550114][ T6696] loop6: detected capacity change from 0 to 512 [ 84.557550][ T6696] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 84.580255][ T6694] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.890: iget: bad extended attribute block 1 [ 84.599025][ T6696] EXT4-fs (loop6): 1 truncate cleaned up [ 84.605206][ T6694] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.890: couldn't read orphan inode 15 (err -117) [ 84.608037][ T6694] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 84.659722][ T6706] loop8: detected capacity change from 0 to 512 [ 84.667096][ T6706] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 84.696683][ T6706] EXT4-fs (loop8): 1 truncate cleaned up [ 84.717090][ T6712] netlink: 'syz.2.895': attribute type 1 has an invalid length. [ 84.723246][ T6713] syz_tun: entered promiscuous mode [ 84.730412][ T6713] vlan2: entered promiscuous mode [ 84.861214][ T6726] loop7: detected capacity change from 0 to 512 [ 84.881854][ T6726] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.902: Failed to acquire dquot type 1 [ 84.933201][ T6726] EXT4-fs (loop7): 1 truncate cleaned up [ 84.971720][ T6726] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.100767][ T6754] loop7: detected capacity change from 0 to 512 [ 85.109427][ T6754] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 85.122748][ T6754] EXT4-fs (loop7): 1 truncate cleaned up [ 85.157091][ T6759] binfmt_misc: register: failed to install interpreter file ./file2 [ 85.207031][ T6764] loop3: detected capacity change from 0 to 512 [ 85.224984][ T6764] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.254131][ T6764] EXT4-fs (loop3): 1 truncate cleaned up [ 85.520353][ T6783] loop7: detected capacity change from 0 to 512 [ 85.540872][ T6783] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.920: iget: bad extended attribute block 1 [ 85.562678][ T6783] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.920: couldn't read orphan inode 15 (err -117) [ 85.580609][ T6783] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 85.778931][ T6807] loop2: detected capacity change from 0 to 512 [ 85.787760][ T6807] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.802950][ T6807] EXT4-fs (loop2): 1 truncate cleaned up [ 86.021632][ T6828] loop2: detected capacity change from 0 to 8192 [ 86.031863][ T6834] loop6: detected capacity change from 0 to 128 [ 86.114533][ T6828] loop2: p1 p2 < > p3 p4 < p5 > [ 86.119509][ T6828] loop2: partition table partially beyond EOD, truncated [ 86.126621][ T6828] loop2: p1 size 100663296 extends beyond EOD, truncated [ 86.135519][ T6828] loop2: p2 start 591104 is beyond EOD, truncated [ 86.142025][ T6828] loop2: p3 start 33572980 is beyond EOD, truncated [ 86.149472][ T6828] loop2: p5 size 100663296 extends beyond EOD, truncated [ 86.522205][ T6841] __nla_validate_parse: 3 callbacks suppressed [ 86.522221][ T6841] netlink: 100 bytes leftover after parsing attributes in process `syz.7.942'. [ 86.715946][ T6846] loop8: detected capacity change from 0 to 512 [ 86.726146][ T6846] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 86.756001][ T6846] EXT4-fs (loop8): 1 truncate cleaned up [ 87.055733][ T6879] FAULT_INJECTION: forcing a failure. [ 87.055733][ T6879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.069754][ T6879] CPU: 1 UID: 0 PID: 6879 Comm: syz.6.956 Tainted: G W 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) [ 87.069844][ T6879] Tainted: [W]=WARN [ 87.069853][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 87.069869][ T6879] Call Trace: [ 87.069877][ T6879] [ 87.069886][ T6879] __dump_stack+0x1d/0x30 [ 87.069911][ T6879] dump_stack_lvl+0xe8/0x140 [ 87.069930][ T6879] dump_stack+0x15/0x1b [ 87.069949][ T6879] should_fail_ex+0x265/0x280 [ 87.070061][ T6879] should_fail+0xb/0x20 [ 87.070094][ T6879] should_fail_usercopy+0x1a/0x20 [ 87.070117][ T6879] _copy_from_iter+0xcf/0xdd0 [ 87.070136][ T6879] ? __build_skb_around+0x1a0/0x200 [ 87.070188][ T6879] ? __alloc_skb+0x223/0x320 [ 87.070283][ T6879] pfkey_sendmsg+0x126/0x900 [ 87.070317][ T6879] ? avc_has_perm+0xd3/0x150 [ 87.070356][ T6879] ? selinux_socket_sendmsg+0x175/0x1b0 [ 87.070392][ T6879] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 87.070435][ T6879] __sock_sendmsg+0x142/0x180 [ 87.070540][ T6879] ____sys_sendmsg+0x31e/0x4e0 [ 87.070563][ T6879] ___sys_sendmsg+0x17b/0x1d0 [ 87.070615][ T6879] __x64_sys_sendmsg+0xd4/0x160 [ 87.070639][ T6879] x64_sys_call+0x2999/0x2fb0 [ 87.070666][ T6879] do_syscall_64+0xd0/0x1a0 [ 87.070687][ T6879] ? clear_bhb_loop+0x25/0x80 [ 87.070710][ T6879] ? clear_bhb_loop+0x25/0x80 [ 87.070738][ T6879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.070765][ T6879] RIP: 0033:0x7f967298e969 [ 87.070784][ T6879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.070827][ T6879] RSP: 002b:00007f9670ff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.070845][ T6879] RAX: ffffffffffffffda RBX: 00007f9672bb5fa0 RCX: 00007f967298e969 [ 87.070857][ T6879] RDX: 0000000000000040 RSI: 00002000000007c0 RDI: 0000000000000006 [ 87.070921][ T6879] RBP: 00007f9670ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.070936][ T6879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.070967][ T6879] R13: 0000000000000000 R14: 00007f9672bb5fa0 R15: 00007ffd3bcec478 [ 87.071055][ T6879] [ 88.006256][ T6913] netlink: 'syz.6.970': attribute type 1 has an invalid length. [ 88.028825][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 88.028843][ T29] audit: type=1400 audit(1746676886.543:2529): avc: denied { setopt } for pid=6914 comm="syz.8.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 88.070847][ T6917] loop6: detected capacity change from 0 to 512 [ 88.088467][ T6917] EXT4-fs: Ignoring removed bh option [ 88.107441][ T6917] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 88.120541][ T6915] Cannot find add_set index 0 as target [ 88.126241][ T29] audit: type=1400 audit(1746676886.603:2530): avc: denied { mounton } for pid=6908 comm="syz.6.970" path="/123/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 88.149649][ T29] audit: type=1400 audit(1746676886.613:2531): avc: denied { shutdown } for pid=6914 comm="syz.8.972" laddr=fe80::1a lport=46516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.171590][ T29] audit: type=1400 audit(1746676886.623:2532): avc: denied { nlmsg_read } for pid=6914 comm="syz.8.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.254039][ T6917] EXT4-fs (loop6): 1 truncate cleaned up [ 88.269073][ T6921] tipc: Enabling of bearer rejected, failed to enable media [ 88.329916][ T29] audit: type=1400 audit(1746676886.843:2533): avc: denied { create } for pid=6928 comm="syz.3.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.365836][ T6936] loop6: detected capacity change from 0 to 512 [ 88.372912][ T6936] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 88.382729][ T29] audit: type=1400 audit(1746676886.893:2534): avc: denied { setopt } for pid=6928 comm="syz.3.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.408338][ T6936] EXT4-fs (loop6): 1 truncate cleaned up [ 88.431195][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.8.981'. [ 88.436363][ T6944] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 88.451311][ T29] audit: type=1400 audit(1746676886.963:2535): avc: denied { getopt } for pid=6928 comm="syz.3.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.528167][ T6947] loop8: detected capacity change from 0 to 512 [ 88.537617][ T29] audit: type=1400 audit(1746676887.013:2536): avc: denied { create } for pid=6946 comm="syz.8.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.557444][ T29] audit: type=1400 audit(1746676887.013:2537): avc: denied { setopt } for pid=6946 comm="syz.8.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.577680][ T29] audit: type=1400 audit(1746676887.013:2538): avc: denied { bind } for pid=6946 comm="syz.8.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.626566][ T6947] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.661550][ T6956] netlink: 'syz.6.987': attribute type 1 has an invalid length. [ 88.722841][ T6956] loop6: detected capacity change from 0 to 512 [ 88.754979][ T6956] EXT4-fs: Ignoring removed bh option [ 88.760774][ T6956] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 88.777345][ T6956] EXT4-fs (loop6): 1 truncate cleaned up [ 88.828419][ T6967] loop2: detected capacity change from 0 to 512 [ 88.859451][ T6967] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.912544][ T6976] loop8: detected capacity change from 0 to 512 [ 88.927779][ T6967] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 88.956042][ T6976] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 88.966900][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.6.993'. [ 88.969433][ T6967] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 28 [ 88.988819][ T6967] EXT4-fs (loop2): This should not happen!! Data will be lost [ 88.988819][ T6967] [ 88.998605][ T6967] EXT4-fs (loop2): Total free blocks count 0 [ 89.005293][ T6967] EXT4-fs (loop2): Free/Dirty block details [ 89.011201][ T6967] EXT4-fs (loop2): free_blocks=65280 [ 89.016611][ T6967] EXT4-fs (loop2): dirty_blocks=3 [ 89.021794][ T6967] EXT4-fs (loop2): Block reservation details [ 89.027932][ T6967] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 89.229067][ T6976] EXT4-fs (loop8): 1 truncate cleaned up [ 89.490280][ T6997] loop2: detected capacity change from 0 to 512 [ 89.538174][ T6997] ext4 filesystem being mounted at /209/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.659993][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1006'. [ 89.785393][ T7029] loop3: detected capacity change from 0 to 512 [ 89.917858][ T7029] random: crng reseeded on system resumption [ 90.115793][ T7036] netlink: 'syz.8.1014': attribute type 1 has an invalid length. [ 90.137017][ T7036] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.145554][ T7036] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.153925][ T7036] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.162274][ T7036] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.197001][ T7042] loop8: detected capacity change from 0 to 512 [ 90.203730][ T7042] EXT4-fs: Ignoring removed bh option [ 90.212041][ T7036] bond1: (slave geneve2): making interface the new active one [ 90.222980][ T7036] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 90.240985][ T7042] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 90.263474][ T7042] EXT4-fs (loop8): 1 truncate cleaned up [ 90.445074][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1021'. [ 90.559903][ T7063] loop8: detected capacity change from 0 to 512 [ 90.576705][ T7063] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1025: iget: bad extended attribute block 1 [ 90.590374][ T7065] FAULT_INJECTION: forcing a failure. [ 90.590374][ T7065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.603895][ T7065] CPU: 0 UID: 0 PID: 7065 Comm: syz.7.1023 Tainted: G W 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) [ 90.603950][ T7065] Tainted: [W]=WARN [ 90.604004][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 90.604031][ T7065] Call Trace: [ 90.604038][ T7065] [ 90.604046][ T7065] __dump_stack+0x1d/0x30 [ 90.604067][ T7065] dump_stack_lvl+0xe8/0x140 [ 90.604091][ T7065] dump_stack+0x15/0x1b [ 90.604112][ T7065] should_fail_ex+0x265/0x280 [ 90.604181][ T7065] should_fail+0xb/0x20 [ 90.604208][ T7065] should_fail_usercopy+0x1a/0x20 [ 90.604225][ T7065] _copy_from_user+0x1c/0xb0 [ 90.604252][ T7065] ___sys_sendmsg+0xc1/0x1d0 [ 90.604300][ T7065] __x64_sys_sendmsg+0xd4/0x160 [ 90.604392][ T7065] x64_sys_call+0x2999/0x2fb0 [ 90.604421][ T7065] do_syscall_64+0xd0/0x1a0 [ 90.604449][ T7065] ? clear_bhb_loop+0x25/0x80 [ 90.604525][ T7065] ? clear_bhb_loop+0x25/0x80 [ 90.604553][ T7065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.604579][ T7065] RIP: 0033:0x7f5dce69e969 [ 90.604599][ T7065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.604620][ T7065] RSP: 002b:00007f5dccce6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.604642][ T7065] RAX: ffffffffffffffda RBX: 00007f5dce8c6080 RCX: 00007f5dce69e969 [ 90.604709][ T7065] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 90.604724][ T7065] RBP: 00007f5dccce6090 R08: 0000000000000000 R09: 0000000000000000 [ 90.604740][ T7065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.604755][ T7065] R13: 0000000000000001 R14: 00007f5dce8c6080 R15: 00007ffc9cb84b98 [ 90.604775][ T7065] [ 90.824948][ T7063] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1025: couldn't read orphan inode 15 (err -117) [ 90.860471][ T7063] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 90.889160][ T7070] loop2: detected capacity change from 0 to 512 [ 90.913365][ T7070] random: crng reseeded on system resumption [ 90.981335][ T7076] loop6: detected capacity change from 0 to 8192 [ 91.031689][ T7083] FAULT_INJECTION: forcing a failure. [ 91.031689][ T7083] name failslab, interval 1, probability 0, space 0, times 0 [ 91.044407][ T7083] CPU: 1 UID: 0 PID: 7083 Comm: syz.3.1033 Tainted: G W 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) [ 91.044466][ T7083] Tainted: [W]=WARN [ 91.044472][ T7083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 91.044484][ T7083] Call Trace: [ 91.044491][ T7083] [ 91.044498][ T7083] __dump_stack+0x1d/0x30 [ 91.044521][ T7083] dump_stack_lvl+0xe8/0x140 [ 91.044547][ T7083] dump_stack+0x15/0x1b [ 91.044646][ T7083] should_fail_ex+0x265/0x280 [ 91.044689][ T7083] should_failslab+0x8c/0xb0 [ 91.044721][ T7083] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 91.044742][ T7083] ? sidtab_sid2str_get+0xa0/0x130 [ 91.044879][ T7083] kmemdup_noprof+0x2b/0x70 [ 91.044898][ T7083] sidtab_sid2str_get+0xa0/0x130 [ 91.044966][ T7083] security_sid_to_context_core+0x1eb/0x2e0 [ 91.045003][ T7083] security_sid_to_context+0x27/0x40 [ 91.045037][ T7083] avc_audit_post_callback+0x9d/0x520 [ 91.045095][ T7083] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 91.045146][ T7083] common_lsm_audit+0x1b8/0x230 [ 91.045178][ T7083] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 91.045291][ T7083] slow_avc_audit+0x104/0x140 [ 91.045406][ T7083] avc_has_extended_perms+0x6d0/0x940 [ 91.045462][ T7083] ioctl_has_perm+0x289/0x2e0 [ 91.045496][ T7083] selinux_file_ioctl+0x2e3/0x370 [ 91.045561][ T7083] ? __fget_files+0x184/0x1c0 [ 91.045597][ T7083] security_file_ioctl+0x48/0x90 [ 91.045695][ T7083] __se_sys_ioctl+0x47/0x140 [ 91.045750][ T7083] __x64_sys_ioctl+0x43/0x50 [ 91.045776][ T7083] x64_sys_call+0x19a8/0x2fb0 [ 91.045803][ T7083] do_syscall_64+0xd0/0x1a0 [ 91.045831][ T7083] ? clear_bhb_loop+0x25/0x80 [ 91.045875][ T7083] ? clear_bhb_loop+0x25/0x80 [ 91.045903][ T7083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.045929][ T7083] RIP: 0033:0x7f3303d1e969 [ 91.045949][ T7083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.045992][ T7083] RSP: 002b:00007f3302387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.046015][ T7083] RAX: ffffffffffffffda RBX: 00007f3303f45fa0 RCX: 00007f3303d1e969 [ 91.046031][ T7083] RDX: 0000200000000100 RSI: 00000000800448d2 RDI: 0000000000000007 [ 91.046046][ T7083] RBP: 00007f3302387090 R08: 0000000000000000 R09: 0000000000000000 [ 91.046061][ T7083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.046076][ T7083] R13: 0000000000000000 R14: 00007f3303f45fa0 R15: 00007ffdc2af21e8 [ 91.046099][ T7083] [ 91.334629][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1034'. [ 91.437410][ T7095] Cannot find add_set index 0 as target [ 91.453364][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1038'. [ 91.456734][ T7099] loop7: detected capacity change from 0 to 512 [ 91.462514][ T7097] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1038'. [ 91.479461][ T7099] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 91.512343][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1038'. [ 91.542812][ T7097] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1038'. [ 91.552564][ T7097] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1038'. [ 91.634229][ T7099] EXT4-fs (loop7): 1 truncate cleaned up [ 91.758618][ T7084] ================================================================== [ 91.766755][ T7084] BUG: KCSAN: data-race in mark_buffer_dirty_inode / mark_buffer_dirty_inode [ 91.775544][ T7084] [ 91.777887][ T7084] write to 0xffff8881050322c8 of 8 bytes by task 7090 on cpu 1: [ 91.785557][ T7084] mark_buffer_dirty_inode+0x18c/0x1c0 [ 91.791182][ T7084] fat_mirror_bhs+0x234/0x320 [ 91.795906][ T7084] fat_alloc_clusters+0x98b/0xa80 [ 91.800967][ T7084] fat_get_block+0x258/0x5e0 [ 91.805614][ T7084] __block_write_begin_int+0x419/0xf70 [ 91.811202][ T7084] cont_write_begin+0x5a3/0x8e0 [ 91.816109][ T7084] fat_write_begin+0x4f/0xe0 [ 91.820742][ T7084] cont_write_begin+0x198/0x8e0 [ 91.825628][ T7084] fat_write_begin+0x4f/0xe0 [ 91.830232][ T7084] generic_perform_write+0x181/0x490 [ 91.835548][ T7084] __generic_file_write_iter+0x9e/0x120 [ 91.841215][ T7084] generic_file_write_iter+0x8d/0x2f0 [ 91.846628][ T7084] vfs_write+0x49d/0x8d0 [ 91.850897][ T7084] __x64_sys_pwrite64+0xfd/0x150 [ 91.855873][ T7084] x64_sys_call+0xe45/0x2fb0 [ 91.860494][ T7084] do_syscall_64+0xd0/0x1a0 [ 91.865184][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.871091][ T7084] [ 91.873418][ T7084] read to 0xffff8881050322c8 of 8 bytes by task 7084 on cpu 0: [ 91.880974][ T7084] mark_buffer_dirty_inode+0x95/0x1c0 [ 91.886557][ T7084] fat_mirror_bhs+0x234/0x320 [ 91.891263][ T7084] fat_alloc_clusters+0x98b/0xa80 [ 91.896310][ T7084] fat_get_block+0x258/0x5e0 [ 91.900939][ T7084] __block_write_begin_int+0x419/0xf70 [ 91.906413][ T7084] cont_write_begin+0x5a3/0x8e0 [ 91.911277][ T7084] fat_write_begin+0x4f/0xe0 [ 91.915878][ T7084] generic_perform_write+0x181/0x490 [ 91.921184][ T7084] __generic_file_write_iter+0x9e/0x120 [ 91.927012][ T7084] generic_file_write_iter+0x8d/0x2f0 [ 91.932403][ T7084] aio_write+0x2e2/0x410 [ 91.936662][ T7084] io_submit_one+0xac8/0x11b0 [ 91.941352][ T7084] __se_sys_io_submit+0xfb/0x280 [ 91.946301][ T7084] __x64_sys_io_submit+0x43/0x50 [ 91.956807][ T7084] x64_sys_call+0xfc4/0x2fb0 [ 91.961415][ T7084] do_syscall_64+0xd0/0x1a0 [ 91.965929][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.971855][ T7084] [ 91.974182][ T7084] value changed: 0x0000000000000000 -> 0xffff888106fd9408 [ 91.981378][ T7084] [ 91.983704][ T7084] Reported by Kernel Concurrency Sanitizer on: [ 91.989865][ T7084] CPU: 0 UID: 0 PID: 7084 Comm: syz.6.1030 Tainted: G W 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(voluntary) [ 92.003857][ T7084] Tainted: [W]=WARN [ 92.007661][ T7084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 92.017863][ T7084] ==================================================================