last executing test programs: 4m15.274317067s ago: executing program 2 (id=139): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000240)="6e37cf", 0x3}, {&(0x7f0000000340)="5fdbd6", 0x3}], 0x2}, 0x0) 4m15.241439267s ago: executing program 2 (id=141): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x160801, 0x480000f, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x4}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3d0, 0x100, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'veth1_vlan\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@arp={@multicast2, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@random="065dcf9efb68"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'vlan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x160801, 0x480000f, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x4}) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3d0, 0x100, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'veth1_vlan\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@arp={@multicast2, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@random="065dcf9efb68"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'vlan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) (async) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000200)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) (async) io_uring_enter(r1, 0x2d3e, 0x0, 0x4, 0x0, 0x0) (async) 4m14.991680891s ago: executing program 2 (id=142): mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff31) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) syz_clone(0x948000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 4m14.783920284s ago: executing program 2 (id=144): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000018000000080000004000000040000000", @ANYRES32=0x1, @ANYBLOB="0000e116a6d5b6ad78583caeba00"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000900)="8dbc7771e9fd67467a76560b759cf90387eeecfedf2ae455717d2216b01ab0874b1bb28a97ecfec4d51465a9553a9ed8ef54fab5999eefe878c95e450a1caac0b8a6b79c142e95605b6e3cb6d58e61f3e15e11a6f66670c642d68f0d92974bd438e8505b33f14dc1ad4f575da1e5689a1a9bf6cda9366e43ac21efaad6f8144a555ac5298dbd2001106c434b16a078410e6d07b5383ee461404f221eba28ee0873f1064dc926c7e1a73c46f4392e3e4b51eafd65f93050a9e8aa6c6114ba9b", &(0x7f00000009c0)=""/92}, 0x20) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x100}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@noload}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@errors_remount}, {@noinit_itable}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000012c0), 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, 0x0, &(0x7f0000000080)) 4m14.603024937s ago: executing program 2 (id=148): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r3, @ANYBLOB="2400308005000200"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) io_setup(0x3ff, &(0x7f0000000200)=0x0) io_submit(r8, 0x1, &(0x7f0000000240)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r7, &(0x7f00000002c0)="0b47544bc226964248", 0x9}]) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0xefff, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0100001000030426bd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="4003000000090000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x12c}}, 0x0) 4m14.261794942s ago: executing program 2 (id=157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) statx(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0x400, &(0x7f0000000280)) write(r3, &(0x7f00000000c0)="8f2a", 0x2) 4m14.208277273s ago: executing program 32 (id=157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) statx(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0x400, &(0x7f0000000280)) write(r3, &(0x7f00000000c0)="8f2a", 0x2) 4m8.943452314s ago: executing program 0 (id=220): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00'], 0x28}}, 0x2000c050) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000a91a8a32371e2bbf3a6b069b670232c94a6fce3a7ba80e89bdb7c444f68d5f8f195dbe4f319864c3d554b024b03088", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0)=[{{0x0, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}], 0x10) bind$can_raw(r6, &(0x7f0000000240), 0x8) close(r6) sendmsg$tipc(r5, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) r7 = dup3(r3, r5, 0x0) write$UHID_DESTROY(r7, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r8, 0x225, 0x68020}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4m8.125439047s ago: executing program 0 (id=223): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x80000000000}, 0x18) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='stack\x00') pread64(r1, &(0x7f0000000140)=""/15, 0xf, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe2$9p(0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4e25}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sigaltstack(&(0x7f00000003c0)={&(0x7f0000001300)=""/4096, 0x80000003, 0x1000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r5}, 0x18) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c15f798700000000", @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0xc0d0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r9, 0x29, 0x3d, &(0x7f0000000000)={'security\x00'}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='cpu&\t\t') 4m7.950725089s ago: executing program 0 (id=225): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) unshare(0x40000000) 4m7.825456571s ago: executing program 0 (id=226): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x60) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40)) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000440)=@v3={0x3000000, [{0x40, 0x6}, {0x2e46, 0x3}], r4}, 0x18, 0x1) 4m6.977401024s ago: executing program 0 (id=234): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}, {{@in=@broadcast, 0x0, 0x32}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0xa, @in6=@mcast1, 0x0, 0x0, 0x2}]}]}, 0x17c}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}, {{@in=@broadcast, 0x0, 0x32}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0xa, @in6=@mcast1, 0x0, 0x0, 0x2}]}]}, 0x17c}}, 0x0) socketpair(0xb, 0x4, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100030000000000000003000000080002000300000008000200ff010000050006008f0000000500060044000000"], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4000) 4m6.534707621s ago: executing program 0 (id=237): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) write$selinux_access(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'gretap0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4, '\x00', r7, 0xffffffffffffffff, 0x4, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 4m6.511122531s ago: executing program 33 (id=237): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) write$selinux_access(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'gretap0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4, '\x00', r7, 0xffffffffffffffff, 0x4, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 3m41.501324926s ago: executing program 6 (id=546): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095", @ANYRESOCT=r0, @ANYRES8=0x0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000000)={0x2, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x4, 0x0, 0x101, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') read$msr(r6, &(0x7f0000000040)=""/59, 0xffb5) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x16, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000030000000100ffff0900010073797a30000000000900030073797a3100000000d4040000060a010400000000000000000100000008000b4000000000ac0404802c000180080001006c6f6700200002800900024073797a300000000008000340000000060800034000000002380401800c000100626974776973650028040280080003400000000808000240000000140800064000000002080006400000000064020580bb0001001d92704a203d5ecc985c4e4280e5378a36a2856959ffa601c237cc270251cf18420d11613ec98e629c7d84c655efcb2b5ecd71666675bf512cadfe09e4d05a4f60f60e007ca1cf70a5185f973cec0f1ab052acf1acf6a2df83dd88facc62c6e94a1b6368d6bda68abcaed2ee48c3d589bf2a814b728efb93401dfa1d1063200c10e56294dba0e7b780ce0f6090bd0de9f5e000c98c4b97cd985c91284c2bca23e4757407bb41fd8de797502a72e122032d4ef3160f9f7b00fd000100854e3cb6d05d310db3d528811da7f7450ebb2d62cddc6981343570b9f4ab17d75de9411dea482f508c0dce42c25c4778ebc56bb303f9f51c489eedffcb1490560ab26ab7507ec029cca3ddfe7c4f4f6d91db07cbc008636bc7bea7f96954d31da9d8a9ca043df7b409ca2864d56fc6b2a70fcc2f1a3579737bf47542dae337d5203869caff9ab95a317c25521ebf848fad8ceb87f4655ace0701dbe961e9dcaeffa37bfa2e9d127d61b8d6edc1437b46f54c061e1c9d68120ac8300e91d19c708aa9589c37de59a9f8df5546855e934599a2f31b6cb847347fc02231fec395b906e60300340d60ebe7a3f23e1aa6eec9e0150a9d16b3c25e590000002400028008000340fffffff8080003400000000908000340684dbc5808000180ffffffff6200010091de8d9ca3503f5a0a8259007bc5088ccfe97cfebb5ebb90e05d4e8a63fcbee6f14ab7eff7469cf243a6ef6e528b811dfd72af1e7e08de8fbdd4849367ea82016412fab2ccc0fb94fa63fac7fd0c6ea48c0e9ac7d1a30ecf3e70e44ed5ff00001c0002800800034080000000080003400000000308000180fffffffc080001400000000d600004804000028008000180fffffffb0d00020073797a3000000000080001802b30a3bc08000180000000000900020073797a31000000002900020073797a31000000001c0002800900020073797a31000000000900020073797a3200000000080002400000000a30010480380002800900020073797a3200000000080003400000000908000180fffffffc0800018000000007080003408000000108000340000000050b0001000bca99f460f4b0002800028008000180fffffffb0900020073797a3000000000080003400000000308000340000001ff04000100bc000100e27404a10a99dbcc4575917adc29373e2cc46e5e8f99d7a36b7c42c92713cce62084d863a11eb9c2e19fde212924e527db981a9be0c2c15f6a04a67e9e20f86e4bebd07665e2d01da200712427a5525403c1c75468f31b91a60def25f7757c9921d08b9a5b0bc6f8953efbd0416091bf2b30d9a37e789198313dd07b7b70cebff25c562434b67e9a6b70708dd84c86135ab9b0ffda2c4b2fb4a139220c101f4c0a3d58eb124346005c82dea6f0f36444b28300758475eb3d34000180090001006d65746100000000240002800800024000000002080003400000000d08000340000000090800034000000001100001800a0001006c696d69740000000900010073797a30"], 0x548}}, 0x0) 3m41.015193183s ago: executing program 6 (id=552): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpquota}, {@lazytime}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000a40)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x16, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x0, 0x4, 0x3, 0x8, 0x2, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x80000001}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x8001, 0xac, &(0x7f00000002c0)=""/172, 0x41100, 0x4, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xb8b, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000380)=[{0x6, 0x2, 0x5, 0x9}, {0x1, 0x4, 0x9, 0xc}, {0x4, 0x5, 0x10, 0xc}, {0x3, 0x2, 0x8, 0xa}], 0x10, 0x400, @void, @value}, 0x94) unshare(0x20000400) r5 = socket$inet_udp(0x2, 0x2, 0x0) fadvise64(r5, 0x80000000018, 0xffffffffffffffff, 0x5) 3m40.853046506s ago: executing program 6 (id=555): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000180a0500000000000000000002000000300003802c0003801400010077673200000000000000000000000000010076657468315f766972745f77696669000900020073797a30000000000900010073797a3000000000147273bfa400010000000000000000000309000acdd2a3fb84de4307af010faba64413d82c4867e14879c48c4b71bc8df09e462c"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x8008551d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10, 0x0, 0x100}, 0x18) ioctl$TCFLSH(r2, 0x5608, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x24060400) r11 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400002, 0x3a6}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r11, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r8}, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r14, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r14, 0x407, 0x7000000) 3m40.331624144s ago: executing program 6 (id=562): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$eJzs3U1vG1sZAODXzpeTm3uTW7oABLSUQkFVncRto6oLKCuEUCVElyC1IXGjKHYcxU5pQhfpf0CiEitY8gNYd8WeDYIdm7JA4iMCNZVYGM14kpo0bkKT2CF+Hmk0c+Y4fs+pNefYr+s5AfStyxGxFRHDEfEoIiay87lsi3utLXnc6+1n8zvbz+Zz0Ww++HsurU/ORdvfJD7KnrMQET/4TsSPc+/GrW9sLs9VKuW1VnF0qlFdnapvbN5Yqs4tlhfLK6XS7Mzs9J2bt0sn1tdL1eHs6Iuvfrf1jZ8mzRrPzrT34yS1uj60FycxGBHfO41gPTCQ9We41w3hg+Qj4kJEXEmv/4kYSF9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXDuxhj+Uqt3rj+uLa+stDKlU3GUP7xUqU8neUKJ2Mol5Rn0uO35dK+8s2I+DQifjYympaL87XKQi/f+ABAH/to3/z/r5HW/A8AnHOFXjcAAOg68z8A9B/zPwD0H/M/APQf8z8A9B/zPwD0n8Pm/wPu3wkA/P/6/v37ydbcye5/vfBkY3259uTGQrm+XKyuzxfna2urxcVabTG9Z0/1sOer1GqrM7di/enkN1frjan6xubDam19pfEwva/3w/JQV3oFALzPp5de/jH5eL91dzTdom0tB3M1nG/5XjcA6JmBXjcA6BmrfUH/OsZnfOkBOCcO+y8+hYgY3X+y2Ww2T69JwCm79jn5f+hXbfl/vwKCPiP/D/1L/h/6V7OZO+qa/3HUBwIAZ5scP9Dh+/8L2f7X2ZcDP1rY/4gXp9kqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONt21/8tZmuBj0c+XyxGfBwRkzGUe7xUKU9HxCcR8YeRoZGkPNPjNgMAx5X/Sy5b/+vaxNXx/bXDuTcj6T4ifvKLBz9/OtdorP0+Of+PvfONF9n5Ui/aDwAcZneeTvdtH+Rfbz+b39262Z6/fjsiCq34O9vDsbMXfzAG030hhiJi7J+5rNySa8tdHMfW84j47EH9z8V4mgNprXy6P34S++Ouxs//V/x8WtfaJ/8WnzmBtkC/eZmMP/cOuv7ycTndH3z9F9IR6viy8S95qvmddAx8G393/BvoMP5dPmqMW7/9buto9N265xGfH4zYjb3TNv7sxs91iH/1iPH/9IUvXelU1/xlxLU4OH57rKlGdXWqvrF5Y6k6t1heLK+USrMzs9N3bt4uTaU56qnOs8Hf7l7/pFNd0v+xDvELh/T/q0fs/6/+/eiHX35P/K9/5aD4+bj4nvjJnPi1I8afG/tNoVNdEn+hQ/8Pe/2vHzH+qz9vvrNsOADQO/WNzeW5SqW81s2D3TcSXQ3q4BwctBIeibPRnvaDb3Ur1nD8T3/VbH5QrE4jxklk3YCzYO+ij4g3vW4MAAAAAAAAAAAAAABwoG78YqnXfQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD8+k8AAAD//2CSzDE=") creat(&(0x7f0000000240)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x60) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40)) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000440)=@v3={0x3000000, [{0x40, 0x6}, {0x2e46, 0x3}], r4}, 0x18, 0x1) 3m39.354308449s ago: executing program 6 (id=584): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2200cd3, &(0x7f0000001180)=ANY=[], 0x1, 0xa0a, &(0x7f0000000100)="$eJzs3c1vW9eZB+DfpSRbUQLbSTyZjJHEtDN2lEQjS/LEHiOLGVuibWX0MZBkIMYs4kwsDwyrTRu3QBIUqAMUXTVogRZdtLugq64CZNNsiuzaXbvqokCRfyHoykALqLgkJVEWJUqOLCnO8wgk78d7z3nPvZf3gBTJE75aFg+umltcrN/uc/7Kr3cgY/awC2Off/Txh+XtgzvZl668Uvwm6U1STbqTPJ30jI7NTE92KOhWci3JZ0mRZH8aj5tyLcWP89jK/GcpflnWu659my2ZThb5Wtvt8w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPaiYnRsaGi42JfxqSuvVxuS6hqjYzPTRRYX165Z2qbh0/qo38WnHetNivKW3t6lob6fPryy+qkk1eN5pjH3TH1A8vTm/UefOvTqk92Vpe3Xy+ZL2b/5Ym+/9/6tNxcW5t95IInsfZdqU+Oz0+OT5y/VquOz09VzZ84Mnbp8cbZ6cXyiNnt1dq42WR2dqZ2fm56p9o++WB0+d+50tTZ4dfrK1KWxwYna0sKz/zYyNHSm+trg/9TOz8xOT516bXB29PL4xMT41KV6TLm6jDlbnoj/PT5Xnaudn6xWb9xcmD99T05d9bOrZUEZNNypJWXQSKegkaGRkeHhkZHhD5qjZy8vOPPKuVfODg11D90jayIe0EnL3vLI+od5+y/icJ8qjf4/mch4pnIlr2dfqm3+RjOWmUznb2fKzdaub1rq/0+cqm1Yb2v/3+zlu1tWHynvjue55mzvOv1/20x38u923sv7uZU3s5CFzOedXc9oZ/8upZapjGc20xnPZM7Xl1SbS6o5lzM5k6G8kcs5mtlUczHjmUgts7ma2cyllsn62TWTWs5nLtOZSTX9Gc2LqWY453Iup1NNLYO5mulcyVQuZSzn66XcyM36fj+9QY7LQcObCRrZIGhNZ77l/r98UuxoP8Ses+3XcLhfi83+f1/n0P7RnUgIAAAA2Hb/8vscOPzE7/6SFHm2/r78xfGJ2tBupwUAAABso/rH9Z4pH3rKqWdTeP0PAAAAD5ui/h27Iklfjjamlr4J5U0AAAAAeEjU////XIqjKwu8/gcAAICHTOff2O8YUQws/fxv9Xrj8XozojFX9F0cn6gNjk5PvDqck/VfGah/02BNaV1J0VP/+sFLOdaIOtbXeOxbKbGss7eMGh58dTgv5XizIf3Plw/P97eJHGlEvtCIfKE1siurIk+XkQDwsDu+QX+82f7/pQw0IgaO1Lv87iNt+uAhPSsA7BXHc7s51RzSrE3/3xyF57n1+v9/3+D1fxnxRG4cbXykYDBv5e0s5HoG0vzEwdF2pS6NRtD4GMJAh3cD+pofWfjj2UoG1rwf0Lvc1tbY+YxkoO07Ai3lFuldtbO6tnnnA8AuOb5hP7y5/n+gw+v/lT53/y61EgBotTyC/QOc2O02AgCr6aUBAAAAAAAAAAAAAAAAAAAAAAAAAABg+23qB/z/cDJZWJhPdmCwgOWJ3q1kuPFEJRvE/H1nmrMzE11Jdqv2/8yWtyqP8V7ZdSZWT+zyhQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAdUSRd7ZZXkv1JhpKc2vmsHpw7u53Adqne32bF3dzNuzmw3ekAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzdNX//v5LG46ONRemuJCeSXEvyv7ud43a6u9sJ7Jpv1O9bfv+/kvRksUh347Cn6Bkdm5meLA9/sb9c//lHH39Y3jqXvXZUhbKAsoZVg0s0a2hZ0rN6q8frW/WNzd++9Z23v1Udu1A/MS/MXZwYm7w0818rgU8VnzSGQKgWKwuX8v3eid/+pKXQfc3KPylb2t699V5MZbErY2vr/ed2W69T7ybcXJgfKVs4V3t97rvfvPluy6oncix5vj/pX13T/5e3dWo6du/+XK34ovhhcSA/z7X68S/3RrFYlIfoYL39j9y4uTA/+NbbC9eXc/r+qpwO5WiS60nv5nM6mmK9fOpnXaWnrHWoHlTeHe5Q3oZaShxeZ78+Xj9t+rbUhur6bajrsN+bGZ1um9FPv/1kTm75SJ/sUGNbxRfFn4vL+VN+0DL+R6U8/ifS9tnZpoh6ZMuZ0rpu1dOr0oist3ykdcUb95a57rNy2SMdI9isH+X/8h/Lx7/Scv1vHqvWs7Tl6r3N16OWGts/L5KtPy9+dXBNj7Ki3iMdvqdHal591tummefhRtQ6ef5TXk66j2zpivJyhyvKl3v+H2q/uPii+EXRn7/mjvF/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAva9IutotryQnkhxKcrCcryaL98bcuY/6Kn3F/aS5be4n56+eYt2GFndzN+/mwE5nBAAAAAAAAMCDcWHs848+/rC81f8f35V/rTTXVJPuJIeKn/WMjs1MT3YoqCe5tvQv/d6t5XCtvHtsZf6zcu7pDhvt7scHAOAr7R8BAAD//5C5bwI=") r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) setxattr$security_selinux(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), &(0x7f0000000bc0)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x40004) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x2000001, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) close_range(r2, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r7, &(0x7f0000000380)=ANY=[@ANYBLOB='system_u:object_r:ldconfig_exec_t:s0 /sbin/dhclient 0'], 0x49) 3m39.195408961s ago: executing program 6 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x28, r3, 0x301, 0x0, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x88d1}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x5c}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20020884}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r1, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x15}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x3f8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x1c, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) socket(0x40000000002, 0x3, 0x2) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x34, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r7, @ANYRES32], 0x64}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r11) sendmsg$ETHTOOL_MSG_DEBUG_SET(r11, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000001b00)={@mcast1={0xff, 0x0}, 0x10000, 0x0, 0x2, 0x8, 0xfff0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r14}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 3m39.194835011s ago: executing program 34 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x28, r3, 0x301, 0x0, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x88d1}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x5c}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20020884}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r1, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x15}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x3f8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x1c, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) socket(0x40000000002, 0x3, 0x2) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x34, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r7, @ANYRES32], 0x64}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r11) sendmsg$ETHTOOL_MSG_DEBUG_SET(r11, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000001b00)={@mcast1={0xff, 0x0}, 0x10000, 0x0, 0x2, 0x8, 0xfff0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r14}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 2m28.99738039s ago: executing program 4 (id=1770): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4884}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, r3}, 0xc) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="da4bd09419ddc646579a36e86123de43", 0x10) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) mq_timedreceive(r1, &(0x7f00000001c0)=""/162, 0xa2, 0x5de8, &(0x7f0000000280)={0x0, 0x3938700}) 2m28.885968902s ago: executing program 4 (id=1773): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="fffffeff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="180100000000004000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x1, 0xf0, &(0x7f00000007c0)=""/240, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {0x0, 0x20be}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x1}, {}, {}, {0x80000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) setsockopt(r2, 0x3, 0xfffffffb, &(0x7f00000000c0)="e42bbb097c67f7beb4e0c387a2573bd5f1a3ce0f9b464bb884189eed332a54a7d27884378310dcc4be62ea86c64ccb9d8e1e95f93510faf6b35993db10cd6935af6b16c32ecc843c4d4091e2e6e162e20b9ec8b5de4a1f65ca7e0ed25efee2715f54087a59a7ce8bc363086e244651689fd6bc3816f74b69d689c5135aff785b6c28c6570dc2eda31386cc70c99723cde7bc9b6cd31e4b61c405fa6090767ada6ee8047dba8f97aed2616fdf20e56cf046e5422a9f4e6631d1c4ed99", 0xbc) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x1) r3 = io_uring_setup(0x60fc, &(0x7f0000000840)={0x0, 0x2e69, 0x80, 0x0, 0x1ff}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/205, 0xcd}], 0x1) 2m28.780236823s ago: executing program 4 (id=1775): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f00000000c0)='./file0/../file0\x00', r3, r4) lchown(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x3, 0x6, 0x2, 0x47, @loopback, @private0, 0x1, 0x8, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}) 2m27.590850981s ago: executing program 35 (id=1806): r0 = socket(0x10, 0x2, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f00000000c0)='./file0/../file0\x00', r3, r4) lchown(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x3, 0x6, 0x2, 0x47, @loopback, @private0, 0x1, 0x8, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}) 2m23.051345091s ago: executing program 5 (id=1884): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4884}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m22.955212253s ago: executing program 5 (id=1886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x47, &(0x7f0000000300)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x1, 0x1, 0x3, 0x8, 0x0, @void}, "2216ad1c91"}}}}}}}, 0x0) 2m22.890100914s ago: executing program 5 (id=1888): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 2m22.772605096s ago: executing program 5 (id=1889): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x100000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x60) symlink(0x0, &(0x7f0000000340)='./file0\x00') lgetxattr(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)=@known='system.posix_acl_access\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40)) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000000}) 2m21.87664908s ago: executing program 5 (id=1898): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'bridge_slave_0\x00'}}, 0x1e) (async) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002075"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) (async) close(r2) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = socket(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x90}}, 0x20000000) (async) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r8) (async) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="2502000020800600"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r11, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fsetxattr$security_selinux(r12, &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x3) 2m21.287076138s ago: executing program 5 (id=1900): r0 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x4, 0x8}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="320349f0467329c59a6b3619d2e287f3f4b546264b427dc02a14bebdfd72da14eea75a5c8e7a10a128ea22f1bd681ebc2cf7d384a86b8f0458160396dea6809eda701b6541c3f3b6bc56d6fd609a3b41ae2279237fcf7ebb76f736036aa972d568adf0f68959e975e69b2292d0f259f070787bfa80c6e99c", 0x78}], 0x1, &(0x7f0000001340)=ANY=[], 0x58, 0x800}}, {{&(0x7f0000000b80)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000000c00), 0x0, &(0x7f0000000840)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000003c8f4e553b64a1dbe7d100000100ffed0200000094d2326083d60cf2aa7e227db86bc9de21f8bb4a9ec8a639b4cc97be6ffadb8fa427c0417c26c901ef8f7beddbc411088fdc6ba232ce98940c4e0cd7dd6ff89a2d51b852668975d3c7e407f321e82208a44c295539fba9213a3499b67f814c128aa82a5c970f3479de089693e25cd3459ff4de0684264ec15766269acc35003dcdff393484a73af81d684bf2b36cbbeff4", @ANYRES8, @ANYRES8, @ANYRES32=0x0, @ANYBLOB="c9610070627e4f665f533ce0a93ca8e27ef2a41d3dbd1afa5f0a01cc1bdc6d046100dc7051c141286427b57d55e87a22", @ANYRESOCT, @ANYRES32=r1, @ANYRES64, @ANYBLOB='\x00\x00'], 0x60, 0x20000000}}], 0x2, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r1, &(0x7f00000001c0)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xa8}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b1690bb8dc095ebae95baccdce177a97389ae7df65487e3996df64c35efa6e159bd2f2180", 0xfdef}], 0x1, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x2000000, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x16, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x0, 0x2}]}}}], 0x38}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@tcp6, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r4}, 0x18) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) 2m21.265331459s ago: executing program 36 (id=1900): r0 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x4, 0x8}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="320349f0467329c59a6b3619d2e287f3f4b546264b427dc02a14bebdfd72da14eea75a5c8e7a10a128ea22f1bd681ebc2cf7d384a86b8f0458160396dea6809eda701b6541c3f3b6bc56d6fd609a3b41ae2279237fcf7ebb76f736036aa972d568adf0f68959e975e69b2292d0f259f070787bfa80c6e99c", 0x78}], 0x1, &(0x7f0000001340)=ANY=[], 0x58, 0x800}}, {{&(0x7f0000000b80)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000000c00), 0x0, &(0x7f0000000840)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000003c8f4e553b64a1dbe7d100000100ffed0200000094d2326083d60cf2aa7e227db86bc9de21f8bb4a9ec8a639b4cc97be6ffadb8fa427c0417c26c901ef8f7beddbc411088fdc6ba232ce98940c4e0cd7dd6ff89a2d51b852668975d3c7e407f321e82208a44c295539fba9213a3499b67f814c128aa82a5c970f3479de089693e25cd3459ff4de0684264ec15766269acc35003dcdff393484a73af81d684bf2b36cbbeff4", @ANYRES8, @ANYRES8, @ANYRES32=0x0, @ANYBLOB="c9610070627e4f665f533ce0a93ca8e27ef2a41d3dbd1afa5f0a01cc1bdc6d046100dc7051c141286427b57d55e87a22", @ANYRESOCT, @ANYRES32=r1, @ANYRES64, @ANYBLOB='\x00\x00'], 0x60, 0x20000000}}], 0x2, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r1, &(0x7f00000001c0)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xa8}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b1690bb8dc095ebae95baccdce177a97389ae7df65487e3996df64c35efa6e159bd2f2180", 0xfdef}], 0x1, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x2000000, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x16, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x0, 0x2}]}}}], 0x38}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@tcp6, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r4}, 0x18) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) 4.344489803s ago: executing program 8 (id=4141): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], 0x0}, 0x20) 4.290176424s ago: executing program 8 (id=4142): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000b80)={0x0, &(0x7f0000000a00)}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000280)=[{{0x0, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x4}, {0x4, 0x0, 0x1, 0x1}}, {{0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x2, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000002040), 0x288}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2}, 0x38) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240048c4) 3.847785711s ago: executing program 1 (id=4154): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x20}, {0x20, 0x0, 0x0, 0xfffff00c}]}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0xfffffe03, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdc03, {0x0, 0x0, 0x0, r2, {0xc}, {0xfff3}}}, 0x24}}, 0x20040000) 3.647831754s ago: executing program 1 (id=4155): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r2) 3.544806566s ago: executing program 1 (id=4156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) 3.403772008s ago: executing program 8 (id=4158): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x2, 0xfe, 0x7fff0000}]}) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_delete(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) creat(&(0x7f0000000300)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r7, &(0x7f0000000000)='./file0\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 3.140732572s ago: executing program 8 (id=4160): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') acct(&(0x7f0000000140)='./file0\x00') mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0x5, 0xffffffffffffffc8, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000480)="0e", 0x1}], 0x1}}], 0x1, 0x2000c080) close_range(r2, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ustat(0xb, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='svcrdma_decode_rseg\x00', r4, 0x0, 0x6}, 0x18) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@local, @in6=@private1}}, {{@in6=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000080)=0xe8) 3.111851302s ago: executing program 3 (id=4161): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r1}, 0x18) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)=""/160, 0xa0}, {&(0x7f0000000080)=""/38, 0x26}], 0x2, &(0x7f0000000380)=""/63, 0x3f}, 0x2174eda0}], 0x1, 0x1, &(0x7f0000000580)={0x77359400}) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 3.078782583s ago: executing program 1 (id=4162): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x9) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@deltaction={0x14, 0x31, 0x100}, 0x14}}, 0x10) 3.013621684s ago: executing program 3 (id=4165): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x20}, {0x20, 0x0, 0x0, 0xfffff00c}]}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0xfffffe03, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdc03, {0x0, 0x0, 0x0, r2, {0xc}, {0xfff3}}}, 0x24}}, 0x20040000) 3.007153444s ago: executing program 1 (id=4167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) (fail_nth: 1) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f0000000240)={{{0x1, 0x1}}, 0x28, 0xfffffffc, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000050c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="8b33000000000000000005000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000085000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000813000001000000800000003b2e69333b9a7104d7d2696e0002000000000000775a2e5d8348cb8bbd8c5a", @ANYRES32=0x0, @ANYBLOB="03000100"/20, @ANYRES64=r6, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000001d3ad7340303695d6c653260dfbdd55900007b8af8ff00000000b7080000000000007b465e80718cc93af2a100000000000007010000f8ffffffbfa40000000000000704006235ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r12, 0x0, 0x200000000200}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) 2.999992024s ago: executing program 8 (id=4168): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000b80)={0x0, &(0x7f0000000a00)}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000280)=[{{0x0, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x4}, {0x4, 0x0, 0x1, 0x1}}, {{0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x2, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000002040), 0x288, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r4}, 0x38) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240048c4) 2.415383783s ago: executing program 3 (id=4170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x5) unshare(0xc040400) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) fcntl$notify(r2, 0x402, 0x14) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) fcntl$notify(r1, 0x402, 0x8000003d) creat(&(0x7f0000000000)='./file0\x00', 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r8, r8, 0x0, 0x40000f63c) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa2000000b703000008000008b704000000000000850095da3410df09dfb1dd28f541e8479d9a22e5959b4321e614a71100000000000078d8a8062ffd7dcceb9cdb82c94cff1f5d46eaf4e446"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x22020600) r9 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r9}) io_uring_enter(r9, 0x1, 0xfffffffe, 0x1, 0x0, 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000600)=ANY=[@ANYRESOCT=r4, @ANYRES32=r12, @ANYBLOB="0000000000000000b704000000000000f0ef2fdabab90f16f7a5e8bc928b9121a1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 2.158880527s ago: executing program 1 (id=4171): r0 = gettid() r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000f80)=@delchain={0xcec, 0x65, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0x3, 0xfff2}, {0xffff, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0xfffffddf}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_bpf={{0x8}, {0xc90, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xffff, 0xf8, 0x4c, 0x4}]}}, @TCA_BPF_POLICE={0xc68, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0xffffffffffffffff, 0x1, 0x3, 0x1, {0x8, 0x0, 0x3, 0x4, 0x5, 0x2}, {0xc, 0x3, 0x1, 0x4, 0x9, 0x3ff}, 0x3, 0x9, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1, 0x5, 0xfff, 0x1, 0x9, 0x80, 0x7, 0x94, 0x6, 0x1, 0x3, 0x4, 0x9, 0xc9, 0x0, 0x546, 0x4, 0x893, 0x8, 0x76ac, 0x0, 0x3, 0x3, 0xef45, 0x0, 0x4, 0xf0, 0x65c, 0x3, 0x5, 0xfffffffb, 0x8, 0x7, 0x3, 0x97, 0xe, 0x7, 0x7d9, 0xfffffffb, 0x4, 0x3, 0x2, 0x0, 0x2b, 0x1, 0x8, 0x7ff, 0xb, 0x9, 0x9f8, 0x8, 0xa, 0x7fffffff, 0xf3e, 0x80000001, 0x6, 0x7, 0xa, 0x6, 0x5, 0x5, 0x808000, 0x4, 0x3, 0x4, 0x8, 0x9, 0x0, 0x8, 0x27, 0x6df, 0x1, 0x7, 0xc734, 0x5817, 0x8001, 0xffffffff, 0x0, 0x3, 0x2e, 0xfffff023, 0x9, 0x0, 0x8, 0x8, 0x4, 0x10001, 0xfffffffc, 0xde38, 0x7, 0x400, 0x4, 0x0, 0x6, 0x5, 0x4, 0x3ff, 0x3a, 0x200, 0xc8, 0x1000, 0x0, 0x4, 0x2, 0x9, 0x2, 0x0, 0xffff, 0x5, 0x7, 0x4, 0x1, 0x101, 0xfff, 0x631, 0xfffffff8, 0x5, 0x6, 0x4, 0x7, 0x10, 0x0, 0x9, 0x80000001, 0x8, 0x401, 0xff, 0x6, 0x3, 0x90d, 0x3, 0x2, 0xfffffffb, 0x5, 0x5df, 0x7, 0x3, 0x3, 0x6, 0xe80, 0xfffffff5, 0x7ff, 0x8001, 0x3, 0x1, 0x6, 0xfffff001, 0xfffffff8, 0x25, 0x4, 0x2, 0x3, 0x3, 0x5, 0x5f, 0x200, 0x2, 0x5, 0x9, 0x3, 0x10, 0xe1, 0x1, 0x2, 0xf, 0x81, 0x8, 0x0, 0x1, 0x6, 0x7, 0x9ee, 0xfffffff7, 0xffff, 0x1, 0x4, 0x1, 0x6, 0x8001, 0x0, 0x9, 0x8, 0x8, 0x672, 0x6, 0x7fffffff, 0x38, 0x80000000, 0x6, 0x10000, 0x3, 0x92, 0x9, 0xfab, 0x7, 0x4, 0x4, 0x0, 0x8, 0x7, 0x8001, 0xfffffffa, 0x6, 0x2, 0x6, 0xfffeffff, 0x55e, 0x80000001, 0x81, 0x4, 0x7, 0xfffffffe, 0x4, 0x0, 0x3, 0x7, 0x7, 0x3, 0x0, 0x6, 0x2, 0x10, 0x8, 0x2, 0x200, 0x38a8, 0x100, 0xdde, 0x3, 0x8, 0x3, 0x2, 0x7f, 0x7, 0x0, 0x3, 0x922, 0x1, 0xa, 0x5, 0x26b00000, 0x9, 0xd4, 0x1, 0xa, 0xfffffff4, 0x0, 0x701, 0x81, 0x6, 0x8, 0x401, 0xb, 0xd9b0, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x4, 0x16a, 0x101, 0x7, 0x244d, 0x0, 0x5, 0x2, 0x8001, 0x0, 0x3ff, 0xfffffffb, 0xf71, 0x1, 0x3a3, 0xb11, 0x3, 0x8, 0x80000000, 0x6, 0x2b64, 0x9, 0xa, 0x5, 0x4, 0x9, 0xb6d4, 0x6, 0x3, 0xd, 0x3, 0x3, 0x2, 0x6f, 0x4, 0xffff, 0x10000, 0x8, 0x9, 0x2, 0x0, 0x5, 0xfffffffa, 0x80000000, 0x3, 0x7, 0x1, 0x400, 0x100, 0x7, 0xa5b5, 0x4, 0x7ff, 0x58, 0x2, 0x8, 0x1, 0x3, 0x2, 0x4, 0x5, 0xffffffff, 0xe, 0x0, 0xc, 0x7, 0x1000, 0x6c66, 0x4, 0x81, 0x3, 0x7, 0x1, 0x0, 0xb, 0x4, 0x100, 0xb, 0x0, 0x0, 0x6, 0x2, 0x7, 0x8, 0x9, 0x80000001, 0x1, 0x8, 0x9, 0x0, 0x80, 0x1, 0x7, 0x7, 0x3, 0x6, 0x8, 0x8, 0x3ff, 0x2, 0x7, 0x5, 0x3c24, 0x921, 0x3, 0x1, 0x7fffffff, 0x10000, 0x4723, 0xb, 0x0, 0x7f, 0x1, 0xb, 0x7fffffff, 0x9ec, 0x9, 0x0, 0x4, 0x1, 0x3, 0x5, 0x0, 0xbeb, 0xfffffd4d, 0x5, 0x7, 0x6, 0x2, 0xc, 0x1, 0x1, 0x3, 0x7, 0x6, 0x6, 0x6, 0x9, 0xa, 0x40, 0x5, 0x1, 0x1ff, 0x10001, 0x9, 0xff, 0x5, 0x3, 0x95d, 0x2, 0x4, 0x10000, 0x0, 0x9ee, 0x2d, 0x9a, 0xb, 0x1, 0xff, 0x9, 0x5cb2, 0x6, 0x4, 0x5, 0x6, 0x101, 0x80000001, 0x7, 0x6, 0x64b9, 0x40, 0x8, 0x8001, 0x81, 0x3d5, 0x8, 0x2, 0x8, 0x60e, 0x9, 0x1000, 0x110, 0x7, 0x7, 0x4, 0x1ff, 0x8, 0xb, 0x5, 0x8, 0x7fffffff, 0x100, 0x6, 0xfffffffd, 0xd, 0x1, 0x9, 0x9, 0x7, 0xf, 0x8, 0x6f51, 0x0, 0x0, 0x6, 0x8, 0x8, 0x6, 0x1, 0x6, 0x5a, 0x631, 0x101, 0x2, 0x10, 0x7, 0x7, 0x101, 0xfffffffd, 0x80, 0x2, 0x3, 0x101, 0x4, 0x9, 0x0, 0x1, 0x0, 0x8, 0x7, 0x3, 0x3, 0x8c07, 0x8, 0x6, 0x4, 0xfffffffa, 0x5, 0x6, 0x2, 0x0, 0x9, 0x9, 0x100, 0x401, 0xc5e2, 0xa86b, 0x94, 0x800, 0x39, 0x1, 0xfffffff3, 0x7f4d, 0x40, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xcb0}, @TCA_POLICE_RATE={0x404, 0x2, [0x10, 0xfffffffb, 0x4, 0x7fffffff, 0x0, 0x7fff, 0x4, 0x6d, 0x0, 0xa, 0x401, 0x4, 0x5b19, 0x7, 0xf7ad, 0x7, 0xffff, 0x3ff, 0x4, 0x3, 0x9, 0x1000, 0x40, 0x5, 0x48, 0x9, 0xff, 0x4, 0x7, 0xffffffff, 0x7, 0x1, 0x4, 0x0, 0x5, 0x9, 0x1ff, 0x117, 0x8, 0xfc, 0x0, 0x7, 0x7, 0x9, 0xae, 0x69, 0xffffffff, 0xc53, 0x0, 0xb8, 0x9, 0x600000, 0x7fffffff, 0x8, 0x10000, 0x4, 0xffff, 0x8, 0x81, 0x9, 0x2, 0x68446568, 0x400, 0x7ff, 0xf, 0x4, 0x2, 0x8, 0xff, 0x6, 0x5, 0xd, 0x9, 0x5, 0x1, 0x3fc, 0x3, 0x52f, 0x0, 0x0, 0x1c4, 0x180000, 0xd, 0x10000, 0x88e1, 0xffff085b, 0x7, 0x3, 0x4, 0x22, 0x100, 0x80000000, 0x7b8, 0x80000001, 0x5, 0x31e, 0xfffffff9, 0x31, 0x7, 0x80000001, 0x6, 0x7fff, 0x7fffffff, 0x800, 0x8, 0x1, 0x5, 0x6, 0x2, 0x4e2b, 0x7fff, 0xffffd4d3, 0x2, 0x2, 0x1, 0xf9, 0x3, 0xb16, 0x0, 0x8, 0x0, 0x1ff, 0x3, 0x0, 0x7, 0x5346, 0x7fffffff, 0x3ff, 0x8, 0xd, 0x400, 0x8, 0x3, 0x40, 0xdb, 0x1, 0x2, 0x8001, 0x2add, 0x6, 0x0, 0x2, 0x3, 0xcf5456bc, 0xec2, 0x2, 0x10000, 0x4, 0x4, 0x8, 0x80000001, 0x800, 0x7ff, 0x1, 0x8, 0x5, 0x5, 0xffff, 0x40, 0x3, 0x2, 0xfffffffb, 0x2, 0x8001, 0x4da7, 0x8, 0x5, 0x9, 0x9, 0xc, 0x81, 0xffffffff, 0x8, 0x3, 0x2, 0x5, 0x7, 0x2, 0x1, 0x7, 0x1, 0xaa3, 0x42ca, 0x7, 0x8001, 0x2, 0x2, 0x7, 0x4, 0x5, 0x1, 0x332a, 0x800, 0x6a, 0xc, 0xb, 0x9009, 0x0, 0x318, 0x7, 0x4, 0xfffffffa, 0x0, 0x5, 0xffffffff, 0xfff, 0x20000000, 0xc40, 0x6, 0xfffffffe, 0x5, 0x400, 0x1, 0xc, 0x10000, 0x5, 0x1, 0x2e6c000, 0x800, 0x6, 0xda, 0xd, 0x2f, 0x3, 0x4, 0x7, 0x4f9, 0x2, 0x6, 0x10000, 0xfffffff5, 0x7, 0xf, 0x8, 0x2, 0x6, 0x6f1, 0x7f, 0x0, 0x7, 0x8, 0x1000, 0x7, 0x2, 0xda1, 0x40, 0x1000, 0x4, 0x8, 0x5, 0x151525a6, 0x3, 0x1, 0x99c3, 0xb, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff6, 0xc}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xfc}}, @TCA_CHAIN={0x8, 0xb, 0x1000}]}, 0xcec}, 0x1, 0x0, 0x0, 0x4000800}, 0x40400) bpf$PROG_LOAD(0x5, 0x0, 0x0) tkill(r0, 0x13) 2.131951178s ago: executing program 8 (id=4172): r0 = gettid() r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000f80)=@delchain={0xce4, 0x65, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0x3, 0xfff2}, {0xffff, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0xfffffddf}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_bpf={{0x8}, {0xc90, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xffff, 0xf8, 0x4c, 0x4}]}}, @TCA_BPF_POLICE={0xc68, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0xffffffffffffffff, 0x1, 0x3, 0x1, {0x8, 0x0, 0x3, 0x4, 0x5, 0x2}, {0xc, 0x3, 0x1, 0x4, 0x9, 0x3ff}, 0x3, 0x9, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1, 0x5, 0xfff, 0x1, 0x9, 0x80, 0x7, 0x94, 0x6, 0x1, 0x3, 0x4, 0x9, 0xc9, 0x0, 0x546, 0x4, 0x893, 0x8, 0x76ac, 0x0, 0x3, 0x3, 0xef45, 0x0, 0x4, 0xf0, 0x65c, 0x3, 0x5, 0xfffffffb, 0x8, 0x7, 0x3, 0x97, 0xe, 0x7, 0x7d9, 0xfffffffb, 0x4, 0x3, 0x2, 0x0, 0x2b, 0x1, 0x8, 0x7ff, 0xb, 0x9, 0x9f8, 0x8, 0xa, 0x7fffffff, 0xf3e, 0x80000001, 0x6, 0x7, 0xa, 0x6, 0x5, 0x5, 0x808000, 0x4, 0x3, 0x4, 0x8, 0x9, 0x0, 0x8, 0x27, 0x6df, 0x1, 0x7, 0xc734, 0x5817, 0x8001, 0xffffffff, 0x0, 0x3, 0x2e, 0xfffff023, 0x9, 0x0, 0x8, 0x8, 0x4, 0x10001, 0xfffffffc, 0xde38, 0x7, 0x400, 0x4, 0x0, 0x6, 0x5, 0x4, 0x3ff, 0x3a, 0x200, 0xc8, 0x1000, 0x0, 0x4, 0x2, 0x9, 0x2, 0x0, 0xffff, 0x5, 0x7, 0x4, 0x1, 0x101, 0xfff, 0x631, 0xfffffff8, 0x5, 0x6, 0x4, 0x7, 0x10, 0x0, 0x9, 0x80000001, 0x8, 0x401, 0xff, 0x6, 0x3, 0x90d, 0x3, 0x2, 0xfffffffb, 0x5, 0x5df, 0x7, 0x3, 0x3, 0x6, 0xe80, 0xfffffff5, 0x7ff, 0x8001, 0x3, 0x1, 0x6, 0xfffff001, 0xfffffff8, 0x25, 0x4, 0x2, 0x3, 0x3, 0x5, 0x5f, 0x200, 0x2, 0x5, 0x9, 0x3, 0x10, 0xe1, 0x1, 0x2, 0xf, 0x81, 0x8, 0x0, 0x1, 0x6, 0x7, 0x9ee, 0xfffffff7, 0xffff, 0x1, 0x4, 0x1, 0x6, 0x8001, 0x0, 0x9, 0x8, 0x8, 0x672, 0x6, 0x7fffffff, 0x38, 0x80000000, 0x6, 0x10000, 0x3, 0x92, 0x9, 0xfab, 0x7, 0x4, 0x4, 0x0, 0x8, 0x7, 0x8001, 0xfffffffa, 0x6, 0x2, 0x6, 0xfffeffff, 0x55e, 0x80000001, 0x81, 0x4, 0x7, 0xfffffffe, 0x4, 0x0, 0x3, 0x7, 0x7, 0x3, 0x0, 0x6, 0x2, 0x10, 0x8, 0x2, 0x200, 0x38a8, 0x100, 0xdde, 0x3, 0x8, 0x3, 0x2, 0x7f, 0x7, 0x0, 0x3, 0x922, 0x1, 0xa, 0x5, 0x26b00000, 0x9, 0xd4, 0x1, 0xa, 0xfffffff4, 0x0, 0x701, 0x81, 0x6, 0x8, 0x401, 0xb, 0xd9b0, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x4, 0x16a, 0x101, 0x7, 0x244d, 0x0, 0x5, 0x2, 0x8001, 0x0, 0x3ff, 0xfffffffb, 0xf71, 0x1, 0x3a3, 0xb11, 0x3, 0x8, 0x80000000, 0x6, 0x2b64, 0x9, 0xa, 0x5, 0x4, 0x9, 0xb6d4, 0x6, 0x3, 0xd, 0x3, 0x3, 0x2, 0x6f, 0x4, 0xffff, 0x10000, 0x8, 0x9, 0x2, 0x0, 0x5, 0xfffffffa, 0x80000000, 0x3, 0x7, 0x1, 0x400, 0x100, 0x7, 0xa5b5, 0x4, 0x7ff, 0x58, 0x2, 0x8, 0x1, 0x3, 0x2, 0x4, 0x5, 0xffffffff, 0xe, 0x0, 0xc, 0x7, 0x1000, 0x6c66, 0x4, 0x81, 0x3, 0x7, 0x1, 0x0, 0xb, 0x4, 0x100, 0xb, 0x0, 0x0, 0x6, 0x2, 0x7, 0x8, 0x9, 0x80000001, 0x1, 0x8, 0x9, 0x0, 0x80, 0x1, 0x7, 0x7, 0x3, 0x6, 0x8, 0x8, 0x3ff, 0x2, 0x7, 0x5, 0x3c24, 0x921, 0x3, 0x1, 0x7fffffff, 0x10000, 0x4723, 0xb, 0x0, 0x7f, 0x1, 0xb, 0x7fffffff, 0x9ec, 0x9, 0x0, 0x4, 0x1, 0x3, 0x5, 0x0, 0xbeb, 0xfffffd4d, 0x5, 0x7, 0x6, 0x2, 0xc, 0x1, 0x1, 0x3, 0x7, 0x6, 0x6, 0x6, 0x9, 0xa, 0x40, 0x5, 0x1, 0x1ff, 0x10001, 0x9, 0xff, 0x5, 0x3, 0x95d, 0x2, 0x4, 0x10000, 0x0, 0x9ee, 0x2d, 0x9a, 0xb, 0x1, 0xff, 0x9, 0x5cb2, 0x6, 0x4, 0x5, 0x6, 0x101, 0x80000001, 0x7, 0x6, 0x64b9, 0x40, 0x8, 0x8001, 0x81, 0x3d5, 0x8, 0x2, 0x8, 0x60e, 0x9, 0x1000, 0x110, 0x7, 0x7, 0x4, 0x1ff, 0x8, 0xb, 0x5, 0x8, 0x7fffffff, 0x100, 0x6, 0xfffffffd, 0xd, 0x1, 0x9, 0x9, 0x7, 0xf, 0x8, 0x6f51, 0x0, 0x0, 0x6, 0x8, 0x8, 0x6, 0x1, 0x6, 0x5a, 0x631, 0x101, 0x2, 0x10, 0x7, 0x7, 0x101, 0xfffffffd, 0x80, 0x2, 0x3, 0x101, 0x4, 0x9, 0x0, 0x1, 0x0, 0x8, 0x7, 0x3, 0x3, 0x8c07, 0x8, 0x6, 0x4, 0xfffffffa, 0x5, 0x6, 0x2, 0x0, 0x9, 0x9, 0x100, 0x401, 0xc5e2, 0xa86b, 0x94, 0x800, 0x39, 0x1, 0xfffffff3, 0x7f4d, 0x40, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xcb0}, @TCA_POLICE_RATE={0x404, 0x2, [0x10, 0xfffffffb, 0x4, 0x7fffffff, 0x0, 0x7fff, 0x4, 0x6d, 0x0, 0xa, 0x401, 0x4, 0x5b19, 0x7, 0xf7ad, 0x7, 0xffff, 0x3ff, 0x4, 0x3, 0x9, 0x1000, 0x40, 0x5, 0x48, 0x9, 0xff, 0x4, 0x7, 0xffffffff, 0x7, 0x1, 0x4, 0x0, 0x5, 0x9, 0x1ff, 0x117, 0x8, 0xfc, 0x0, 0x7, 0x7, 0x9, 0xae, 0x69, 0xffffffff, 0xc53, 0x0, 0xb8, 0x9, 0x600000, 0x7fffffff, 0x8, 0x10000, 0x4, 0xffff, 0x8, 0x81, 0x9, 0x2, 0x68446568, 0x400, 0x7ff, 0xf, 0x4, 0x2, 0x8, 0xff, 0x6, 0x5, 0xd, 0x9, 0x5, 0x1, 0x3fc, 0x3, 0x52f, 0x0, 0x0, 0x1c4, 0x180000, 0xd, 0x10000, 0x88e1, 0xffff085b, 0x7, 0x3, 0x4, 0x22, 0x100, 0x80000000, 0x7b8, 0x80000001, 0x5, 0x31e, 0xfffffff9, 0x31, 0x7, 0x80000001, 0x6, 0x7fff, 0x7fffffff, 0x800, 0x8, 0x1, 0x5, 0x6, 0x2, 0x4e2b, 0x7fff, 0xffffd4d3, 0x2, 0x2, 0x1, 0xf9, 0x3, 0xb16, 0x0, 0x8, 0x0, 0x1ff, 0x3, 0x0, 0x7, 0x5346, 0x7fffffff, 0x3ff, 0x8, 0xd, 0x400, 0x8, 0x3, 0x40, 0xdb, 0x1, 0x2, 0x8001, 0x2add, 0x6, 0x0, 0x2, 0x3, 0xcf5456bc, 0xec2, 0x2, 0x10000, 0x4, 0x4, 0x8, 0x80000001, 0x800, 0x7ff, 0x1, 0x8, 0x5, 0x5, 0xffff, 0x40, 0x3, 0x2, 0xfffffffb, 0x2, 0x8001, 0x4da7, 0x8, 0x5, 0x9, 0x9, 0xc, 0x81, 0xffffffff, 0x8, 0x3, 0x2, 0x5, 0x7, 0x2, 0x1, 0x7, 0x1, 0xaa3, 0x42ca, 0x7, 0x8001, 0x2, 0x2, 0x7, 0x4, 0x5, 0x1, 0x332a, 0x800, 0x6a, 0xc, 0xb, 0x9009, 0x0, 0x318, 0x7, 0x4, 0xfffffffa, 0x0, 0x5, 0xffffffff, 0xfff, 0x20000000, 0xc40, 0x6, 0xfffffffe, 0x5, 0x400, 0x1, 0xc, 0x10000, 0x5, 0x1, 0x2e6c000, 0x800, 0x6, 0xda, 0xd, 0x2f, 0x3, 0x4, 0x7, 0x4f9, 0x2, 0x6, 0x10000, 0xfffffff5, 0x7, 0xf, 0x8, 0x2, 0x6, 0x6f1, 0x7f, 0x0, 0x7, 0x8, 0x1000, 0x7, 0x2, 0xda1, 0x40, 0x1000, 0x4, 0x8, 0x5, 0x151525a6, 0x3, 0x1, 0x99c3, 0xb, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff6, 0xc}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xfc}}, @TCA_CHAIN={0x8, 0xb, 0x1000}]}, 0xce4}, 0x1, 0x0, 0x0, 0x4000800}, 0x40400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) tkill(r0, 0x13) 1.440570578s ago: executing program 3 (id=4176): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)=""/160, 0xa0}, {&(0x7f0000000080)=""/38, 0x26}], 0x2, &(0x7f0000000380)=""/63, 0x3f}, 0x2174eda0}], 0x1, 0x1, &(0x7f0000000580)={0x77359400}) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 872.909207ms ago: executing program 7 (id=4180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) cachestat(r0, &(0x7f0000000280)={0x9, 0xfffffffffffffffc}, &(0x7f00000002c0), 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x24, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) 860.313457ms ago: executing program 7 (id=4182): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0\x00'}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x120000, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000180)={0x4, 0x40}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x80) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x8}}}, 0x24}}, 0x0) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000000001"], 0x18}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff", @ANYRES32], 0x5c}}, 0x0) 811.733638ms ago: executing program 9 (id=4183): r0 = memfd_secret(0x80000) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000"], 0x50) utimes(0x0, &(0x7f00000001c0)={{0x0, 0x2710}, {0x77359400}}) unshare(0x2040400) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r1, &(0x7f0000001140), 0x0, 0x1a000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[]) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 782.029858ms ago: executing program 7 (id=4184): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) uname(&(0x7f0000000000)=""/123) 763.036729ms ago: executing program 7 (id=4185): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) 747.297359ms ago: executing program 7 (id=4186): creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x5) 729.833189ms ago: executing program 7 (id=4187): r0 = socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x14507e, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b707000008000000850000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xc, &(0x7f0000000240)={0x8, 0x408b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x68040200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002580), 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) tkill(0x0, 0xf) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x6) r4 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0xffffffffffffffff) request_key(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, r4) request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)='y\x04', r4) r5 = syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getdents64(r5, 0xffffffffffffffff, 0xa3a743e7de85212) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES8, @ANYRES16], 0x0) 588.231651ms ago: executing program 3 (id=4188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) cachestat(r0, &(0x7f0000000280)={0x9, 0xfffffffffffffffc}, &(0x7f00000002c0), 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x24, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3e, 0x3e, 0x8, [@datasec={0xd, 0x4, 0x0, 0xf, 0x48, [{0x3, 0x75e}, {0x5, 0xc, 0x2}, {0xfffffffe, 0x8, 0x4}, {0x1, 0x4cc, 0x1}], "0cc446"}]}, {0x0, [0x2e, 0x61, 0x5f, 0x30, 0x61, 0x61]}}, &(0x7f00000005c0)=""/166, 0x60, 0xa6, 0x0, 0x1, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8) sendto$inet6(r3, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x8, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f0000000680), 0x8, 0x81, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000c00)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x5, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x7}]}, &(0x7f0000000740)='GPL\x00', 0x3, 0x8, &(0x7f0000000780)=""/8, 0x40f00, 0x16, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800), 0x10, 0xd6, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRESOCT=r5], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r6}, 0x18) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000200), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) keyctl$chown(0x4, r7, r8, r9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) writev(r0, &(0x7f0000000f40)=[{&(0x7f0000000400)="2e9b3d93dfb6c575963f88640000000000", 0x11}, {&(0x7f0000000180)="64c0", 0x2}, {&(0x7f0000000380)="7cbf2f05ea5797806224fa67fe6b81a88e5d67eec255f1c5f1200f6422ad3a0a1cdce76d953ba05060d9fb9b08aaf6ebc74fd014c3e7c3da5bfbba9fc62ec59fcf961c6a38e9178a344775d392a12bd6e58dd1cfcbc3ff0e82e3072ed20679abca", 0x61}], 0x3) 477.567043ms ago: executing program 3 (id=4189): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r6, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x16}, 0xc924}}}, 0x30) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 325.551775ms ago: executing program 9 (id=4190): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$evdev(&(0x7f0000000240), 0x8, 0x311000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1, r0}}, 0x40) socket$inet6(0xa, 0x3, 0x8000000003c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) setgroups(0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file0\x00') socket$inet6(0xa, 0x2, 0x0) syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) 278.550016ms ago: executing program 9 (id=4191): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 95.770509ms ago: executing program 9 (id=4192): syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x24, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) 73.664399ms ago: executing program 9 (id=4193): inotify_init1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={0x0, r0}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000840)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet(r2, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 0s ago: executing program 9 (id=4194): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r7, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x16}, 0xc924}}}, 0x30) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): 8644][T14360] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.3532: mark_inode_dirty error [ 261.831374][T14360] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #16: comm syz.7.3532: corrupted inode contents [ 261.847288][T14360] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 261.865614][T14356] chnl_net:caif_netlink_parms(): no params data found [ 261.876134][T14374] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3531: bg 0: block 345: padding at end of block bitmap is not set [ 261.886567][T14360] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #16: comm syz.7.3532: corrupted inode contents [ 261.904629][T14374] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 261.906020][T14360] EXT4-fs error (device loop7): ext4_truncate:4240: inode #16: comm syz.7.3532: mark_inode_dirty error [ 261.917190][T14374] EXT4-fs (loop9): This should not happen!! Data will be lost [ 261.917190][T14374] [ 261.934758][T14360] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 261.950837][T14360] EXT4-fs (loop7): 1 truncate cleaned up [ 261.958989][T14360] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.959764][T14386] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3537'. [ 261.982759][T14360] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.003910][T11394] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.011062][ T5171] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 262.025669][ T5171] EXT4-fs (loop9): This should not happen!! Data will be lost [ 262.025669][ T5171] [ 262.036039][T14384] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3537'. [ 262.050062][T14356] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.057265][T14356] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.066028][ T5171] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 262.078840][ T5171] EXT4-fs (loop9): This should not happen!! Data will be lost [ 262.078840][ T5171] [ 262.088543][ T5171] EXT4-fs (loop9): Total free blocks count 0 [ 262.094621][ T5171] EXT4-fs (loop9): Free/Dirty block details [ 262.100643][ T5171] EXT4-fs (loop9): free_blocks=0 [ 262.108613][T14356] bridge_slave_0: entered allmulticast mode [ 262.126840][T14356] bridge_slave_0: entered promiscuous mode [ 262.136042][T14390] SELinux: failed to load policy [ 262.143485][T14356] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.150722][T14356] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.154795][T14360] 9pnet: Could not find request transport: fd rfdno=0x0000000000000005 [ 262.174764][T14356] bridge_slave_1: entered allmulticast mode [ 262.182153][T14356] bridge_slave_1: entered promiscuous mode [ 262.219943][T14356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.235696][T14356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.273398][T14356] team0: Port device team_slave_0 added [ 262.283196][T14356] team0: Port device team_slave_1 added [ 262.300662][T14403] loop9: detected capacity change from 0 to 1024 [ 262.332660][T14403] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.346178][T14356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.353249][T14356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.360559][T14403] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3543'. [ 262.379330][T14356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.380267][T14356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.405932][T14356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.427594][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3543'. [ 262.431861][T14356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.523370][T14356] hsr_slave_0: entered promiscuous mode [ 262.529640][T14356] hsr_slave_1: entered promiscuous mode [ 262.554972][T14356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.562571][T14356] Cannot create hsr debugfs directory [ 262.903043][T14356] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.964889][T14356] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.040092][T14356] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.068799][ T29] kauditd_printk_skb: 533 callbacks suppressed [ 263.068814][ T29] audit: type=1326 audit(263.104:23118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.3.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f65f7d169 code=0x7ffc0000 [ 263.073042][T14415] pim6reg1: entered promiscuous mode [ 263.098197][ T29] audit: type=1326 audit(263.104:23119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.3.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f3f65f7d169 code=0x7ffc0000 [ 263.103453][T14415] pim6reg1: entered allmulticast mode [ 263.126564][ T29] audit: type=1326 audit(263.104:23120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.3.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f65f7d169 code=0x7ffc0000 [ 263.155138][ T29] audit: type=1326 audit(263.104:23121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.3.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f3f65f7d169 code=0x7ffc0000 [ 263.178104][ T29] audit: type=1326 audit(263.104:23122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.3.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f65f7d169 code=0x7ffc0000 [ 263.201251][ T29] audit: type=1326 audit(263.104:23123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.3.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f65f7d169 code=0x7ffc0000 [ 263.224413][ T29] audit: type=1326 audit(263.104:23124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.3.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f65f7d169 code=0x7ffc0000 [ 263.247564][ T29] audit: type=1326 audit(263.104:23125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.3.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3f65f7d169 code=0x7ffc0000 [ 263.270510][ T29] audit: type=1326 audit(263.104:23126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.3.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f65f7d169 code=0x7ffc0000 [ 263.293584][ T29] audit: type=1326 audit(263.104:23127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.3.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f65f7d169 code=0x7ffc0000 [ 263.319600][ T9389] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.355955][T14356] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.441003][T14356] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 263.469736][T14356] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 263.490151][T14356] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 263.511463][T14356] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 263.620986][T14356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.648743][T14356] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.668629][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.675778][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.690409][T14446] SELinux: Context /usr/lib/telepathy/mission-control-5 is not valid (left unmapped). [ 263.707756][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.715100][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.738514][T14457] loop8: detected capacity change from 0 to 1024 [ 263.752402][T14356] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 263.763078][T14356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.783358][T14457] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.922477][T14356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.110403][T14477] lo speed is unknown, defaulting to 1000 [ 264.213494][T14477] vxcan1 speed is unknown, defaulting to 1000 [ 264.392864][T14356] veth0_vlan: entered promiscuous mode [ 264.403574][T14356] veth1_vlan: entered promiscuous mode [ 264.414501][T14495] xt_TPROXY: Can be used only with -p tcp or -p udp [ 264.440594][T14356] veth0_macvtap: entered promiscuous mode [ 264.462108][T14356] veth1_macvtap: entered promiscuous mode [ 264.496631][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.507295][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.517251][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.528039][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.546267][T14356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.602796][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.613388][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.623335][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.634367][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.656859][ T9106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.670020][T14356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.679629][T14356] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.688577][T14356] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.697323][T14356] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.706171][T14356] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.774237][T14516] loop8: detected capacity change from 0 to 512 [ 264.796635][T14516] EXT4-fs: Ignoring removed nobh option [ 264.836611][T14516] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #3: comm syz.8.3574: corrupted inode contents [ 264.856244][T14516] EXT4-fs error (device loop8): ext4_dirty_inode:6042: inode #3: comm syz.8.3574: mark_inode_dirty error [ 264.890227][T14526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.900771][T14516] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #3: comm syz.8.3574: corrupted inode contents [ 264.919642][T14526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.929617][T14516] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #3: comm syz.8.3574: mark_inode_dirty error [ 264.966577][T14528] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=14528 comm=syz.1.3529 [ 264.983623][T14516] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.3574: Failed to acquire dquot type 0 [ 264.997381][T14519] rdma_rxe: rxe_newlink: failed to add lo [ 264.999207][T14530] loop3: detected capacity change from 0 to 1024 [ 265.022110][T14516] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #16: comm syz.8.3574: corrupted inode contents [ 265.040470][T14516] EXT4-fs error (device loop8): ext4_dirty_inode:6042: inode #16: comm syz.8.3574: mark_inode_dirty error [ 265.042030][T14530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.083455][T14516] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #16: comm syz.8.3574: corrupted inode contents [ 265.108128][T14516] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.3574: mark_inode_dirty error [ 265.111923][T14534] SELinux: failed to load policy [ 265.130209][T14516] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #16: comm syz.8.3574: corrupted inode contents [ 265.142373][T14516] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 265.176280][T14516] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #16: comm syz.8.3574: corrupted inode contents [ 265.196954][T14516] EXT4-fs error (device loop8): ext4_truncate:4240: inode #16: comm syz.8.3574: mark_inode_dirty error [ 265.214095][T14516] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 265.265636][T14516] EXT4-fs (loop8): 1 truncate cleaned up [ 265.271690][T14516] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.290234][T14516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.344364][T14516] 9pnet: Could not find request transport: fd rfdno=0x0000000000000005 [ 265.543297][T14544] xt_TPROXY: Can be used only with -p tcp or -p udp [ 265.858151][T11394] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.117193][T14577] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 266.136031][T14577] SELinux: failed to load policy [ 266.193963][T14589] loop7: detected capacity change from 0 to 1024 [ 266.203666][T14589] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.259876][T14589] __nla_validate_parse: 7 callbacks suppressed [ 266.259897][T14589] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3593'. [ 266.279779][T14593] loop9: detected capacity change from 0 to 1024 [ 266.296484][T14593] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.317120][T14595] loop3: detected capacity change from 0 to 1024 [ 266.326992][T14589] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3593'. [ 266.341641][T14593] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3595'. [ 266.353340][T14595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.378643][T14593] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3595'. [ 266.417262][T14595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3596'. [ 266.439194][T14603] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=14603 comm=syz.8.3598 [ 266.511376][T14601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.529554][T14612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.550563][T14612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.648248][T14609] rdma_rxe: rxe_newlink: failed to add lo [ 267.240412][T11394] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.257931][ T9389] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.348713][T13833] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.363611][T14621] SELinux: failed to load policy [ 267.477159][T14624] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.494782][T14649] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=14649 comm=syz.3.3609 [ 267.532078][T14653] loop3: detected capacity change from 0 to 512 [ 267.538745][T14653] EXT4-fs: Ignoring removed nobh option [ 267.556301][T14656] loop9: detected capacity change from 0 to 1024 [ 267.557825][T14653] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #3: comm syz.3.3611: corrupted inode contents [ 267.575377][T14653] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #3: comm syz.3.3611: mark_inode_dirty error [ 267.576787][T14656] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.588124][T14653] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #3: comm syz.3.3611: corrupted inode contents [ 267.607689][T14656] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3612'. [ 267.624866][T14653] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.3611: mark_inode_dirty error [ 267.638313][T14653] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.3611: Failed to acquire dquot type 0 [ 267.638783][T14660] loop7: detected capacity change from 0 to 1024 [ 267.651325][T14653] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #16: comm syz.3.3611: corrupted inode contents [ 267.658497][T14660] EXT4-fs: Ignoring removed nobh option [ 267.669752][T14653] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #16: comm syz.3.3611: mark_inode_dirty error [ 267.673716][T14660] EXT4-fs: Ignoring removed bh option [ 267.691156][T14653] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #16: comm syz.3.3611: corrupted inode contents [ 267.703654][T14653] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.3611: mark_inode_dirty error [ 267.715257][T14653] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #16: comm syz.3.3611: corrupted inode contents [ 267.726693][T14660] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.727522][T14653] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 267.749218][T14653] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #16: comm syz.3.3611: corrupted inode contents [ 267.758234][ T9389] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.761909][T14653] EXT4-fs error (device loop3): ext4_truncate:4240: inode #16: comm syz.3.3611: mark_inode_dirty error [ 267.782044][T14653] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 267.792007][T14653] EXT4-fs (loop3): 1 truncate cleaned up [ 267.798331][T14653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.812470][T14653] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.848566][T14653] 9pnet: Could not find request transport: fd rfdno=0x0000000000000005 [ 267.869845][T14670] pim6reg1: entered promiscuous mode [ 267.875228][T14670] pim6reg1: entered allmulticast mode [ 267.982597][T14677] xt_TPROXY: Can be used only with -p tcp or -p udp [ 268.039476][T14679] loop9: detected capacity change from 0 to 512 [ 268.046686][T14679] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 268.057906][T14679] EXT4-fs (loop9): 1 truncate cleaned up [ 268.064091][T14679] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.079149][ T29] kauditd_printk_skb: 437 callbacks suppressed [ 268.079167][ T29] audit: type=1400 audit(268.114:23561): avc: denied { append } for pid=14678 comm="syz.9.3619" path="/351/bus/blkio.bfq.io_service_bytes" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 268.110065][ T29] audit: type=1326 audit(268.144:23562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.7.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8bd1cc4127 code=0x7ffc0000 [ 268.133057][ T29] audit: type=1326 audit(268.144:23563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.7.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8bd1c69359 code=0x7ffc0000 [ 268.156159][ T29] audit: type=1326 audit(268.144:23564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.7.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f8bd1ccd169 code=0x7ffc0000 [ 268.179158][ T29] audit: type=1326 audit(268.194:23565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.7.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8bd1cc4127 code=0x7ffc0000 [ 268.202336][ T29] audit: type=1326 audit(268.194:23566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.7.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8bd1c69359 code=0x7ffc0000 [ 268.225245][ T29] audit: type=1326 audit(268.194:23567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.7.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f8bd1ccd169 code=0x7ffc0000 [ 268.248248][ T29] audit: type=1326 audit(268.194:23568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.7.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8bd1cc4127 code=0x7ffc0000 [ 268.271149][ T29] audit: type=1326 audit(268.194:23569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.7.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8bd1c69359 code=0x7ffc0000 [ 268.294193][ T29] audit: type=1326 audit(268.194:23570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.7.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f8bd1ccd169 code=0x7ffc0000 [ 268.332101][ T9389] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.396312][T13833] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.425883][T14689] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3621'. [ 268.435773][T14684] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3621'. [ 268.499025][T14702] loop9: detected capacity change from 0 to 2048 [ 268.517247][T14702] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.531528][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3624'. [ 268.540848][T14702] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3624'. [ 268.553619][T14709] loop7: detected capacity change from 0 to 512 [ 268.561181][T14709] EXT4-fs: Ignoring removed nobh option [ 268.587105][T14709] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #3: comm syz.7.3626: corrupted inode contents [ 268.599819][T14709] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #3: comm syz.7.3626: mark_inode_dirty error [ 268.611707][T14709] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #3: comm syz.7.3626: corrupted inode contents [ 268.626655][T14709] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #3: comm syz.7.3626: mark_inode_dirty error [ 268.638894][T14709] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.3626: Failed to acquire dquot type 0 [ 268.651927][T14709] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #16: comm syz.7.3626: corrupted inode contents [ 268.665487][T14709] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #16: comm syz.7.3626: mark_inode_dirty error [ 268.677654][T14709] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #16: comm syz.7.3626: corrupted inode contents [ 268.690494][T14709] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.3626: mark_inode_dirty error [ 268.702679][T14709] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #16: comm syz.7.3626: corrupted inode contents [ 268.716842][T14709] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 268.725679][T14709] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #16: comm syz.7.3626: corrupted inode contents [ 268.749346][T14709] EXT4-fs error (device loop7): ext4_truncate:4240: inode #16: comm syz.7.3626: mark_inode_dirty error [ 268.762006][T14709] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 268.771610][T14709] EXT4-fs (loop7): 1 truncate cleaned up [ 268.793254][T14709] 9pnet: Could not find request transport: fd rfdno=0x0000000000000005 [ 268.852083][T14712] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3624: bg 0: block 345: padding at end of block bitmap is not set [ 268.867374][T14712] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 268.880050][T14712] EXT4-fs (loop9): This should not happen!! Data will be lost [ 268.880050][T14712] [ 268.892861][T14723] xt_TPROXY: Can be used only with -p tcp or -p udp [ 268.923748][ T5171] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 268.936568][ T5171] EXT4-fs (loop9): This should not happen!! Data will be lost [ 268.936568][ T5171] [ 268.968657][ T5171] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 268.981728][ T5171] EXT4-fs (loop9): This should not happen!! Data will be lost [ 268.981728][ T5171] [ 268.991506][ T5171] EXT4-fs (loop9): Total free blocks count 0 [ 268.997552][ T5171] EXT4-fs (loop9): Free/Dirty block details [ 269.003468][ T5171] EXT4-fs (loop9): free_blocks=0 [ 269.256069][T14762] xt_TPROXY: Can be used only with -p tcp or -p udp [ 269.350571][T14764] loop7: detected capacity change from 0 to 512 [ 269.357095][T14764] EXT4-fs: Ignoring removed nobh option [ 269.376696][T14764] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #3: comm syz.7.3638: corrupted inode contents [ 269.388875][T14764] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #3: comm syz.7.3638: mark_inode_dirty error [ 269.400841][T14764] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #3: comm syz.7.3638: corrupted inode contents [ 269.413133][T14764] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #3: comm syz.7.3638: mark_inode_dirty error [ 269.425689][T14764] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.3638: Failed to acquire dquot type 0 [ 269.437608][T14764] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #16: comm syz.7.3638: corrupted inode contents [ 269.451152][T14764] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #16: comm syz.7.3638: mark_inode_dirty error [ 269.462852][T14764] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #16: comm syz.7.3638: corrupted inode contents [ 269.475232][T14764] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.3638: mark_inode_dirty error [ 269.488154][T14764] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #16: comm syz.7.3638: corrupted inode contents [ 269.500169][T14764] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 269.510380][T14764] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #16: comm syz.7.3638: corrupted inode contents [ 269.523095][T14764] EXT4-fs error (device loop7): ext4_truncate:4240: inode #16: comm syz.7.3638: mark_inode_dirty error [ 269.535229][T14764] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 269.544546][T14764] EXT4-fs (loop7): 1 truncate cleaned up [ 269.561714][T14764] 9pnet: Could not find request transport: fd rfdno=0x0000000000000005 [ 269.625827][T14776] loop7: detected capacity change from 0 to 2048 [ 269.653835][T14778] loop1: detected capacity change from 0 to 512 [ 269.667695][T14778] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3643: bg 0: block 248: padding at end of block bitmap is not set [ 269.683101][T14778] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.3643: Failed to acquire dquot type 1 [ 269.696936][T14778] EXT4-fs (loop1): 1 truncate cleaned up [ 269.868479][T14809] SELinux: failed to load policy [ 269.917025][T14790] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3642: bg 0: block 345: padding at end of block bitmap is not set [ 269.932162][T14790] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 269.944683][T14790] EXT4-fs (loop7): This should not happen!! Data will be lost [ 269.944683][T14790] [ 269.990094][ T4016] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 270.002900][ T4016] EXT4-fs (loop7): This should not happen!! Data will be lost [ 270.002900][ T4016] [ 270.033730][ T4016] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 270.046539][ T4016] EXT4-fs (loop7): This should not happen!! Data will be lost [ 270.046539][ T4016] [ 270.056236][ T4016] EXT4-fs (loop7): Total free blocks count 0 [ 270.062250][ T4016] EXT4-fs (loop7): Free/Dirty block details [ 270.068254][ T4016] EXT4-fs (loop7): free_blocks=0 [ 270.073298][ T4016] EXT4-fs (loop7): dirty_blocks=2032 [ 270.142721][T14814] xt_TPROXY: Can be used only with -p tcp or -p udp [ 270.351563][T14852] loop1: detected capacity change from 0 to 2048 [ 270.627793][T14874] xt_NFQUEUE: number of total queues is 0 [ 270.748549][T14867] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3659: bg 0: block 345: padding at end of block bitmap is not set [ 270.791385][T14867] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 270.803990][T14867] EXT4-fs (loop1): This should not happen!! Data will be lost [ 270.803990][T14867] [ 270.817660][T14889] loop3: detected capacity change from 0 to 1024 [ 270.884340][ T4016] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 270.897065][ T4016] EXT4-fs (loop1): This should not happen!! Data will be lost [ 270.897065][ T4016] [ 270.931971][ T5164] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 270.944868][ T5164] EXT4-fs (loop1): This should not happen!! Data will be lost [ 270.944868][ T5164] [ 270.954545][ T5164] EXT4-fs (loop1): Total free blocks count 0 [ 270.960695][ T5164] EXT4-fs (loop1): Free/Dirty block details [ 270.966706][ T5164] EXT4-fs (loop1): free_blocks=0 [ 270.971676][ T5164] EXT4-fs (loop1): dirty_blocks=2032 [ 271.041136][T14894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.049724][T14894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.064219][T14893] rdma_rxe: rxe_newlink: failed to add lo [ 271.118842][T14896] SELinux: failed to load policy [ 271.299372][T14903] __nla_validate_parse: 15 callbacks suppressed [ 271.299391][T14903] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3676'. [ 271.322048][T14905] netlink: 'syz.8.3677': attribute type 3 has an invalid length. [ 271.329874][T14905] netlink: 130984 bytes leftover after parsing attributes in process `syz.8.3677'. [ 271.400790][T14911] xt_TPROXY: Can be used only with -p tcp or -p udp [ 271.471621][T14913] loop8: detected capacity change from 0 to 512 [ 271.483421][T14913] EXT4-fs: Ignoring removed i_version option [ 271.489502][T14913] EXT4-fs: Ignoring removed mblk_io_submit option [ 271.497217][T14913] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 271.666990][T14913] EXT4-fs (loop8): 1 truncate cleaned up [ 271.698207][T14917] loop9: detected capacity change from 0 to 2048 [ 272.376841][T14921] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3682: bg 0: block 345: padding at end of block bitmap is not set [ 272.394423][T14921] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 272.406959][T14921] EXT4-fs (loop9): This should not happen!! Data will be lost [ 272.406959][T14921] [ 272.486926][ T5157] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 272.499592][ T5157] EXT4-fs (loop9): This should not happen!! Data will be lost [ 272.499592][ T5157] [ 272.550021][ T5156] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 272.562877][ T5156] EXT4-fs (loop9): This should not happen!! Data will be lost [ 272.562877][ T5156] [ 272.572793][ T5156] EXT4-fs (loop9): Total free blocks count 0 [ 272.578945][ T5156] EXT4-fs (loop9): Free/Dirty block details [ 272.584961][ T5156] EXT4-fs (loop9): free_blocks=0 [ 272.589932][ T5156] EXT4-fs (loop9): dirty_blocks=2032 [ 272.635804][T14945] SELinux: failed to load policy [ 272.649670][T14948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.710874][T14948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.730740][T14956] loop3: detected capacity change from 0 to 1024 [ 272.750505][T14943] rdma_rxe: rxe_newlink: failed to add lo [ 272.767309][T14956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3695'. [ 272.785199][T14956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3695'. [ 273.479768][T14976] loop7: detected capacity change from 0 to 2048 [ 273.674338][T14981] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 273.716860][T14987] lo speed is unknown, defaulting to 1000 [ 273.719871][T14981] SELinux: failed to load policy [ 273.763918][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 273.763978][ T29] audit: type=1326 audit(273.794:23833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14989 comm="syz.1.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 273.768492][T14987] vxcan1 speed is unknown, defaulting to 1000 [ 273.830904][ T29] audit: type=1326 audit(273.844:23834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14989 comm="syz.1.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 273.854113][ T29] audit: type=1326 audit(273.864:23835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14989 comm="syz.1.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 273.877212][ T29] audit: type=1326 audit(273.864:23836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14989 comm="syz.1.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 273.900237][ T29] audit: type=1326 audit(273.864:23837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14989 comm="syz.1.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 273.923338][ T29] audit: type=1326 audit(273.864:23838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14989 comm="syz.1.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 273.946338][ T29] audit: type=1326 audit(273.864:23839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14989 comm="syz.1.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 273.969687][ T29] audit: type=1326 audit(273.864:23840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14989 comm="syz.1.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 273.992723][ T29] audit: type=1326 audit(273.864:23841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14989 comm="syz.1.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 274.015742][ T29] audit: type=1326 audit(273.864:23842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14989 comm="syz.1.3705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 274.160223][T14979] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3700: bg 0: block 345: padding at end of block bitmap is not set [ 274.236922][T14979] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 274.249526][T14979] EXT4-fs (loop7): This should not happen!! Data will be lost [ 274.249526][T14979] [ 274.285628][T15007] loop9: detected capacity change from 0 to 1024 [ 274.292576][T15007] EXT4-fs: Ignoring removed nobh option [ 274.298338][T15007] EXT4-fs: Ignoring removed bh option [ 274.454819][ T5156] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 274.467619][ T5156] EXT4-fs (loop7): This should not happen!! Data will be lost [ 274.467619][ T5156] [ 274.503912][T15025] loop1: detected capacity change from 0 to 1024 [ 274.546760][ T5156] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 274.555060][T15022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3712'. [ 274.559570][ T5156] EXT4-fs (loop7): This should not happen!! Data will be lost [ 274.559570][ T5156] [ 274.578304][ T5156] EXT4-fs (loop7): Total free blocks count 0 [ 274.584362][ T5156] EXT4-fs (loop7): Free/Dirty block details [ 274.590420][ T5156] EXT4-fs (loop7): free_blocks=0 [ 274.595425][ T5156] EXT4-fs (loop7): dirty_blocks=2032 [ 274.611103][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3712'. [ 274.640797][T15022] veth0_macvtap: left promiscuous mode [ 274.660742][T15032] loop9: detected capacity change from 0 to 512 [ 274.668845][T15032] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 274.687655][T15032] EXT4-fs (loop9): 1 truncate cleaned up [ 274.830159][T15039] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=15039 comm=syz.7.3718 [ 274.922343][T15043] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 274.972647][T15043] SELinux: failed to load policy [ 275.055554][T15042] lo speed is unknown, defaulting to 1000 [ 275.090484][T15042] vxcan1 speed is unknown, defaulting to 1000 [ 275.256093][T15053] loop9: detected capacity change from 0 to 2048 [ 275.625929][T15069] siw: device registration error -23 [ 275.822326][T15060] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3723: bg 0: block 345: padding at end of block bitmap is not set [ 275.838223][T15060] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 275.850766][T15060] EXT4-fs (loop9): This should not happen!! Data will be lost [ 275.850766][T15060] [ 275.910789][ T5164] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 275.923620][ T5164] EXT4-fs (loop9): This should not happen!! Data will be lost [ 275.923620][ T5164] [ 275.957829][ T5164] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 275.970702][ T5164] EXT4-fs (loop9): This should not happen!! Data will be lost [ 275.970702][ T5164] [ 275.980390][ T5164] EXT4-fs (loop9): Total free blocks count 0 [ 275.986450][ T5164] EXT4-fs (loop9): Free/Dirty block details [ 275.992396][ T5164] EXT4-fs (loop9): free_blocks=0 [ 275.997423][ T5164] EXT4-fs (loop9): dirty_blocks=2032 [ 276.131643][T15089] pim6reg1: entered promiscuous mode [ 276.137247][T15089] pim6reg1: entered allmulticast mode [ 276.543411][T15115] loop1: detected capacity change from 0 to 1024 [ 276.558665][T15115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3745'. [ 276.597302][T15115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3745'. [ 277.191733][T15136] netlink: 'syz.7.3753': attribute type 27 has an invalid length. [ 277.215162][T15136] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3753'. [ 277.271440][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3753'. [ 277.804123][T15163] loop1: detected capacity change from 0 to 1024 [ 277.809370][T15162] SELinux: failed to load policy [ 277.817636][T15163] EXT4-fs: Ignoring removed nobh option [ 277.823405][T15163] EXT4-fs: Ignoring removed bh option [ 277.892883][T15171] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=15171 comm=syz.9.3761 [ 278.017904][T15180] xt_TPROXY: Can be used only with -p tcp or -p udp [ 278.064612][T15187] loop1: detected capacity change from 0 to 512 [ 278.075834][T15189] loop8: detected capacity change from 0 to 1024 [ 278.078055][T15187] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 278.095674][T15185] SELinux: failed to load policy [ 278.127004][T15189] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3768'. [ 278.143697][T15195] SELinux: failed to load policy [ 278.149448][T15190] lo speed is unknown, defaulting to 1000 [ 278.149897][T15187] EXT4-fs (loop1): 1 truncate cleaned up [ 278.168915][T15189] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3768'. [ 278.199760][T15190] vxcan1 speed is unknown, defaulting to 1000 [ 278.308284][T15201] pim6reg1: entered promiscuous mode [ 278.313638][T15201] pim6reg1: entered allmulticast mode [ 278.411575][T15209] loop1: detected capacity change from 0 to 512 [ 278.418256][T15209] EXT4-fs: Ignoring removed nobh option [ 278.448084][T15209] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #3: comm syz.1.3774: corrupted inode contents [ 278.497598][T15213] loop3: detected capacity change from 0 to 1024 [ 278.526444][T15209] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #3: comm syz.1.3774: mark_inode_dirty error [ 278.538837][T15209] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #3: comm syz.1.3774: corrupted inode contents [ 278.551857][T15209] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.3774: mark_inode_dirty error [ 278.565146][T15209] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.3774: Failed to acquire dquot type 0 [ 278.579242][T15213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3775'. [ 278.587821][T15209] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #16: comm syz.1.3774: corrupted inode contents [ 278.606028][T15209] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #16: comm syz.1.3774: mark_inode_dirty error [ 278.606105][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3775'. [ 278.618952][T15209] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #16: comm syz.1.3774: corrupted inode contents [ 278.638661][T15209] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.3774: mark_inode_dirty error [ 278.650259][T15209] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #16: comm syz.1.3774: corrupted inode contents [ 278.664461][T15209] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 278.674112][T15209] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #16: comm syz.1.3774: corrupted inode contents [ 278.688415][T15217] FAULT_INJECTION: forcing a failure. [ 278.688415][T15217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.701603][T15217] CPU: 0 UID: 0 PID: 15217 Comm: syz.7.3776 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 278.701686][T15217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 278.701699][T15217] Call Trace: [ 278.701705][T15217] [ 278.701735][T15217] dump_stack_lvl+0xf2/0x150 [ 278.701771][T15217] dump_stack+0x15/0x1a [ 278.701798][T15217] should_fail_ex+0x24a/0x260 [ 278.701856][T15217] should_fail+0xb/0x10 [ 278.701951][T15217] should_fail_usercopy+0x1a/0x20 [ 278.701988][T15217] _copy_from_user+0x1c/0xa0 [ 278.702012][T15217] copy_msghdr_from_user+0x54/0x2a0 [ 278.702055][T15217] ? __fget_files+0x17c/0x1c0 [ 278.702125][T15217] __sys_sendmsg+0x13e/0x230 [ 278.702172][T15217] __x64_sys_sendmsg+0x46/0x50 [ 278.702206][T15217] x64_sys_call+0x2734/0x2dc0 [ 278.702240][T15217] do_syscall_64+0xc9/0x1c0 [ 278.702322][T15217] ? clear_bhb_loop+0x55/0xb0 [ 278.702349][T15217] ? clear_bhb_loop+0x55/0xb0 [ 278.702378][T15217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.702411][T15217] RIP: 0033:0x7f8bd1ccd169 [ 278.702439][T15217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.702520][T15217] RSP: 002b:00007f8bd0331038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.702543][T15217] RAX: ffffffffffffffda RBX: 00007f8bd1ee5fa0 RCX: 00007f8bd1ccd169 [ 278.702556][T15217] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 278.702571][T15217] RBP: 00007f8bd0331090 R08: 0000000000000000 R09: 0000000000000000 [ 278.702658][T15217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.702674][T15217] R13: 0000000000000000 R14: 00007f8bd1ee5fa0 R15: 00007ffee4594278 [ 278.702764][T15217] [ 278.883110][T15209] EXT4-fs error (device loop1): ext4_truncate:4240: inode #16: comm syz.1.3774: mark_inode_dirty error [ 278.894964][T15209] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 279.002971][T15209] EXT4-fs (loop1): 1 truncate cleaned up [ 279.097585][ T29] kauditd_printk_skb: 573 callbacks suppressed [ 279.097604][ T29] audit: type=1326 audit(279.134:24414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.7.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd1ccd169 code=0x7ffc0000 [ 279.127006][ T29] audit: type=1326 audit(279.134:24415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.7.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f8bd1ccd169 code=0x7ffc0000 [ 279.150162][ T29] audit: type=1326 audit(279.134:24416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.7.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd1ccd169 code=0x7ffc0000 [ 279.173202][ T29] audit: type=1326 audit(279.134:24417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.7.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f8bd1ccd169 code=0x7ffc0000 [ 279.196189][ T29] audit: type=1326 audit(279.134:24418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.7.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd1ccd169 code=0x7ffc0000 [ 279.219316][ T29] audit: type=1326 audit(279.134:24419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.7.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8bd1ccd169 code=0x7ffc0000 [ 279.242592][ T29] audit: type=1326 audit(279.134:24420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.7.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd1ccd169 code=0x7ffc0000 [ 279.265725][ T29] audit: type=1326 audit(279.134:24421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.7.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8bd1ccd169 code=0x7ffc0000 [ 279.294815][ T29] audit: type=1326 audit(279.194:24422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.7.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd1ccd169 code=0x7ffc0000 [ 279.317920][ T29] audit: type=1326 audit(279.194:24423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.7.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd1ccd169 code=0x7ffc0000 [ 279.402047][T15229] SELinux: failed to load policy [ 279.493368][T15240] loop3: detected capacity change from 0 to 128 [ 279.508975][T15240] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3783'. [ 279.554150][T15249] loop3: detected capacity change from 0 to 512 [ 279.571610][T15249] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 279.603833][T15246] lo speed is unknown, defaulting to 1000 [ 279.613624][T15249] EXT4-fs (loop3): 1 truncate cleaned up [ 279.644474][T15246] vxcan1 speed is unknown, defaulting to 1000 [ 280.113236][T15267] loop9: detected capacity change from 0 to 512 [ 280.125350][T15267] EXT4-fs: Ignoring removed nobh option [ 280.137588][T15268] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 280.200123][T15267] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #3: comm syz.9.3789: corrupted inode contents [ 280.316536][T15267] EXT4-fs error (device loop9): ext4_dirty_inode:6042: inode #3: comm syz.9.3789: mark_inode_dirty error [ 280.345984][T15267] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #3: comm syz.9.3789: corrupted inode contents [ 280.375015][T15267] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #3: comm syz.9.3789: mark_inode_dirty error [ 280.472372][T15267] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.3789: Failed to acquire dquot type 0 [ 280.519975][T15267] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #16: comm syz.9.3789: corrupted inode contents [ 280.573173][T15267] EXT4-fs error (device loop9): ext4_dirty_inode:6042: inode #16: comm syz.9.3789: mark_inode_dirty error [ 280.591851][T15267] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #16: comm syz.9.3789: corrupted inode contents [ 280.635431][T15267] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #16: comm syz.9.3789: mark_inode_dirty error [ 280.654904][T15267] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #16: comm syz.9.3789: corrupted inode contents [ 280.671540][T15267] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 280.692165][T15267] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #16: comm syz.9.3789: corrupted inode contents [ 280.718804][T15267] EXT4-fs error (device loop9): ext4_truncate:4240: inode #16: comm syz.9.3789: mark_inode_dirty error [ 280.730924][T15267] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 280.741463][T15267] EXT4-fs (loop9): 1 truncate cleaned up [ 280.808747][T15296] loop9: detected capacity change from 0 to 1024 [ 280.815844][T15296] EXT4-fs: Ignoring removed nobh option [ 280.821501][T15296] EXT4-fs: Ignoring removed bh option [ 280.906612][ T9389] EXT4-fs unmount: 46 callbacks suppressed [ 280.906628][ T9389] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.956460][T15308] xt_TPROXY: Can be used only with -p tcp or -p udp [ 281.038037][T15312] loop8: detected capacity change from 0 to 1024 [ 281.056099][T15312] EXT4-fs: Ignoring removed nobh option [ 281.061750][T15312] EXT4-fs: Ignoring removed bh option [ 281.103613][T15312] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.203770][ T9106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.204659][T15325] loop9: detected capacity change from 0 to 512 [ 281.219228][T15325] EXT4-fs: Ignoring removed nobh option [ 281.228904][T15326] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3806'. [ 281.250160][T15325] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #3: comm syz.9.3807: corrupted inode contents [ 281.271607][T15326] bond0: (slave bond_slave_0): Releasing backup interface [ 281.282213][T15323] lo speed is unknown, defaulting to 1000 [ 281.289654][T15325] EXT4-fs error (device loop9): ext4_dirty_inode:6042: inode #3: comm syz.9.3807: mark_inode_dirty error [ 281.334563][T15325] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #3: comm syz.9.3807: corrupted inode contents [ 281.373124][T15332] tipc: New replicast peer: 255.255.255.255 [ 281.379430][T15332] tipc: Enabled bearer , priority 10 [ 281.414484][T15325] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #3: comm syz.9.3807: mark_inode_dirty error [ 281.432319][T15323] vxcan1 speed is unknown, defaulting to 1000 [ 281.440765][T15325] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.3807: Failed to acquire dquot type 0 [ 281.476246][T15325] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #16: comm syz.9.3807: corrupted inode contents [ 281.490268][T15325] EXT4-fs error (device loop9): ext4_dirty_inode:6042: inode #16: comm syz.9.3807: mark_inode_dirty error [ 281.503877][T15325] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #16: comm syz.9.3807: corrupted inode contents [ 281.519606][T15325] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #16: comm syz.9.3807: mark_inode_dirty error [ 281.537789][T15325] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #16: comm syz.9.3807: corrupted inode contents [ 281.551526][T15325] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 281.582508][T15325] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #16: comm syz.9.3807: corrupted inode contents [ 281.642368][T15325] EXT4-fs error (device loop9): ext4_truncate:4240: inode #16: comm syz.9.3807: mark_inode_dirty error [ 281.665788][T15351] SELinux: failed to load policy [ 281.694445][T15325] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 281.717870][T15325] EXT4-fs (loop9): 1 truncate cleaned up [ 281.724026][T15325] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.752831][T15359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.772260][T15325] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.802178][T15362] pim6reg1: entered promiscuous mode [ 281.807596][T15362] pim6reg1: entered allmulticast mode [ 281.817504][T15359] __nla_validate_parse: 1 callbacks suppressed [ 281.817520][T15359] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3818'. [ 281.831655][T15366] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3822'. [ 281.867730][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3818'. [ 281.910477][T15371] pim6reg1: entered promiscuous mode [ 281.916003][T15371] pim6reg1: entered allmulticast mode [ 281.978297][T15386] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3826'. [ 282.168245][T15403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.204551][T15418] FAULT_INJECTION: forcing a failure. [ 282.204551][T15418] name failslab, interval 1, probability 0, space 0, times 0 [ 282.217366][T15418] CPU: 1 UID: 0 PID: 15418 Comm: syz.7.3837 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 282.217437][T15418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 282.217452][T15418] Call Trace: [ 282.217459][T15418] [ 282.217468][T15418] dump_stack_lvl+0xf2/0x150 [ 282.217504][T15418] dump_stack+0x15/0x1a [ 282.217532][T15418] should_fail_ex+0x24a/0x260 [ 282.217584][T15418] should_failslab+0x8f/0xb0 [ 282.217623][T15418] kmem_cache_alloc_node_noprof+0x59/0x320 [ 282.217657][T15418] ? __alloc_skb+0x10b/0x310 [ 282.217687][T15418] __alloc_skb+0x10b/0x310 [ 282.217868][T15418] netlink_alloc_large_skb+0xad/0xe0 [ 282.217908][T15418] netlink_sendmsg+0x3b4/0x6e0 [ 282.217990][T15418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.218013][T15418] __sock_sendmsg+0x140/0x180 [ 282.218095][T15418] ____sys_sendmsg+0x326/0x4b0 [ 282.218180][T15418] __sys_sendmsg+0x19d/0x230 [ 282.218228][T15418] __x64_sys_sendmsg+0x46/0x50 [ 282.218269][T15418] x64_sys_call+0x2734/0x2dc0 [ 282.218303][T15418] do_syscall_64+0xc9/0x1c0 [ 282.218351][T15418] ? clear_bhb_loop+0x55/0xb0 [ 282.218412][T15418] ? clear_bhb_loop+0x55/0xb0 [ 282.218512][T15418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.218546][T15418] RIP: 0033:0x7f8bd1ccd169 [ 282.218564][T15418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.218584][T15418] RSP: 002b:00007f8bd0331038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.218664][T15418] RAX: ffffffffffffffda RBX: 00007f8bd1ee5fa0 RCX: 00007f8bd1ccd169 [ 282.218680][T15418] RDX: 0000000000000040 RSI: 00002000000007c0 RDI: 0000000000000006 [ 282.218696][T15418] RBP: 00007f8bd0331090 R08: 0000000000000000 R09: 0000000000000000 [ 282.218762][T15418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.218775][T15418] R13: 0000000000000000 R14: 00007f8bd1ee5fa0 R15: 00007ffee4594278 [ 282.218797][T15418] [ 282.219471][T15403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.423629][T15416] loop1: detected capacity change from 0 to 256 [ 282.457222][T15403] rdma_rxe: rxe_newlink: failed to add lo [ 282.478202][T15424] pim6reg1: entered promiscuous mode [ 282.483690][T15424] pim6reg1: entered allmulticast mode [ 282.500661][T15425] loop9: detected capacity change from 0 to 256 [ 282.576786][T15427] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=15427 comm=syz.1.3841 [ 282.590970][T15429] pim6reg1: entered promiscuous mode [ 282.596393][T15429] pim6reg1: entered allmulticast mode [ 282.643714][T15435] loop9: detected capacity change from 0 to 512 [ 282.650553][T15435] EXT4-fs: Ignoring removed nobh option [ 282.661488][T15430] lo speed is unknown, defaulting to 1000 [ 282.670365][T15438] xt_TPROXY: Can be used only with -p tcp or -p udp [ 282.695521][T15430] vxcan1 speed is unknown, defaulting to 1000 [ 282.703999][T15435] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #3: comm syz.9.3845: corrupted inode contents [ 282.718155][T15435] EXT4-fs error (device loop9): ext4_dirty_inode:6042: inode #3: comm syz.9.3845: mark_inode_dirty error [ 282.730043][T15435] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #3: comm syz.9.3845: corrupted inode contents [ 282.743719][T15435] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #3: comm syz.9.3845: mark_inode_dirty error [ 282.757219][T15435] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.3845: Failed to acquire dquot type 0 [ 282.777733][T15435] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #16: comm syz.9.3845: corrupted inode contents [ 282.809553][T15435] EXT4-fs error (device loop9): ext4_dirty_inode:6042: inode #16: comm syz.9.3845: mark_inode_dirty error [ 282.829261][T15435] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #16: comm syz.9.3845: corrupted inode contents [ 282.849616][T15435] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #16: comm syz.9.3845: mark_inode_dirty error [ 282.863497][T15435] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #16: comm syz.9.3845: corrupted inode contents [ 282.887924][T15435] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 282.908198][T15435] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #16: comm syz.9.3845: corrupted inode contents [ 282.922925][T15435] EXT4-fs error (device loop9): ext4_truncate:4240: inode #16: comm syz.9.3845: mark_inode_dirty error [ 282.937104][T15435] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 282.953707][T15435] EXT4-fs (loop9): 1 truncate cleaned up [ 282.967603][T15463] FAULT_INJECTION: forcing a failure. [ 282.967603][T15463] name failslab, interval 1, probability 0, space 0, times 0 [ 282.980456][T15463] CPU: 1 UID: 0 PID: 15463 Comm: syz.7.3851 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 282.980488][T15463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 282.980503][T15463] Call Trace: [ 282.980511][T15463] [ 282.980595][T15463] dump_stack_lvl+0xf2/0x150 [ 282.980625][T15463] dump_stack+0x15/0x1a [ 282.980671][T15463] should_fail_ex+0x24a/0x260 [ 282.980773][T15463] should_failslab+0x8f/0xb0 [ 282.980805][T15463] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 282.980842][T15463] ? sidtab_sid2str_get+0xb8/0x140 [ 282.980882][T15463] kmemdup_noprof+0x2b/0x70 [ 282.980912][T15463] sidtab_sid2str_get+0xb8/0x140 [ 282.980943][T15463] security_sid_to_context_core+0x1eb/0x2f0 [ 282.981015][T15463] security_sid_to_context+0x27/0x30 [ 282.981060][T15463] selinux_lsm_getattr+0x1c8/0x240 [ 282.981097][T15463] selinux_getselfattr+0x51/0xe0 [ 282.981120][T15463] security_getselfattr+0x258/0x590 [ 282.981145][T15463] __x64_sys_lsm_get_self_attr+0x53/0x60 [ 282.981202][T15463] x64_sys_call+0x2644/0x2dc0 [ 282.981308][T15463] do_syscall_64+0xc9/0x1c0 [ 282.981341][T15463] ? clear_bhb_loop+0x55/0xb0 [ 282.981374][T15463] ? clear_bhb_loop+0x55/0xb0 [ 282.981406][T15463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.981467][T15463] RIP: 0033:0x7f8bd1ccd169 [ 282.981485][T15463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.981503][T15463] RSP: 002b:00007f8bd0331038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 282.981588][T15463] RAX: ffffffffffffffda RBX: 00007f8bd1ee5fa0 RCX: 00007f8bd1ccd169 [ 282.981604][T15463] RDX: 0000200000001280 RSI: 0000000000000000 RDI: 0000000000000064 [ 282.981619][T15463] RBP: 00007f8bd0331090 R08: 0000000000000000 R09: 0000000000000000 [ 282.981633][T15463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.981647][T15463] R13: 0000000000000000 R14: 00007f8bd1ee5fa0 R15: 00007ffee4594278 [ 282.981734][T15463] [ 282.983034][T15435] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.204107][T15435] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.223639][T15468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3853'. [ 283.298612][T15470] loop7: detected capacity change from 0 to 1024 [ 283.333656][T15470] EXT4-fs: Ignoring removed nobh option [ 283.339445][T15470] EXT4-fs: Ignoring removed bh option [ 283.367429][T15470] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.403380][T15482] pim6reg1: entered promiscuous mode [ 283.408790][T15482] pim6reg1: entered allmulticast mode [ 283.478665][T15485] SELinux: failed to load policy [ 283.488006][T15488] loop3: detected capacity change from 0 to 1024 [ 283.513421][T15488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.538883][T15492] lo: entered promiscuous mode [ 283.543729][T15492] lo: entered allmulticast mode [ 283.549953][T15492] tunl0: entered promiscuous mode [ 283.555041][T15492] tunl0: entered allmulticast mode [ 283.576332][T13833] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.581554][T15495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.590951][T15492] gre0: entered promiscuous mode [ 283.596471][T15495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.598758][T15492] gre0: entered allmulticast mode [ 283.608903][T15495] rdma_rxe: rxe_newlink: failed to add lo [ 283.618950][T15497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3863'. [ 283.621437][T15488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3862'. [ 283.638706][T15492] gretap0: entered promiscuous mode [ 283.643995][T15492] gretap0: entered allmulticast mode [ 283.650940][T15492] erspan0: entered promiscuous mode [ 283.656339][T15492] erspan0: entered allmulticast mode [ 283.663157][T15492] ip_vti0: entered promiscuous mode [ 283.668469][T15492] ip_vti0: entered allmulticast mode [ 283.675571][T15492] ip6_vti0: entered promiscuous mode [ 283.680939][T15492] ip6_vti0: entered allmulticast mode [ 283.687668][T15492] sit0: entered promiscuous mode [ 283.692642][T15492] sit0: entered allmulticast mode [ 283.699198][T15492] ip6tnl0: entered promiscuous mode [ 283.704445][T15492] ip6tnl0: entered allmulticast mode [ 283.711144][T15492] ip6gre0: entered promiscuous mode [ 283.716512][T15492] ip6gre0: entered allmulticast mode [ 283.723315][T15492] syz_tun: entered promiscuous mode [ 283.728676][T15492] syz_tun: entered allmulticast mode [ 283.730827][T15512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3862'. [ 283.735308][T15492] ip6gretap0: entered promiscuous mode [ 283.748443][T15492] ip6gretap0: entered allmulticast mode [ 283.755487][T15492] bridge0: entered promiscuous mode [ 283.760777][T15492] bridge0: entered allmulticast mode [ 283.767578][T15492] vcan0: entered promiscuous mode [ 283.772732][T15492] vcan0: entered allmulticast mode [ 283.779908][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3863'. [ 283.783836][T15492] bond0: entered promiscuous mode [ 283.793957][T15492] bond_slave_0: entered promiscuous mode [ 283.799764][T15492] bond_slave_1: entered promiscuous mode [ 283.805594][T15492] bond0: entered allmulticast mode [ 283.810856][T15492] bond_slave_0: entered allmulticast mode [ 283.816811][T15492] bond_slave_1: entered allmulticast mode [ 283.825050][T15492] team0: entered promiscuous mode [ 283.830181][T15492] team_slave_0: entered promiscuous mode [ 283.836169][T15492] team_slave_1: entered promiscuous mode [ 283.841987][T15492] team0: entered allmulticast mode [ 283.847172][T15492] team_slave_0: entered allmulticast mode [ 283.852943][T15492] team_slave_1: entered allmulticast mode [ 283.863381][T15492] dummy0: entered promiscuous mode [ 283.868612][T15492] dummy0: entered allmulticast mode [ 283.879629][T15492] nlmon0: entered promiscuous mode [ 283.884892][T15492] nlmon0: entered allmulticast mode [ 283.897399][T15492] caif0: entered promiscuous mode [ 283.902551][T15492] caif0: entered allmulticast mode [ 283.907843][T15492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.941818][T15522] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3867'. [ 284.033530][T15531] xt_TPROXY: Can be used only with -p tcp or -p udp [ 284.106591][ T29] kauditd_printk_skb: 411 callbacks suppressed [ 284.106608][ T29] audit: type=1326 audit(284.144:24829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.1.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 284.140847][T15540] pim6reg1: entered promiscuous mode [ 284.146430][T15540] pim6reg1: entered allmulticast mode [ 284.156928][ T29] audit: type=1326 audit(284.174:24830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.1.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 284.180067][ T29] audit: type=1326 audit(284.174:24831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.1.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 284.183917][T15541] SELinux: failed to load policy [ 284.203255][ T29] audit: type=1326 audit(284.174:24832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.1.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 284.231264][ T29] audit: type=1326 audit(284.174:24833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.1.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 284.254400][ T29] audit: type=1326 audit(284.174:24834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.1.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 284.277326][ T29] audit: type=1326 audit(284.174:24835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.1.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 284.300384][ T29] audit: type=1326 audit(284.174:24836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.1.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 284.323363][ T29] audit: type=1326 audit(284.174:24837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.1.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 284.346491][ T29] audit: type=1326 audit(284.174:24838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.1.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 284.439363][T11394] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.468474][T15552] pim6reg1: entered promiscuous mode [ 284.473925][T15552] pim6reg1: entered allmulticast mode [ 284.539185][T15560] pim6reg1: entered promiscuous mode [ 284.544563][T15560] pim6reg1: entered allmulticast mode [ 284.587769][T15573] xt_TPROXY: Can be used only with -p tcp or -p udp [ 284.595089][T15567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.723088][T15594] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 284.727046][T15582] loop3: detected capacity change from 0 to 128 [ 284.739216][T15594] SELinux: failed to load policy [ 284.749591][T15596] pim6reg1: entered promiscuous mode [ 284.755115][T15596] pim6reg1: entered allmulticast mode [ 284.791151][T15600] xt_TPROXY: Can be used only with -p tcp or -p udp [ 284.851338][T15606] pim6reg1: entered promiscuous mode [ 284.856772][T15606] pim6reg1: entered allmulticast mode [ 284.879022][T15611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.894914][T15582] loop3: detected capacity change from 0 to 512 [ 284.911935][T15582] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 284.928276][T15582] EXT4-fs (loop3): mount failed [ 284.976301][T15626] FAULT_INJECTION: forcing a failure. [ 284.976301][T15626] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 284.989667][T15626] CPU: 1 UID: 0 PID: 15626 Comm: syz.9.3899 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 284.989716][T15626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 284.989729][T15626] Call Trace: [ 284.989736][T15626] [ 284.989743][T15626] dump_stack_lvl+0xf2/0x150 [ 284.989839][T15626] dump_stack+0x15/0x1a [ 284.989955][T15626] should_fail_ex+0x24a/0x260 [ 284.989987][T15626] should_fail_alloc_page+0xfd/0x110 [ 284.990048][T15626] __alloc_frozen_pages_noprof+0x109/0x340 [ 284.990081][T15626] alloc_pages_mpol+0xb4/0x260 [ 284.990113][T15626] vma_alloc_folio_noprof+0x1a0/0x310 [ 284.990150][T15626] handle_mm_fault+0xdd7/0x2b00 [ 284.990178][T15626] exc_page_fault+0x296/0x650 [ 284.990263][T15626] ? pagemap_pte_hole+0x24c/0x280 [ 284.990296][T15626] asm_exc_page_fault+0x26/0x30 [ 284.990323][T15626] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 284.990349][T15626] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 284.990368][T15626] RSP: 0018:ffffc900025d3d58 EFLAGS: 00050206 [ 284.990390][T15626] RAX: ffff888119974c88 RBX: 0000200000002240 RCX: 0000000000000240 [ 284.990402][T15626] RDX: 0000000000000000 RSI: ffff88810b748dc0 RDI: 0000200000002000 [ 284.990451][T15626] RBP: 0000000000001000 R08: 0000000080000000 R09: 0000000000000000 [ 284.990463][T15626] R10: 000188810b748000 R11: 000188810b748fff R12: 0000000000001000 [ 284.990476][T15626] R13: 00007ffffffff000 R14: 0000200000001240 R15: ffff88810b748000 [ 284.990494][T15626] _copy_to_user+0x7c/0xa0 [ 284.990515][T15626] pagemap_read+0x3af/0x610 [ 284.990546][T15626] ? __pfx_pagemap_read+0x10/0x10 [ 284.990575][T15626] vfs_read+0x19b/0x6f0 [ 284.990599][T15626] ? __fget_files+0x17c/0x1c0 [ 284.990664][T15626] ? __rcu_read_unlock+0x4e/0x70 [ 284.990687][T15626] ? __fget_files+0x17c/0x1c0 [ 284.990780][T15626] __x64_sys_pread64+0xf6/0x150 [ 284.990809][T15626] x64_sys_call+0x26ee/0x2dc0 [ 284.990837][T15626] do_syscall_64+0xc9/0x1c0 [ 284.990879][T15626] ? clear_bhb_loop+0x55/0xb0 [ 284.990907][T15626] ? clear_bhb_loop+0x55/0xb0 [ 284.990990][T15626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.991018][T15626] RIP: 0033:0x7f78427cd169 [ 284.991032][T15626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.991051][T15626] RSP: 002b:00007f7840e31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 284.991069][T15626] RAX: ffffffffffffffda RBX: 00007f78429e5fa0 RCX: 00007f78427cd169 [ 284.991081][T15626] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000005 [ 284.991093][T15626] RBP: 00007f7840e31090 R08: 0000000000000000 R09: 0000000000000000 [ 284.991114][T15626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.991200][T15626] R13: 0000000000000000 R14: 00007f78429e5fa0 R15: 00007ffc493d6f98 [ 284.991218][T15626] [ 285.467818][T15640] xt_TPROXY: Can be used only with -p tcp or -p udp [ 285.582601][T15650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.802007][T15668] netlink: 'syz.3.3915': attribute type 3 has an invalid length. [ 286.446409][T15654] Set syz1 is full, maxelem 65536 reached [ 286.567018][T15681] loop1: detected capacity change from 0 to 1024 [ 286.609274][T15681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.717832][T15690] loop7: detected capacity change from 0 to 1024 [ 286.724722][T15690] EXT4-fs: Ignoring removed nobh option [ 286.730504][T15690] EXT4-fs: Ignoring removed bh option [ 286.736236][T15685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.756643][T15690] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.791579][T15688] xt_TPROXY: Can be used only with -p tcp or -p udp [ 286.806245][T15695] xt_TPROXY: Can be used only with -p tcp or -p udp [ 286.885898][T15700] pim6reg1: entered promiscuous mode [ 286.891394][T15700] pim6reg1: entered allmulticast mode [ 286.903239][T13833] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.916816][T15701] netlink: 'syz.9.3927': attribute type 3 has an invalid length. [ 286.924655][T15701] __nla_validate_parse: 9 callbacks suppressed [ 286.924668][T15701] netlink: 130984 bytes leftover after parsing attributes in process `syz.9.3927'. [ 287.014460][T15713] veth0_vlan: entered allmulticast mode [ 287.030201][T15713] veth0_vlan: left promiscuous mode [ 287.035808][T15713] veth0_vlan: entered promiscuous mode [ 287.041475][T15713] FAULT_INJECTION: forcing a failure. [ 287.041475][T15713] name failslab, interval 1, probability 0, space 0, times 0 [ 287.054129][T15713] CPU: 0 UID: 0 PID: 15713 Comm: syz.8.3932 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 287.054157][T15713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 287.054171][T15713] Call Trace: [ 287.054233][T15713] [ 287.054241][T15713] dump_stack_lvl+0xf2/0x150 [ 287.054269][T15713] dump_stack+0x15/0x1a [ 287.054289][T15713] should_fail_ex+0x24a/0x260 [ 287.054342][T15713] should_failslab+0x8f/0xb0 [ 287.054373][T15713] kmem_cache_alloc_node_noprof+0x59/0x320 [ 287.054399][T15713] ? __alloc_skb+0x10b/0x310 [ 287.054425][T15713] __alloc_skb+0x10b/0x310 [ 287.054500][T15713] rtmsg_ifinfo_build_skb+0x63/0x1b0 [ 287.054529][T15713] rtmsg_ifinfo+0x6b/0x100 [ 287.054556][T15713] __dev_notify_flags+0x75/0x1a0 [ 287.054613][T15713] dev_change_flags+0xab/0xd0 [ 287.054638][T15713] dev_ifsioc+0x67c/0xa10 [ 287.054668][T15713] dev_ioctl+0x7fa/0xab0 [ 287.054693][T15713] sock_do_ioctl+0x11c/0x260 [ 287.054727][T15713] sock_ioctl+0x40f/0x600 [ 287.054796][T15713] ? __pfx_sock_ioctl+0x10/0x10 [ 287.054831][T15713] __se_sys_ioctl+0xc9/0x140 [ 287.054890][T15713] __x64_sys_ioctl+0x43/0x50 [ 287.054953][T15713] x64_sys_call+0x1690/0x2dc0 [ 287.055046][T15713] do_syscall_64+0xc9/0x1c0 [ 287.055087][T15713] ? clear_bhb_loop+0x55/0xb0 [ 287.055122][T15713] ? clear_bhb_loop+0x55/0xb0 [ 287.055207][T15713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.055241][T15713] RIP: 0033:0x7fdb8445d169 [ 287.055315][T15713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.055334][T15713] RSP: 002b:00007fdb82ac7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.055352][T15713] RAX: ffffffffffffffda RBX: 00007fdb84675fa0 RCX: 00007fdb8445d169 [ 287.055364][T15713] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000009 [ 287.055443][T15713] RBP: 00007fdb82ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 287.055460][T15713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.055475][T15713] R13: 0000000000000000 R14: 00007fdb84675fa0 R15: 00007fff35ecc6f8 [ 287.055511][T15713] [ 287.324516][T15721] lo: entered promiscuous mode [ 287.329492][T15721] lo: entered allmulticast mode [ 287.340068][T15721] tunl0: entered promiscuous mode [ 287.345308][T15721] tunl0: entered allmulticast mode [ 287.352213][T15721] gre0: entered promiscuous mode [ 287.357219][T15721] gre0: entered allmulticast mode [ 287.363336][T15721] gretap0: entered promiscuous mode [ 287.368594][T15721] gretap0: entered allmulticast mode [ 287.392130][T15721] erspan0: entered promiscuous mode [ 287.397434][T15721] erspan0: entered allmulticast mode [ 287.404712][T15721] ip_vti0: entered promiscuous mode [ 287.410042][T15721] ip_vti0: entered allmulticast mode [ 287.418117][T15721] ip6_vti0: entered promiscuous mode [ 287.423472][T15721] ip6_vti0: entered allmulticast mode [ 287.430620][T15721] sit0: entered promiscuous mode [ 287.435760][T15721] sit0: entered allmulticast mode [ 287.442101][T15721] ip6tnl0: entered promiscuous mode [ 287.447373][T15721] ip6tnl0: entered allmulticast mode [ 287.454406][T15721] ip6gre0: entered promiscuous mode [ 287.459778][T15721] ip6gre0: entered allmulticast mode [ 287.466897][T15721] syz_tun: entered promiscuous mode [ 287.472234][T15721] syz_tun: entered allmulticast mode [ 287.478944][T15721] ip6gretap0: entered promiscuous mode [ 287.484510][T15721] ip6gretap0: entered allmulticast mode [ 287.491430][T15721] bridge0: entered promiscuous mode [ 287.496764][T15721] bridge0: entered allmulticast mode [ 287.503462][T15721] vcan0: entered promiscuous mode [ 287.508601][T15721] vcan0: entered allmulticast mode [ 287.514283][T15721] bond0: entered promiscuous mode [ 287.519643][T15721] bond_slave_1: entered promiscuous mode [ 287.525176][T15726] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3934'. [ 287.525488][T15721] bond0: entered allmulticast mode [ 287.539464][T15721] bond_slave_1: entered allmulticast mode [ 287.548088][T15721] team0: entered promiscuous mode [ 287.553156][T15721] team_slave_0: entered promiscuous mode [ 287.558913][T15721] team_slave_1: entered promiscuous mode [ 287.564718][T15721] team0: entered allmulticast mode [ 287.568420][T14356] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.569976][T15721] team_slave_0: entered allmulticast mode [ 287.569993][T15721] team_slave_1: entered allmulticast mode [ 287.572375][T15721] dummy0: entered promiscuous mode [ 287.595953][T15721] dummy0: entered allmulticast mode [ 287.602480][T15721] nlmon0: entered promiscuous mode [ 287.607761][T15721] nlmon0: entered allmulticast mode [ 287.616254][T15721] caif0: entered promiscuous mode [ 287.621326][T15721] caif0: entered allmulticast mode [ 287.626590][T15721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.626844][T15728] loop1: detected capacity change from 0 to 2048 [ 287.667856][T15728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.685913][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3935'. [ 287.696732][T15728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3935'. [ 287.837478][T15755] netlink: 'syz.3.3940': attribute type 3 has an invalid length. [ 287.845369][T15755] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3940'. [ 287.888704][T15751] xt_TPROXY: Can be used only with -p tcp or -p udp [ 287.911666][T15760] loop3: detected capacity change from 0 to 128 [ 287.919687][T15760] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 287.937215][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 287.963922][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 288.035952][T15745] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3935: bg 0: block 345: padding at end of block bitmap is not set [ 288.057429][T15745] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 288.070037][T15745] EXT4-fs (loop1): This should not happen!! Data will be lost [ 288.070037][T15745] [ 288.092739][T11394] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.122891][ T5173] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 288.135640][ T5173] EXT4-fs (loop1): This should not happen!! Data will be lost [ 288.135640][ T5173] [ 288.146752][T15772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.160943][ T5173] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 288.168199][T15772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3946'. [ 288.174956][ T5173] EXT4-fs (loop1): This should not happen!! Data will be lost [ 288.174956][ T5173] [ 288.193599][ T5173] EXT4-fs (loop1): Total free blocks count 0 [ 288.199630][ T5173] EXT4-fs (loop1): Free/Dirty block details [ 288.205600][ T5173] EXT4-fs (loop1): free_blocks=0 [ 288.264394][T15784] netlink: 'syz.8.3951': attribute type 3 has an invalid length. [ 288.272265][T15784] netlink: 130984 bytes leftover after parsing attributes in process `syz.8.3951'. [ 288.322315][T15791] loop8: detected capacity change from 0 to 1024 [ 288.341921][T15791] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.357843][T15791] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3953'. [ 288.396266][T15799] FAULT_INJECTION: forcing a failure. [ 288.396266][T15799] name failslab, interval 1, probability 0, space 0, times 0 [ 288.409059][T15799] CPU: 1 UID: 0 PID: 15799 Comm: syz.1.3956 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 288.409099][T15799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 288.409167][T15799] Call Trace: [ 288.409175][T15799] [ 288.409182][T15799] dump_stack_lvl+0xf2/0x150 [ 288.409255][T15799] dump_stack+0x15/0x1a [ 288.409282][T15799] should_fail_ex+0x24a/0x260 [ 288.409351][T15799] should_failslab+0x8f/0xb0 [ 288.409425][T15799] kmem_cache_alloc_noprof+0x52/0x320 [ 288.409454][T15799] ? audit_log_start+0x34c/0x6b0 [ 288.409497][T15799] audit_log_start+0x34c/0x6b0 [ 288.409537][T15799] audit_seccomp+0x4b/0x130 [ 288.409634][T15799] __seccomp_filter+0x6fa/0x1180 [ 288.409660][T15799] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 288.409711][T15799] ? vfs_write+0x644/0x920 [ 288.409749][T15799] __secure_computing+0x9f/0x1c0 [ 288.409776][T15799] syscall_trace_enter+0xd1/0x1f0 [ 288.409807][T15799] ? fpregs_assert_state_consistent+0x83/0xa0 [ 288.409861][T15799] do_syscall_64+0xaa/0x1c0 [ 288.409893][T15799] ? clear_bhb_loop+0x55/0xb0 [ 288.409952][T15799] ? clear_bhb_loop+0x55/0xb0 [ 288.409983][T15799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.410029][T15799] RIP: 0033:0x7f77acc6d169 [ 288.410097][T15799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.410119][T15799] RSP: 002b:00007f77ab2d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 288.410142][T15799] RAX: ffffffffffffffda RBX: 00007f77ace85fa0 RCX: 00007f77acc6d169 [ 288.410157][T15799] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 288.410203][T15799] RBP: 00007f77ab2d7090 R08: 0000000000000001 R09: 0000000000000000 [ 288.410219][T15799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.410234][T15799] R13: 0000000000000000 R14: 00007f77ace85fa0 R15: 00007ffed944f4c8 [ 288.410257][T15799] [ 289.114666][ T29] kauditd_printk_skb: 1130 callbacks suppressed [ 289.114681][ T29] audit: type=1326 audit(289.154:25966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15822 comm="syz.3.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f3f65f7d169 code=0x7ffc0000 [ 289.148766][T15823] pim6reg1: entered promiscuous mode [ 289.154118][T15823] pim6reg1: entered allmulticast mode [ 289.162010][ T29] audit: type=1326 audit(289.154:25967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.1.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f77acc64127 code=0x7ffc0000 [ 289.185210][ T29] audit: type=1326 audit(289.154:25968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.1.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f77acc09359 code=0x7ffc0000 [ 289.208208][ T29] audit: type=1326 audit(289.154:25969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.1.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 289.231256][ T29] audit: type=1326 audit(289.164:25970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.1.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f77acc64127 code=0x7ffc0000 [ 289.254232][ T29] audit: type=1326 audit(289.164:25971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.1.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f77acc09359 code=0x7ffc0000 [ 289.277306][ T29] audit: type=1326 audit(289.164:25972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.1.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 289.300315][ T29] audit: type=1326 audit(289.174:25973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.1.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f77acc64127 code=0x7ffc0000 [ 289.323291][ T29] audit: type=1326 audit(289.174:25974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.1.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f77acc09359 code=0x7ffc0000 [ 289.346344][ T29] audit: type=1326 audit(289.174:25975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.1.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f77acc6d169 code=0x7ffc0000 [ 289.373003][ T9106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.396669][T15825] netlink: 4 bytes leftover after parsing attributes in process `'. [ 289.405135][T15825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.412635][T15825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.420481][T15825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.428108][T15825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.557872][T15836] xt_TPROXY: Can be used only with -p tcp or -p udp [ 289.614327][T15840] pim6reg1: entered promiscuous mode [ 289.619876][T15840] pim6reg1: entered allmulticast mode [ 289.735182][T15846] xt_TPROXY: Can be used only with -p tcp or -p udp [ 289.742818][T15848] FAULT_INJECTION: forcing a failure. [ 289.742818][T15848] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 289.756247][T15848] CPU: 1 UID: 0 PID: 15848 Comm: syz.9.3977 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 289.756279][T15848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 289.756375][T15848] Call Trace: [ 289.756382][T15848] [ 289.756390][T15848] dump_stack_lvl+0xf2/0x150 [ 289.756424][T15848] dump_stack+0x15/0x1a [ 289.756451][T15848] should_fail_ex+0x24a/0x260 [ 289.756520][T15848] should_fail_alloc_page+0xfd/0x110 [ 289.756561][T15848] __alloc_frozen_pages_noprof+0x109/0x340 [ 289.756603][T15848] __alloc_pages_noprof+0x9/0x20 [ 289.756649][T15848] ___kmalloc_large_node+0x7a/0x120 [ 289.756676][T15848] __kmalloc_large_node_noprof+0x17/0xa0 [ 289.756706][T15848] __kmalloc_noprof+0x2b8/0x3f0 [ 289.756814][T15848] ? iovec_from_user+0x84/0x210 [ 289.756842][T15848] iovec_from_user+0x84/0x210 [ 289.756869][T15848] process_vm_rw+0x1c2/0x890 [ 289.756902][T15848] ? kstrtouint_from_user+0xb0/0xe0 [ 289.756942][T15848] ? __fget_files+0x17c/0x1c0 [ 289.756985][T15848] ? fput+0x1c4/0x200 [ 289.757016][T15848] ? ksys_write+0x176/0x1b0 [ 289.757050][T15848] __x64_sys_process_vm_readv+0x7a/0x90 [ 289.757080][T15848] x64_sys_call+0xb24/0x2dc0 [ 289.757111][T15848] do_syscall_64+0xc9/0x1c0 [ 289.757147][T15848] ? clear_bhb_loop+0x55/0xb0 [ 289.757256][T15848] ? clear_bhb_loop+0x55/0xb0 [ 289.757290][T15848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.757348][T15848] RIP: 0033:0x7f78427cd169 [ 289.757394][T15848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.757417][T15848] RSP: 002b:00007f7840e31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 289.757441][T15848] RAX: ffffffffffffffda RBX: 00007f78429e5fa0 RCX: 00007f78427cd169 [ 289.757515][T15848] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000453 [ 289.757531][T15848] RBP: 00007f7840e31090 R08: 0000000000000286 R09: 0000000000000000 [ 289.757547][T15848] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001 [ 289.757562][T15848] R13: 0000000000000000 R14: 00007f78429e5fa0 R15: 00007ffc493d6f98 [ 289.757582][T15848] [ 290.046554][T15855] xt_TPROXY: Can be used only with -p tcp or -p udp [ 290.052581][T15856] pim6reg1: entered promiscuous mode [ 290.058698][T15856] pim6reg1: entered allmulticast mode [ 290.078777][T15860] xt_TPROXY: Can be used only with -p tcp or -p udp [ 290.155126][T15865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3985'. [ 290.201481][T15865] bond2: entered promiscuous mode [ 290.206710][T15865] bond2: entered allmulticast mode [ 290.212124][T15865] 8021q: adding VLAN 0 to HW filter on device bond2 [ 290.221964][T15865] bond2 (unregistering): Released all slaves [ 290.330088][T15892] SELinux: failed to load policy [ 290.358770][T15890] xt_NFQUEUE: number of total queues is 0 [ 290.365232][T15897] loop7: detected capacity change from 0 to 2048 [ 290.376015][T15897] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.600844][T15901] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3996: bg 0: block 345: padding at end of block bitmap is not set [ 290.615644][T15901] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 290.628225][T15901] EXT4-fs (loop7): This should not happen!! Data will be lost [ 290.628225][T15901] [ 290.658910][ T4016] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 290.671722][ T4016] EXT4-fs (loop7): This should not happen!! Data will be lost [ 290.671722][ T4016] [ 290.703280][ T5156] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 290.716196][ T5156] EXT4-fs (loop7): This should not happen!! Data will be lost [ 290.716196][ T5156] [ 290.725869][ T5156] EXT4-fs (loop7): Total free blocks count 0 [ 290.731861][ T5156] EXT4-fs (loop7): Free/Dirty block details [ 290.737885][ T5156] EXT4-fs (loop7): free_blocks=0 [ 290.812016][T15904] xt_TPROXY: Can be used only with -p tcp or -p udp [ 290.879325][T15908] pim6reg1: entered promiscuous mode [ 290.884699][T15908] pim6reg1: entered allmulticast mode [ 290.987528][T15915] loop7: detected capacity change from 0 to 2048 [ 291.021114][T15915] bridge_slave_0: left allmulticast mode [ 291.026861][T15915] bridge_slave_0: left promiscuous mode [ 291.032597][T15915] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.043830][T15915] bridge_slave_1: left allmulticast mode [ 291.049685][T15915] bridge_slave_1: left promiscuous mode [ 291.055450][T15915] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.065519][T15915] bond0: (slave bond_slave_1): Releasing backup interface [ 291.074183][T15915] bond_slave_1: left promiscuous mode [ 291.080061][T15915] bond_slave_1: left allmulticast mode [ 291.087659][T15915] team_slave_0: left promiscuous mode [ 291.093204][T15915] team_slave_0: left allmulticast mode [ 291.111060][T15915] team0: Port device team_slave_0 removed [ 291.118440][T15915] team_slave_1: left promiscuous mode [ 291.123905][T15915] team_slave_1: left allmulticast mode [ 291.131566][T15915] team0: Port device team_slave_1 removed [ 291.138366][T15915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.145942][T15915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.154950][T15915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.162401][T15915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.213197][T15924] loop3: detected capacity change from 0 to 512 [ 291.327113][T15933] xt_TPROXY: Can be used only with -p tcp or -p udp [ 291.520142][T15951] loop7: detected capacity change from 0 to 1024 [ 291.527231][T15951] EXT4-fs: Ignoring removed nobh option [ 291.532858][T15951] EXT4-fs: Ignoring removed bh option [ 291.557670][T15951] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.606590][T15958] loop3: detected capacity change from 0 to 1024 [ 291.613465][T15958] EXT4-fs: Ignoring removed nobh option [ 291.614377][T13833] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.619226][T15958] EXT4-fs: Ignoring removed bh option [ 291.636904][T15958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.676390][T11394] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.727951][T15967] loop3: detected capacity change from 0 to 1024 [ 291.737205][T15967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.755573][T15965] xt_NFQUEUE: number of total queues is 0 [ 291.793819][T15972] pim6reg1: entered promiscuous mode [ 291.799259][T15972] pim6reg1: entered allmulticast mode [ 292.012116][T15993] loop1: detected capacity change from 0 to 512 [ 292.034720][T15993] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 292.089888][T15993] EXT4-fs (loop1): 1 truncate cleaned up [ 292.096283][T15993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.116194][T15995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.124869][T15995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.134075][T15995] rdma_rxe: rxe_newlink: failed to add lo [ 292.283680][T16000] pim6reg1: entered promiscuous mode [ 292.289096][T16000] pim6reg1: entered allmulticast mode [ 292.370004][T16002] loop8: detected capacity change from 0 to 1024 [ 292.389201][T16002] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.407238][T16002] __nla_validate_parse: 12 callbacks suppressed [ 292.407258][T16002] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4025'. [ 292.433361][T16002] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4025'. [ 292.509169][T16006] loop7: detected capacity change from 0 to 1024 [ 292.522255][T16006] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.540483][T16006] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4026'. [ 292.551231][T16006] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4026'. [ 292.745491][T11394] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.844216][T16016] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4030'. [ 292.888400][T14356] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.891528][T16020] xt_TPROXY: Can be used only with -p tcp or -p udp [ 292.980128][T16025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4033'. [ 292.996189][T16025] vlan2: entered promiscuous mode [ 293.028021][T16023] xt_TPROXY: Can be used only with -p tcp or -p udp [ 293.179000][T16029] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4035'. [ 293.278881][ T9106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.316481][T16032] xt_NFQUEUE: number of total queues is 0 [ 293.397967][T13833] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.591617][T16042] lo speed is unknown, defaulting to 1000 [ 293.633558][T16042] vxcan1 speed is unknown, defaulting to 1000 [ 293.802303][T16044] pim6reg1: entered promiscuous mode [ 293.807763][T16044] pim6reg1: entered allmulticast mode [ 293.912789][T16057] xt_TPROXY: Can be used only with -p tcp or -p udp [ 293.924465][T16059] loop9: detected capacity change from 0 to 256 [ 293.969093][T16066] loop7: detected capacity change from 0 to 1024 [ 293.976638][T16066] EXT4-fs: Ignoring removed nobh option [ 293.982235][T16066] EXT4-fs: Ignoring removed bh option [ 293.997314][T16066] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.035193][T16078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4050'. [ 294.064247][T13833] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.113761][T16083] xt_TPROXY: Can be used only with -p tcp or -p udp [ 294.286590][ T29] kauditd_printk_skb: 726 callbacks suppressed [ 294.286608][ T29] audit: type=1400 audit(294.324:26702): avc: denied { read } for pid=16103 comm="syz.8.4061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 294.313294][T16096] xt_NFQUEUE: number of total queues is 0 [ 294.389583][T16114] xt_NFQUEUE: number of total queues is 0 [ 294.399666][T16125] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=16125 comm=syz.8.4064 [ 294.429006][ T29] audit: type=1326 audit(294.464:26703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16130 comm="syz.9.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78427cd169 code=0x7ffc0000 [ 294.457182][ T29] audit: type=1326 audit(294.464:26704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16130 comm="syz.9.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78427cd169 code=0x7ffc0000 [ 294.480345][ T29] audit: type=1326 audit(294.464:26705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16130 comm="syz.9.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78427cd169 code=0x7ffc0000 [ 294.503412][ T29] audit: type=1326 audit(294.464:26706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16130 comm="syz.9.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78427cd169 code=0x7ffc0000 [ 294.526493][ T29] audit: type=1326 audit(294.464:26707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16130 comm="syz.9.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78427cd169 code=0x7ffc0000 [ 294.549617][ T29] audit: type=1326 audit(294.464:26708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16130 comm="syz.9.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f78427cd169 code=0x7ffc0000 [ 294.572664][ T29] audit: type=1326 audit(294.464:26709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16130 comm="syz.9.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78427cd169 code=0x7ffc0000 [ 294.596100][ T29] audit: type=1326 audit(294.464:26710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16130 comm="syz.9.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78427cd169 code=0x7ffc0000 [ 294.619842][ T29] audit: type=1326 audit(294.464:26711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16130 comm="syz.9.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78427cd169 code=0x7ffc0000 [ 294.744335][T16143] loop9: detected capacity change from 0 to 1024 [ 294.751528][T16143] EXT4-fs: Ignoring removed nobh option [ 294.757205][T16143] EXT4-fs: Ignoring removed bh option [ 294.766143][T16143] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.808365][ T9389] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.834015][T16147] loop9: detected capacity change from 0 to 1024 [ 294.843282][T16147] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.965588][ T9389] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.986618][T16150] loop9: detected capacity change from 0 to 128 [ 294.993203][T16150] vfat: Unknown parameter '' [ 295.002955][T16150] loop9: detected capacity change from 0 to 512 [ 295.016857][T16150] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.029967][T16152] loop7: detected capacity change from 0 to 1024 [ 295.048295][ T9389] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.049467][T16152] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.073823][T16152] FAULT_INJECTION: forcing a failure. [ 295.073823][T16152] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 295.087219][T16152] CPU: 1 UID: 0 PID: 16152 Comm: syz.7.4075 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 295.087306][T16152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 295.087320][T16152] Call Trace: [ 295.087328][T16152] [ 295.087337][T16152] dump_stack_lvl+0xf2/0x150 [ 295.087372][T16152] dump_stack+0x15/0x1a [ 295.087436][T16152] should_fail_ex+0x24a/0x260 [ 295.087476][T16152] should_fail_alloc_page+0xfd/0x110 [ 295.087517][T16152] __alloc_frozen_pages_noprof+0x109/0x340 [ 295.087560][T16152] alloc_pages_mpol+0xb4/0x260 [ 295.087715][T16152] alloc_pages_noprof+0xe8/0x130 [ 295.087747][T16152] pte_alloc_one+0x31/0x110 [ 295.087770][T16152] ? __rcu_read_unlock+0x4e/0x70 [ 295.087793][T16152] handle_mm_fault+0x10ce/0x2b00 [ 295.087823][T16152] exc_page_fault+0x296/0x650 [ 295.087930][T16152] asm_exc_page_fault+0x26/0x30 [ 295.087961][T16152] RIP: 0010:__get_user_8+0x18/0x30 [ 295.087989][T16152] Code: 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 [ 295.088138][T16152] RSP: 0018:ffffc900015dbec0 EFLAGS: 00050283 [ 295.088159][T16152] RAX: 0000200000000040 RBX: ffffc900015dbf58 RCX: ffff888103332100 [ 295.088175][T16152] RDX: 00007ffffffff000 RSI: 0000200000000040 RDI: 00000000000005ff [ 295.088191][T16152] RBP: ffffc900015dbf48 R08: 0001c900015dbfc7 R09: 0000000000000000 [ 295.088206][T16152] R10: 0001ffffffffffff R11: 0000000000000000 R12: 0000000000000000 [ 295.088218][T16152] R13: 00000000000005ff R14: 00000000000005ff R15: 0000200000000040 [ 295.088239][T16152] __se_sys_io_setup+0x1d/0x1b0 [ 295.088301][T16152] __x64_sys_io_setup+0x31/0x40 [ 295.088333][T16152] x64_sys_call+0x160f/0x2dc0 [ 295.088382][T16152] do_syscall_64+0xc9/0x1c0 [ 295.088422][T16152] ? clear_bhb_loop+0x55/0xb0 [ 295.088452][T16152] ? clear_bhb_loop+0x55/0xb0 [ 295.088506][T16152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.088541][T16152] RIP: 0033:0x7f8bd1ccd169 [ 295.088560][T16152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.088582][T16152] RSP: 002b:00007f8bd0331038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 295.088603][T16152] RAX: ffffffffffffffda RBX: 00007f8bd1ee5fa0 RCX: 00007f8bd1ccd169 [ 295.088618][T16152] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 00000000000005ff [ 295.088632][T16152] RBP: 00007f8bd0331090 R08: 0000000000000000 R09: 0000000000000000 [ 295.088722][T16152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.088734][T16152] R13: 0000000000000000 R14: 00007f8bd1ee5fa0 R15: 00007ffee4594278 [ 295.088755][T16152] [ 295.390700][T16159] loop9: detected capacity change from 0 to 1024 [ 295.399229][T16159] EXT4-fs (loop9): can't mount with journal_checksum, fs mounted w/o journal [ 295.399481][T13833] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.421444][T16159] netlink: 208 bytes leftover after parsing attributes in process `syz.9.4077'. [ 295.447014][T16165] loop8: detected capacity change from 0 to 512 [ 295.463787][T16165] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 295.491514][T16167] tproxy_tg6_check: 2 callbacks suppressed [ 295.491532][T16167] xt_TPROXY: Can be used only with -p tcp or -p udp [ 295.503210][T16165] EXT4-fs (loop8): 1 truncate cleaned up [ 295.510102][T16165] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.655965][T16179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.664472][T16179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.681369][T16190] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 295.691233][T16190] SELinux: failed to load policy [ 295.697045][T16179] rdma_rxe: rxe_newlink: failed to add lo [ 295.779799][T16194] pim6reg1: entered promiscuous mode [ 295.785186][T16194] pim6reg1: entered allmulticast mode [ 295.894007][T16198] loop1: detected capacity change from 0 to 1024 [ 295.944339][T16198] EXT4-fs: Ignoring removed nobh option [ 295.950340][T16198] EXT4-fs: Ignoring removed bh option [ 296.018230][T16198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.116346][T14356] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.223358][T16215] loop1: detected capacity change from 0 to 2048 [ 296.223746][T16217] xt_TPROXY: Can be used only with -p tcp or -p udp [ 296.247945][T16215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.265921][T16215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4093'. [ 296.349767][ T9106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.566771][T16227] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4093: bg 0: block 345: padding at end of block bitmap is not set [ 296.581499][T16227] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 296.594148][T16227] EXT4-fs (loop1): This should not happen!! Data will be lost [ 296.594148][T16227] [ 296.608338][T16251] loop8: detected capacity change from 0 to 2048 [ 296.639280][T16251] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.660866][ T5165] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 296.673665][ T5165] EXT4-fs (loop1): This should not happen!! Data will be lost [ 296.673665][ T5165] [ 296.686684][T16256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.705488][T16256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.734985][T16253] rdma_rxe: rxe_newlink: failed to add lo [ 296.741787][ T5154] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 296.754636][ T5154] EXT4-fs (loop1): This should not happen!! Data will be lost [ 296.754636][ T5154] [ 296.764305][ T5154] EXT4-fs (loop1): Total free blocks count 0 [ 296.770455][ T5154] EXT4-fs (loop1): Free/Dirty block details [ 296.776396][ T5154] EXT4-fs (loop1): free_blocks=0 [ 296.939030][T16280] xt_TPROXY: Can be used only with -p tcp or -p udp [ 297.084064][T16257] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4102: bg 0: block 345: padding at end of block bitmap is not set [ 297.098835][T16257] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 297.111418][T16257] EXT4-fs (loop8): This should not happen!! Data will be lost [ 297.111418][T16257] [ 297.144407][ T5208] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 297.157175][ T5208] EXT4-fs (loop8): This should not happen!! Data will be lost [ 297.157175][ T5208] [ 297.184820][ T5208] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 297.197746][ T5208] EXT4-fs (loop8): This should not happen!! Data will be lost [ 297.197746][ T5208] [ 297.207394][ T5208] EXT4-fs (loop8): Total free blocks count 0 [ 297.213372][ T5208] EXT4-fs (loop8): Free/Dirty block details [ 297.219296][ T5208] EXT4-fs (loop8): free_blocks=0 [ 297.278904][T16305] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=16305 comm=syz.8.4118 [ 297.299575][T16307] loop9: detected capacity change from 0 to 1024 [ 297.311080][T16307] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.683009][T16350] xt_TPROXY: Can be used only with -p tcp or -p udp [ 297.872952][T16360] loop7: detected capacity change from 0 to 512 [ 297.890585][T16360] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 297.912135][T16360] EXT4-fs (loop7): 1 truncate cleaned up [ 297.918318][T16360] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.278526][ T9389] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.290638][T16378] __nla_validate_parse: 5 callbacks suppressed [ 298.290658][T16378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4135'. [ 298.386296][T16369] lo speed is unknown, defaulting to 1000 [ 298.449592][T16378] bond0: (slave bond_slave_0): Releasing backup interface [ 298.520967][T16378] bond_slave_0 (unregistering): left promiscuous mode [ 298.527864][T16378] bond_slave_0 (unregistering): left allmulticast mode [ 298.567014][T16369] vxcan1 speed is unknown, defaulting to 1000 [ 298.586891][T16388] pim6reg1: entered promiscuous mode [ 298.592465][T16388] pim6reg1: entered allmulticast mode [ 298.778419][T13833] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.904436][T16420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.917248][T16420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.947129][T16427] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=16427 comm=syz.1.4151 [ 298.966061][T16420] rdma_rxe: rxe_newlink: failed to add lo [ 299.133317][T16446] lo speed is unknown, defaulting to 1000 [ 299.169787][T16448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4154'. [ 299.190773][T16451] loop7: detected capacity change from 0 to 128 [ 299.204325][T16446] vxcan1 speed is unknown, defaulting to 1000 [ 299.205318][T16451] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 299.284488][T16451] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 299.284672][T16447] lo speed is unknown, defaulting to 1000 [ 299.332838][T16451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.347247][T16454] pim6reg1: entered promiscuous mode [ 299.352581][T16454] pim6reg1: entered allmulticast mode [ 299.364178][T16447] vxcan1 speed is unknown, defaulting to 1000 [ 299.364178][T16451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.498404][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 299.498423][ T29] audit: type=1326 audit(299.534:27049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f65f7d169 code=0x7ffc0000 [ 299.557954][T16464] xt_TPROXY: Can be used only with -p tcp or -p udp [ 299.579354][ T29] audit: type=1326 audit(299.574:27050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f65f7d169 code=0x7ffc0000 [ 299.602494][ T29] audit: type=1326 audit(299.574:27051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f65f7d169 code=0x7ffc0000 [ 299.625618][ T29] audit: type=1326 audit(299.574:27052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f65f7d169 code=0x7ffc0000 [ 299.648644][ T29] audit: type=1326 audit(299.574:27053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f65f7d169 code=0x7ffc0000 [ 299.671729][ T29] audit: type=1326 audit(299.574:27054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f65f7d169 code=0x7ffc0000 [ 299.694656][ T29] audit: type=1326 audit(299.574:27055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f65f7d169 code=0x7ffc0000 [ 299.717713][ T29] audit: type=1326 audit(299.574:27056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f65f7d169 code=0x7ffc0000 [ 299.740737][ T29] audit: type=1326 audit(299.574:27057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f65f7d169 code=0x7ffc0000 [ 299.763727][ T29] audit: type=1326 audit(299.574:27058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f65f7d169 code=0x7ffc0000 [ 299.904296][T16483] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=16483 comm=syz.1.4162 [ 300.035875][T16490] lo speed is unknown, defaulting to 1000 [ 300.074565][T16503] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.085786][T16500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4165'. [ 300.123374][T16499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.124870][T16495] lo speed is unknown, defaulting to 1000 [ 300.133055][T16499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.137980][T16490] vxcan1 speed is unknown, defaulting to 1000 [ 300.166745][T16507] FAULT_INJECTION: forcing a failure. [ 300.166745][T16507] name failslab, interval 1, probability 0, space 0, times 0 [ 300.179512][T16507] CPU: 0 UID: 0 PID: 16507 Comm: syz.1.4167 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 300.179581][T16507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 300.179597][T16507] Call Trace: [ 300.179605][T16507] [ 300.179615][T16507] dump_stack_lvl+0xf2/0x150 [ 300.179646][T16507] dump_stack+0x15/0x1a [ 300.179740][T16507] should_fail_ex+0x24a/0x260 [ 300.179771][T16507] ? usb_control_msg+0x59/0x240 [ 300.179796][T16507] should_failslab+0x8f/0xb0 [ 300.179834][T16507] __kmalloc_cache_noprof+0x4e/0x320 [ 300.179946][T16507] usb_control_msg+0x59/0x240 [ 300.179968][T16507] hub_suspend+0x4a2/0x560 [ 300.180009][T16507] usb_suspend_both+0x16a/0x9a0 [ 300.180041][T16507] ? __pfx_usb_runtime_suspend+0x10/0x10 [ 300.180094][T16507] usb_runtime_suspend+0x4a/0xd0 [ 300.180129][T16507] ? __pfx_usb_runtime_suspend+0x10/0x10 [ 300.180226][T16507] __rpm_callback+0x299/0x720 [ 300.180253][T16507] ? __pfx_usb_runtime_suspend+0x10/0x10 [ 300.180285][T16507] rpm_suspend+0x6e4/0x1020 [ 300.180310][T16507] ? avc_has_extended_perms+0x6e9/0x8e0 [ 300.180358][T16507] __pm_runtime_suspend+0xf1/0x210 [ 300.180380][T16507] usb_autosuspend_device+0x40/0x50 [ 300.180580][T16507] usbdev_ioctl+0x2465/0x3f20 [ 300.180622][T16507] ? ioctl_has_perm+0x28d/0x2e0 [ 300.180663][T16507] ? do_vfs_ioctl+0x98b/0x1590 [ 300.180722][T16507] ? selinux_file_ioctl+0x2f7/0x380 [ 300.180753][T16507] ? __fget_files+0x17c/0x1c0 [ 300.180792][T16507] ? __pfx_usbdev_ioctl+0x10/0x10 [ 300.180853][T16507] __se_sys_ioctl+0xc9/0x140 [ 300.180879][T16507] __x64_sys_ioctl+0x43/0x50 [ 300.180908][T16507] x64_sys_call+0x1690/0x2dc0 [ 300.180934][T16507] do_syscall_64+0xc9/0x1c0 [ 300.181081][T16507] ? clear_bhb_loop+0x55/0xb0 [ 300.181120][T16507] ? clear_bhb_loop+0x55/0xb0 [ 300.181152][T16507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.181217][T16507] RIP: 0033:0x7f77acc6d169 [ 300.181234][T16507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.181374][T16507] RSP: 002b:00007f77ab295038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.181394][T16507] RAX: ffffffffffffffda RBX: 00007f77ace86160 RCX: 00007f77acc6d169 [ 300.181408][T16507] RDX: 0000000000000000 RSI: 0000000000005522 RDI: 0000000000000005 [ 300.181423][T16507] RBP: 00007f77ab295090 R08: 0000000000000000 R09: 0000000000000000 [ 300.181437][T16507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.181451][T16507] R13: 0000000000000000 R14: 00007f77ace86160 R15: 00007ffed944f4c8 [ 300.181471][T16507] [ 300.461484][T16503] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.498453][T16495] vxcan1 speed is unknown, defaulting to 1000 [ 300.548566][T16499] rdma_rxe: rxe_newlink: failed to add lo [ 300.592392][T16503] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.649487][T16503] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.743702][T16503] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.757559][T16503] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.778450][T16503] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.790389][T16503] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.888500][T16518] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.954309][T16523] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 301.094117][T16530] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=16530 comm=syz.9.4173 [ 301.127851][T16532] xt_TPROXY: Can be used only with -p tcp or -p udp [ 301.159870][T16534] loop9: detected capacity change from 0 to 1024 [ 301.180147][T16534] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.197049][T16534] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4175'. [ 301.216132][T16534] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4175'. [ 302.053866][ T9389] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.076230][T16546] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=16546 comm=syz.9.4178 [ 302.131419][T16552] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.149394][T16552] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4182'. [ 302.169012][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4182'. [ 302.516986][T16571] loop7: detected capacity change from 0 to 128 [ 302.526177][T16570] loop3: detected capacity change from 0 to 1024 [ 302.540587][T16568] lo speed is unknown, defaulting to 1000 [ 302.545003][T16571] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 302.566830][T16570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.598596][T16570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4189'. [ 302.614654][T16571] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 302.636485][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4189'. [ 302.656348][T16571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.785185][T16571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.810315][T16568] vxcan1 speed is unknown, defaulting to 1000 [ 302.981481][T16585] loop9: detected capacity change from 0 to 1024 [ 302.991203][T16585] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.009631][T16585] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4194'. [ 303.145713][T16587] ================================================================== [ 303.153868][T16587] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / inode_cgwb_move_to_attached [ 303.163721][T16587] [ 303.166065][T16587] write to 0xffff88815ad8b7b8 of 4 bytes by task 16585 on cpu 0: [ 303.173804][T16587] inode_cgwb_move_to_attached+0x9a/0x300 [ 303.179565][T16587] writeback_single_inode+0x2b5/0x3f0 [ 303.184992][T16587] sync_inode_metadata+0x5c/0x90 [ 303.189957][T16587] generic_buffers_fsync_noflush+0xd8/0x120 [ 303.195877][T16587] ext4_sync_file+0x1ff/0x6c0 [ 303.200640][T16587] vfs_fsync_range+0x116/0x130 [ 303.205433][T16587] ext4_buffered_write_iter+0x358/0x3c0 [ 303.211020][T16587] ext4_file_write_iter+0x383/0xf20 [ 303.216299][T16587] iter_file_splice_write+0x5f1/0x980 [ 303.221702][T16587] direct_splice_actor+0x160/0x2c0 [ 303.226841][T16587] splice_direct_to_actor+0x302/0x670 [ 303.232251][T16587] do_splice_direct+0xd7/0x150 [ 303.237035][T16587] do_sendfile+0x398/0x660 [ 303.241473][T16587] __x64_sys_sendfile64+0x110/0x150 [ 303.246712][T16587] x64_sys_call+0xfbd/0x2dc0 [ 303.251342][T16587] do_syscall_64+0xc9/0x1c0 [ 303.255894][T16587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.261821][T16587] [ 303.264154][T16587] read to 0xffff88815ad8b7b8 of 4 bytes by task 16587 on cpu 1: [ 303.271816][T16587] generic_buffers_fsync_noflush+0x83/0x120 [ 303.277761][T16587] ext4_sync_file+0x1ff/0x6c0 [ 303.282481][T16587] vfs_fsync_range+0x116/0x130 [ 303.287286][T16587] ext4_buffered_write_iter+0x358/0x3c0 [ 303.292865][T16587] ext4_file_write_iter+0x383/0xf20 [ 303.298115][T16587] iter_file_splice_write+0x5f1/0x980 [ 303.303597][T16587] direct_splice_actor+0x160/0x2c0 [ 303.308747][T16587] splice_direct_to_actor+0x302/0x670 [ 303.314157][T16587] do_splice_direct+0xd7/0x150 [ 303.318955][T16587] do_sendfile+0x398/0x660 [ 303.323444][T16587] __x64_sys_sendfile64+0x110/0x150 [ 303.328688][T16587] x64_sys_call+0xfbd/0x2dc0 [ 303.333391][T16587] do_syscall_64+0xc9/0x1c0 [ 303.337952][T16587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.343877][T16587] [ 303.346207][T16587] value changed: 0x00000002 -> 0x00000020 [ 303.351940][T16587] [ 303.354277][T16587] Reported by Kernel Concurrency Sanitizer on: [ 303.360523][T16587] CPU: 1 UID: 0 PID: 16587 Comm: syz.9.4194 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 303.371316][T16587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 303.381395][T16587] ================================================================== [ 303.414109][T11394] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.904070][ T9389] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.