last executing test programs: 3m39.373406601s ago: executing program 0 (id=583): r0 = io_uring_setup(0xf10, &(0x7f000000c480)={0x0, 0xeb9e, 0x1000, 0x1, 0x10000003}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r2 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x2cb}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) getrlimit(0x1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r0], 0x1) 3m39.358181461s ago: executing program 0 (id=584): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0204, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffb, 0x6}, 0x4104, 0x6, 0x7, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x33, 0x0, &(0x7f0000000080)) ioctl$PIO_SCRNMAP(r1, 0x4b52, &(0x7f0000000180)="b52be39221") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) iopl(0xf9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu<00\t&&') 3m39.130475234s ago: executing program 0 (id=591): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) open(0x0, 0x14927e, 0x86) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r7], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") r8 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r9 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$9p(r8, &(0x7f0000001400)="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", 0x200) sendfile(r8, r9, 0x0, 0xe065) 3m38.65297071s ago: executing program 0 (id=594): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = inotify_init() r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000000000000153d3000000000005"]) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000181100", @ANYBLOB="0000000000000000b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT=r8, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r9 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file2', 0x3a, [0x46, 0x43, 0x43]}, 0x32) 3m37.998569558s ago: executing program 0 (id=598): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 3m37.631803333s ago: executing program 0 (id=607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000019c0)={0x28, r1, 0xacf5e67dd0b583a1, 0x70bd29, 0x0, {{0x5}, {@val={0x7}, @val={0xc}}}}, 0x28}}, 0x0) 3m37.631679773s ago: executing program 32 (id=607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000019c0)={0x28, r1, 0xacf5e67dd0b583a1, 0x70bd29, 0x0, {{0x5}, {@val={0x7}, @val={0xc}}}}, 0x28}}, 0x0) 2m23.075715375s ago: executing program 5 (id=1936): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xa7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 2m23.069449875s ago: executing program 5 (id=1938): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pause() 2m21.995452249s ago: executing program 5 (id=1949): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280), 0x10, 0x4dc, &(0x7f0000000d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000005600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b010000edff0500fe7f0014a155a2c525861237", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000003280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa2000000000062f532d1532e6865ffb703000008000000b70400000000000003000000030000009500000040000000666c4d3eecf5ed3a670f739a46917945e0d8df7061c8e4514eeeb80133b340315c8ddd5a10bba910c8987a584f863dc25f0a2e647f6e95d4d1bc6209dc2af103d3986d7db8cb314b19381e40d2a0f4d5da4d1075e6c1867c371a1c1d21724279f89bc37c76188ceb1efdd7884ad3b5b2e6b90467e7c202486d080642842ffcf5163d45b7c643a9256991"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r9 = socket(0x25, 0x801, 0x0) recvfrom$phonet(r9, 0x0, 0x0, 0x300, 0x0, 0x0) sendmsg$inet(r9, &(0x7f0000000a40)={&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000000bc0)="eb9a550069df91b2240f6678eb59f483177e59653522784129ee2254c21705f0791ba37613a28911fed77ed69ff98b72c9e663b2fc31770aea3a1007f1802c2ac605be36fc2e79a94fc7631e6303aa091ebadc048faddf1d12862cf5c33fc7c767fa2925823cb4e2f7fe0d86b5291fe1ce39b3f35424f20239ea7017297937505b0a6a7fd95b0a8a3bd5e0bbd5416827378537d04488d5dbd66d5e300468c7780ea042c746d86dcf61ed2fbbd57f9e65a9b77fff80349d3cdb41e5b84290247a8ea1f67b1fd7835f784cdf02c97edac248088a80a673170d0d2f50852784105722d092", 0xe3}, {&(0x7f00000000c0)="2bc4a986d1a6605a0c569bb7980648cc6b481842eb32c1f0a870e38661e52210a3bca84a30ed2700945289b52833050b303c577f33ecf58efab5e3b62e4affeb34c05efe8bd99963895c0886f41584c3e039b44c2c57bf91e2b4c87ccfe797a727b9ae17aac22fd5204c7b0b36e3577df6", 0x71}, {&(0x7f0000000180)="6047a9d0da80438e20be8aca970fc8a2877f3c7d166d7e2828cc6dbb5779c0", 0x1f}, {&(0x7f0000000900)="c485f4b8a4f9cd71861825d1653781e03dad999eca2ebeb44afda08fc2fe74d36045407ad35fc7680e094285d8451709635d0235cc168b9d730288c15217cb64a794afe8faa5d268184353cf93d2d0d6e70847c03196f43f09d8dcfc28b9384691511c496c8a12e6e1359b312496c7fedbfe9e52f9f18d72fcc7df1714a3005bf85b9707f970b8ba4541e780aa0bef01a96930b750e2d19211eb207492e3c29ac194c1d4e42fe8112a604a1adac4", 0xae}, {&(0x7f0000002280)="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", 0x1000}], 0x6, &(0x7f00000001c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}], 0x30}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m20.990752822s ago: executing program 5 (id=1960): r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3f, 0x1, 0xfc, 0x0, 0x0, 0x5c0ea7d2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000007c0)}, 0x0, 0xe10c, 0x1003, 0x3, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x52684b3d5af16373) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)=ANY=[], 0x4c}, 0x1, 0xba01, 0x0, 0x20004011}, 0x810) sendmmsg$inet(r3, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000034"], 0x30}}], 0x1, 0x4008804) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000ac0)=ANY=[@ANYRES8, @ANYRES16=r8, @ANYRESHEX=0x0], 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r1}, &(0x7f0000000580), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r6}, 0x18) r7 = socket(0x22, 0x2, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) accept$unix(r7, &(0x7f0000000040)=@abs, 0x0) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m19.759508608s ago: executing program 33 (id=1979): setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x42}}, 0x8) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r6}, 0x18) r7 = socket(0x22, 0x2, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) accept$unix(r7, &(0x7f0000000040)=@abs, 0x0) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m10.765060696s ago: executing program 4 (id=2108): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97", 0xbd}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 2m10.763947926s ago: executing program 4 (id=2111): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pause() 2m9.814337308s ago: executing program 4 (id=2115): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 2m9.786258309s ago: executing program 4 (id=2116): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x2208017, &(0x7f0000000040), 0x1, 0x509, &(0x7f0000001500)="$eJzs3U1vG3kZAPBnJnY3abM4CxyWldhdsYuSiq2TbOhuxGFZJASnlYDlXkLiRlGcuCRO20QVpOIDICEESFzgxAXBB0BC/QgIqRK9I0AgBC0cOBQG2R6HNLXz0jp2G/9+0r/z4pl5nqeRx/OfGXsCGFqvR8RURGRZll2MiFI+P81b7LZaY7kH928tNloSWfbh35NI8nntbb2QDy/kq41GxNe+HPHN5PG4m9s7qwvVamUjn56uryUPs2zn0srawnJlubI+Nzf7zvy785fnZ3pS50REvPfFP//wez//0nu/eevGH678derbrQJb9tfRVVY6cdxW6cXm/0VbISI2TrylZ1ehWWHL5QHnAgDA4RpHtB+NiE9FxMUoxUjzaA4AAAA4S7LPj8fDpHX9DwAAADib0ogYjyQt5/f7jkealsute3g/HufTam2z/pl9971ORDG9ulKtzOT3DkxEMWlMv5/fY9uefvvA9FxEvBQRPyiNNafLi7Xq0kDPfAAAAMDwuHCg//+vUqv/DwAAAJwxE4NOAAAAADh1B/v/IwPKAwAAADg9rv8DAADAmfaVDz5otKz9/Oul69tbq7Xrl5Yqm6vlta3F8mJt41p5uVZbbv5m39pR26vWatc+G+tbN6frlc369Ob2zpW12tZ6/crKI4/ABgAAAPropdfu3EsiYvdzY2lEZMm+14oR2SNfBSj0Pz/g9KQnWfhPp5cH0H++6gfDyyE9DK/ioBMABu6o/UDXm3d+2/tcAACA0zH5ib3r/80GDI/8+n+SPNnqv/xWT7MB+sn1fxhe5wadADAwxcOOAJ6wUwA8P9JjvNWf/vp/lp0oKQAAoOfGmy1Jy3k/YDzStFyOeLH5WIBicnWlWpmJiI9ExO9LxRca07PNNROnBwAAAAAAAAAAAAAAAAAAAAAAAADgmLIsiayLsb1lAAAAgOdZRPqXJH/+12TpzfGD5wfOJf8uRf6c0Bs/+fBHNxfq9Y3Zxvx/7M2v/zif/3a/z14AAAAAnbT76e1+PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD00oP7txbbrZ9x//aFiJjoFL8Qo83haBQj4vw/kyjsWy+JiJEexN+9HREvd4qfNNKKiTyLg/HTiBgbcPwLPYgPw+xOY//zfqf3XxqvN4ed33+FvD2t7vu/dG//N9Jl//dipw2mj8965e6vprvGvx3xSqHz/qcR/1yMNmN1iv/GMWv8xtd3drq9lv0sYrLj50/ySKzppHBtenN759LK2sJyZbmyPjc3+878u/OX52emr65UK/m/HWN8/5O//u9h9Z/vEn+iOexe/5vHrP8/d2/e/1hrtHjgpWL8NMum3uj893+5S/z2Z9+n8z93Y3qyPb7bGt/v1V/87tXXDql/qUv9o0fUP3XM+i9+9bt/POaiAEAfbG7vrC5Uq5UNI2dmpHFs9gyksW9krJ/5LMRhy7QPYvuQz3fyUKdf8r23Inq95QHulAAAgFPx/4P+QWcCAAAAAAAAAAAAAAAAAAAAw+uonwGLHvyc2MGYu4MpFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgUP8LAAD//1c4yxQ=") 2m9.154803747s ago: executing program 4 (id=2127): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa000000000000, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x1000003, 0x300102, 0x0, 'queue1\x00', 0xffffffff}) r3 = dup(r2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000001280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xf963}}) 2m8.8766322s ago: executing program 4 (id=2135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m8.87646714s ago: executing program 34 (id=2135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m32.600643883s ago: executing program 1 (id=2633): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32=0xffffffffffffffff], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/252, 0xfc}], 0x1, 0xfffffffe, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r4, 0x0, 0x1, 0x0) vmsplice(r4, &(0x7f0000001100)=[{&(0x7f0000000000)="5890", 0x2}], 0x1, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffda5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYRES8, @ANYRES8=r1], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) unshare(0x2040400) r6 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES8, @ANYRES16=r4], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x43, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES64=r7, @ANYRES32=r6], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0xfff}, 0x18) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0xb1b5, @remote, 0x5}}, 0x0, 0x0, 0x21, 0x0, "4a22054a113c4e6a6441c95e924e5ac215c3f021e20910ab2342440105c2c922314eee028327683f9666b2bde1771d77e135c795add941275fa007400de28642170f168a01b0d18615f7cce748b59580"}, 0xd8) r11 = socket$kcm(0x10, 0x2, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r12, 0x6, 0x21, &(0x7f0000000000)="adbcc72ca6d732549f13db1a0206c4583a651644a810e3241e5547ad229e6b5c", 0x20) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000480)={[{@acl}]}, 0x1, 0x797, &(0x7f00000017c0)="$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") r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r13, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x8, 0x0) ioctl$FS_IOC_FIEMAP(r13, 0xc020660b, &(0x7f0000001280)=ANY=[@ANYBLOB="ea28115d00defdbac3"]) recvmsg(r11, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 1m31.547841967s ago: executing program 1 (id=2655): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setgid(0x0) 1m31.472661398s ago: executing program 1 (id=2657): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000200)=ANY=[], 0x1, 0x2bb, &(0x7f0000000440)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 1m31.152310272s ago: executing program 1 (id=2665): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, 0x0) mkdir(0x0, 0x26) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd, 0x2}, 0x8012, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) modify_ldt$write(0x1, &(0x7f0000000300)={0x9, 0x20000000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x1}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ef00000000bfa200000000000007060000f8ffffffb703000008000000b70400002728b948850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000080), 0xfe, 0x272, &(0x7f0000000c80)="$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") prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='kfree\x00') r1 = epoll_create1(0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000200)={0x40002019}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6de6b45"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x57, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) syz_clone(0x66000, &(0x7f0000000540)="3de72cfeae", 0x5, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r3, 0xffffffffffffffff, 0x17, 0x0, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e6", 0x1}], 0x1}}], 0x1, 0x24040890) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) clock_adjtime(0xffffffd3, 0x0) 1m29.83526714s ago: executing program 1 (id=2677): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280), 0x10, 0x4dc, &(0x7f0000000d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0400000000000000005600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b010000edff0500fe7f0014a155a2c525861237", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000003280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa2000000000062f532d1532e6865ffb703000008000000b70400000000000003000000030000009500000040000000666c4d3eecf5ed3a670f739a46917945e0d8df7061c8e4514eeeb80133b340315c8ddd5a10bba910c8987a584f863dc25f0a2e647f6e95d4d1bc6209dc2af103d3986d7db8cb314b19381e40d2a0f4d5da4d1075e6c1867c371a1c1d21724279f89bc37c76188ceb1efdd7884ad3b5b2e6b90467e7c202486d080642842ffcf5163d45b7c643a9256991"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r9 = socket(0x25, 0x801, 0x0) recvfrom$phonet(r9, 0x0, 0x0, 0x300, 0x0, 0x0) sendmsg$inet(r9, &(0x7f0000000a40)={&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000000bc0)="eb9a550069df91b2240f6678eb59f483177e59653522784129ee2254c21705f0791ba37613a28911fed77ed69ff98b72c9e663b2fc31770aea3a1007f1802c2ac605be36fc2e79a94fc7631e6303aa091ebadc048faddf1d12862cf5c33fc7c767fa2925823cb4e2f7fe0d86b5291fe1ce39b3f35424f20239ea7017297937505b0a6a7fd95b0a8a3bd5e0bbd5416827378537d04488d5dbd66d5e300468c7780ea042c746d86dcf61ed2fbbd57f9e65a9b77fff80349d3cdb41e5b84290247a8ea1f67b1fd7835f784cdf02c97edac248088a80a673170d0d2f50852784105722d092", 0xe3}, {&(0x7f00000000c0)="2bc4a986d1a6605a0c569bb7980648cc6b481842eb32c1f0a870e38661e52210a3bca84a30ed2700945289b52833050b303c577f33ecf58efab5e3b62e4affeb34c05efe8bd99963895c0886f41584c3e039b44c2c57bf91e2b4c87ccfe797a727b9ae17aac22fd5204c7b0b36e3577df6", 0x71}, {&(0x7f0000000180)="6047a9d0da80438e20be8aca970fc8a2877f3c7d166d7e2828cc6dbb5779c0", 0x1f}, {&(0x7f0000000900)="c485f4b8a4f9cd71861825d1653781e03dad999eca2ebeb44afda08fc2fe74d36045407ad35fc7680e094285d8451709635d0235cc168b9d730288c15217cb64a794afe8faa5d268184353cf93d2d0d6e70847c03196f43f09d8dcfc28b9384691511c496c8a12e6e1359b312496c7fedbfe9e52f9f18d72fcc7df1714a3005bf85b9707f970b8ba4541e780aa0bef01a96930b750e2d19211eb207492e3c29ac194c1d4e42fe8112a604a1adac4", 0xae}, {&(0x7f0000002280)="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", 0x1000}], 0x6, &(0x7f00000001c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}], 0x30}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m27.995424954s ago: executing program 1 (id=2701): r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) io_pgetevents(0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x0) 1m27.992421704s ago: executing program 35 (id=2701): r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) io_pgetevents(0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x0) 2.732295755s ago: executing program 8 (id=4350): socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f000001fe80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0xfbb0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x169) write$binfmt_elf64(r3, 0x0, 0x78) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) 2.728328385s ago: executing program 2 (id=4353): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r3, &(0x7f0000000640)={&(0x7f0000000300), 0x10, &(0x7f0000000500)}, 0x0) 2.664703076s ago: executing program 8 (id=4355): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x1000000, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r5}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xbed}, 0x18) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2, 0x3, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.625694216s ago: executing program 2 (id=4357): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000000500000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x76, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60cb653e00403a0000000000000000000000ffffac147667a6f3f9ede5f000000000000000000201030090780000000060256b5400000000ff0100000000e3a41300000000000000000001fe80000000000000000000000000000021000000000000000001000000000000035fd0edde03452154f33f907e4f97826fc800e3aaf3d5372bc58ac68f9fcb10f619515f08c1ed255c2171edc38e66f1ab4871ff6d8f1aaafe20877eaaf81c35f97fe2b28bf1a982"], 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'tunl0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)='?', 0x5cc, 0x0, &(0x7f0000000540)={0x11, 0xb, r3, 0x1, 0xfd, 0x6, @multicast}, 0x14) getpgrp(r1) prlimit64(r1, 0x5, &(0x7f0000000040)={0x397e6a24, 0x1}, &(0x7f00000000c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x94, 0x0, &(0x7f0000000100)="7da22c2af6c8df53ef25b72c9998e67d9a511d993dda8bb939c46215765f0a873b240b7fde2822f31f868f6404002e4dfa7de4d18d8d5b8370e719ff72916dd07938d024fd9485fb0f5f0af0c7ae90a0084c8931c2c95f48145a6d272c7421ad8fedcf151d2ac31a3fa8c02d7c336e7a66108e195b10add9dad09efae168d7940848f9dd60ac7872884bde4d5e5888e77c46847a", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x80000000}}, 0x10) 2.30364726s ago: executing program 2 (id=4362): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30"], 0x104}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) write$UHID_INPUT(r5, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r5, 0x2000, {0x2a00, 0x80010000, 0x0, 0xe01, 0x0, 0x0, 0x0, 0x0, 0x1c, "001ea89d9bb7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000de000000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x10000]}}) 2.274103931s ago: executing program 8 (id=4365): openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]}) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xffffffff}, 0x18) r3 = socket$rds(0x15, 0x5, 0x0) socket(0x40000000002, 0x3, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340), r8) sendmsg$NET_DM_CMD_START(r9, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r10, 0x4, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48c1) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) socket$inet6(0xa, 0x1, 0x0) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x0, 0x2}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1, 0x0, 0x7ff}}], 0x90}, 0x0) 2.134747953s ago: executing program 2 (id=4369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26100000000000bf67200000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.134222413s ago: executing program 3 (id=4370): sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000002153ec0022000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f0000000080)=ANY=[], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x13) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x4030}]) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021000103a00fe8000000000000000000000000000aaff020000000085000000000000000010018c009078000600000000000000000006"], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000000000000000000000952c2bc5be487aa6"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrusage(0x0, &(0x7f0000000a40)) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) add_key$keyring(&(0x7f0000000600), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, r4) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000280)}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000400)={@private2}, &(0x7f00000004c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="b4000280380001"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x8000) socket$netlink(0x10, 0x3, 0x7) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="280100010000005f16281f69e58d1d", @ANYRES32=r9, @ANYBLOB="400000060a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x40051}, 0x40c0) 2.092116833s ago: executing program 8 (id=4372): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x1000000, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800292ce5b6addea8763cb9bdd343000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r6, 0x0, 0xbed}, 0x18) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2, 0x3, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.066844534s ago: executing program 2 (id=4373): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x2000a804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 1.963011105s ago: executing program 2 (id=4374): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1b36}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe, 0xc, "fee8a2ab780e00001ea8ffffffff0000000000000004ddb49a000000000000000000f8ff000800000000000000000000000000001400", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000"}}) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000500)=0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @tid=r5}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.870104136s ago: executing program 8 (id=4375): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000000c0)=""/4096, 0x1000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_INIT(r4, 0x0, 0xc8, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = open(&(0x7f00000000c0)='./file1\x00', 0x147842, 0x88) preadv2(r5, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x44, 0x0, 0x7b, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18) syz_usbip_server_init(0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x2000a804) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 1.769352847s ago: executing program 3 (id=4376): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x1000000, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r5}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xbed}, 0x18) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2, 0x3, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.60588944s ago: executing program 6 (id=4378): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1.56139289s ago: executing program 6 (id=4379): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0000200"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000000040)="7c5e873470a61614567a01", 0xb) sendfile(r2, r1, 0x0, 0x3ffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0x1, 0x840000, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 1.539512581s ago: executing program 7 (id=4380): connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='sched_switch\x00', r2, 0x0, 0x4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x70}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYRESDEC=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000340)=0xb) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x1f, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 1.510581051s ago: executing program 3 (id=4381): socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f000001fe80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0xfbb0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x169) write$binfmt_elf64(r3, 0x0, 0x78) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) 1.448496642s ago: executing program 7 (id=4382): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) fallocate(r1, 0x0, 0x3, 0xd) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) socket(0x40000000015, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r7}, 0x18) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r9, &(0x7f0000009cc0)=[{{&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000b00)=""/232, 0xe8}, 0x9}, {{&(0x7f00000009c0)=@rc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000c00)=""/164, 0xa4}, {&(0x7f0000000cc0)=""/194, 0xc2}], 0x2, &(0x7f0000000600)=""/3, 0x3}, 0x984}, {{&(0x7f0000000dc0)=@generic, 0x80, &(0x7f0000001240)=[{&(0x7f0000000e40)=""/15, 0xf}, {&(0x7f0000000e80)=""/187, 0xbb}, {&(0x7f0000000f40)=""/190, 0xbe}, {&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000001000)=""/8, 0x8}, {&(0x7f0000001040)=""/75, 0x4b}, {&(0x7f0000005ac0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/229, 0xe5}, {&(0x7f00000011c0)=""/66, 0x42}], 0x9, &(0x7f0000006ac0)=""/4096, 0x1000}, 0x676b}, {{&(0x7f0000001300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000007ac0)=""/4096, 0x1000}, {&(0x7f0000001380)=""/61, 0x3d}, {&(0x7f00000013c0)=""/166, 0xa6}, {&(0x7f0000001480)=""/34, 0x22}, {&(0x7f00000014c0)=""/8, 0x8}, {&(0x7f0000001500)=""/75, 0x4b}, {&(0x7f0000001580)=""/186, 0xba}, {&(0x7f0000001640)=""/125, 0x7d}, {&(0x7f00000016c0)=""/74, 0x4a}, {&(0x7f0000001740)=""/113, 0x71}], 0xa}, 0x4}, {{&(0x7f0000001880), 0x80, &(0x7f0000009b80)=[{&(0x7f0000001900)=""/54, 0x36}, {&(0x7f0000001940)=""/61, 0x3d}, {&(0x7f0000001980)=""/93, 0x5d}, {&(0x7f0000008ac0)=""/4096, 0x1000}, {&(0x7f0000009ac0)=""/2, 0x2}, {&(0x7f0000009b00)=""/102, 0x66}], 0x6, &(0x7f0000009c00)=""/146, 0x92}, 0x5}], 0x5, 0x102, &(0x7f0000009e00)={0x0, 0x989680}) 1.309652723s ago: executing program 3 (id=4383): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x2}, 0x1100, 0x1, 0x0, 0x9, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") r3 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x47c, &(0x7f0000000a80)="$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") r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x3}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettaction={0x18, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x25dfd9ff, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x24000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000680)=ANY=[@ANYRES32=r3, @ANYRES16=0x0, @ANYBLOB="b0370c3950aa92fa60ece9e417bb7ee6bdf1438aeec34e5cf13c74566f096156269656e2df02173ee5a8b5da136bf63e2d889efaebb84174f57c5ed722b4f677d8a904397098596bbcc456402d62d43519de91718f531708d427ff92c8673f59117263858b7b17e2fc468315ec4575d45b313701d77c5c4f34022704226c89a0b235fc6887c3b9c089e7f547caeaddccc7eede91b5a87e352fc80b0fbf6a3198b9a4cd94c6b347adff98fdf2a7253109a51aee023466e9a22ff7e83f317e2ba81052f93dffdaf5ae7fb8dd5dc022f04ac365836dfef1dc3efab4301e692ff0af525122122a2fb739c7a5759b1704d5e1b3ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000580)=ANY=[@ANYRES64=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffc000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) getdents64(r5, &(0x7f00000002c0)=""/191, 0xbf) 1.006179457s ago: executing program 8 (id=4384): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x800000000003}, 0x115d2, 0x0, 0x10000005, 0x3, 0x3c, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usbip_server_init(0x3) 550.369653ms ago: executing program 7 (id=4385): socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='sched_switch\x00', r1, 0x0, 0x4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) mount$9p_rdma(&(0x7f0000000080), 0x0, 0x0, 0x30004, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x1f, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 518.990694ms ago: executing program 6 (id=4386): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r2, &(0x7f0000000640)={&(0x7f0000000300), 0x10, &(0x7f0000000500)}, 0x0) 518.052214ms ago: executing program 7 (id=4387): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000200)=ANY=[], 0x1, 0x2bb, &(0x7f0000000440)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 473.238214ms ago: executing program 6 (id=4388): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r1 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x38b}, &(0x7f0000000240), &(0x7f0000001880)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xb8, 0x7ffc0002}]}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440)=r0, 0x1) 427.486235ms ago: executing program 3 (id=4389): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r2, &(0x7f0000000640)={&(0x7f0000000300), 0x10, &(0x7f0000000500)}, 0x0) 423.193015ms ago: executing program 6 (id=4390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r2, &(0x7f0000000640)={&(0x7f0000000300), 0x10, &(0x7f0000000500)}, 0x0) 354.230636ms ago: executing program 6 (id=4391): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1b36}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe, 0xc, "fee8a2ab780e00001ea8ffffffff0000000000000004ddb49a000000000000000000f8ff000800000000000000000000000000001400", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000"}}) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000500)=0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @tid=r5}, &(0x7f0000000000)) 304.461957ms ago: executing program 3 (id=4392): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000000040)="7c5e873470a61614567a01", 0xb) sendfile(r2, r1, 0x0, 0x3ffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0x1, 0x840000, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 46.83154ms ago: executing program 7 (id=4393): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 7 (id=4394): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000000c0)=""/4096, 0x1000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_INIT(r4, 0x0, 0xc8, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = open(&(0x7f00000000c0)='./file1\x00', 0x147842, 0x88) preadv2(r5, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x44, 0x0, 0x7b, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18) syz_usbip_server_init(0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x2000a804) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) kernel console output (not intermixed with test programs): 0x25/0x80 [ 231.500067][T13629] ? clear_bhb_loop+0x25/0x80 [ 231.500085][T13629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.500140][T13629] RIP: 0033:0x7f829561e969 [ 231.500211][T13629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.500225][T13629] RSP: 002b:00007f8293c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 231.500239][T13629] RAX: ffffffffffffffda RBX: 00007f8295845fa0 RCX: 00007f829561e969 [ 231.500253][T13629] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 00000000000000da [ 231.500266][T13629] RBP: 00007f8293c87090 R08: 0000000000000286 R09: 0000000000000000 [ 231.500297][T13629] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001 [ 231.500311][T13629] R13: 0000000000000000 R14: 00007f8295845fa0 R15: 00007ffd8aedf558 [ 231.500335][T13629] [ 231.826609][T13631] loop3: detected capacity change from 0 to 128 [ 231.891992][T13641] loop7: detected capacity change from 0 to 128 [ 231.949237][T13643] SELinux: ebitmap: truncated map [ 231.968321][T13643] SELinux: failed to load policy [ 232.026916][T13653] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 232.192031][ T29] kauditd_printk_skb: 578 callbacks suppressed [ 232.192048][ T29] audit: type=1404 audit(1746398979.850:11572): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 232.214753][T13675] audit: audit_lost=10 audit_rate_limit=0 audit_backlog_limit=64 [ 232.222554][T13675] audit: out of memory in audit_log_start [ 232.234531][T13678] loop8: detected capacity change from 0 to 164 [ 232.248680][ T29] audit: type=1400 audit(1746398979.850:11573): avc: denied { read write } for pid=13674 comm="syz.2.3411" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 232.272902][ T29] audit: type=1400 audit(1746398979.850:11574): avc: denied { prog_load } for pid=13674 comm="syz.2.3411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 232.292120][ T29] audit: type=1404 audit(1746398979.880:11575): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 232.294273][T13680] SELinux: ebitmap: truncated map [ 232.307191][ T29] audit: type=1400 audit(1746398979.890:11576): avc: denied { read write } for pid=13677 comm="syz.8.3412" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.322297][T13680] SELinux: failed to load policy [ 232.336357][ T29] audit: type=1400 audit(1746398979.890:11577): avc: denied { open } for pid=13677 comm="syz.8.3412" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.365466][ T29] audit: type=1400 audit(1746398979.890:11578): avc: denied { ioctl } for pid=13677 comm="syz.8.3412" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.391098][ T29] audit: type=1400 audit(1746398979.910:11579): avc: denied { execute_no_trans } for pid=13674 comm="syz.2.3411" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 232.428666][T13678] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 232.502445][T13690] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 232.527724][T13686] bond1: entered promiscuous mode [ 232.532882][T13686] bond1: entered allmulticast mode [ 232.538868][T13686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.556335][T13686] bond1 (unregistering): Released all slaves [ 232.606127][T13699] netlink: 'syz.7.3419': attribute type 1 has an invalid length. [ 232.643984][T13707] loop8: detected capacity change from 0 to 256 [ 232.657586][T13707] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 232.671518][T13707] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 232.697795][T13710] SELinux: ebitmap: truncated map [ 232.704795][T13710] SELinux: failed to load policy [ 232.762527][T13716] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20002 [ 232.899551][T13732] loop2: detected capacity change from 0 to 256 [ 232.913392][T13730] loop8: detected capacity change from 0 to 256 [ 232.946716][T13736] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 233.025952][T13746] loop2: detected capacity change from 0 to 1024 [ 233.027627][T13750] loop3: detected capacity change from 0 to 256 [ 233.042414][T13746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.058875][T13750] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 233.064870][T13746] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.081681][T13750] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 233.119191][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3441'. [ 233.139631][T13749] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.177135][T13749] bridge_slave_0 (unregistering): left allmulticast mode [ 233.185572][T13749] bridge_slave_0 (unregistering): left promiscuous mode [ 233.193122][T13749] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.203355][T12939] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.339740][T13768] loop3: detected capacity change from 0 to 256 [ 233.415440][T13778] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 233.475243][T13783] loop7: detected capacity change from 0 to 256 [ 233.655538][T13802] loop2: detected capacity change from 0 to 256 [ 233.666923][T13802] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 233.682522][T13804] loop7: detected capacity change from 0 to 128 [ 233.696836][T13802] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 233.742099][T13806] xt_TPROXY: Can be used only with -p tcp or -p udp [ 233.995248][T13811] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 234.017937][T13809] loop7: detected capacity change from 0 to 256 [ 234.152749][T13822] netlink: 'syz.7.3469': attribute type 1 has an invalid length. [ 234.279570][T13831] netlink: 'syz.2.3470': attribute type 10 has an invalid length. [ 234.291847][T13831] hsr_slave_0: left promiscuous mode [ 234.297479][T13831] hsr_slave_1: left promiscuous mode [ 234.307439][T13839] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3474'. [ 234.429740][T13839] netlink: 'syz.8.3474': attribute type 4 has an invalid length. [ 234.481406][T13848] loop3: detected capacity change from 0 to 256 [ 234.488116][T13848] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 234.508563][T13848] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 234.549355][T13853] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 234.881208][T13863] loop3: detected capacity change from 0 to 256 [ 234.986041][T13872] netlink: 'syz.3.3488': attribute type 1 has an invalid length. [ 234.987960][T13874] loop7: detected capacity change from 0 to 512 [ 235.002174][T13874] EXT4-fs (loop7): blocks per group (71) and clusters per group (20800) inconsistent [ 235.129647][T13878] SELinux: ebitmap: truncated map [ 235.136828][T13878] SELinux: failed to load policy [ 235.223829][T13886] xt_TPROXY: Can be used only with -p tcp or -p udp [ 235.617985][T13899] geneve0: entered allmulticast mode [ 235.637522][T13902] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 235.719422][T13909] loop8: detected capacity change from 0 to 256 [ 235.730926][T13910] loop2: detected capacity change from 0 to 256 [ 235.853547][T13916] loop2: detected capacity change from 0 to 512 [ 235.878936][T13916] EXT4-fs (loop2): blocks per group (71) and clusters per group (20800) inconsistent [ 235.895031][T13917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3506'. [ 235.951528][T13919] loop7: detected capacity change from 0 to 128 [ 235.963748][T13917] netlink: 'syz.3.3506': attribute type 4 has an invalid length. [ 236.002658][T13921] SELinux: ebitmap: truncated map [ 236.027425][T13921] SELinux: failed to load policy [ 236.194034][T13930] xt_TPROXY: Can be used only with -p tcp or -p udp [ 236.506747][T13934] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 236.673366][T13941] loop7: detected capacity change from 0 to 256 [ 236.692657][T13943] loop8: detected capacity change from 0 to 256 [ 236.776293][T13939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3515'. [ 236.812166][T13949] loop2: detected capacity change from 0 to 128 [ 236.876273][T13956] loop2: detected capacity change from 0 to 1024 [ 236.891663][T13956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.906760][T13956] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.952454][T12939] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.989304][T13968] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 237.047358][T13978] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3531'. [ 237.066104][T13981] loop7: detected capacity change from 0 to 512 [ 237.082514][T13978] netlink: 'syz.6.3531': attribute type 4 has an invalid length. [ 237.090828][T13981] EXT4-fs (loop7): blocks per group (71) and clusters per group (20800) inconsistent [ 237.091554][T13982] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 237.227002][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 237.233336][ T29] audit: type=1400 audit(1746398984.860:11960): avc: denied { name_bind } for pid=13983 comm="syz.8.3533" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 237.255178][ T29] audit: type=1400 audit(1746398984.860:11961): avc: denied { node_bind } for pid=13983 comm="syz.8.3533" saddr=fc00:: src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 237.277751][T13991] netlink: 'syz.8.3533': attribute type 10 has an invalid length. [ 237.383875][T14000] xt_TPROXY: Can be used only with -p tcp or -p udp [ 237.620436][ T29] audit: type=1400 audit(1746398985.280:11962): avc: denied { cpu } for pid=13997 comm="syz.6.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 237.690947][T13996] loop2: detected capacity change from 0 to 128 [ 237.698104][T13996] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 237.825030][ T29] audit: type=1400 audit(1746398985.480:11963): avc: denied { execute } for pid=13992 comm="syz.2.3537" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=43542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 237.916869][T14004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3539'. [ 238.001913][T14014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3543'. [ 238.048880][T14020] netlink: 'syz.2.3540': attribute type 10 has an invalid length. [ 238.170473][T14031] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3547'. [ 238.185263][T14033] netlink: 'syz.6.3550': attribute type 3 has an invalid length. [ 238.187686][T14031] netlink: 'syz.8.3547': attribute type 4 has an invalid length. [ 238.240238][ T29] audit: type=1326 audit(1746398985.900:11964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.3.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829561e969 code=0x7ffc0000 [ 238.311402][ T29] audit: type=1326 audit(1746398985.920:11965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.3.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f829561e969 code=0x7ffc0000 [ 238.335148][ T29] audit: type=1326 audit(1746398985.920:11966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.3.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829561e969 code=0x7ffc0000 [ 238.346437][T14034] loop7: detected capacity change from 0 to 128 [ 238.358750][ T29] audit: type=1326 audit(1746398985.920:11967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.3.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f829561e969 code=0x7ffc0000 [ 238.358785][ T29] audit: type=1326 audit(1746398985.920:11968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.3.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829561e969 code=0x7ffc0000 [ 238.358888][ T29] audit: type=1326 audit(1746398985.920:11969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.3.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829561e969 code=0x7ffc0000 [ 238.436839][T14034] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 238.517559][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3556'. [ 238.556863][T14049] loop7: detected capacity change from 0 to 256 [ 238.662140][T14058] loop3: detected capacity change from 0 to 1024 [ 238.680702][T14058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.693065][T14058] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.727970][T12245] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.761448][T14069] lo: entered promiscuous mode [ 238.766243][T14069] lo: entered allmulticast mode [ 238.801241][T14072] loop3: detected capacity change from 0 to 512 [ 238.832363][T14072] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 238.975993][T14074] loop7: detected capacity change from 0 to 128 [ 238.982897][T14074] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 239.079796][T14079] xt_TPROXY: Can be used only with -p tcp or -p udp [ 239.333047][T14085] loop2: detected capacity change from 0 to 128 [ 239.467453][T14099] loop7: detected capacity change from 0 to 1024 [ 239.501006][T14099] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.513746][T14099] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.554833][ T9835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.596080][T14114] loop2: detected capacity change from 0 to 256 [ 239.607174][T14116] netlink: 84 bytes leftover after parsing attributes in process `syz.8.3581'. [ 239.607294][T14118] FAULT_INJECTION: forcing a failure. [ 239.607294][T14118] name failslab, interval 1, probability 0, space 0, times 0 [ 239.628911][T14118] CPU: 0 UID: 0 PID: 14118 Comm: syz.6.3580 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 239.629048][T14118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 239.629062][T14118] Call Trace: [ 239.629068][T14118] [ 239.629076][T14118] __dump_stack+0x1d/0x30 [ 239.629097][T14118] dump_stack_lvl+0xe8/0x140 [ 239.629168][T14118] dump_stack+0x15/0x1b [ 239.629189][T14118] should_fail_ex+0x265/0x280 [ 239.629283][T14118] should_failslab+0x8c/0xb0 [ 239.629333][T14118] __kmalloc_noprof+0xa5/0x3e0 [ 239.629354][T14118] ? sock_kmalloc+0x85/0xc0 [ 239.629391][T14118] ? iovec_from_user+0x179/0x210 [ 239.629415][T14118] sock_kmalloc+0x85/0xc0 [ 239.629435][T14118] ____sys_sendmsg+0xf8/0x4e0 [ 239.629457][T14118] ___sys_sendmsg+0x17b/0x1d0 [ 239.629489][T14118] __sys_sendmmsg+0x178/0x300 [ 239.629567][T14118] __x64_sys_sendmmsg+0x57/0x70 [ 239.629587][T14118] x64_sys_call+0x2f2f/0x2fb0 [ 239.629609][T14118] do_syscall_64+0xd0/0x1a0 [ 239.629631][T14118] ? clear_bhb_loop+0x25/0x80 [ 239.629660][T14118] ? clear_bhb_loop+0x25/0x80 [ 239.629695][T14118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.629716][T14118] RIP: 0033:0x7f724adde969 [ 239.629732][T14118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.629751][T14118] RSP: 002b:00007f7249447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 239.629770][T14118] RAX: ffffffffffffffda RBX: 00007f724b005fa0 RCX: 00007f724adde969 [ 239.629818][T14118] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003 [ 239.629830][T14118] RBP: 00007f7249447090 R08: 0000000000000000 R09: 0000000000000000 [ 239.629842][T14118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.629855][T14118] R13: 0000000000000000 R14: 00007f724b005fa0 R15: 00007ffc9c9dd708 [ 239.629873][T14118] [ 239.746380][T14122] loop7: detected capacity change from 0 to 128 [ 239.841872][T14124] SELinux: ebitmap: truncated map [ 239.852184][T14124] SELinux: failed to load policy [ 239.919700][T14133] FAULT_INJECTION: forcing a failure. [ 239.919700][T14133] name failslab, interval 1, probability 0, space 0, times 0 [ 239.932380][T14133] CPU: 1 UID: 0 PID: 14133 Comm: syz.2.3585 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 239.932437][T14133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 239.932451][T14133] Call Trace: [ 239.932458][T14133] [ 239.932465][T14133] __dump_stack+0x1d/0x30 [ 239.932489][T14133] dump_stack_lvl+0xe8/0x140 [ 239.932511][T14133] dump_stack+0x15/0x1b [ 239.932530][T14133] should_fail_ex+0x265/0x280 [ 239.932582][T14133] should_failslab+0x8c/0xb0 [ 239.932615][T14133] kmem_cache_alloc_node_noprof+0x57/0x320 [ 239.932724][T14133] ? __alloc_skb+0x101/0x320 [ 239.932801][T14133] __alloc_skb+0x101/0x320 [ 239.932830][T14133] alloc_skb_with_frags+0x7d/0x470 [ 239.932874][T14133] ? lockref_put_return+0x9b/0x130 [ 239.932898][T14133] ? should_fail_ex+0xdb/0x280 [ 239.932972][T14133] sock_alloc_send_pskb+0x43a/0x4f0 [ 239.933099][T14133] tun_get_user+0x8c0/0x24d0 [ 239.933142][T14133] ? ref_tracker_alloc+0x1f2/0x2f0 [ 239.933175][T14133] ? avc_policy_seqno+0x15/0x30 [ 239.933213][T14133] tun_chr_write_iter+0x15e/0x210 [ 239.933332][T14133] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 239.933358][T14133] vfs_write+0x49d/0x8d0 [ 239.933408][T14133] ksys_write+0xda/0x1a0 [ 239.933437][T14133] __x64_sys_write+0x40/0x50 [ 239.933474][T14133] x64_sys_call+0x2cdd/0x2fb0 [ 239.933494][T14133] do_syscall_64+0xd0/0x1a0 [ 239.933543][T14133] ? clear_bhb_loop+0x25/0x80 [ 239.933570][T14133] ? clear_bhb_loop+0x25/0x80 [ 239.933653][T14133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.933721][T14133] RIP: 0033:0x7f07aa53e969 [ 239.933785][T14133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.933807][T14133] RSP: 002b:00007f07a8ba7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 239.933825][T14133] RAX: ffffffffffffffda RBX: 00007f07aa765fa0 RCX: 00007f07aa53e969 [ 239.933837][T14133] RDX: 00000000000000d2 RSI: 0000200000000480 RDI: 0000000000000003 [ 239.933983][T14133] RBP: 00007f07a8ba7090 R08: 0000000000000000 R09: 0000000000000000 [ 239.933998][T14133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.934014][T14133] R13: 0000000000000000 R14: 00007f07aa765fa0 R15: 00007ffdf085f2b8 [ 239.934038][T14133] [ 240.242490][T14136] loop3: detected capacity change from 0 to 256 [ 240.256294][T14136] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 240.268852][T14138] lo: left promiscuous mode [ 240.273371][T14138] lo: left allmulticast mode [ 240.299248][T14136] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 240.326312][T14145] loop8: detected capacity change from 0 to 128 [ 240.333767][T14138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.527836][T14156] netlink: 'syz.2.3595': attribute type 10 has an invalid length. [ 240.570946][T14158] loop8: detected capacity change from 0 to 512 [ 240.611003][T14158] EXT4-fs (loop8): blocks per group (71) and clusters per group (20800) inconsistent [ 240.758647][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3600'. [ 240.848241][T14171] xt_TPROXY: Can be used only with -p tcp or -p udp [ 241.176447][T14177] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3602'. [ 241.333309][T14185] loop2: detected capacity change from 0 to 128 [ 241.622538][T14203] netlink: 'syz.8.3612': attribute type 10 has an invalid length. [ 241.695538][T14187] loop2: detected capacity change from 0 to 128 [ 241.703706][T14187] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 241.715134][T14207] loop3: detected capacity change from 0 to 256 [ 241.786827][T14208] xt_TPROXY: Can be used only with -p tcp or -p udp [ 241.969741][T14207] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 242.048826][T14207] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 242.385490][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3617'. [ 242.475569][T14216] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.512502][T14222] loop8: detected capacity change from 0 to 512 [ 242.521599][T14222] EXT4-fs (loop8): blocks per group (71) and clusters per group (20800) inconsistent [ 242.639720][T14216] bridge_slave_0 (unregistering): left allmulticast mode [ 242.647189][T14216] bridge_slave_0 (unregistering): left promiscuous mode [ 242.654689][T14216] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.740619][T14224] xt_TPROXY: Can be used only with -p tcp or -p udp [ 242.954189][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 242.954207][ T29] audit: type=1326 audit(1746398990.610:12153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14226 comm="syz.6.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 243.076245][ T29] audit: type=1326 audit(1746398990.640:12154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14226 comm="syz.6.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 243.089754][T14165] loop7: detected capacity change from 0 to 1024 [ 243.106641][T14165] ext4: Bad value for 'max_batch_time' [ 243.111381][ T29] audit: type=1326 audit(1746398990.770:12155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14226 comm="syz.6.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 243.135742][ T29] audit: type=1326 audit(1746398990.770:12156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14226 comm="syz.6.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 243.175002][ T29] audit: type=1400 audit(1746398990.780:12157): avc: denied { create } for pid=14230 comm="syz.2.3622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 243.194749][ T29] audit: type=1400 audit(1746398990.780:12158): avc: denied { write } for pid=14230 comm="syz.2.3622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 243.236929][ T29] audit: type=1326 audit(1746398990.840:12159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.2.3623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07aa53e969 code=0x7ffc0000 [ 243.260695][ T29] audit: type=1326 audit(1746398990.840:12160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.2.3623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07aa53e969 code=0x7ffc0000 [ 243.284312][ T29] audit: type=1326 audit(1746398990.840:12161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.2.3623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f07aa53e969 code=0x7ffc0000 [ 243.307965][ T29] audit: type=1326 audit(1746398990.840:12162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.2.3623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07aa53e969 code=0x7ffc0000 [ 243.447163][T14249] SELinux: ebitmap: truncated map [ 243.455296][T14249] SELinux: failed to load policy [ 243.600718][T14273] loop7: detected capacity change from 0 to 512 [ 243.607182][T14274] netlink: 'syz.3.3633': attribute type 10 has an invalid length. [ 243.630133][T14273] EXT4-fs (loop7): blocks per group (71) and clusters per group (20800) inconsistent [ 243.707153][T14283] serio: Serial port pts0 [ 243.762612][T14295] FAULT_INJECTION: forcing a failure. [ 243.762612][T14295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.775837][T14295] CPU: 0 UID: 0 PID: 14295 Comm: syz.2.3647 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 243.775969][T14295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 243.775980][T14295] Call Trace: [ 243.775985][T14295] [ 243.775991][T14295] __dump_stack+0x1d/0x30 [ 243.776007][T14295] dump_stack_lvl+0xe8/0x140 [ 243.776025][T14295] dump_stack+0x15/0x1b [ 243.776038][T14295] should_fail_ex+0x265/0x280 [ 243.776142][T14295] should_fail+0xb/0x20 [ 243.776164][T14295] should_fail_usercopy+0x1a/0x20 [ 243.776178][T14295] _copy_from_iter+0xcf/0xdd0 [ 243.776239][T14295] ? alloc_pages_mpol+0x202/0x250 [ 243.776259][T14295] copy_page_from_iter+0x15a/0x290 [ 243.776276][T14295] tun_get_user+0x5c7/0x24d0 [ 243.776301][T14295] ? ref_tracker_alloc+0x1f2/0x2f0 [ 243.776372][T14295] tun_chr_write_iter+0x15e/0x210 [ 243.776392][T14295] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 243.776450][T14295] vfs_write+0x49d/0x8d0 [ 243.776475][T14295] ksys_write+0xda/0x1a0 [ 243.776554][T14295] __x64_sys_write+0x40/0x50 [ 243.776574][T14295] x64_sys_call+0x2cdd/0x2fb0 [ 243.776591][T14295] do_syscall_64+0xd0/0x1a0 [ 243.776723][T14295] ? clear_bhb_loop+0x25/0x80 [ 243.776741][T14295] ? clear_bhb_loop+0x25/0x80 [ 243.776758][T14295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.776782][T14295] RIP: 0033:0x7f07aa53d41f [ 243.776828][T14295] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 243.776843][T14295] RSP: 002b:00007f07a8ba7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 243.776858][T14295] RAX: ffffffffffffffda RBX: 00007f07aa765fa0 RCX: 00007f07aa53d41f [ 243.776868][T14295] RDX: 0000000000000046 RSI: 0000200000000180 RDI: 00000000000000c8 [ 243.776878][T14295] RBP: 00007f07a8ba7090 R08: 0000000000000000 R09: 0000000000000000 [ 243.776887][T14295] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 243.776897][T14295] R13: 0000000000000000 R14: 00007f07aa765fa0 R15: 00007ffdf085f2b8 [ 243.776989][T14295] [ 244.034754][T14300] xt_TPROXY: Can be used only with -p tcp or -p udp [ 244.179939][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3641'. [ 244.189445][T14303] netlink: 'syz.2.3648': attribute type 1 has an invalid length. [ 244.544639][T14319] loop8: detected capacity change from 0 to 256 [ 244.561828][T14317] loop7: detected capacity change from 0 to 512 [ 244.583067][T14317] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 244.593202][T14324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3658'. [ 244.605419][T14317] EXT4-fs (loop7): 1 truncate cleaned up [ 244.613127][T14317] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.620050][T14324] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 244.653372][T14324] loop3: detected capacity change from 0 to 512 [ 244.657244][ T9835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.678477][T14324] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 244.690080][T14324] EXT4-fs (loop3): 1 truncate cleaned up [ 244.696351][T14324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.714747][T14324] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 244.735764][T12245] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.825468][T14349] loop8: detected capacity change from 0 to 1024 [ 244.865373][T14349] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.887384][T14349] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.899494][T14358] loop2: detected capacity change from 0 to 256 [ 244.914691][T14358] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 244.967619][T14358] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 245.017567][T11505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.076940][T14374] loop3: detected capacity change from 0 to 128 [ 245.085760][T14376] loop7: detected capacity change from 0 to 128 [ 245.147016][T14380] netlink: 'syz.8.3681': attribute type 1 has an invalid length. [ 245.232018][T14385] netlink: 'syz.3.3683': attribute type 1 has an invalid length. [ 245.492653][T14394] bond1: entered promiscuous mode [ 245.497797][T14394] bond1: entered allmulticast mode [ 245.503183][T14394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.514114][T14394] bond1 (unregistering): Released all slaves [ 245.662796][T14400] loop7: detected capacity change from 0 to 512 [ 245.691574][T14400] EXT4-fs (loop7): 1 orphan inode deleted [ 245.697675][T14400] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.711012][T14400] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.711722][ T5815] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:24: Failed to release dquot type 1 [ 245.764966][ T9835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.785728][T14407] loop7: detected capacity change from 0 to 1024 [ 245.810972][T14407] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.826749][T14407] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.861714][ T9835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.880993][T14414] FAULT_INJECTION: forcing a failure. [ 245.880993][T14414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.894138][T14414] CPU: 0 UID: 0 PID: 14414 Comm: syz.7.3691 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 245.894162][T14414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 245.894172][T14414] Call Trace: [ 245.894177][T14414] [ 245.894183][T14414] __dump_stack+0x1d/0x30 [ 245.894200][T14414] dump_stack_lvl+0xe8/0x140 [ 245.894241][T14414] dump_stack+0x15/0x1b [ 245.894256][T14414] should_fail_ex+0x265/0x280 [ 245.894284][T14414] should_fail+0xb/0x20 [ 245.894313][T14414] should_fail_usercopy+0x1a/0x20 [ 245.894359][T14414] _copy_to_user+0x20/0xa0 [ 245.894381][T14414] simple_read_from_buffer+0xb5/0x130 [ 245.894407][T14414] proc_fail_nth_read+0x100/0x140 [ 245.894471][T14414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.894550][T14414] vfs_read+0x19d/0x6f0 [ 245.894569][T14414] ? __rcu_read_unlock+0x4f/0x70 [ 245.894585][T14414] ? __fget_files+0x184/0x1c0 [ 245.894626][T14414] ksys_read+0xda/0x1a0 [ 245.894653][T14414] __x64_sys_read+0x40/0x50 [ 245.894709][T14414] x64_sys_call+0x2d77/0x2fb0 [ 245.894732][T14414] do_syscall_64+0xd0/0x1a0 [ 245.894755][T14414] ? clear_bhb_loop+0x25/0x80 [ 245.894778][T14414] ? clear_bhb_loop+0x25/0x80 [ 245.894838][T14414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.894856][T14414] RIP: 0033:0x7fd3ce46d37c [ 245.894872][T14414] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 245.894891][T14414] RSP: 002b:00007fd3ccad7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 245.894910][T14414] RAX: ffffffffffffffda RBX: 00007fd3ce695fa0 RCX: 00007fd3ce46d37c [ 245.894920][T14414] RDX: 000000000000000f RSI: 00007fd3ccad70a0 RDI: 0000000000000005 [ 245.895009][T14414] RBP: 00007fd3ccad7090 R08: 0000000000000000 R09: 0000000000000000 [ 245.895018][T14414] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 245.895028][T14414] R13: 0000000000000000 R14: 00007fd3ce695fa0 R15: 00007ffc853bfbe8 [ 245.895048][T14414] [ 246.130624][T14422] loop8: detected capacity change from 0 to 256 [ 246.134262][T14418] loop7: detected capacity change from 0 to 128 [ 246.137625][T14422] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 246.157559][T14422] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.162496][T14426] loop2: detected capacity change from 0 to 512 [ 246.186742][T14426] EXT4-fs (loop2): blocks per group (71) and clusters per group (20800) inconsistent [ 246.202294][T14427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3696'. [ 246.240697][T14427] netlink: 'syz.3.3696': attribute type 4 has an invalid length. [ 246.298114][T14429] SELinux: ebitmap: truncated map [ 246.305329][T14429] SELinux: failed to load policy [ 246.410007][T14435] xt_TPROXY: Can be used only with -p tcp or -p udp [ 246.789607][T14443] loop7: detected capacity change from 0 to 256 [ 246.796413][T14443] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 246.810014][T14443] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.986222][T14445] xt_TPROXY: Can be used only with -p tcp or -p udp [ 247.357659][T14448] loop2: detected capacity change from 0 to 256 [ 247.379268][T14448] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 247.393538][T14448] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.511012][T14452] netlink: 'syz.3.3704': attribute type 1 has an invalid length. [ 247.758513][T14471] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3713'. [ 247.816491][T14474] netlink: 'syz.7.3714': attribute type 10 has an invalid length. [ 247.986875][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 247.986891][ T29] audit: type=1400 audit(1746398995.651:12411): avc: denied { mounton } for pid=14485 comm="syz.7.3720" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 248.021175][T14487] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 248.052346][T14487] IPv6: syztnl0: Disabled Multicast RS [ 248.120132][ T29] audit: type=1404 audit(1746398995.791:12412): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 248.142024][ T29] audit: type=1404 audit(1746398995.801:12413): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 248.167805][ T29] audit: type=1400 audit(1746398995.831:12414): avc: denied { read write } for pid=9835 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.192208][ T29] audit: type=1400 audit(1746398995.831:12415): avc: denied { open } for pid=9835 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.216384][ T29] audit: type=1400 audit(1746398995.831:12416): avc: denied { ioctl } for pid=9835 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.246383][ T29] audit: type=1400 audit(1746398995.841:12417): avc: denied { prog_load } for pid=14497 comm="syz.7.3725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 248.265633][ T29] audit: type=1400 audit(1746398995.841:12418): avc: denied { bpf } for pid=14497 comm="syz.7.3725" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 248.286446][ T29] audit: type=1400 audit(1746398995.841:12419): avc: denied { perfmon } for pid=14497 comm="syz.7.3725" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 248.307548][ T29] audit: type=1400 audit(1746398995.871:12420): avc: denied { prog_run } for pid=14497 comm="syz.7.3725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 248.353474][T14502] loop8: detected capacity change from 0 to 128 [ 248.467934][T14514] loop8: detected capacity change from 0 to 128 [ 248.633162][T14534] netlink: 'syz.2.3734': attribute type 10 has an invalid length. [ 248.856354][T14553] loop3: detected capacity change from 0 to 256 [ 248.865203][T14553] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 248.877765][T14553] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 249.153960][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3751'. [ 249.545066][T14593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3761'. [ 249.920493][T14626] loop7: detected capacity change from 0 to 256 [ 249.928281][T14626] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 249.959146][T14626] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.196245][T14643] xt_TPROXY: Can be used only with -p tcp or -p udp [ 250.558775][T14650] netlink: 'syz.3.3781': attribute type 10 has an invalid length. [ 250.759172][T14661] loop8: detected capacity change from 0 to 2048 [ 250.852442][T14661] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.878279][T14661] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.175244][T14683] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3795'. [ 251.241176][T14690] xt_TPROXY: Can be used only with -p tcp or -p udp [ 251.771654][T14703] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3801'. [ 251.849598][T14704] netlink: 'syz.7.3801': attribute type 4 has an invalid length. [ 251.962449][T14708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3804'. [ 252.043899][T14661] syz.8.3788 (14661) used greatest stack depth: 6776 bytes left [ 252.073341][T14711] xt_TPROXY: Can be used only with -p tcp or -p udp [ 252.279588][ T5821] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:30: bg 0: block 345: padding at end of block bitmap is not set [ 252.296273][ T5821] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 252.309049][ T5821] EXT4-fs (loop8): This should not happen!! Data will be lost [ 252.309049][ T5821] [ 252.359512][ T5821] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 1276 with error 28 [ 252.372231][ T5821] EXT4-fs (loop8): This should not happen!! Data will be lost [ 252.372231][ T5821] [ 252.381932][ T5821] EXT4-fs (loop8): Total free blocks count 0 [ 252.388035][ T5821] EXT4-fs (loop8): Free/Dirty block details [ 252.388771][T14717] netlink: 'syz.2.3807': attribute type 10 has an invalid length. [ 252.393935][ T5821] EXT4-fs (loop8): free_blocks=0 [ 252.406686][ T5821] EXT4-fs (loop8): dirty_blocks=1280 [ 252.412031][ T5821] EXT4-fs (loop8): Block reservation details [ 252.474077][T14719] SELinux: ebitmap: truncated map [ 252.483755][T14719] SELinux: failed to load policy [ 252.612904][T14729] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3812'. [ 252.862431][T14744] SELinux: ebitmap: truncated map [ 252.876117][T14744] SELinux: failed to load policy [ 252.952901][T14750] netlink: 'syz.8.3819': attribute type 1 has an invalid length. [ 252.987082][T14755] loop7: detected capacity change from 0 to 1024 [ 253.014161][T14755] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.032899][T14755] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.070984][ T9835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.122988][T14760] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3824'. [ 253.137909][T14762] loop2: detected capacity change from 0 to 512 [ 253.144320][ T29] kauditd_printk_skb: 417 callbacks suppressed [ 253.144332][ T29] audit: type=1326 audit(1746399000.801:12838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.7.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ce46e969 code=0x7ffc0000 [ 253.174194][ T29] audit: type=1326 audit(1746399000.801:12839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.7.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd3ce46e969 code=0x7ffc0000 [ 253.197697][ T29] audit: type=1326 audit(1746399000.801:12840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.7.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ce46e969 code=0x7ffc0000 [ 253.197725][ T29] audit: type=1326 audit(1746399000.801:12841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.7.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3ce46e969 code=0x7ffc0000 [ 253.197752][ T29] audit: type=1326 audit(1746399000.801:12842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.7.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ce46e969 code=0x7ffc0000 [ 253.197781][ T29] audit: type=1326 audit(1746399000.801:12843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.7.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3ce46e969 code=0x7ffc0000 [ 253.225567][T14762] EXT4-fs (loop2): blocks per group (71) and clusters per group (20800) inconsistent [ 253.245011][ T29] audit: type=1326 audit(1746399000.801:12844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.7.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ce46e969 code=0x7ffc0000 [ 253.325275][ T29] audit: type=1326 audit(1746399000.801:12845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.7.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3ce46e969 code=0x7ffc0000 [ 253.325332][ T29] audit: type=1326 audit(1746399000.801:12846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.7.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ce46e969 code=0x7ffc0000 [ 253.325362][ T29] audit: type=1326 audit(1746399000.801:12847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.7.3824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3ce46e969 code=0x7ffc0000 [ 253.454795][T14768] serio: Serial port ttyS3 [ 253.542755][T14775] xt_TPROXY: Can be used only with -p tcp or -p udp [ 253.940807][T14791] loop7: detected capacity change from 0 to 128 [ 254.017459][T14795] FAULT_INJECTION: forcing a failure. [ 254.017459][T14795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.026554][T14797] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3837'. [ 254.030572][T14795] CPU: 0 UID: 0 PID: 14795 Comm: syz.6.3838 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 254.030605][T14795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 254.030620][T14795] Call Trace: [ 254.030627][T14795] [ 254.030698][T14795] __dump_stack+0x1d/0x30 [ 254.030792][T14795] dump_stack_lvl+0xe8/0x140 [ 254.030857][T14795] dump_stack+0x15/0x1b [ 254.030875][T14795] should_fail_ex+0x265/0x280 [ 254.030943][T14795] should_fail+0xb/0x20 [ 254.031046][T14795] should_fail_usercopy+0x1a/0x20 [ 254.031091][T14795] _copy_from_user+0x1c/0xb0 [ 254.031108][T14795] sctp_setsockopt+0x154/0xe30 [ 254.031231][T14795] sock_common_setsockopt+0x66/0x80 [ 254.031261][T14795] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 254.031291][T14795] __sys_setsockopt+0x181/0x200 [ 254.031328][T14795] __x64_sys_setsockopt+0x64/0x80 [ 254.031379][T14795] x64_sys_call+0x2bd5/0x2fb0 [ 254.031403][T14795] do_syscall_64+0xd0/0x1a0 [ 254.031426][T14795] ? clear_bhb_loop+0x25/0x80 [ 254.031520][T14795] ? clear_bhb_loop+0x25/0x80 [ 254.031543][T14795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.031567][T14795] RIP: 0033:0x7f724adde969 [ 254.031583][T14795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.031614][T14795] RSP: 002b:00007f7249447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 254.031636][T14795] RAX: ffffffffffffffda RBX: 00007f724b005fa0 RCX: 00007f724adde969 [ 254.031650][T14795] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 254.031664][T14795] RBP: 00007f7249447090 R08: 000000000000002c R09: 0000000000000000 [ 254.031678][T14795] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 254.031691][T14795] R13: 0000000000000000 R14: 00007f724b005fa0 R15: 00007ffc9c9dd708 [ 254.031712][T14795] [ 254.072219][T14801] netlink: 'syz.8.3834': attribute type 10 has an invalid length. [ 254.079189][T14802] netlink: 'syz.3.3835': attribute type 10 has an invalid length. [ 254.435103][T14822] loop7: detected capacity change from 0 to 128 [ 254.466118][T14817] loop2: detected capacity change from 0 to 128 [ 254.490852][T14817] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 254.628479][T14827] netlink: 'syz.7.3849': attribute type 1 has an invalid length. [ 254.682424][T14830] netlink: 'syz.2.3850': attribute type 1 has an invalid length. [ 254.821507][T14844] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 254.868823][T14850] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 255.049007][T14855] loop3: detected capacity change from 0 to 128 [ 255.055809][T14855] vfat: Unknown parameter '(pu&00 (|. (85) call bpf_trace_printk#6 [ 255.055809][T14855] 18: 0......... (95) exit [ 255.055809][T14855] 0: R1' [ 255.095723][T14861] netlink: 'syz.8.3863': attribute type 10 has an invalid length. [ 255.312354][T14855] SELinux: security_context_str_to_sid (ð ÿÿÿ·) failed with errno=-22 [ 255.322295][T14876] FAULT_INJECTION: forcing a failure. [ 255.322295][T14876] name failslab, interval 1, probability 0, space 0, times 0 [ 255.335027][T14876] CPU: 1 UID: 0 PID: 14876 Comm: syz.6.3870 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 255.335058][T14876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 255.335070][T14876] Call Trace: [ 255.335076][T14876] [ 255.335085][T14876] __dump_stack+0x1d/0x30 [ 255.335109][T14876] dump_stack_lvl+0xe8/0x140 [ 255.335199][T14876] dump_stack+0x15/0x1b [ 255.335218][T14876] should_fail_ex+0x265/0x280 [ 255.335272][T14876] should_failslab+0x8c/0xb0 [ 255.335305][T14876] kmem_cache_alloc_noprof+0x50/0x310 [ 255.335343][T14876] ? getname_flags+0x80/0x3b0 [ 255.335503][T14876] getname_flags+0x80/0x3b0 [ 255.335532][T14876] __x64_sys_renameat+0x50/0x80 [ 255.335554][T14876] x64_sys_call+0x2d98/0x2fb0 [ 255.335571][T14876] do_syscall_64+0xd0/0x1a0 [ 255.335666][T14876] ? clear_bhb_loop+0x25/0x80 [ 255.335692][T14876] ? clear_bhb_loop+0x25/0x80 [ 255.335715][T14876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.335765][T14876] RIP: 0033:0x7f724adde969 [ 255.335781][T14876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.335801][T14876] RSP: 002b:00007f7249447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 255.335824][T14876] RAX: ffffffffffffffda RBX: 00007f724b005fa0 RCX: 00007f724adde969 [ 255.335834][T14876] RDX: ffffffffffffffff RSI: 0000200000000000 RDI: ffffffffffffffff [ 255.335844][T14876] RBP: 00007f7249447090 R08: 0000000000000000 R09: 0000000000000000 [ 255.335858][T14876] R10: 0000200000000640 R11: 0000000000000246 R12: 0000000000000001 [ 255.335910][T14876] R13: 0000000000000000 R14: 00007f724b005fa0 R15: 00007ffc9c9dd708 [ 255.335932][T14876] [ 256.078606][T14903] loop8: detected capacity change from 0 to 128 [ 256.085564][T14903] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 256.187729][T14924] SELinux: ebitmap: truncated map [ 256.196886][T14924] SELinux: failed to load policy [ 256.303744][T14935] loop3: detected capacity change from 0 to 128 [ 256.615685][T14957] SELinux: ebitmap: truncated map [ 256.623931][T14957] SELinux: failed to load policy [ 256.714047][T14949] loop7: detected capacity change from 0 to 128 [ 256.720943][T14949] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 256.754434][T14971] loop8: detected capacity change from 0 to 128 [ 256.869696][T14981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3916'. [ 256.911270][ T3559] IPVS: starting estimator thread 0... [ 256.973063][T14993] netlink: 'syz.3.3919': attribute type 1 has an invalid length. [ 256.998811][T14988] IPVS: using max 1872 ests per chain, 93600 per kthread [ 257.493163][T15023] loop7: detected capacity change from 0 to 8192 [ 257.506297][T15023] $Hÿ: renamed from bond0 (while UP) [ 257.513882][T15023] $Hÿ: entered promiscuous mode [ 257.518962][T15023] bond_slave_0: entered promiscuous mode [ 257.524736][T15023] bond_slave_1: entered promiscuous mode [ 257.578692][T15025] FAULT_INJECTION: forcing a failure. [ 257.578692][T15025] name failslab, interval 1, probability 0, space 0, times 0 [ 257.591348][T15025] CPU: 0 UID: 0 PID: 15025 Comm: syz.7.3932 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 257.591385][T15025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 257.591396][T15025] Call Trace: [ 257.591400][T15025] [ 257.591406][T15025] __dump_stack+0x1d/0x30 [ 257.591491][T15025] dump_stack_lvl+0xe8/0x140 [ 257.591580][T15025] dump_stack+0x15/0x1b [ 257.591595][T15025] should_fail_ex+0x265/0x280 [ 257.591672][T15025] should_failslab+0x8c/0xb0 [ 257.591696][T15025] kmem_cache_alloc_node_noprof+0x57/0x320 [ 257.591725][T15025] ? __alloc_skb+0x101/0x320 [ 257.591793][T15025] __alloc_skb+0x101/0x320 [ 257.591819][T15025] netlink_alloc_large_skb+0xba/0xf0 [ 257.591854][T15025] netlink_sendmsg+0x3cf/0x6b0 [ 257.591886][T15025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.591917][T15025] __sock_sendmsg+0x142/0x180 [ 257.591937][T15025] ____sys_sendmsg+0x31e/0x4e0 [ 257.591960][T15025] ___sys_sendmsg+0x17b/0x1d0 [ 257.592080][T15025] __x64_sys_sendmsg+0xd4/0x160 [ 257.592106][T15025] x64_sys_call+0x2999/0x2fb0 [ 257.592129][T15025] do_syscall_64+0xd0/0x1a0 [ 257.592150][T15025] ? clear_bhb_loop+0x25/0x80 [ 257.592172][T15025] ? clear_bhb_loop+0x25/0x80 [ 257.592228][T15025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.592244][T15025] RIP: 0033:0x7fd3ce46e969 [ 257.592258][T15025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.592317][T15025] RSP: 002b:00007fd3ccad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.592332][T15025] RAX: ffffffffffffffda RBX: 00007fd3ce695fa0 RCX: 00007fd3ce46e969 [ 257.592342][T15025] RDX: 0000000000000880 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 257.592352][T15025] RBP: 00007fd3ccad7090 R08: 0000000000000000 R09: 0000000000000000 [ 257.592362][T15025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.592387][T15025] R13: 0000000000000000 R14: 00007fd3ce695fa0 R15: 00007ffc853bfbe8 [ 257.592408][T15025] [ 257.887921][T15034] loop3: detected capacity change from 0 to 1024 [ 257.940911][T15034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.957683][T15034] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.013425][T12245] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.141943][T14985] syz.6.3917 (14985) used greatest stack depth: 6192 bytes left [ 258.173301][ T29] kauditd_printk_skb: 699 callbacks suppressed [ 258.173313][ T29] audit: type=1400 audit(1746399005.841:13547): avc: denied { read write } for pid=11505 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.207684][ T29] audit: type=1400 audit(1746399005.851:13548): avc: denied { open } for pid=11505 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.232150][ T29] audit: type=1400 audit(1746399005.851:13549): avc: denied { ioctl } for pid=11505 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.262197][ T29] audit: type=1400 audit(1746399005.881:13550): avc: denied { open } for pid=15045 comm="syz.3.3939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 258.281793][ T29] audit: type=1400 audit(1746399005.881:13551): avc: denied { kernel } for pid=15045 comm="syz.3.3939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 258.307806][T15050] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3941'. [ 258.317098][ T29] audit: type=1400 audit(1746399005.971:13552): avc: denied { create } for pid=15049 comm="syz.8.3941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 258.336983][ T29] audit: type=1400 audit(1746399005.971:13553): avc: denied { setopt } for pid=15049 comm="syz.8.3941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 258.363452][ T29] audit: type=1326 audit(1746399006.031:13554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15045 comm="syz.3.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829561e969 code=0x7ffc0000 [ 258.387118][ T29] audit: type=1326 audit(1746399006.031:13555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15045 comm="syz.3.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829561e969 code=0x7ffc0000 [ 258.425286][ T29] audit: type=1400 audit(1746399006.031:13556): avc: denied { map_create } for pid=15051 comm="syz.2.3942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 258.671852][T15071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3948'. [ 258.702327][T15071] netlink: 'syz.3.3948': attribute type 4 has an invalid length. [ 258.739150][T15075] loop8: detected capacity change from 0 to 128 [ 258.797618][T15079] loop8: detected capacity change from 0 to 512 [ 258.805299][T15079] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 259.091634][T15103] loop8: detected capacity change from 0 to 1024 [ 259.111349][T15103] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.123655][T15103] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.132469][T15099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3960'. [ 259.198368][T11505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.225903][T15116] loop8: detected capacity change from 0 to 512 [ 259.232605][T15116] EXT4-fs: Ignoring removed oldalloc option [ 259.238801][T15116] EXT4-fs: Ignoring removed mblk_io_submit option [ 259.245734][T15116] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 259.266176][T15116] EXT4-fs (loop8): orphan cleanup on readonly fs [ 259.278533][T15116] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.3965: Failed to acquire dquot type 1 [ 259.291876][T15116] EXT4-fs (loop8): 1 truncate cleaned up [ 259.298091][T15116] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 259.319474][T15116] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3965'. [ 259.328588][T15116] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3965'. [ 259.329097][T15126] netlink: 'syz.2.3966': attribute type 10 has an invalid length. [ 259.350141][T15116] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 259.360134][T15116] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 259.379619][T15116] EXT4-fs error (device loop8): __ext4_remount:6738: comm syz.8.3965: Abort forced by user [ 259.389917][T15116] EXT4-fs (loop8): Remounting filesystem read-only [ 259.396459][T15116] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 259.405060][T15116] ext4 filesystem being remounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.429024][T11505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.448251][T15135] loop8: detected capacity change from 0 to 256 [ 259.455043][T15135] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 259.467441][T15135] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.492983][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3971'. [ 259.595429][T15143] dummy0: entered promiscuous mode [ 259.600762][T15143] macsec1: entered allmulticast mode [ 259.606110][T15143] dummy0: entered allmulticast mode [ 259.694716][T15146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3976'. [ 259.719211][T15146] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.748691][T15146] bridge_slave_0 (unregistering): left allmulticast mode [ 259.756457][T15146] bridge_slave_0 (unregistering): left promiscuous mode [ 259.766421][T15146] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.875369][T15152] ALSA: seq fatal error: cannot create timer (-22) [ 260.068648][T15155] loop2: detected capacity change from 0 to 512 [ 260.075837][T15155] EXT4-fs (loop2): blocks per group (71) and clusters per group (20800) inconsistent [ 260.282987][T15157] xt_TPROXY: Can be used only with -p tcp or -p udp [ 260.858906][T15175] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3984'. [ 260.905112][T15175] netlink: 'syz.8.3984': attribute type 4 has an invalid length. [ 261.059202][T15183] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15183 comm=syz.6.3990 [ 261.071870][T15183] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15183 comm=syz.6.3990 [ 261.221352][T15188] loop2: detected capacity change from 0 to 128 [ 261.221969][T15188] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 261.312729][T15202] netlink: 'syz.6.3998': attribute type 1 has an invalid length. [ 261.514509][T15212] SELinux: ebitmap: truncated map [ 261.529086][T15212] SELinux: failed to load policy [ 261.682327][T15237] loop2: detected capacity change from 0 to 2048 [ 261.700579][T15240] loop8: detected capacity change from 0 to 512 [ 261.710317][T15240] EXT4-fs (loop8): too many log groups per flexible block group [ 261.717989][T15240] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 261.721275][T15237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.724904][T15240] EXT4-fs (loop8): mount failed [ 261.741183][T15237] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 261.756947][T15237] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 261.769294][T15237] EXT4-fs (loop2): This should not happen!! Data will be lost [ 261.769294][T15237] [ 261.779191][T15237] EXT4-fs (loop2): Total free blocks count 0 [ 261.785188][T15237] EXT4-fs (loop2): Free/Dirty block details [ 261.791139][T15237] EXT4-fs (loop2): free_blocks=2415919104 [ 261.796911][T15237] EXT4-fs (loop2): dirty_blocks=16 [ 261.802047][T15237] EXT4-fs (loop2): Block reservation details [ 261.808065][T15237] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 261.814646][T15240] loop8: detected capacity change from 0 to 512 [ 261.821330][T15240] EXT4-fs: Ignoring removed orlov option [ 261.828486][T15240] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 261.837223][T15246] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 261.857303][T15240] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 261.866679][T15240] EXT4-fs error (device loop8): ext4_iget_extra_inode:4693: inode #15: comm syz.8.4013: corrupted in-inode xattr: e_value size too large [ 261.881356][T15240] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4013: couldn't read orphan inode 15 (err -117) [ 261.894243][T15240] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.920011][T15240] netlink: 'syz.8.4013': attribute type 1 has an invalid length. [ 261.973658][T11505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.028493][T15260] SELinux: ebitmap: truncated map [ 262.036662][T15260] SELinux: failed to load policy [ 262.116564][T15276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4023'. [ 262.146739][T15276] netlink: 'syz.2.4023': attribute type 4 has an invalid length. [ 262.192088][T15284] netlink: 'syz.7.4028': attribute type 10 has an invalid length. [ 262.226645][T15288] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4030'. [ 262.334603][T15303] loop7: detected capacity change from 0 to 1024 [ 262.371669][T15303] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.392691][T15303] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.401739][T15310] loop8: detected capacity change from 0 to 1024 [ 262.411627][T15310] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 262.431466][T15310] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.444850][ T9835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.456808][T15309] EXT4-fs error (device loop8): ext4_check_all_de:659: inode #12: block 7: comm syz.8.4039: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 262.540743][T11505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.793605][T15344] loop7: detected capacity change from 0 to 512 [ 262.822161][T15344] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 262.835286][T15344] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.872432][T15355] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4053'. [ 262.882120][T15355] FAULT_INJECTION: forcing a failure. [ 262.882120][T15355] name failslab, interval 1, probability 0, space 0, times 0 [ 262.894854][T15355] CPU: 1 UID: 0 PID: 15355 Comm: syz.3.4053 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 262.894914][T15355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 262.894924][T15355] Call Trace: [ 262.894929][T15355] [ 262.894936][T15355] __dump_stack+0x1d/0x30 [ 262.894986][T15355] dump_stack_lvl+0xe8/0x140 [ 262.895013][T15355] dump_stack+0x15/0x1b [ 262.895030][T15355] should_fail_ex+0x265/0x280 [ 262.895055][T15355] should_failslab+0x8c/0xb0 [ 262.895141][T15355] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 262.895177][T15355] ? shmem_alloc_inode+0x34/0x50 [ 262.895203][T15355] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 262.895226][T15355] shmem_alloc_inode+0x34/0x50 [ 262.895279][T15355] alloc_inode+0x3d/0x170 [ 262.895298][T15355] new_inode+0x1d/0xe0 [ 262.895319][T15355] shmem_get_inode+0x244/0x750 [ 262.895349][T15355] __shmem_file_setup+0x122/0x1f0 [ 262.895428][T15355] shmem_file_setup+0x3b/0x50 [ 262.895447][T15355] __se_sys_memfd_create+0x2c3/0x590 [ 262.895473][T15355] __x64_sys_memfd_create+0x31/0x40 [ 262.895494][T15355] x64_sys_call+0x122f/0x2fb0 [ 262.895566][T15355] do_syscall_64+0xd0/0x1a0 [ 262.895625][T15355] ? clear_bhb_loop+0x25/0x80 [ 262.895645][T15355] ? clear_bhb_loop+0x25/0x80 [ 262.895662][T15355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.895680][T15355] RIP: 0033:0x7f829561e969 [ 262.895691][T15355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.895712][T15355] RSP: 002b:00007f8293c86e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 262.895731][T15355] RAX: ffffffffffffffda RBX: 0000000000000520 RCX: 00007f829561e969 [ 262.895744][T15355] RDX: 00007f8293c86ef0 RSI: 0000000000000000 RDI: 00007f82956a1444 [ 262.895757][T15355] RBP: 0000200000000400 R08: 00007f8293c86bb7 R09: 00007f8293c86e40 [ 262.895770][T15355] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000002c0 [ 262.895784][T15355] R13: 00007f8293c86ef0 R14: 00007f8293c86eb0 R15: 0000200000000300 [ 262.895849][T15355] [ 263.119955][T15357] loop3: detected capacity change from 0 to 512 [ 263.140701][T15357] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 263.237573][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 263.237589][ T29] audit: type=1400 audit(1746399010.821:13951): avc: denied { execmem } for pid=15356 comm="syz.3.4054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 263.263322][ T29] audit: type=1326 audit(1746399010.821:13952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.6.4055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 263.286978][ T29] audit: type=1326 audit(1746399010.821:13953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.6.4055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 263.296701][T15364] loop2: detected capacity change from 0 to 256 [ 263.310525][ T29] audit: type=1326 audit(1746399010.821:13954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.6.4055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 263.310624][ T29] audit: type=1326 audit(1746399010.821:13955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.6.4055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 263.364279][ T29] audit: type=1326 audit(1746399010.821:13956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.6.4055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 263.387943][ T29] audit: type=1326 audit(1746399010.821:13957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.6.4055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 263.396273][T15366] xt_TPROXY: Can be used only with -p tcp or -p udp [ 263.411558][ T29] audit: type=1326 audit(1746399010.821:13958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.6.4055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 263.411591][ T29] audit: type=1326 audit(1746399010.821:13959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.6.4055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 263.442676][T15364] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 263.465225][ T29] audit: type=1326 audit(1746399010.821:13960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.6.4055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 263.505423][T15364] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 263.526574][ T9835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 263.657884][T15377] FAULT_INJECTION: forcing a failure. [ 263.657884][T15377] name failslab, interval 1, probability 0, space 0, times 0 [ 263.670601][T15377] CPU: 1 UID: 0 PID: 15377 Comm: syz.7.4060 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 263.670625][T15377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 263.670635][T15377] Call Trace: [ 263.670641][T15377] [ 263.670649][T15377] __dump_stack+0x1d/0x30 [ 263.670681][T15377] dump_stack_lvl+0xe8/0x140 [ 263.670702][T15377] dump_stack+0x15/0x1b [ 263.670719][T15377] should_fail_ex+0x265/0x280 [ 263.670824][T15377] should_failslab+0x8c/0xb0 [ 263.670849][T15377] kmem_cache_alloc_noprof+0x50/0x310 [ 263.670942][T15377] ? proc_net_ns_init+0x2f/0x1f0 [ 263.671024][T15377] proc_net_ns_init+0x2f/0x1f0 [ 263.671053][T15377] ops_init+0x227/0x2e0 [ 263.671083][T15377] setup_net+0x13b/0x5f0 [ 263.671111][T15377] copy_net_ns+0x565/0x720 [ 263.671199][T15377] create_new_namespaces+0x20e/0x410 [ 263.671234][T15377] unshare_nsproxy_namespaces+0xe8/0x120 [ 263.671268][T15377] ksys_unshare+0x3d0/0x6d0 [ 263.671313][T15377] ? ksys_write+0x16e/0x1a0 [ 263.671335][T15377] __x64_sys_unshare+0x1f/0x30 [ 263.671428][T15377] x64_sys_call+0x2d4b/0x2fb0 [ 263.671449][T15377] do_syscall_64+0xd0/0x1a0 [ 263.671471][T15377] ? clear_bhb_loop+0x25/0x80 [ 263.671513][T15377] ? clear_bhb_loop+0x25/0x80 [ 263.671540][T15377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.671578][T15377] RIP: 0033:0x7fd3ce46e969 [ 263.671596][T15377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.671641][T15377] RSP: 002b:00007fd3ccad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 263.671662][T15377] RAX: ffffffffffffffda RBX: 00007fd3ce695fa0 RCX: 00007fd3ce46e969 [ 263.671674][T15377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000044040200 [ 263.671685][T15377] RBP: 00007fd3ccad7090 R08: 0000000000000000 R09: 0000000000000000 [ 263.671696][T15377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.671707][T15377] R13: 0000000000000000 R14: 00007fd3ce695fa0 R15: 00007ffc853bfbe8 [ 263.671724][T15377] [ 263.886507][T15383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4059'. [ 264.046015][T15397] netlink: 'syz.8.4064': attribute type 10 has an invalid length. [ 264.165896][T15404] loop7: detected capacity change from 0 to 512 [ 264.180549][T15404] EXT4-fs (loop7): too many log groups per flexible block group [ 264.188350][T15404] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 264.195188][T15404] EXT4-fs (loop7): mount failed [ 264.252474][T15407] bridge0: port 1(gretap0) entered blocking state [ 264.259752][T15407] bridge0: port 1(gretap0) entered disabled state [ 264.266562][T15407] gretap0: entered allmulticast mode [ 264.272684][T15407] gretap0: entered promiscuous mode [ 264.278245][T15407] bridge0: port 1(gretap0) entered blocking state [ 264.284758][T15407] bridge0: port 1(gretap0) entered forwarding state [ 264.293600][T15407] gretap0: left allmulticast mode [ 264.298678][T15407] gretap0: left promiscuous mode [ 264.303723][T15407] bridge0: port 1(gretap0) entered disabled state [ 264.541042][T15415] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4074'. [ 264.606518][T15404] loop7: detected capacity change from 0 to 512 [ 264.613270][T15404] EXT4-fs: Ignoring removed orlov option [ 264.619782][T15404] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 264.639837][T15404] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 264.648039][T15404] EXT4-fs error (device loop7): ext4_iget_extra_inode:4693: inode #15: comm syz.7.4070: corrupted in-inode xattr: e_value size too large [ 264.663205][T15404] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.4070: couldn't read orphan inode 15 (err -117) [ 264.675834][T15404] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.690447][T15404] netlink: 'syz.7.4070': attribute type 1 has an invalid length. [ 264.770384][ T9835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.792543][T15430] loop8: detected capacity change from 0 to 1024 [ 264.815651][T15430] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.830921][T15430] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.881766][T15439] loop7: detected capacity change from 0 to 128 [ 264.924957][T11505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.935538][T15446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4086'. [ 264.935707][T15445] netem: incorrect ge model size [ 264.949683][T15445] netem: change failed [ 264.957136][T15446] netlink: 'syz.3.4086': attribute type 4 has an invalid length. [ 264.986678][T15450] loop8: detected capacity change from 0 to 512 [ 264.994874][T15450] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 265.017118][T15450] EXT4-fs (loop8): 1 truncate cleaned up [ 265.024346][T15450] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.060690][T15445] loop7: detected capacity change from 0 to 164 [ 265.062029][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4087'. [ 265.075983][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4087'. [ 265.118370][T15445] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4088'. [ 265.161559][T11505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.197871][T15456] netlink: 'syz.8.4091': attribute type 1 has an invalid length. [ 265.213557][T15456] loop8: detected capacity change from 0 to 764 [ 265.221696][T15456] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 265.256314][T15460] 9pnet_fd: Insufficient options for proto=fd [ 265.268541][T15460] netlink: 'syz.7.4092': attribute type 10 has an invalid length. [ 265.291435][T15463] loop8: detected capacity change from 0 to 512 [ 265.295311][T15467] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4095'. [ 265.300179][T15463] FAT-fs (loop8): bogus sectors per cluster 69 [ 265.313101][T15463] FAT-fs (loop8): Can't find a valid FAT filesystem [ 265.325292][T15468] loop2: detected capacity change from 0 to 512 [ 265.332613][T15470] ALSA: seq fatal error: cannot create timer (-22) [ 265.339363][T15468] EXT4-fs (loop2): blocks per group (71) and clusters per group (20800) inconsistent [ 265.535303][T15475] xt_TPROXY: Can be used only with -p tcp or -p udp [ 266.574063][T15490] loop8: detected capacity change from 0 to 1024 [ 266.635481][T15490] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.666016][T15490] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.712418][T11505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.747259][T15504] loop8: detected capacity change from 0 to 512 [ 266.770894][T15504] EXT4-fs (loop8): too many log groups per flexible block group [ 266.778813][T15504] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 266.789212][T15504] EXT4-fs (loop8): mount failed [ 266.831421][T15504] loop8: detected capacity change from 0 to 512 [ 266.837898][T15504] EXT4-fs: Ignoring removed orlov option [ 266.844242][T15504] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 266.866353][T15504] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 266.878512][T15504] EXT4-fs error (device loop8): ext4_iget_extra_inode:4693: inode #15: comm syz.8.4105: corrupted in-inode xattr: e_value size too large [ 266.959938][T15504] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4105: couldn't read orphan inode 15 (err -117) [ 266.981329][T15516] SELinux: ebitmap: truncated map [ 266.985712][T15504] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.990329][T15516] SELinux: failed to load policy [ 267.034983][T15504] netlink: 'syz.8.4105': attribute type 1 has an invalid length. [ 267.127515][T11505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.221999][T15533] xt_TPROXY: Can be used only with -p tcp or -p udp [ 267.494062][T15536] loop8: detected capacity change from 0 to 1024 [ 267.543850][T15536] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.558294][T15536] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.621853][T15548] 9pnet_fd: Insufficient options for proto=fd [ 267.632600][T11505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.663892][T15556] __nla_validate_parse: 1 callbacks suppressed [ 267.663909][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4119'. [ 267.745909][T15563] loop8: detected capacity change from 0 to 512 [ 267.754568][T15563] EXT4-fs (loop8): blocks per group (71) and clusters per group (20800) inconsistent [ 267.779093][T15565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4126'. [ 267.974319][T15580] xt_TPROXY: Can be used only with -p tcp or -p udp [ 268.136660][T15579] ref_ctr_offset mismatch. inode: 0x958 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 268.238638][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 268.238654][ T29] audit: type=1326 audit(1746399015.911:14221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15578 comm="syz.6.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 268.275950][ T29] audit: type=1326 audit(1746399015.941:14222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15578 comm="syz.6.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 268.299863][ T29] audit: type=1400 audit(1746399015.941:14223): avc: denied { create } for pid=15578 comm="syz.6.4131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 268.320797][ T29] audit: type=1326 audit(1746399015.941:14224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15578 comm="syz.6.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 268.344428][ T29] audit: type=1326 audit(1746399015.941:14225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15578 comm="syz.6.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 268.368109][ T29] audit: type=1400 audit(1746399015.941:14226): avc: denied { write } for pid=15578 comm="syz.6.4131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 268.389028][ T29] audit: type=1326 audit(1746399015.941:14227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15578 comm="syz.6.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 268.412769][ T29] audit: type=1326 audit(1746399015.941:14228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15578 comm="syz.6.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 268.436257][ T29] audit: type=1326 audit(1746399015.941:14229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15578 comm="syz.6.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 268.459868][ T29] audit: type=1326 audit(1746399015.941:14230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15578 comm="syz.6.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 268.496419][T15587] 9pnet_fd: Insufficient options for proto=fd [ 268.542378][T15596] ALSA: seq fatal error: cannot create timer (-22) [ 268.620526][T15600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4136'. [ 268.676578][T15607] loop7: detected capacity change from 0 to 512 [ 268.689613][T15609] loop3: detected capacity change from 0 to 512 [ 268.696642][T15609] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 268.803946][T15607] EXT4-fs (loop7): too many log groups per flexible block group [ 268.811713][T15607] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 268.825640][T15607] EXT4-fs (loop7): mount failed [ 268.861413][T15607] netlink: 'syz.7.4139': attribute type 1 has an invalid length. [ 268.909428][T15620] xt_TPROXY: Can be used only with -p tcp or -p udp [ 269.462203][T15626] netlink: 'syz.6.4145': attribute type 1 has an invalid length. [ 269.499518][T15630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4146'. [ 269.585511][T15636] SELinux: ebitmap: truncated map [ 269.613566][T15639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4150'. [ 269.614437][T15636] SELinux: failed to load policy [ 269.883277][T15659] loop8: detected capacity change from 0 to 128 [ 269.895016][T15662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4158'. [ 270.056840][T15671] loop8: detected capacity change from 0 to 512 [ 270.065041][T15671] EXT4-fs (loop8): blocks per group (71) and clusters per group (20800) inconsistent [ 270.178775][T15675] SELinux: ebitmap: truncated map [ 270.186057][T15675] SELinux: failed to load policy [ 270.276444][T15679] xt_TPROXY: Can be used only with -p tcp or -p udp [ 270.649781][T15695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4171'. [ 270.771395][T15701] FAULT_INJECTION: forcing a failure. [ 270.771395][T15701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.784533][T15701] CPU: 1 UID: 0 PID: 15701 Comm: syz.3.4173 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 270.784562][T15701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 270.784575][T15701] Call Trace: [ 270.784582][T15701] [ 270.784591][T15701] __dump_stack+0x1d/0x30 [ 270.784624][T15701] dump_stack_lvl+0xe8/0x140 [ 270.784645][T15701] dump_stack+0x15/0x1b [ 270.784734][T15701] should_fail_ex+0x265/0x280 [ 270.784764][T15701] should_fail+0xb/0x20 [ 270.784797][T15701] should_fail_usercopy+0x1a/0x20 [ 270.784824][T15701] strncpy_from_user+0x25/0x230 [ 270.784903][T15701] ? kmem_cache_alloc_noprof+0x186/0x310 [ 270.785017][T15701] ? getname_flags+0x80/0x3b0 [ 270.785044][T15701] getname_flags+0xae/0x3b0 [ 270.785072][T15701] user_path_at+0x28/0x130 [ 270.785109][T15701] __se_sys_mount+0x25b/0x2e0 [ 270.785213][T15701] ? schedule+0x5f/0xd0 [ 270.785308][T15701] __x64_sys_mount+0x67/0x80 [ 270.785338][T15701] x64_sys_call+0xd36/0x2fb0 [ 270.785359][T15701] do_syscall_64+0xd0/0x1a0 [ 270.785379][T15701] ? clear_bhb_loop+0x25/0x80 [ 270.785404][T15701] ? clear_bhb_loop+0x25/0x80 [ 270.785438][T15701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.785462][T15701] RIP: 0033:0x7f829561e969 [ 270.785476][T15701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.785493][T15701] RSP: 002b:00007f8293c87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 270.785519][T15701] RAX: ffffffffffffffda RBX: 00007f8295845fa0 RCX: 00007f829561e969 [ 270.785534][T15701] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 270.785550][T15701] RBP: 00007f8293c87090 R08: 0000200000000300 R09: 0000000000000000 [ 270.785565][T15701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.785581][T15701] R13: 0000000000000000 R14: 00007f8295845fa0 R15: 00007ffd8aedf558 [ 270.785605][T15701] [ 271.011400][T15702] xt_TPROXY: Can be used only with -p tcp or -p udp [ 271.450621][T15709] loop2: detected capacity change from 0 to 256 [ 271.457266][T15709] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 271.492637][T15709] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 271.542458][T15713] loop7: detected capacity change from 0 to 512 [ 271.570221][T15713] EXT4-fs (loop7): too many log groups per flexible block group [ 271.577997][T15713] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 271.584927][T15713] EXT4-fs (loop7): mount failed [ 271.603302][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4180'. [ 271.612489][T15721] loop8: detected capacity change from 0 to 128 [ 271.617767][T15713] loop7: detected capacity change from 0 to 512 [ 271.625366][T15713] EXT4-fs: Ignoring removed orlov option [ 271.632271][T15721] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 271.645194][T15713] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 271.648724][T15721] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.664982][T15713] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 271.678889][T15713] EXT4-fs error (device loop7): ext4_iget_extra_inode:4693: inode #15: comm syz.7.4178: corrupted in-inode xattr: e_value size too large [ 271.701724][T15713] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.4178: couldn't read orphan inode 15 (err -117) [ 271.744670][T15713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.760919][T15713] netlink: 'syz.7.4178': attribute type 1 has an invalid length. [ 271.784913][T11505] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 271.787883][T15729] netlink: 'syz.6.4182': attribute type 4 has an invalid length. [ 271.840530][T15733] loop8: detected capacity change from 0 to 512 [ 271.847886][T15733] EXT4-fs (loop8): blocks per group (71) and clusters per group (20800) inconsistent [ 271.858698][ T9835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.903373][T15737] loop7: detected capacity change from 0 to 1024 [ 271.915857][T15737] EXT4-fs: Ignoring removed orlov option [ 271.921793][T15737] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.941083][T15737] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.999184][T15739] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 272.045389][ T9835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.045485][T15744] netlink: '+}[@': attribute type 3 has an invalid length. [ 272.124497][T15745] xt_TPROXY: Can be used only with -p tcp or -p udp [ 272.266463][T15748] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4190'. [ 272.385725][T15751] FAULT_INJECTION: forcing a failure. [ 272.385725][T15751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.398878][T15751] CPU: 1 UID: 0 PID: 15751 Comm: syz.3.4191 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 272.398945][T15751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 272.398962][T15751] Call Trace: [ 272.398969][T15751] [ 272.398976][T15751] __dump_stack+0x1d/0x30 [ 272.398997][T15751] dump_stack_lvl+0xe8/0x140 [ 272.399022][T15751] dump_stack+0x15/0x1b [ 272.399135][T15751] should_fail_ex+0x265/0x280 [ 272.399175][T15751] should_fail+0xb/0x20 [ 272.399205][T15751] should_fail_usercopy+0x1a/0x20 [ 272.399301][T15751] _copy_from_user+0x1c/0xb0 [ 272.399327][T15751] __x64_sys_clock_adjtime+0x67/0x1d0 [ 272.399403][T15751] x64_sys_call+0x2839/0x2fb0 [ 272.399432][T15751] do_syscall_64+0xd0/0x1a0 [ 272.399465][T15751] ? clear_bhb_loop+0x25/0x80 [ 272.399487][T15751] ? clear_bhb_loop+0x25/0x80 [ 272.399560][T15751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.399578][T15751] RIP: 0033:0x7f829561e969 [ 272.399632][T15751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.399678][T15751] RSP: 002b:00007f8293c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 272.399693][T15751] RAX: ffffffffffffffda RBX: 00007f8295845fa0 RCX: 00007f829561e969 [ 272.399757][T15751] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000000 [ 272.399768][T15751] RBP: 00007f8293c87090 R08: 0000000000000000 R09: 0000000000000000 [ 272.399778][T15751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.399788][T15751] R13: 0000000000000001 R14: 00007f8295845fa0 R15: 00007ffd8aedf558 [ 272.399803][T15751] [ 272.659815][T15765] netlink: 'syz.6.4196': attribute type 1 has an invalid length. [ 272.670115][T15768] netlink: 'syz.3.4192': attribute type 1 has an invalid length. [ 272.860648][T15780] ALSA: seq fatal error: cannot create timer (-22) [ 272.971090][T15788] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.025691][T15789] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 273.345758][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4204'. [ 273.357699][T15791] 9pnet_fd: Insufficient options for proto=fd [ 273.385853][T15788] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.434228][T15801] loop8: detected capacity change from 0 to 512 [ 273.450389][T15788] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.476507][T15803] loop3: detected capacity change from 0 to 512 [ 273.500198][T15801] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.509159][T15803] EXT4-fs (loop3): too many log groups per flexible block group [ 273.513101][T15801] ext4 filesystem being mounted at /298/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 273.520419][T15803] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 273.537686][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 273.537698][ T29] audit: type=1400 audit(1746399021.201:14562): avc: denied { setattr } for pid=15800 comm="syz.8.4209" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 273.550010][T15803] EXT4-fs (loop3): mount failed [ 273.565923][ T29] audit: type=1400 audit(1746399021.201:14563): avc: denied { listen } for pid=15800 comm="syz.8.4209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 273.593622][T11505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.604837][T15788] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 273.613619][T15788] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.624549][T15803] loop3: detected capacity change from 0 to 512 [ 273.631589][T15803] EXT4-fs: Ignoring removed orlov option [ 273.637638][T15803] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 273.647758][T15803] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 273.658632][T15803] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.4210: corrupted in-inode xattr: e_value size too large [ 273.674488][T15803] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4210: couldn't read orphan inode 15 (err -117) [ 273.690117][T15803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.712321][T15812] xt_TPROXY: Can be used only with -p tcp or -p udp [ 273.934247][T15788] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.951512][T15803] netlink: 'syz.3.4210': attribute type 1 has an invalid length. [ 274.018172][T15788] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.029704][T15788] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.045132][T15788] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.077532][T12245] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.132980][ T29] audit: type=1400 audit(1746399021.801:14564): avc: denied { setcurrent } for pid=15831 comm="syz.3.4215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 274.133088][T15832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4215'. [ 274.162521][T15830] FAULT_INJECTION: forcing a failure. [ 274.162521][T15830] name failslab, interval 1, probability 0, space 0, times 0 [ 274.165795][ T29] audit: type=1401 audit(1746399021.801:14565): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 274.175149][T15830] CPU: 0 UID: 0 PID: 15830 Comm: syz.7.4216 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 274.175176][T15830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 274.175190][T15830] Call Trace: [ 274.175197][T15830] [ 274.175205][T15830] __dump_stack+0x1d/0x30 [ 274.175230][T15830] dump_stack_lvl+0xe8/0x140 [ 274.175252][T15830] dump_stack+0x15/0x1b [ 274.175271][T15830] should_fail_ex+0x265/0x280 [ 274.175306][T15830] should_failslab+0x8c/0xb0 [ 274.175338][T15830] kmem_cache_alloc_noprof+0x50/0x310 [ 274.175373][T15830] ? __mpol_dup+0x42/0x1b0 [ 274.175397][T15830] __mpol_dup+0x42/0x1b0 [ 274.175421][T15830] vma_dup_policy+0x29/0x70 [ 274.175443][T15830] __split_vma+0x25f/0x610 [ 274.175482][T15830] vma_modify+0x107/0x210 [ 274.175513][T15830] vma_modify_policy+0x101/0x130 [ 274.175551][T15830] mbind_range+0x1b8/0x440 [ 274.175578][T15830] ? mas_find+0x4ea/0x610 [ 274.175603][T15830] __se_sys_mbind+0x648/0xac0 [ 274.175631][T15830] __x64_sys_mbind+0x78/0x90 [ 274.175652][T15830] x64_sys_call+0x14af/0x2fb0 [ 274.175676][T15830] do_syscall_64+0xd0/0x1a0 [ 274.175698][T15830] ? clear_bhb_loop+0x25/0x80 [ 274.175721][T15830] ? clear_bhb_loop+0x25/0x80 [ 274.175745][T15830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.175767][T15830] RIP: 0033:0x7fd3ce46e969 [ 274.175784][T15830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.175803][T15830] RSP: 002b:00007fd3ccad7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 274.175823][T15830] RAX: ffffffffffffffda RBX: 00007fd3ce695fa0 RCX: 00007fd3ce46e969 [ 274.175837][T15830] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 274.175850][T15830] RBP: 00007fd3ccad7090 R08: 0000000000002000 R09: 0000000000000000 [ 274.175864][T15830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.175877][T15830] R13: 0000000000000000 R14: 00007fd3ce695fa0 R15: 00007ffc853bfbe8 [ 274.175897][T15830] [ 274.457856][T15840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4220'. [ 274.485734][ T29] audit: type=1400 audit(1746399022.151:14566): avc: denied { setopt } for pid=15841 comm="syz.8.4221" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 274.521655][T15850] ALSA: seq fatal error: cannot create timer (-22) [ 274.537370][ T29] audit: type=1326 audit(1746399022.201:14567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15853 comm="syz.8.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e5f2e969 code=0x7ffc0000 [ 274.561212][ T29] audit: type=1326 audit(1746399022.201:14568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15853 comm="syz.8.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f23e5f2e969 code=0x7ffc0000 [ 274.584975][ T29] audit: type=1326 audit(1746399022.201:14569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15853 comm="syz.8.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e5f2e969 code=0x7ffc0000 [ 274.609532][ T29] audit: type=1326 audit(1746399022.281:14570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15853 comm="syz.8.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e5f2e969 code=0x7ffc0000 [ 274.658500][T15861] netlink: 'syz.6.4227': attribute type 1 has an invalid length. [ 274.659613][T15863] netlink: 'syz.8.4229': attribute type 39 has an invalid length. [ 274.704503][ T29] audit: type=1326 audit(1746399022.371:14571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15865 comm="syz.6.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724adde969 code=0x7ffc0000 [ 274.730485][T15867] netlink: 'syz.8.4229': attribute type 4 has an invalid length. [ 274.742816][T15867] netlink: 'syz.8.4229': attribute type 4 has an invalid length. [ 274.752784][T15868] netlink: 'syz.2.4228': attribute type 10 has an invalid length. [ 274.886467][T15879] 9pnet_fd: Insufficient options for proto=fd [ 274.902999][T15875] SELinux: failed to load policy [ 275.010561][T15889] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4240'. [ 275.027650][T15889] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.054006][T15889] bridge_slave_0 (unregistering): left allmulticast mode [ 275.061614][T15889] bridge_slave_0 (unregistering): left promiscuous mode [ 275.069656][T15889] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.088732][T15892] netlink: 'syz.6.4241': attribute type 1 has an invalid length. [ 275.219141][T15898] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4243'. [ 275.230748][T15898] vlan0: entered promiscuous mode [ 275.235786][T15898] bridge0: entered promiscuous mode [ 275.342754][T15905] tipc: Started in network mode [ 275.347650][T15905] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 275.354852][T15905] tipc: Enabled bearer , priority 0 [ 275.414511][T15914] FAULT_INJECTION: forcing a failure. [ 275.414511][T15914] name failslab, interval 1, probability 0, space 0, times 0 [ 275.427236][T15914] CPU: 0 UID: 0 PID: 15914 Comm: syz.3.4249 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 275.427259][T15914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 275.427270][T15914] Call Trace: [ 275.427275][T15914] [ 275.427281][T15914] __dump_stack+0x1d/0x30 [ 275.427353][T15914] dump_stack_lvl+0xe8/0x140 [ 275.427387][T15914] dump_stack+0x15/0x1b [ 275.427400][T15914] should_fail_ex+0x265/0x280 [ 275.427426][T15914] should_failslab+0x8c/0xb0 [ 275.427457][T15914] kmem_cache_alloc_node_noprof+0x57/0x320 [ 275.427555][T15914] ? __alloc_skb+0x101/0x320 [ 275.427580][T15914] __alloc_skb+0x101/0x320 [ 275.427657][T15914] netlink_alloc_large_skb+0xba/0xf0 [ 275.427687][T15914] netlink_sendmsg+0x3cf/0x6b0 [ 275.427728][T15914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.427761][T15914] __sock_sendmsg+0x142/0x180 [ 275.427858][T15914] ____sys_sendmsg+0x31e/0x4e0 [ 275.427882][T15914] ___sys_sendmsg+0x17b/0x1d0 [ 275.427922][T15914] __x64_sys_sendmsg+0xd4/0x160 [ 275.427984][T15914] x64_sys_call+0x2999/0x2fb0 [ 275.428037][T15914] do_syscall_64+0xd0/0x1a0 [ 275.428056][T15914] ? clear_bhb_loop+0x25/0x80 [ 275.428076][T15914] ? clear_bhb_loop+0x25/0x80 [ 275.428093][T15914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.428209][T15914] RIP: 0033:0x7f829561e969 [ 275.428228][T15914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.428250][T15914] RSP: 002b:00007f8293c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.428353][T15914] RAX: ffffffffffffffda RBX: 00007f8295845fa0 RCX: 00007f829561e969 [ 275.428368][T15914] RDX: 0000000020040814 RSI: 0000200000000840 RDI: 0000000000000006 [ 275.428380][T15914] RBP: 00007f8293c87090 R08: 0000000000000000 R09: 0000000000000000 [ 275.428391][T15914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.428430][T15914] R13: 0000000000000000 R14: 00007f8295845fa0 R15: 00007ffd8aedf558 [ 275.428453][T15914] [ 275.787387][T15934] ALSA: seq fatal error: cannot create timer (-22) [ 276.348390][ T23] tipc: Node number set to 11578026 [ 276.419205][T15954] netlink: 'syz.2.4262': attribute type 10 has an invalid length. [ 277.253167][T15963] loop7: detected capacity change from 0 to 128 [ 277.272102][T15963] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 277.294441][T15963] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 277.309815][T15965] loop3: detected capacity change from 0 to 128 [ 277.444102][T15970] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 277.450634][T15970] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 277.458382][T15970] vhci_hcd vhci_hcd.0: Device attached [ 277.498770][T15970] team0 (unregistering): Port device team_slave_0 removed [ 277.514514][T15970] team0 (unregistering): Port device team_slave_1 removed [ 277.648182][ T36] vhci_hcd: vhci_device speed not set [ 277.656480][T15978] loop3: detected capacity change from 0 to 1024 [ 277.665122][T15978] EXT4-fs: Ignoring removed nobh option [ 277.683448][T15978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.718329][ T36] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 277.740764][T15983] FAULT_INJECTION: forcing a failure. [ 277.740764][T15983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.753885][T15983] CPU: 1 UID: 0 PID: 15983 Comm: syz.8.4272 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 277.753923][T15983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 277.753939][T15983] Call Trace: [ 277.753998][T15983] [ 277.754008][T15983] __dump_stack+0x1d/0x30 [ 277.754031][T15983] dump_stack_lvl+0xe8/0x140 [ 277.754054][T15983] dump_stack+0x15/0x1b [ 277.754074][T15983] should_fail_ex+0x265/0x280 [ 277.754145][T15983] should_fail+0xb/0x20 [ 277.754174][T15983] should_fail_usercopy+0x1a/0x20 [ 277.754197][T15983] strncpy_from_user+0x25/0x230 [ 277.754226][T15983] ? kmem_cache_alloc_noprof+0x186/0x310 [ 277.754350][T15983] ? getname_flags+0x80/0x3b0 [ 277.754420][T15983] getname_flags+0xae/0x3b0 [ 277.754451][T15983] __x64_sys_symlink+0x33/0x60 [ 277.754538][T15983] x64_sys_call+0x2d8d/0x2fb0 [ 277.754560][T15983] do_syscall_64+0xd0/0x1a0 [ 277.754584][T15983] ? clear_bhb_loop+0x25/0x80 [ 277.754620][T15983] ? clear_bhb_loop+0x25/0x80 [ 277.754640][T15983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.754788][T15983] RIP: 0033:0x7f23e5f2e969 [ 277.754834][T15983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.754855][T15983] RSP: 002b:00007f23e4597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 277.754877][T15983] RAX: ffffffffffffffda RBX: 00007f23e6155fa0 RCX: 00007f23e5f2e969 [ 277.754891][T15983] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000200000000540 [ 277.754968][T15983] RBP: 00007f23e4597090 R08: 0000000000000000 R09: 0000000000000000 [ 277.754982][T15983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.754995][T15983] R13: 0000000000000000 R14: 00007f23e6155fa0 R15: 00007ffe7b7f19a8 [ 277.755040][T15983] [ 277.970669][T12245] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.016133][T15991] loop8: detected capacity change from 0 to 512 [ 278.018552][T15989] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4275'. [ 278.043695][T15989] netlink: 'syz.6.4275': attribute type 4 has an invalid length. [ 278.059437][T15991] EXT4-fs (loop8): too many log groups per flexible block group [ 278.067134][T15991] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 278.074464][T15991] EXT4-fs (loop8): mount failed [ 278.091569][T15991] loop8: detected capacity change from 0 to 512 [ 278.099097][T15991] EXT4-fs: Ignoring removed orlov option [ 278.105085][ T5817] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 278.137277][T15991] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 278.154516][T15991] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 278.163550][T15991] EXT4-fs error (device loop8): ext4_iget_extra_inode:4693: inode #15: comm syz.8.4276: corrupted in-inode xattr: e_value size too large [ 278.178439][T15991] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4276: couldn't read orphan inode 15 (err -117) [ 278.194412][T15991] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.270099][T15991] netlink: 'syz.8.4276': attribute type 1 has an invalid length. [ 278.285851][T15971] vhci_hcd: connection reset by peer [ 278.296024][ T5817] vhci_hcd: stop threads [ 278.300330][ T5817] vhci_hcd: release socket [ 278.304846][ T5817] vhci_hcd: disconnect device [ 278.329467][T11505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.594302][T16017] xt_TPROXY: Can be used only with -p tcp or -p udp [ 278.738247][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 278.738262][ T29] audit: type=1400 audit(1746399026.261:14799): avc: denied { create } for pid=16007 comm="syz.8.4281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 278.764236][ T29] audit: type=1400 audit(1746399026.271:14800): avc: denied { create } for pid=16007 comm="syz.8.4281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 278.783929][ T29] audit: type=1400 audit(1746399026.271:14801): avc: denied { read } for pid=16007 comm="syz.8.4281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 278.803434][ T29] audit: type=1400 audit(1746399026.271:14802): avc: denied { write } for pid=16007 comm="syz.8.4281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 278.823135][ T29] audit: type=1400 audit(1746399026.391:14803): avc: denied { open } for pid=16013 comm="syz.6.4283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 278.842658][ T29] audit: type=1400 audit(1746399026.391:14804): avc: denied { kernel } for pid=16013 comm="syz.6.4283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 278.862205][ T29] audit: type=1400 audit(1746399026.391:14805): avc: denied { cpu } for pid=16013 comm="syz.6.4283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 278.893593][ T29] audit: type=1400 audit(1746399026.561:14806): avc: denied { write } for pid=16013 comm="syz.6.4283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 278.933274][ T29] audit: type=1400 audit(1746399026.601:14807): avc: denied { setopt } for pid=16020 comm="syz.6.4284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 278.963406][ T29] audit: type=1400 audit(1746399026.621:14808): avc: denied { write } for pid=16020 comm="syz.6.4284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 279.166595][T16028] loop7: detected capacity change from 0 to 512 [ 279.193086][T16028] EXT4-fs (loop7): too many log groups per flexible block group [ 279.200959][T16028] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 279.210385][T16028] EXT4-fs (loop7): mount failed [ 279.219508][T16028] loop7: detected capacity change from 0 to 512 [ 279.226109][T16028] EXT4-fs: Ignoring removed orlov option [ 279.233160][T16028] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 279.244584][T16028] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 279.254152][T16028] EXT4-fs error (device loop7): ext4_iget_extra_inode:4693: inode #15: comm syz.7.4287: corrupted in-inode xattr: e_value size too large [ 279.268752][T16028] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.4287: couldn't read orphan inode 15 (err -117) [ 279.292445][T16028] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.313144][T16028] netlink: 'syz.7.4287': attribute type 1 has an invalid length. [ 279.420185][ T9835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.430370][T16045] FAULT_INJECTION: forcing a failure. [ 279.430370][T16045] name failslab, interval 1, probability 0, space 0, times 0 [ 279.443079][T16045] CPU: 0 UID: 0 PID: 16045 Comm: syz.3.4294 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 279.443109][T16045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 279.443143][T16045] Call Trace: [ 279.443148][T16045] [ 279.443155][T16045] __dump_stack+0x1d/0x30 [ 279.443172][T16045] dump_stack_lvl+0xe8/0x140 [ 279.443188][T16045] dump_stack+0x15/0x1b [ 279.443206][T16045] should_fail_ex+0x265/0x280 [ 279.443289][T16045] should_failslab+0x8c/0xb0 [ 279.443398][T16045] kmem_cache_alloc_node_noprof+0x57/0x320 [ 279.443427][T16045] ? __alloc_skb+0x101/0x320 [ 279.443534][T16045] __alloc_skb+0x101/0x320 [ 279.443560][T16045] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 279.443605][T16045] ? save_fpregs_to_fpstate+0x100/0x160 [ 279.443730][T16045] ? __pfx_rtnetlink_event+0x10/0x10 [ 279.443749][T16045] rtnetlink_event+0x18c/0x200 [ 279.443767][T16045] raw_notifier_call_chain+0x6c/0x1b0 [ 279.443785][T16045] ? call_netdevice_notifiers_info+0x9c/0x100 [ 279.443855][T16045] call_netdevice_notifiers_info+0xae/0x100 [ 279.443882][T16045] netif_change_tx_queue_len+0xba/0x170 [ 279.443949][T16045] dev_change_tx_queue_len+0xc0/0x170 [ 279.443981][T16045] dev_ifsioc+0x1a1/0xaa0 [ 279.444066][T16045] dev_ioctl+0x70a/0x960 [ 279.444081][T16045] sock_do_ioctl+0x197/0x220 [ 279.444120][T16045] sock_ioctl+0x41b/0x610 [ 279.444138][T16045] ? __pfx_sock_ioctl+0x10/0x10 [ 279.444162][T16045] __se_sys_ioctl+0xcb/0x140 [ 279.444185][T16045] __x64_sys_ioctl+0x43/0x50 [ 279.444218][T16045] x64_sys_call+0x19a8/0x2fb0 [ 279.444235][T16045] do_syscall_64+0xd0/0x1a0 [ 279.444252][T16045] ? clear_bhb_loop+0x25/0x80 [ 279.444273][T16045] ? clear_bhb_loop+0x25/0x80 [ 279.444296][T16045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.444393][T16045] RIP: 0033:0x7f829561e969 [ 279.444408][T16045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.444471][T16045] RSP: 002b:00007f8293c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.444490][T16045] RAX: ffffffffffffffda RBX: 00007f8295845fa0 RCX: 00007f829561e969 [ 279.444500][T16045] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 000000000000000a [ 279.444510][T16045] RBP: 00007f8293c87090 R08: 0000000000000000 R09: 0000000000000000 [ 279.444519][T16045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.444529][T16045] R13: 0000000000000000 R14: 00007f8295845fa0 R15: 00007ffd8aedf558 [ 279.444544][T16045] [ 279.717211][T16058] loop8: detected capacity change from 0 to 512 [ 279.735550][T16058] EXT4-fs (loop8): blocks per group (71) and clusters per group (20800) inconsistent [ 279.763696][T16062] netlink: 'syz.7.4297': attribute type 1 has an invalid length. [ 279.942668][T16071] xt_TPROXY: Can be used only with -p tcp or -p udp [ 280.712450][T16096] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4310'. [ 280.747231][T16096] netlink: 'syz.7.4310': attribute type 4 has an invalid length. [ 280.944383][T16106] loop3: detected capacity change from 0 to 512 [ 280.964954][T16106] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 280.977208][T16107] netlink: 'syz.8.4317': attribute type 1 has an invalid length. [ 281.193166][T16109] xt_TPROXY: Can be used only with -p tcp or -p udp [ 281.723515][T16121] ALSA: seq fatal error: cannot create timer (-22) [ 281.747411][T16119] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4322'. [ 281.852377][T16134] loop7: detected capacity change from 0 to 512 [ 281.859499][T16134] EXT4-fs (loop7): blocks per group (71) and clusters per group (20800) inconsistent [ 281.892202][T16137] loop3: detected capacity change from 0 to 512 [ 281.915275][T16137] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 281.942777][T16141] loop8: detected capacity change from 0 to 512 [ 281.949656][T16143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4330'. [ 281.960559][T16141] EXT4-fs (loop8): blocks per group (71) and clusters per group (20800) inconsistent [ 282.119569][T16144] xt_TPROXY: Can be used only with -p tcp or -p udp [ 282.218343][T16151] xt_TPROXY: Can be used only with -p tcp or -p udp [ 282.693078][T16156] xt_TPROXY: Can be used only with -p tcp or -p udp [ 282.983954][ T36] usb 5-1: enqueue for inactive port 0 [ 282.990605][ T36] usb 5-1: enqueue for inactive port 0 [ 283.187019][T16159] loop2: detected capacity change from 0 to 128 [ 283.204358][T16161] loop7: detected capacity change from 0 to 512 [ 283.233023][T16161] EXT4-fs (loop7): too many log groups per flexible block group [ 283.240894][T16161] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 283.248592][T16161] EXT4-fs (loop7): mount failed [ 283.252251][ T36] vhci_hcd: vhci_device speed not set [ 283.276921][T16161] loop7: detected capacity change from 0 to 512 [ 283.304082][T16161] EXT4-fs: Ignoring removed orlov option [ 283.318796][T16161] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 283.343849][T16161] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 283.352336][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4338'. [ 283.371893][T16181] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4342'. [ 283.381659][T16161] EXT4-fs error (device loop7): ext4_iget_extra_inode:4693: inode #15: comm syz.7.4335: corrupted in-inode xattr: e_value size too large [ 283.399512][T16181] vlan3: entered promiscuous mode [ 283.404567][T16181] bridge0: entered promiscuous mode [ 283.413859][T16161] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.4335: couldn't read orphan inode 15 (err -117) [ 283.427346][T16161] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.446564][T16161] netlink: 'syz.7.4335': attribute type 1 has an invalid length. [ 283.495201][ T9835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.521876][T16193] team0 (unregistering): Port device team_slave_0 removed [ 283.533538][T16193] team0 (unregistering): Port device team_slave_1 removed [ 283.540968][T16199] loop7: detected capacity change from 0 to 128 [ 283.622613][T16206] loop8: detected capacity change from 0 to 128 [ 283.685845][T16217] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4355'. [ 283.756421][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 283.756434][ T29] audit: type=1326 audit(1746399031.421:15085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16216 comm="syz.8.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e5f2e969 code=0x7ffc0000 [ 283.787545][T16225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4354'. [ 283.812279][ T29] audit: type=1326 audit(1746399031.461:15086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16216 comm="syz.8.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f23e5f2e969 code=0x7ffc0000 [ 283.835901][ T29] audit: type=1326 audit(1746399031.461:15087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16216 comm="syz.8.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e5f2e969 code=0x7ffc0000 [ 283.859588][ T29] audit: type=1326 audit(1746399031.461:15088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16216 comm="syz.8.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e5f2e969 code=0x7ffc0000 [ 283.883298][ T29] audit: type=1326 audit(1746399031.461:15089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16216 comm="syz.8.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23e5f2d2d0 code=0x7ffc0000 [ 283.907064][ T29] audit: type=1326 audit(1746399031.461:15090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16216 comm="syz.8.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e5f2e969 code=0x7ffc0000 [ 283.930951][ T29] audit: type=1326 audit(1746399031.461:15091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16216 comm="syz.8.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23e5f2e969 code=0x7ffc0000 [ 283.954581][ T29] audit: type=1326 audit(1746399031.461:15092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16216 comm="syz.8.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e5f2e969 code=0x7ffc0000 [ 283.978266][ T29] audit: type=1326 audit(1746399031.461:15093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16216 comm="syz.8.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23e5f2e969 code=0x7ffc0000 [ 284.001852][ T29] audit: type=1326 audit(1746399031.461:15094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16216 comm="syz.8.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e5f2e969 code=0x7ffc0000 [ 284.063504][T16237] ref_ctr_offset mismatch. inode: 0xa5a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xc [ 284.076927][T16234] loop8: detected capacity change from 0 to 1 [ 284.083648][T16234] buffer_io_error: 2 callbacks suppressed [ 284.083661][T16234] Buffer I/O error on dev loop8, logical block 0, async page read [ 284.097841][T16234] Buffer I/O error on dev loop8, logical block 0, async page read [ 284.105871][T16234] loop8: unable to read partition table [ 284.111888][T16234] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 284.127018][T16241] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4365'. [ 284.142647][T16241] vlan2: entered promiscuous mode [ 284.147692][T16241] bridge0: entered promiscuous mode [ 284.172995][T16246] loop7: detected capacity change from 0 to 128 [ 284.210929][T16253] loop3: detected capacity change from 0 to 128 [ 284.257674][T16253] syz.3.4370: attempt to access beyond end of device [ 284.257674][T16253] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 284.272809][T16253] syz.3.4370: attempt to access beyond end of device [ 284.272809][T16253] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 284.278828][T16256] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4372'. [ 284.286615][T16253] syz.3.4370: attempt to access beyond end of device [ 284.286615][T16253] loop3: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 284.365351][T16261] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4370'. [ 284.489972][T16270] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 284.496564][T16270] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 284.504272][T16270] vhci_hcd vhci_hcd.0: Device attached [ 284.528164][T16272] vhci_hcd: connection closed [ 284.528451][ T5819] vhci_hcd: stop threads [ 284.537463][ T5819] vhci_hcd: release socket [ 284.541935][ T5819] vhci_hcd: disconnect device [ 284.575589][T16257] loop7: detected capacity change from 0 to 128 [ 284.583793][T16257] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 284.850501][T16289] loop3: detected capacity change from 0 to 128 [ 285.052947][T16296] loop3: detected capacity change from 0 to 512 [ 285.414868][T16296] EXT4-fs (loop3): too many log groups per flexible block group [ 285.422723][T16296] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 285.518371][T16296] EXT4-fs (loop3): mount failed [ 285.550941][T16296] loop3: detected capacity change from 0 to 512 [ 285.557639][T16296] EXT4-fs: Ignoring removed orlov option [ 285.570406][T16296] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 285.668898][T16296] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 285.679144][T16296] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.4383: corrupted in-inode xattr: e_value size too large [ 285.775323][T16296] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4383: couldn't read orphan inode 15 (err -117) [ 285.823478][T16296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.871041][T16296] netlink: 'syz.3.4383': attribute type 1 has an invalid length. [ 285.937654][T12245] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.057702][T16320] loop3: detected capacity change from 0 to 256 [ 286.100380][T16308] loop7: detected capacity change from 0 to 128 [ 286.108835][T16320] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 286.109288][T16308] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 286.149914][T16320] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 286.325412][T16320] ================================================================== [ 286.333526][T16320] BUG: KCSAN: data-race in __mark_inode_dirty / redirty_tail_locked [ 286.341557][T16320] [ 286.343927][T16320] read-write to 0xffff888106323728 of 4 bytes by task 5820 on cpu 1: [ 286.352014][T16320] redirty_tail_locked+0x56/0x280 [ 286.357063][T16320] writeback_sb_inodes+0x71d/0xa20 [ 286.362203][T16320] __writeback_inodes_wb+0x94/0x1a0 [ 286.367431][T16320] wb_writeback+0x266/0x5c0 [ 286.371958][T16320] wb_workfn+0x4c9/0x910 [ 286.376223][T16320] process_scheduled_works+0x4cb/0x9d0 [ 286.381731][T16320] worker_thread+0x582/0x770 [ 286.386328][T16320] kthread+0x486/0x510 [ 286.390394][T16320] ret_from_fork+0x4b/0x60 [ 286.394816][T16320] ret_from_fork_asm+0x1a/0x30 [ 286.399576][T16320] [ 286.401892][T16320] read to 0xffff888106323728 of 4 bytes by task 16320 on cpu 0: [ 286.409527][T16320] __mark_inode_dirty+0x52/0x760 [ 286.414477][T16320] generic_write_end+0x134/0x150 [ 286.419436][T16320] fat_write_end+0x4f/0x160 [ 286.423949][T16320] generic_perform_write+0x30f/0x490 [ 286.429255][T16320] __generic_file_write_iter+0x9e/0x120 [ 286.434813][T16320] generic_file_write_iter+0x8d/0x2f0 [ 286.440186][T16320] iter_file_splice_write+0x5ef/0x970 [ 286.445554][T16320] direct_splice_actor+0x153/0x2a0 [ 286.450660][T16320] splice_direct_to_actor+0x30f/0x680 [ 286.456030][T16320] do_splice_direct+0xda/0x150 [ 286.460790][T16320] do_sendfile+0x380/0x640 [ 286.465213][T16320] __x64_sys_sendfile64+0x105/0x150 [ 286.470417][T16320] x64_sys_call+0xb39/0x2fb0 [ 286.475005][T16320] do_syscall_64+0xd0/0x1a0 [ 286.479505][T16320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.485480][T16320] [ 286.487794][T16320] value changed: 0x00010022 -> 0x00000020 [ 286.493500][T16320] [ 286.495812][T16320] Reported by Kernel Concurrency Sanitizer on: [ 286.501952][T16320] CPU: 0 UID: 0 PID: 16320 Comm: syz.3.4392 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 286.514449][T16320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 286.524501][T16320] ================================================================== [ 286.554390][T16328] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 286.560936][T16328] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 286.568639][T16328] vhci_hcd vhci_hcd.0: Device attached [ 286.584541][T16330] team0 (unregistering): Port device team_slave_0 removed [ 286.641543][T16330] team0 (unregistering): Port device team_slave_1 removed [ 286.718181][T16329] vhci_hcd: connection closed [ 286.740178][ T5820] vhci_hcd: stop threads [ 286.749037][ T36] vhci_hcd: vhci_device speed not set [ 286.749282][ T5820] vhci_hcd: release socket [ 286.759108][ T5820] vhci_hcd: disconnect device [ 286.808452][ T36] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 286.816165][ T36] usb 15-1: enqueue for inactive port 0 [ 286.822119][ T36] usb 15-1: enqueue for inactive port 0 [ 286.830206][ T36] usb 15-1: enqueue for inactive port 0 [ 286.908232][ T36] vhci_hcd: vhci_device speed not set [ 287.239644][T16302] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(13) [ 287.246321][T16302] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 287.254047][T16302] vhci_hcd vhci_hcd.0: Device attached [ 287.426770][T16333] vhci_hcd: connection closed [ 287.426938][ T5815] vhci_hcd: stop threads [ 287.435975][ T5815] vhci_hcd: release socket [ 287.440427][ T5815] vhci_hcd: disconnect device [ 287.445162][ T2970] vhci_hcd: vhci_device speed not set [ 287.957178][T11505] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 287.968212][T11505] CPU: 0 UID: 0 PID: 11505 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 287.968264][T11505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 287.968330][T11505] Call Trace: [ 287.968338][T11505] [ 287.968346][T11505] __dump_stack+0x1d/0x30 [ 287.968367][T11505] dump_stack_lvl+0xe8/0x140 [ 287.968442][T11505] dump_stack+0x15/0x1b [ 287.968542][T11505] dump_header+0x81/0x220 [ 287.968575][T11505] oom_kill_process+0x334/0x3f0 [ 287.968600][T11505] out_of_memory+0x979/0xb80 [ 287.968668][T11505] ? css_next_descendant_pre+0x138/0x160 [ 287.968707][T11505] mem_cgroup_out_of_memory+0x13d/0x190 [ 287.968741][T11505] try_charge_memcg+0x5e2/0x870 [ 287.968776][T11505] charge_memcg+0x51/0xc0 [ 287.968876][T11505] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 287.968902][T11505] __read_swap_cache_async+0x1df/0x350 [ 287.968968][T11505] swap_cluster_readahead+0x376/0x3e0 [ 287.969004][T11505] swapin_readahead+0xde/0x6f0 [ 287.969028][T11505] ? __filemap_get_folio+0x49f/0x650 [ 287.969057][T11505] ? swap_cache_get_folio+0x77/0x200 [ 287.969156][T11505] do_swap_page+0x301/0x2460 [ 287.969240][T11505] ? _raw_spin_unlock+0x26/0x50 [ 287.969274][T11505] ? finish_task_switch+0xad/0x2b0 [ 287.969334][T11505] ? __pfx_default_wake_function+0x10/0x10 [ 287.969515][T11505] handle_mm_fault+0xb60/0x2ae0 [ 287.969541][T11505] ? mas_walk+0xf2/0x120 [ 287.969560][T11505] do_user_addr_fault+0x636/0x1090 [ 287.969586][T11505] ? switch_fpu_return+0xe/0x20 [ 287.969699][T11505] exc_page_fault+0x54/0xc0 [ 287.969734][T11505] asm_exc_page_fault+0x26/0x30 [ 287.969794][T11505] RIP: 0033:0x7f23e5f611e5 [ 287.969809][T11505] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e 33 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 287.969829][T11505] RSP: 002b:00007ffe7b7f1ce8 EFLAGS: 00010246 [ 287.969849][T11505] RAX: 0000000000000000 RBX: 0000000000000334 RCX: 00007f23e5f611e3 [ 287.969863][T11505] RDX: 00007ffe7b7f1d00 RSI: 0000000000000000 RDI: 0000000000000000 [ 287.969931][T11505] RBP: 00007ffe7b7f1d6c R08: 0000000027152bd3 R09: 0000000000000000 [ 287.969997][T11505] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 287.970010][T11505] R13: 00000000000927c0 R14: 00000000000462b4 R15: 00007ffe7b7f1dc0 [ 287.970026][T11505] [ 287.970032][T11505] memory: usage 307200kB, limit 307200kB, failcnt 877 [ 288.206806][T11505] memory+swap: usage 307848kB, limit 9007199254740988kB, failcnt 0 [ 288.214786][T11505] kmem: usage 305988kB, limit 9007199254740988kB, failcnt 0 [ 288.222089][T11505] Memory cgroup stats for /syz8: [ 288.222260][T11505] cache 0 [ 288.230166][T11505] rss 1241088 [ 288.233468][T11505] shmem 0 [ 288.236458][T11505] mapped_file 0 [ 288.240024][T11505] dirty 0 [ 288.242959][T11505] writeback 0 [ 288.246237][T11505] workingset_refault_anon 132 [ 288.250943][T11505] workingset_refault_file 0 [ 288.255426][T11505] swap 663552 [ 288.258750][T11505] swapcached 0 [ 288.262214][T11505] pgpgin 123071 [ 288.265656][T11505] pgpgout 122768 [ 288.269273][T11505] pgfault 144416 [ 288.272942][T11505] pgmajfault 93 [ 288.276459][T11505] inactive_anon 0 [ 288.280274][T11505] active_anon 0 [ 288.283722][T11505] inactive_file 1241088 [ 288.287859][T11505] active_file 0 [ 288.291423][T11505] unevictable 0 [ 288.294936][T11505] hierarchical_memory_limit 314572800 [ 288.300323][T11505] hierarchical_memsw_limit 9223372036854771712 [ 288.306468][T11505] total_cache 0 [ 288.309935][T11505] total_rss 1241088 [ 288.313736][T11505] total_shmem 0 [ 288.317177][T11505] total_mapped_file 0 [ 288.321224][T11505] total_dirty 0 [ 288.324701][T11505] total_writeback 0 [ 288.328530][T11505] total_workingset_refault_anon 132 [ 288.333727][T11505] total_workingset_refault_file 0 [ 288.338771][T11505] total_swap 663552 [ 288.342595][T11505] total_swapcached 0 [ 288.346470][T11505] total_pgpgin 123071 [ 288.350465][T11505] total_pgpgout 122768 [ 288.354528][T11505] total_pgfault 144416 [ 288.358673][T11505] total_pgmajfault 93 [ 288.362651][T11505] total_inactive_anon 0 [ 288.366850][T11505] total_active_anon 0 [ 288.370840][T11505] total_inactive_file 1241088 [ 288.375502][T11505] total_active_file 0 [ 288.379505][T11505] total_unevictable 0 [ 288.383474][T11505] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.4384,pid=16298,uid=0 [ 288.398252][T11505] Memory cgroup out of memory: Killed process 16298 (syz.8.4384) total-vm:95928kB, anon-rss:2344kB, file-rss:22456kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000