last executing test programs: 4m29.10774986s ago: executing program 2 (id=81): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 4m29.07873138s ago: executing program 2 (id=82): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001040)='syzkaller\x00\xe6\xf6\x02\xe2\xad2H\xea\xf4\x84\x1e\xca\x9f\xb3\xb0#/\x8b\xcdmm\xb3\xf2;\x89\xa1\xf7\xa3J1\x02\x00\xc3\x8cw\xa5tOM%}\xff[TX\xbf@(\xcdm`A\x1dD\x84\xdf\x7f@\xca9\x99CK\x88sX\x9fkMV\x90\x06\x00\x00\x00\x00\x00\x00\x00\xb4\xa4|z\xf0t\x1cl\xda\xa3\xdd\x05\xba\xbd\xf2\xb3S\xcdj\x90\xa6\v\x82\xa3\xcc\xbf7\a\x00\x00\x00\x00\x00\x00\x00;A\x19O\xed\x158\x04\x18\bG\x83\xaf7\x19\xbc_\xb7Q\x1bj\x99\xe3W3\xe18\x9e\x92\x81\xb9:\xda\x83SV\xf1QO\x15\x94\x94nX-\xf63g\xe4O\xd2,\xf3\"\xdf\x02\x95y\xac\x87\x17?\xc4\xf8\xaa\x88\xee\n\xa3\x81|Y\xae\x8e\x11C\x99\xe4\xef\xfe+\xe9\x8d\xba\x1b\xd6\x1d2\x86\xff\x06\xca$\xd6\xeb8\xf2q\x85\xa9Cb\xec\\y%\xa7}\xa2\xd2+B\xb3\xcd\x88W\'e\x9f.\x8e\x8f\xb0mt\x81\x1b\xf0\r^\x17\x13\x86\xb7\xaa\xa5\x91h\xdc\xfdw\xd0\xd2\xec\xc5\xd2OumL\xcbF\x9bR\xe5\x02\x89\xa2\x17F\xee\xc6\xe0N\xf8\x1a\xff\x06\xa2\xce\xa6\xac\x06\xf7\xc7\xce2\xc1\"\xd7\xf0\x01G\x1d\x99\x8ed\xd9\x8e\x7f\xa5\x9c\x14:\xdb/\xb1sR5\xe70Z\xda3\x90\xe1\xa0\xbfQ\xd9\xc8\xd3\xe32\x1a\x9c\x1azT&\x1f\xff^\xba\x05\xcb\xc5\xe8\xcc\xed7+\x9a\x81~\xe4v+D\xe9\xf675DD<\xbbU\nX\xe4\x1b\xa73R[\x95\x99Y\x7fp\x9f\xe9\xbe_\x06\a\xcf\x1f\x02eW+\x9c\xd0; \xf6\x96\x10\xcb\xe9r\xfb\xb5\xf4\xb9\x9a]3\x91\xeb\xf1\x96\xf1\x96?qce\xf1\xcam\xbel\xa5\xc8\x98\x94:#\xcc\xd8\a\xd5\x15\x1f\x05n\xae\x95\x80vrk\x17\xaf!/\x1fX\xe9\xe0\x90\x9c\xc8\tf\x1dz\x84$\x95\xc3\x89\x9b[\"\xfcS\x16\xb0\x1a\xdf\x97\x03\xc7\x9f \xed\x04**wZ\xff\xfc\x9b\xb4\xecS', &(0x7f0000000000)='\x97II\x00\x00\x00\x00\x00\x00\x00\xe2{uED\x0e\xaaP\x01\x00\x00\x00\x00\x00\x00\x00\x82^\x9b b', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="001111000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x20000125, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095a87d1151aed0995f3440fae46b927ed05111694e24ec8cb0e2cb5c7b804db5e0d2264bb7ceb544286bc20a84d8bd8a84c1"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff85fa00000400000018110000", @ANYRESDEC=r1, @ANYRES8=r3, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x16, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3d0, 0x110, 0x200, 0x200, 0x2e8, 0x110, 0x2e8, 0x4, 0x0, {[{{@arp={@loopback, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @local}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r9 = socket(0x1e, 0x4, 0x0) r10 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r11 = dup3(r10, r9, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)}, 0xffffffff}], 0x1, 0x40000041, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r12, 0x0, 0x10000000000}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000180)='./file0\x00', r6}, 0x18) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r11, 0x110, 0x4, &(0x7f0000000040), 0x4) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000180)='\xfa.-\x00', 0x0) 4m29.005048101s ago: executing program 2 (id=83): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 4m29.001962481s ago: executing program 2 (id=84): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@errors_remount}]}, 0x4, 0x46b, &(0x7f00000009c0)="$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") lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000840)='./file2\x00', r1, r2) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) chown(&(0x7f00000000c0)='./file1\x00', r1, r3) (async, rerun: 64) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) (async, rerun: 64) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) (async, rerun: 32) r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) (rerun: 32) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) (async, rerun: 32) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) (async, rerun: 32) chdir(&(0x7f0000000140)='./file0\x00') (async) mknodat(r0, &(0x7f0000000200)='./file3\x00', 0x8000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 4m28.883898763s ago: executing program 2 (id=85): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x34) socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) inotify_rm_watch(0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x10000, 0x6, &(0x7f00000007c0)=[{&(0x7f0000000400)="66155c3b08c5459db7fe7694e95926aac3697e34a1f59a5f38b25170c9fabd9dbad2952382f252f1c09a4915f79c57c675b9d45a8cb6253e8dcc2a3faf9d2a349f7bd9b9a8bc9096d8a2ec255056f636fe9d702d54b3399a42870c", 0x5b, 0x100000000, 0x4}, {&(0x7f0000000480)="3cc39dac28d4d5732604bbd1dedd8d028f87442fe0cf360308cbaacd44810ab5ed04e903c54dc163cfc304af69db01e363101de63b4ef7988983c0e00b173db91fc9c14a435d97f1b81108326775a9bd17e0882bdd8b2d373648f7e8faf17010817dddccc43583629b53cbb6621ff53c52fe92f4fd7f52069f41d864c9447874811d0d8efb9e4d006d5203", 0x8b, 0x4, 0x40}, {&(0x7f0000000540)="25b98e6512c11189567c070031ae277d9e6603b5f9df6839a9f8cedeba576778222e79c3f7b20c4801175dcb416c2cc733ed1ebcf2522000f9ad19e02f044efe632dfd3713ce3887c81f37bd92ae76c5655287f3ad7ff7bd6b94b44dff9554ff9c5a3f66a34ddbfa245cbe79a11ccc0e6d6825", 0x73, 0xf901, 0xfffffffffffffffe}, {&(0x7f00000005c0)="c5921525d9f64ba5b5fa1dff5579e7090a4c9e5801d38734fa60f5e49f7b49ffa4bfce4406641b4bc07b9913feae1206f3f34440f252de58d34166e01416be7412bcb9455c50b5b22a971e2923a55ce6b6304235ec1677e64e7e8384ea643038c5e70073b8812ea2741c49f1f778dbba41b590eb344034985efb61e1c2837f1f49cb7a3e3e260b4024f577d37edc73d089d7b9e6ba1d6acaa3e8f8bc50e47eb3e0892db3b4300cadae897799e382da2bc00b273a72c4014d18d866362d87ef678d50a766ce4a65d9b32bb928f7622711922df349eee7ec18f8c3d2016d18cc91657d6d5155eedbf7c2fed2343e4fd9c6db002d6aed", 0xf5, 0x9}, {&(0x7f0000000240), 0x0, 0x1, 0x3c}, {&(0x7f00000006c0)="2d4745e8d09f43b791f168c628527ed7fd38bff2a4c0049a01e9252b87b8baf641eb6ea4b011d4bb1945fa3ad8dab5128333edc565139cd504e7af0778c72cf7dc29fd0eb694d90b76db2f92d726506f049448372c3c362a54a61cc95343766cec60ce704d835106b485aaf0a0cd65f7b3ae1e6fdabb05df1b21b13483124cef61db6228fb4eacdd19b535111102ba6adbc7c9a646789464c0a1b0ac451d05275173b75c74e8221b846f51ef199a40756239052312acfa", 0xb7, 0x10000, 0x1}], 0xa0000) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r4 = gettid() unshare(0x2c020400) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r3, &(0x7f0000000000)='\"', 0xfdef) 4m28.674784706s ago: executing program 2 (id=86): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x34) socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) inotify_rm_watch(0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x10000, 0x6, &(0x7f00000007c0)=[{&(0x7f0000000400)="66155c3b08c5459db7fe7694e95926aac3697e34a1f59a5f38b25170c9fabd9dbad2952382f252f1c09a4915f79c57c675b9d45a8cb6253e8dcc2a3faf9d2a349f7bd9b9a8bc9096d8a2ec255056f636fe9d702d54b3399a42870c", 0x5b, 0x100000000, 0x4}, {&(0x7f0000000480)="3cc39dac28d4d5732604bbd1dedd8d028f87442fe0cf360308cbaacd44810ab5ed04e903c54dc163cfc304af69db01e363101de63b4ef7988983c0e00b173db91fc9c14a435d97f1b81108326775a9bd17e0882bdd8b2d373648f7e8faf17010817dddccc43583629b53cbb6621ff53c52fe92f4fd7f52069f41d864c9447874811d0d8efb9e4d006d5203", 0x8b, 0x4, 0x40}, {&(0x7f0000000540)="25b98e6512c11189567c070031ae277d9e6603b5f9df6839a9f8cedeba576778222e79c3f7b20c4801175dcb416c2cc733ed1ebcf2522000f9ad19e02f044efe632dfd3713ce3887c81f37bd92ae76c5655287f3ad7ff7bd6b94b44dff9554ff9c5a3f66a34ddbfa245cbe79a11ccc0e6d6825", 0x73, 0xf901, 0xfffffffffffffffe}, {&(0x7f00000005c0)="c5921525d9f64ba5b5fa1dff5579e7090a4c9e5801d38734fa60f5e49f7b49ffa4bfce4406641b4bc07b9913feae1206f3f34440f252de58d34166e01416be7412bcb9455c50b5b22a971e2923a55ce6b6304235ec1677e64e7e8384ea643038c5e70073b8812ea2741c49f1f778dbba41b590eb344034985efb61e1c2837f1f49cb7a3e3e260b4024f577d37edc73d089d7b9e6ba1d6acaa3e8f8bc50e47eb3e0892db3b4300cadae897799e382da2bc00b273a72c4014d18d866362d87ef678d50a766ce4a65d9b32bb928f7622711922df349eee7ec18f8c3d2016d18cc91657d6d5155eedbf7c2fed2343e4fd9c6db002d6aed", 0xf5, 0x9}, {&(0x7f0000000240), 0x0, 0x1, 0x3c}, {&(0x7f00000006c0)="2d4745e8d09f43b791f168c628527ed7fd38bff2a4c0049a01e9252b87b8baf641eb6ea4b011d4bb1945fa3ad8dab5128333edc565139cd504e7af0778c72cf7dc29fd0eb694d90b76db2f92d726506f049448372c3c362a54a61cc95343766cec60ce704d835106b485aaf0a0cd65f7b3ae1e6fdabb05df1b21b13483124cef61db6228fb4eacdd19b535111102ba6adbc7c9a646789464c0a1b0ac451d05275173b75c74e8221b846f51ef199a40756239052312acfa", 0xb7, 0x10000, 0x1}], 0xa0000) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r4 = gettid() unshare(0x2c020400) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r3, &(0x7f0000000000)='\"', 0xfdef) 4m28.656426615s ago: executing program 32 (id=86): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x34) socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) inotify_rm_watch(0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x10000, 0x6, &(0x7f00000007c0)=[{&(0x7f0000000400)="66155c3b08c5459db7fe7694e95926aac3697e34a1f59a5f38b25170c9fabd9dbad2952382f252f1c09a4915f79c57c675b9d45a8cb6253e8dcc2a3faf9d2a349f7bd9b9a8bc9096d8a2ec255056f636fe9d702d54b3399a42870c", 0x5b, 0x100000000, 0x4}, {&(0x7f0000000480)="3cc39dac28d4d5732604bbd1dedd8d028f87442fe0cf360308cbaacd44810ab5ed04e903c54dc163cfc304af69db01e363101de63b4ef7988983c0e00b173db91fc9c14a435d97f1b81108326775a9bd17e0882bdd8b2d373648f7e8faf17010817dddccc43583629b53cbb6621ff53c52fe92f4fd7f52069f41d864c9447874811d0d8efb9e4d006d5203", 0x8b, 0x4, 0x40}, {&(0x7f0000000540)="25b98e6512c11189567c070031ae277d9e6603b5f9df6839a9f8cedeba576778222e79c3f7b20c4801175dcb416c2cc733ed1ebcf2522000f9ad19e02f044efe632dfd3713ce3887c81f37bd92ae76c5655287f3ad7ff7bd6b94b44dff9554ff9c5a3f66a34ddbfa245cbe79a11ccc0e6d6825", 0x73, 0xf901, 0xfffffffffffffffe}, {&(0x7f00000005c0)="c5921525d9f64ba5b5fa1dff5579e7090a4c9e5801d38734fa60f5e49f7b49ffa4bfce4406641b4bc07b9913feae1206f3f34440f252de58d34166e01416be7412bcb9455c50b5b22a971e2923a55ce6b6304235ec1677e64e7e8384ea643038c5e70073b8812ea2741c49f1f778dbba41b590eb344034985efb61e1c2837f1f49cb7a3e3e260b4024f577d37edc73d089d7b9e6ba1d6acaa3e8f8bc50e47eb3e0892db3b4300cadae897799e382da2bc00b273a72c4014d18d866362d87ef678d50a766ce4a65d9b32bb928f7622711922df349eee7ec18f8c3d2016d18cc91657d6d5155eedbf7c2fed2343e4fd9c6db002d6aed", 0xf5, 0x9}, {&(0x7f0000000240), 0x0, 0x1, 0x3c}, {&(0x7f00000006c0)="2d4745e8d09f43b791f168c628527ed7fd38bff2a4c0049a01e9252b87b8baf641eb6ea4b011d4bb1945fa3ad8dab5128333edc565139cd504e7af0778c72cf7dc29fd0eb694d90b76db2f92d726506f049448372c3c362a54a61cc95343766cec60ce704d835106b485aaf0a0cd65f7b3ae1e6fdabb05df1b21b13483124cef61db6228fb4eacdd19b535111102ba6adbc7c9a646789464c0a1b0ac451d05275173b75c74e8221b846f51ef199a40756239052312acfa", 0xb7, 0x10000, 0x1}], 0xa0000) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r4 = gettid() unshare(0x2c020400) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r3, &(0x7f0000000000)='\"', 0xfdef) 4m3.946014273s ago: executing program 5 (id=363): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x1818c42, &(0x7f0000000d80)=ANY=[], 0xfe, 0x27a, &(0x7f0000000540)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=""/4089, 0x0, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x14000128) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 4m3.906782793s ago: executing program 5 (id=365): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) socket$kcm(0x29, 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x5) r3 = openat(r2, &(0x7f0000002240)='.\x00', 0x0, 0x13) lseek(r3, 0x8, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0a0009000180c2000000fdff08000b"], 0x30}}, 0x0) 4m3.802618725s ago: executing program 5 (id=367): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x4, @perf_bp={0x0}, 0x0, 0x8, 0x7ffffefc, 0x3, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/35, 0x23, 0x0, 0x4, 0x0, 0x2, 0x20000}}, 0x120) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x18) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r4, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="96", 0x1}, {&(0x7f0000000700)='<', 0x1}, {&(0x7f0000000e80)="fbc6", 0x2}], 0x3, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x10) listen(r1, 0x3) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000003c0)={@private0, 0x0}, &(0x7f0000000400)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0x19, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xd4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x4, 0x1, 0x0, 0x6, 0x6, 0x18, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x1, '\x00', r6, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x4, 0xe, 0x9}, 0x10, 0xffffffffffffffff, r5, 0x0, &(0x7f0000000600)=[r2, r2], 0x0, 0x10, 0x6, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001780)={&(0x7f0000000700)='objagg_obj_root_destroy\x00', r5, 0x0, 0x6}, 0x18) 4m3.703142136s ago: executing program 5 (id=368): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) close_range(0xffffffffffffffff, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = getpgid(0x0) prctl$PR_GET_SPECULATION_CTRL(0x23, 0xb, 0x7fffffffeff3) r3 = syz_pidfd_open(r2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) r5 = pidfd_getfd(r3, r4, 0x0) readlinkat(r5, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x891018, 0x0) 4m3.604944837s ago: executing program 5 (id=369): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 4m3.4145819s ago: executing program 5 (id=372): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000f8ff00000000bfa200000000000007020027f8ffffffb703000008000010b70400000000000085000000010000009500000000000000000000000040"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00'}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x509, &(0x7f0000000dc0)="$eJzs3c9vI1cdAPDveDeJk6ZNWnoABHQphQWt1km8bVT1AOGEEKqE6BGkbUi8URQ7jmKnNGEP6f+ARCVOcOQP4NwTdy4IblzKAYkfEaipxGHQjCdZJxs3ZpPYUfz5SKN5b2bs7/fFmvfs512/AEbWnYjYj4jxiHg3ImaK40mxxVJny6775ODxyuHB45Uk0vSdfyb5+exYdD0m81zxnOWI+NH3In6aPB23tbu3sVyv17Y71cm5dmNrrrW7d3+9sbxWW6ttVquLC4vzbz54o3ppbX2lMV6UvvzxH/a/9fMsreniSHc7LlOn6WPHcTK3I+IHVxFsCG4V7RkfdiI8k1JEvBQRr+b3/0zcyl9NAOAmS9OZSGe66wDATVfK58CSUqWYC5iOUqlS6czhvRxTpXqz1b73qLmzudqZK5uNsdKj9XptvpgrnI2xJKsv5OUn9eqp+oOIeDEifjExmdcrK8366jDf+ADACHvu1Pj/n4nO+A8A3HDlYScAAAyc8R8ARo/xHwBGj/EfAEbPk/F/aah5AACD4/M/AIwe4z8AjJQfvv12tqWHxe9fr763u7PRfO/+aq21UWnsrFRWmttblbVmcy3/zZ7Gec9Xbza3Fl6Pnfdnv73Vas+1dvceNpo7m+2H+e96P6yNDaRVAMBnefGVj/6cRMT+W5P5Fl1rORir4WYrDTsBYGhuDTsBYGis9gWj6wKf8U0PwA1xxhK9J5QjYvL0wTRN06tLCbhid79g/h9GVdf8v38FDCPG/D+MLvP/MLrSNOl3zf/o90IA4Hozxw/0+P7/pWL/2+LLgZ+snr7iw6vMCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK63o/V/K8Va4NNRKlUqEc9HxGyMJY/W67X5iHghIv40MTaR1ReGnDMAcFGlvyXF+l93Z16bPn12PPl0It9HxM9+9c4v319ut7f/mB3/1/Hx9ofF8eow8gcAznM0Tuf7rg/ynxw8XjnaBpnP378bEeVO/MOD8Tg8jn87buf7coxFxNS/k6LekXTNXVzE/gcR8fmz2p/EdD4H0ln59HT8LPbzA41fOhG/lJ/r7LO/xecuIRcYNR9l/c/SWfdfKe7k+7Pv/3LeQ11c0f9lT7VymPeBT+If9X+3evR/d/qN8frvv98pTT597oOIL96OOIp92NX/HMVPesR/rc/4f/nSV17tdS79dcTdODt+d6y5dmNrrrW7d3+9sbxWW6ttVquLC4vzbz54ozqXz1HP9R4N/vHWvRfywhmXZO2f6hG/fE77v95n+3/z33d//NUe57L43/zaWfFL8fJnxM/GxG/0GX956nflXuey+Ks92n/e63+vz/gf/3XvqWXDAYDhae3ubSzX67XtQRaO3kgMNKhCf4WJ4sW5LvmcKFxWYml6+Rl+Z1B/hPH4vx6Vps8Uq1ePcRmzbsB1cHzTR8SnfT1i6cpzAgAAAAAAAAAAAAAATrrS/6iUdArDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA31/8CAAD//y5/zKw=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000380)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1d) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) gettid() 4m3.38618581s ago: executing program 33 (id=372): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000f8ff00000000bfa200000000000007020027f8ffffffb703000008000010b70400000000000085000000010000009500000000000000000000000040"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00'}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x509, &(0x7f0000000dc0)="$eJzs3c9vI1cdAPDveDeJk6ZNWnoABHQphQWt1km8bVT1AOGEEKqE6BGkbUi8URQ7jmKnNGEP6f+ARCVOcOQP4NwTdy4IblzKAYkfEaipxGHQjCdZJxs3ZpPYUfz5SKN5b2bs7/fFmvfs512/AEbWnYjYj4jxiHg3ImaK40mxxVJny6775ODxyuHB45Uk0vSdfyb5+exYdD0m81zxnOWI+NH3In6aPB23tbu3sVyv17Y71cm5dmNrrrW7d3+9sbxWW6ttVquLC4vzbz54o3ppbX2lMV6UvvzxH/a/9fMsreniSHc7LlOn6WPHcTK3I+IHVxFsCG4V7RkfdiI8k1JEvBQRr+b3/0zcyl9NAOAmS9OZSGe66wDATVfK58CSUqWYC5iOUqlS6czhvRxTpXqz1b73qLmzudqZK5uNsdKj9XptvpgrnI2xJKsv5OUn9eqp+oOIeDEifjExmdcrK8366jDf+ADACHvu1Pj/n4nO+A8A3HDlYScAAAyc8R8ARo/xHwBGj/EfAEbPk/F/aah5AACD4/M/AIwe4z8AjJQfvv12tqWHxe9fr763u7PRfO/+aq21UWnsrFRWmttblbVmcy3/zZ7Gec9Xbza3Fl6Pnfdnv73Vas+1dvceNpo7m+2H+e96P6yNDaRVAMBnefGVj/6cRMT+W5P5Fl1rORir4WYrDTsBYGhuDTsBYGis9gWj6wKf8U0PwA1xxhK9J5QjYvL0wTRN06tLCbhid79g/h9GVdf8v38FDCPG/D+MLvP/MLrSNOl3zf/o90IA4Hozxw/0+P7/pWL/2+LLgZ+snr7iw6vMCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK63o/V/K8Va4NNRKlUqEc9HxGyMJY/W67X5iHghIv40MTaR1ReGnDMAcFGlvyXF+l93Z16bPn12PPl0It9HxM9+9c4v319ut7f/mB3/1/Hx9ofF8eow8gcAznM0Tuf7rg/ynxw8XjnaBpnP378bEeVO/MOD8Tg8jn87buf7coxFxNS/k6LekXTNXVzE/gcR8fmz2p/EdD4H0ln59HT8LPbzA41fOhG/lJ/r7LO/xecuIRcYNR9l/c/SWfdfKe7k+7Pv/3LeQ11c0f9lT7VymPeBT+If9X+3evR/d/qN8frvv98pTT597oOIL96OOIp92NX/HMVPesR/rc/4f/nSV17tdS79dcTdODt+d6y5dmNrrrW7d3+9sbxWW6ttVquLC4vzbz54ozqXz1HP9R4N/vHWvRfywhmXZO2f6hG/fE77v95n+3/z33d//NUe57L43/zaWfFL8fJnxM/GxG/0GX956nflXuey+Ks92n/e63+vz/gf/3XvqWXDAYDhae3ubSzX67XtQRaO3kgMNKhCf4WJ4sW5LvmcKFxWYml6+Rl+Z1B/hPH4vx6Vps8Uq1ePcRmzbsB1cHzTR8SnfT1i6cpzAgAAAAAAAAAAAAAATrrS/6iUdArDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA31/8CAAD//y5/zKw=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000380)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1d) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) gettid() 3m50.446733112s ago: executing program 4 (id=544): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r3, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x2070bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4000) r4 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x13, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="6eaa0000000000007110a0000000000095af4d"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000001240)={0x2, 0x2, @status={[0x2, 0x7, 0xfffffffffffffff3, 0x1, 0x4, 0x8001]}, [0x2, 0x7, 0xb, 0x3, 0x39fab3b4, 0x0, 0x8001, 0x1, 0x7, 0x10000, 0x6, 0x4, 0x200, 0x7, 0x10001, 0x9, 0x4, 0x2, 0x8, 0xffffffff, 0x3ff, 0x0, 0xff, 0x95cb, 0x0, 0x2, 0x3, 0x7, 0x1, 0x776, 0x7, 0x1, 0x5, 0xf4, 0x2, 0x8000000000000001, 0xb, 0x9, 0x6, 0xe, 0xd89, 0x0, 0x4, 0x3, 0x81, 0x1000, 0xc, 0x0, 0x5, 0xfffffffffffffff7, 0x50, 0x8000000000000001, 0x7, 0x9, 0x5, 0x1, 0x7, 0xe, 0x41b, 0x1, 0x4, 0xffffffff, 0x4, 0xa02f]}) 3m50.366610253s ago: executing program 4 (id=547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000b800000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x463, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000040), 0x0}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$cgroup_devices(r3, &(0x7f0000000240)={'a', ' *:* ', 'r\x00'}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x5, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x86}, {0x4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x1) r6 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xe0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0xd) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) read(r6, &(0x7f0000000040)=""/69, 0x45) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x3, [@const={0x1}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x1, 0x2}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x4}, @enum={0xa, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x6e97}]}, @restrict={0xd, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x5f]}}, &(0x7f0000000380)=""/75, 0x63, 0x4b, 0x1, 0x2, 0x0, @void, @value}, 0x28) write$UHID_INPUT(r6, &(0x7f0000000fc0)={0x8, {"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", 0x1000}}, 0x1006) 3m50.281169964s ago: executing program 4 (id=548): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000f0ff00000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x402000, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000380)=0x6) bind$inet6(r8, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000000c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000500)={{{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4e20, 0x2920, 0x4e21, 0x7ff, 0x2, 0x80, 0x80, 0x44, 0x0, r10}, {0x7, 0x2, 0x4, 0xb, 0x8, 0x2, 0x800, 0x2}, {0x6, 0x8, 0xe, 0xe}, 0x7fff, 0x6e6bb6, 0x2, 0x1, 0x1, 0x1}, {{@in=@multicast2, 0x4d2, 0xff}, 0xa, @in=@multicast1, 0x34ff, 0x4, 0x2, 0x9, 0x8, 0x6f8e, 0x5}}, 0xe8) 3m49.748890081s ago: executing program 4 (id=553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xb8) fallocate(r4, 0x0, 0x0, 0x1000f4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ptrace$pokeuser(0x6, r1, 0x358, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)='%-5lx \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f00000004c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xec2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffa7a9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @ldst={0x1, 0x3, 0x1, 0x8, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r8, 0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x200}) 3m48.784896274s ago: executing program 4 (id=559): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f0000000f80)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0xf9, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x1, @perf_bp={&(0x7f0000000580)}, 0x11d28, 0x2, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000ff7f000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) ftruncate(r3, 0xc17a) io_setup(0x200, &(0x7f0000000140)=0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_pgetevents(r4, 0x4, 0x6, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000200)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000340)={[0xf75]}, 0x8}) r6 = eventfd(0x1ff) write(r6, &(0x7f0000000080)="06b065", 0x3) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r8, r7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r7, 0x0) pipe2(&(0x7f0000001cc0), 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$netlink(0x10, 0x3, 0x0) 3m47.972474804s ago: executing program 4 (id=563): socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000500000001000100090000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) execve(&(0x7f0000000040)='./file2\x00', &(0x7f00000004c0)={[&(0x7f0000000100)='\x90%\'\x00', &(0x7f0000000140)='syz1', &(0x7f0000000180)='devices.deny\x00', &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/register\x00', &(0x7f0000000240)='$^\x00', &(0x7f0000000280)=')!-&', &(0x7f00000002c0)='*\'!+)\x00', &(0x7f0000000340)='/proc/sys/fs/binfmt_misc/register\x00', &(0x7f0000000380)='@\x00', &(0x7f00000003c0)='\x00']}, &(0x7f00000007c0)={[&(0x7f0000000400)='(+]#\\^](/\\\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='usrjquota=', &(0x7f0000000600)='/proc/sys/fs/binfmt_misc/register\x00', &(0x7f0000000640)='{\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)=',\xcc\x00', &(0x7f0000000740)='\\\x04(),\x00', &(0x7f0000000780)='ext4\x00']}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000480)=[{0x8, 0x0, 0x3, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2'}, 0x31) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 3m47.922660395s ago: executing program 34 (id=563): socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000500000001000100090000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) execve(&(0x7f0000000040)='./file2\x00', &(0x7f00000004c0)={[&(0x7f0000000100)='\x90%\'\x00', &(0x7f0000000140)='syz1', &(0x7f0000000180)='devices.deny\x00', &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/register\x00', &(0x7f0000000240)='$^\x00', &(0x7f0000000280)=')!-&', &(0x7f00000002c0)='*\'!+)\x00', &(0x7f0000000340)='/proc/sys/fs/binfmt_misc/register\x00', &(0x7f0000000380)='@\x00', &(0x7f00000003c0)='\x00']}, &(0x7f00000007c0)={[&(0x7f0000000400)='(+]#\\^](/\\\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='usrjquota=', &(0x7f0000000600)='/proc/sys/fs/binfmt_misc/register\x00', &(0x7f0000000640)='{\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)=',\xcc\x00', &(0x7f0000000740)='\\\x04(),\x00', &(0x7f0000000780)='ext4\x00']}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000480)=[{0x8, 0x0, 0x3, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2'}, 0x31) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 3m31.043510788s ago: executing program 3 (id=798): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000e8ffd00000000080000000850000006d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x74, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000003c0)='kfree\x00', r3}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000080)={0x4, 0xffffffff, 0x200, 0xfffffb56}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='cpu\t&0&&\t') open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0xb) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000440)=ANY=[@ANYBLOB="0c050000100013070000000000000000fe880000000000000000000000000101fc0200000000000000000000000000010000000100000000000000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000000000000000000feffffffffffffff03000000000000000000000000000000000400000000000000000000000000000000000000000000810000000000000000000000020000000000000000000000000000000000000000000000000000000300000000000000000000000a00000000000000000000004c001400686d6163287368613129"], 0x50c}}, 0x0) 3m30.076941531s ago: executing program 3 (id=804): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000780)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000900)=@o_path={&(0x7f0000000940)='./file2\x00', r6, 0x4000, r5}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x8000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x2000006, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x7, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x4, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 3m29.540947158s ago: executing program 3 (id=814): bpf$MAP_CREATE(0x0, 0x0, 0x48) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff018004"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000a000000380003801400020076657468305f766972745f7769666900060007004e2400000800030000000000080001"], 0x4c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x1000003, 0x300102, 0x0, 'queue1\x00', 0xffffffff}) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) 3m28.64505848s ago: executing program 3 (id=820): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 3m28.559371981s ago: executing program 3 (id=822): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000380)='net/tcp\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0800c20000000180c2009f982678053ace652ee82000000000000004006600000011907807fff31ce0cd0001000017c100089078"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000400)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7ffffffd, 0x4) write$binfmt_script(r3, 0x0, 0x6f4000) 3m28.451020052s ago: executing program 1 (id=823): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000110000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000f1ff0000000000000000a74a581456c6dde0f4987bb94f4357bfa5f78e83fd385cabae37a48151ab64fab52dc6f2277271e5ab6f2eb3d4ac16af5af65a449a77264ecba3a8dec02243cfcea39343b82b5f9c81d4e0bb941df763454eb45ee5cd44697369f193a1f5908f3087563e5e5b33c899822ea8bd86551766a503d68f543c613fda5b06a35804578c1c59e1d53d9e1f147387caf994640f741c46cfbaaf0d15e0595c6058e34a4ab67115f8e5b351acd93487"], 0x48) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x205618, 0xc8, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff0200"/51], 0xfdef) 3m28.405659403s ago: executing program 1 (id=824): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) unshare(0x2040400) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7006) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000680)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r5, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) r6 = fsmount(r0, 0x0, 0x0) fchdir(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a00000000000000000000000044"], 0x78}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x18) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x1, &(0x7f00000002c0)={0x1b, 0x4, 0x5, 0x7}) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000300)={{0x2, 0x4e21, @empty}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x40, {0x2, 0x4e20, @local}, 'bridge_slave_1\x00'}) sendto$inet(r9, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 3m28.280806015s ago: executing program 3 (id=826): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x1ff, 0xae5b, 0x0, 0x8400000000000000, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0xc8}, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aead5d5aeccc097ef1092ea987c2900000000000000002c00"]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) ppoll(0x0, 0x0, 0x0, &(0x7f00000001c0)={[0x2a]}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 3m28.280250265s ago: executing program 1 (id=827): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_read_part_table(0x1062, &(0x7f0000001600)="$eJzsz7FtAkEQBdC/d3uyL7LLcejMgS1nrsCFAO3QAgEBGSEhtSAtgoOABoDgvWRXo5k/mvBQY03S149yLby/TG/NYvoM6ZJsVtta5smYWVo797wm+U3W30PS3vouKdl/demnuV07ZR7a/yX4p7XxZvVnyd/yPlcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHM7BgAA//+ZWxGt") 3m28.280005925s ago: executing program 35 (id=826): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x1ff, 0xae5b, 0x0, 0x8400000000000000, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0xc8}, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aead5d5aeccc097ef1092ea987c2900000000000000002c00"]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) ppoll(0x0, 0x0, 0x0, &(0x7f00000001c0)={[0x2a]}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 3m27.611495464s ago: executing program 1 (id=832): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 3m27.303638208s ago: executing program 1 (id=833): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000140)=""/44, 0x2c}, {&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/50, 0x32}], 0x4}, 0xfffffffc}], 0x2, 0x42, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="14419e5465f0006fc8afa8e40800", 0xe, 0x0, &(0x7f00000005c0)={0x11, 0x0, r6, 0x1, 0x40}, 0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff6203f0fff8ffffff71a4f0ff000000002d040300000000003d030000000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007913000000000000b5000000000000009500000000000000023bc065b7a379d183f9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c26f71b29ee35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8ea8fcb913466aaa7f6d150352e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa48f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae5630800c5363092adaa1d8964162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee96a1c685508e6ca4fe5a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9029bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f75c345edcb84ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f277b8a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba0af35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c320e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0bad3b0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcefb9303a7861fce422f3f9c422a1619e6c6c2dd825743b22a6f93604c73d886c25ecaaeafccdeb19bd0cdbc5d22dae879561ea5606fa0c9dc23c0f52621aaae42180aecfd32cd6a66a1efa0949bc195dfcb691a26344362989371f2d5bf274363416b3cafb9a3331285449dc1afe9af7fed27bd4e36fa423d6c05ffa2acee27e2444b5ca28fc16fe31bd1320d4415ec0f5471b0b671d7626f773"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2c3e, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000c40)={'bridge0\x00', 0x10}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r8 = syz_open_pts(r7, 0x0) r9 = dup(r8) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x3) pselect6(0x40, &(0x7f0000000a80)={0x8, 0x7, 0x7fffffff, 0x78d6, 0x7f8, 0xfffffffffffffffc, 0x1, 0x8}, &(0x7f0000000ac0)={0x373, 0x7, 0xfffffffffffff000, 0x800, 0x1d9, 0x10000, 0x1}, &(0x7f0000000b00)={0x4, 0x10, 0x1c7b, 0x0, 0x1, 0x3, 0x9, 0x3}, &(0x7f0000000b40)={0x77359400}, &(0x7f0000000bc0)={&(0x7f0000000b80)={[0x5]}, 0x8}) dup3(r7, r9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000300)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xe8\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000c80)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES64=r1], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe94, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000940), &(0x7f00000005c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='cq_process\x00', r2}, 0x18) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) tee(r0, 0xffffffffffffffff, 0x7, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000c00)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x410fc, 0x2, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x8, &(0x7f0000000740)=ANY=[@ANYRESHEX=r6], &(0x7f0000000380)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1000000, 0xfffffdfc}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x10, 0x0, 0x6}, 0x10, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000340)='9p_protocol_dump\x00', r9}, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB="6e6f3d00000000580f51275087c7177f557da7c817b446020d89b24559c7f0c279aab60db4012deb339237ec95276854c83a18ed14ef70439bc7ad53f19e2c240f56c6908950f3c5eeb25739d72874b5ff98d13ee255810b8ad48a576c792173b699a64ffb9f2a836bc26936062ce7e2120e16faf57fcc371fef000000000000000000", @ANYRESHEX=r11, @ANYBLOB=',version=9p2000,\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000900)='f2fs_direct_IO_exit\x00', r7, 0x0, 0xccb9}, 0x18) acct(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000780)='kvm_ack_irq\x00', r8, 0x0, 0x1}, 0x18) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000980)={&(0x7f0000000b00)=""/210, 0x0, 0x1400, 0x6, 0x7}, 0x20) 2.008775064s ago: executing program 8 (id=4235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000200), &(0x7f0000000840)=r1}, 0x20) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) 1.920571876s ago: executing program 8 (id=4238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000400)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x6) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000180)={0x3d17, 0xe4e1, 0x1, 0x1ff, 0xff, "7e12105588e633bbb1df022dace17a32d211ee"}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0x192}, 0x18) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x205) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d48", 0x3}], 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002580000000e0a01020000000000000040010000000900020073797a32000000001800038014000080100001800400028006000180000000000900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xa) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {}, {0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0xfff}, {0x3, 0x1, 0x332e, 0x0, 0x8}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6b, '\x00', r9, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1.804688607s ago: executing program 8 (id=4243): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071004c000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffffd}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) syz_usbip_server_init(0x5) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x60880, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20040a, &(0x7f00000001c0)={[{@grpjquota}, {@errors_continue}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02"], 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1}, 0x1c}}, 0x0) 1.420295332s ago: executing program 9 (id=4246): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) unshare(0x22020600) mq_open(&(0x7f0000000800)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\b\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#G\xd5\x93BoR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x85\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96\xcd_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\xcd\xac\xcd\xf7\xe689\x92R\xcd1b\x9b\x15\xfc\xcc\x97\x10\xc9\x7f#\x91\xef\x8eSwKz\xa9\x89\xe2\x87g\xfa\xef\x1ai\xc1\xba,\x01\xda\xf0\xd6\xf9\x18\x86\xef\xab5\x8fL\x05\xe9Z\xe0e\xb3\x1a\xe8-\x00S\x85\xcd\xf5\x80\x15\xb9\\&!\x968\x03@Z?\xfdg\xe0-\x9f\x86mL\x13 \xe2x\x97\x91KZ\x908JA\xe4\x8c-\xb6\xf5\f\x95q\x0f\xc2\x8f\xfb\xe9\xf3\xafO~\xb5\xa3\x82>g\x99\xbd\x8a5<\x04\x10|Q\xdcD\xde\xdb\x95\xb4in\x9el-\xedVN\x8d\r:\xbf\xcaa\x80O\xd0EEOU(\rU\xbe\f\xd1\xdf\x99\xa5iw\x96\xc2\x1f5\xb2\xb3\xc4\x01\xa8\xf2\x19A\xaa\x83\x02r\xadx\xefa\xbd\xae\xfd\xc7;QJ\x00'/751, 0x40, 0x10, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x0, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x80000000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x66c, 0x762, 0x3, 0x10, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0x7, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x7, 0x79c, 0x2, 0x40001, 0x7f, 0x3ff, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa4860a, 0x7, 0xaa, 0xfff, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xba27, 0x4, 0x100005, 0x8, 0x752, 0x0, 0x3, 0x0, 0xfffe, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x2, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0xfffffc00, 0xd9a, 0xd, 0x2a2, 0x0, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0xd, 0x0, 0x8, 0x1, 0x1fc, 0xc5d, 0x1000]}}) ioperm(0x8, 0x7ff, 0x2000000000000362) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x300}, 0x20) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x5) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x57}) 1.236647744s ago: executing program 0 (id=4250): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000500)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x203}}, {@mblk_io_submit}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') read(r1, &(0x7f0000000000)=""/120, 0x78) pwrite64(r1, &(0x7f0000000100)='M\t', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000002380)=0x0) io_submit(r6, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x200a00, 0xc00}]) 1.164242535s ago: executing program 6 (id=4251): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x36) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b00000000000000001804", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1.117098596s ago: executing program 7 (id=4252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000060000000800000009"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000400), &(0x7f0000000340)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000340)="0000005aa028311800ce930000002f6b632845e786a819a21112a89495176492e0d24d8e3c8a4d751d610e67e770916ed4756edc5077d83b5cf61bc87ff4bfd5006414324088e994d46fe2ba5c97531ea8e81b14e7c3de8a5a4b8623e2d257671b4a576601c0773825a3a41b4a6da8d77b5f177aa07198378541963b90300aceaef2a8557635458d2dc5a6513f1d99f0", 0x90, 0x24000040, &(0x7f00000005c0)={0x11, 0x0, r3, 0x1, 0x40}, 0x14) 1.098181176s ago: executing program 6 (id=4253): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x4, 0x13}]}, 0x24}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r4}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 1.024684207s ago: executing program 7 (id=4254): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) fchdir(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000010001000f00000001"], 0x50) clock_gettime(0x0, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="0100000200373a4541062101a59ea940d2cb0b36b8f5020000a00000050000000000eb000000a5e5be21c44e328e68f3922af831e4e51bfb30f7788fd57e51bc464355bd646d037ccc16ddb08a7b3a697aedb66ddd793acf37119e61f502d8bbb016f701890700000068d945af468c1c9090c76906b94e0f27761c75e58c82da54d010078660684a4106855beaf5e813ed18aa4acabb5bee7f082d24a16b01fc91471eba59152e716af8776ab90ac48bcbee6570df22513808ecab7a9680aa613a56aa11bfa73af4c4e94b5cfc855f0e910186d7e68ac24f8b125140ac5f7f4819168ce1c25550c6773b41011999d8d9827757d9", 0xf4, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1.024317457s ago: executing program 9 (id=4255): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x4000000}, 0x0) 1.023386767s ago: executing program 7 (id=4256): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000dc0)={[{@noblock_validity}, {}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@nomblk_io_submit}]}, 0x3, 0x58a, &(0x7f0000001300)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x6a6181, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100002d0001000000000000600000010100800c0000000000000000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x44010}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000080000000005fba5000000000b6c500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000f80)={{{@in=@loopback, @in=@multicast2, 0x4e24, 0x8000, 0x4e20, 0x0, 0x2, 0xa0, 0x0, 0x3a}, {0x3e0, 0xffffffffffffffff, 0x10, 0x8000, 0x6, 0xec, 0x9c, 0x7}, {0x8, 0xfffffffffffffffa, 0x7, 0x5}, 0x72, 0x6e6bbc, 0x1, 0x1, 0x2, 0x8aa2775d3450ff6b}, {{@in=@loopback, 0x4d5, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3502, 0x2, 0x2, 0x9, 0x9, 0x100, 0x998}}, 0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x87, 0x3, 0x200}, {0x0, 0x1, 0x5, 0x80}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd}}]}]}}]}, 0x60}}, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) write$binfmt_script(r1, &(0x7f00000004c0), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c00)=ANY=[@ANYRES32=r10, @ANYRES32=r1, @ANYBLOB='&\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="9be280a0af7c51c140142edc40ec1400771b701948b081ccd8061557a0ae26cbca2f5acf670f34eebc7faa2dfbc2f7f5dbc37d7950ce5c3f47f690484c18c5baae36090a9cc45b49e213aafc60f91aab595464ef1e7d364e4f8d846baef795d3bfd18379d3e55e742f25c2623014219cc8f8eb549dae42d2a7d6cd81b98e4bb7010f71f50035dbdbf2db7d72d555e0481b2ee9ed3bc6615913ad3a57a01f14158656f55879863ddb6be7a613abd52027ba5b7d4e1b8e16812527a74f67a7758073d273", @ANYRES64=0x0], 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) r12 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x6d, '\x00', r10, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r13}, &(0x7f0000000180), &(0x7f00000001c0)=r12}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x200000000000021e, &(0x7f0000000d00)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYRES8=r1, @ANYRES64, @ANYRESDEC=r10, @ANYBLOB="5ef28e3e2abe26bd03fc3b646f8b101598cc8869181883ebe26045a3b8e4601f63050f8c83f9365b79cb24", @ANYRES64=r6, @ANYRES8=r2, @ANYRESOCT=r5, @ANYBLOB="c6293d2be9dc1554bb05e6b22fc4efe74b49a614cade0fed516243a6968d4d6c8eb826f7e3b0cfce913f8e00c6", @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r14}, 0x10) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0) 1.004393367s ago: executing program 6 (id=4257): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0xffff}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000008b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f00000003c0)='./file0\x00', 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0x1, 0x400000, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x89}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x94b, 0x2, 0xfffffffffffffffb}, {0x5, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, [@replay_thresh={0x8, 0xb, 0x9c8f43d}]}, 0xc0}}, 0x4004) (fail_nth: 3) 927.310708ms ago: executing program 9 (id=4258): r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x2000c10, &(0x7f00000004c0)={[{@orlov}, {@stripe={'stripe', 0x3d, 0x1ef}}, {@noauto_da_alloc}, {@orlov}], [{@appraise_type}, {@obj_user={'obj_user', 0x3d, '@$%[-&'}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000006880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000ffdbdf250f00000008000300", @ANYRES32=r3, @ANYBLOB="05002f000c"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0xffffffffffffff57, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100030000000003000000000000000001006e657464657673696d15879ad22a75b19102b020c78b58c6463849edfc006e653cb27b74646576bd05eecb39ff50b551"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r9}, 0x18) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='xprtrdma_post_recvs_err\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x102) sync() r11 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r12, 0x6, 0x21, &(0x7f0000001b80)="4476c8a3c3af5369bdfd752ec45c83c8", 0x10) close_range(r11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 926.830838ms ago: executing program 6 (id=4259): bpf$MAP_CREATE(0x0, 0x0, 0x48) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000a000000380003801400020076657468305f766972745f7769666900060007004e2400000800030000000000080001"], 0x4c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x1000003, 0x300102, 0x0, 'queue1\x00', 0xffffffff}) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x53) socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) 696.746331ms ago: executing program 7 (id=4260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000200), &(0x7f0000000840)=r1}, 0x20) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) 669.779192ms ago: executing program 8 (id=4261): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='mm_page_free\x00', r0, 0x0, 0x1000}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x31, 0x0, &(0x7f0000000240)) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) getpeername$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0}, &(0x7f0000000680)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x4) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x8c, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") unlink(&(0x7f0000000180)='./file1\x00') 600.075543ms ago: executing program 7 (id=4262): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x800000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) semget(0x0, 0x2, 0x2) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f6164"], 0x9c}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000040) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0xb2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000240)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x0, 0x3a, ':srjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 565.074463ms ago: executing program 8 (id=4263): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) fsmount(0xffffffffffffffff, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="e0f0fef2382f6f02baf74472e8d3ef6c84e7a143612181e956b446e9d2a8", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev}]}, 0x24}}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x70, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x78, 0x40, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, '_j'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x9, 0x2, 0x3}, {0x6, 0x24, 0x1a, 0x40, 0x41}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x6, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x9, 0xfa, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x6, 0x8}}}}}}}]}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000010bd28550000"], 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) syz_usb_control_io(r4, 0x0, 0x0) 559.681013ms ago: executing program 0 (id=4264): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f0000000080)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 492.040554ms ago: executing program 9 (id=4265): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000680)=0x60) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000006c0)=0x1c7d, 0x4) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000940)={0x1, 0x2, 0x8aa5, 0x1, 0x3}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r2, 0x3) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @dev, @val={@val={0x88a8, 0x1, 0x1, 0x3}, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a1000", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x4c) r4 = syz_io_uring_setup(0x1adf, &(0x7f0000000300)={0x0, 0xe34f, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x50, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x5b43, 0x0, 0x20, 0x0, 0x0) 491.442184ms ago: executing program 0 (id=4266): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) fchdir(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000010001000f00000001"], 0x50) clock_gettime(0x0, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="0100000200373a4541062101a59ea940d2cb0b36b8f5020000a00000050000000000eb000000a5e5be21c44e328e68f3922af831e4e51bfb30f7788fd57e51bc464355bd646d037ccc16ddb08a7b3a697aedb66ddd793acf37119e61f502d8bbb016f701890700000068d945af468c1c9090c76906b94e0f27761c75e58c82da54d010078660684a4106855beaf5e813ed18aa4acabb5bee7f082d24a16b01fc91471eba59152e716af8776ab90ac48bcbee6570df22513808ecab7a9680aa613a56aa11bfa73af4c4e94b5cfc855f0e910186d7e68ac24f8b125140ac5f7f4819168ce1c25550c6773b41011999d8d9827757d9", 0xf4, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 480.203944ms ago: executing program 9 (id=4267): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) unshare(0x22020600) mq_open(&(0x7f0000000800)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\b\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#G\xd5\x93BoR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x85\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96\xcd_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\xcd\xac\xcd\xf7\xe689\x92R\xcd1b\x9b\x15\xfc\xcc\x97\x10\xc9\x7f#\x91\xef\x8eSwKz\xa9\x89\xe2\x87g\xfa\xef\x1ai\xc1\xba,\x01\xda\xf0\xd6\xf9\x18\x86\xef\xab5\x8fL\x05\xe9Z\xe0e\xb3\x1a\xe8-\x00S\x85\xcd\xf5\x80\x15\xb9\\&!\x968\x03@Z?\xfdg\xe0-\x9f\x86mL\x13 \xe2x\x97\x91KZ\x908JA\xe4\x8c-\xb6\xf5\f\x95q\x0f\xc2\x8f\xfb\xe9\xf3\xafO~\xb5\xa3\x82>g\x99\xbd\x8a5<\x04\x10|Q\xdcD\xde\xdb\x95\xb4in\x9el-\xedVN\x8d\r:\xbf\xcaa\x80O\xd0EEOU(\rU\xbe\f\xd1\xdf\x99\xa5iw\x96\xc2\x1f5\xb2\xb3\xc4\x01\xa8\xf2\x19A\xaa\x83\x02r\xadx\xefa\xbd\xae\xfd\xc7;QJ\x00'/751, 0x40, 0x10, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x0, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x80000000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x66c, 0x762, 0x3, 0x10, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0x7, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x7, 0x79c, 0x2, 0x40001, 0x7f, 0x3ff, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa4860a, 0x7, 0xaa, 0xfff, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xba27, 0x4, 0x100005, 0x8, 0x752, 0x0, 0x3, 0x0, 0xfffe, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x2, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0xfffffc00, 0xd9a, 0xd, 0x2a2, 0x0, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0xd, 0x0, 0x8, 0x1, 0x1fc, 0xc5d, 0x1000]}}) ioperm(0x8, 0x7ff, 0x2000000000000362) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x300}, 0x20) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r1) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x5) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x57}) 401.129315ms ago: executing program 0 (id=4268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00'}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@loopback, 0x4e22, 0x0, 0x4, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0xfffffffd, 0x32}, 0xa, @in=@multicast2, 0xfffffffd, 0x4, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 380.068835ms ago: executing program 0 (id=4269): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, r0, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) 349.882816ms ago: executing program 9 (id=4270): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0xd, 0x1}, 0xa54, 0xa0, &(0x7f0000000a00)="08e76495ac4d621c2fb3640883947a9a8391e210a80957c4e3fbc4019495c3e34e2a76b548c86ced9710389d9e08e4b1f662c3b6765740b5ce73932ed9d6ba6f094e039ebd6171ad9e33e6ccdc8e7e1c074cac16ad46b2168e4c2c536cb834d2065398456789bc84e4ce95dd27187a66fd1fa78cae5bab8bf3b6ab0fa80e3c06ad9c10bafee7b393939a3cb0199100ff0efa674f1a1a6a1f44604c181212f744948116a5520ced248efc4387f35939f7cd8228f16aa0412a18313a927b0240e430114c1b7c3ae9f84e5cc860cd0342fdbc8fb18e56426324786580fcd4c0f57ed59bdd93f0e7e9", 0xe7, 0x2, 0x7f, 0x0, 0x3ff, 0x2, &(0x7f0000000b00)="04eb9502e0156a7294a4c6cfaeff608914ec6ccd34aaeb0105f6962fcdfafa46dd8c0897e72b7b445adb457288f9aff3994edadd3184a13d9726e4cf658571b5ed5dc4f44047d6d6ae39cc8598c3c37ab5777f810570c051edb90ca164126040d8b9290570ff676bda0d5b6b6517cbdc5a56b8aa6d3c1ad30264b496757bc1291bf176877202e8c332144e"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r7, 0x0, 0x40000000}, 0x18) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2afa739e96d1fdee, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff4f192ef3ff000000002500000000002120207b1af80007010000f8ffffffb702000008000000b703000000000083850000002d00000095000000000000000000000000f2f5c2cf94f19cb89d89f7b0d5ed2e84cff80122c4709b1a6a41a562447f390abdb8935814f59dc6690a636451e1393f4c7ea2f115b863b3ad53105713a372067c39ee4c38b7ea97525a7b3ce479a2db45c63fa589c0e9ceccb83f01822efe07d9578f5b067b447fd28cd46330d8f0c4d7d74d61913a6dace5f248bc4a754c6d4978e0e5b00463c20d428d55a65ab4904c0ccdf9c1900d986e11b51dd9e63f39310035baeaefd2c7fa53951f43342c9c3aecbd"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r10 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99IO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r10, 0x0, 0x400000000000000, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r11, {0xfff2}, {}, {0x9}}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 338.217316ms ago: executing program 0 (id=4271): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071004c000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffffd}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) syz_usbip_server_init(0x5) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x60880, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20040a, &(0x7f00000001c0)={[{@grpjquota}, {@errors_continue}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02"], 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1}, 0x1c}}, 0x0) 67.980159ms ago: executing program 6 (id=4272): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000060000000800000009"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000400), &(0x7f0000000340)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000340)="0000005aa028311800ce930000002f6b632845e786a819a21112a89495176492e0d24d8e3c8a4d751d610e67e770916ed4756edc5077d83b5cf61bc87ff4bfd5006414324088e994d46fe2ba5c97531ea8e81b14e7c3de8a5a4b8623e2d257671b4a576601c0773825a3a41b4a6da8d77b5f177aa07198378541963b90300aceaef2a8557635458d2dc5a6513f1d99f0", 0x90, 0x24000040, &(0x7f00000005c0)={0x11, 0x0, r3, 0x1, 0x40}, 0x14) 735.51µs ago: executing program 6 (id=4273): bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a0000000400"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2040400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x7ff, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0xee, 0x4, 0x0, @empty, @rand_addr=0x64010101, {[@ssrr={0x89, 0x3, 0x90}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000001f) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fremovexattr(r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) fcntl$notify(r4, 0x402, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) 0s ago: executing program 7 (id=4274): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='mm_page_free\x00', r0, 0x0, 0x1000}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x31, 0x0, &(0x7f0000000240)) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000580)) getpeername$packet(r2, &(0x7f00000005c0), &(0x7f0000000680)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000700), &(0x7f0000000740)=0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") unlink(&(0x7f0000000180)='./file1\x00') kernel console output (not intermixed with test programs): 0000000011b RDI: 0000000000000006 [ 278.473836][T14933] RBP: 00007f9a98510ab1 R08: 0000000000000004 R09: 0000000000000000 [ 278.473855][T14933] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.473871][T14933] R13: 0000000000000000 R14: 00007f9a986b5fa0 R15: 00007ffea9d7c6e8 [ 278.473894][T14933] [ 278.473903][T14933] Mem-Info: [ 278.736894][T14933] active_anon:18877 inactive_anon:1 isolated_anon:0 [ 278.736894][T14933] active_file:21749 inactive_file:2380 isolated_file:0 [ 278.736894][T14933] unevictable:0 dirty:405 writeback:0 [ 278.736894][T14933] slab_reclaimable:3491 slab_unreclaimable:118195 [ 278.736894][T14933] mapped:30105 shmem:11930 pagetables:1447 [ 278.736894][T14933] sec_pagetables:0 bounce:0 [ 278.736894][T14933] kernel_misc_reclaimable:0 [ 278.736894][T14933] free:1766257 free_pcp:9243 free_cma:0 [ 278.782496][T14933] Node 0 active_anon:75856kB inactive_anon:4kB active_file:86996kB inactive_file:9520kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124596kB dirty:1620kB writeback:0kB shmem:47720kB writeback_tmp:0kB kernel_stack:4816kB pagetables:5788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 278.787639][ T8159] usb 20-1: device descriptor read/8, error -110 [ 278.811549][T14933] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 278.845049][T14933] lowmem_reserve[]: 0 2884 7863 7863 [ 278.850407][T14933] Node 0 DMA32 free:2949936kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 278.879171][T14933] lowmem_reserve[]: 0 0 4978 4978 [ 278.884263][T14933] Node 0 Normal free:4098804kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:76088kB inactive_anon:4kB active_file:86996kB inactive_file:9520kB unevictable:0kB writepending:1620kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:33428kB local_pcp:30516kB free_cma:0kB [ 278.914579][T14933] lowmem_reserve[]: 0 0 0 0 [ 278.919161][T14933] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 278.925624][ T8159] usb 20-1: new SuperSpeed USB device number 2 using vhci_hcd [ 278.931927][T14933] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949936kB [ 278.947575][T14944] SELinux: ebitmap: truncated map [ 278.955574][T14933] Node 0 Normal: 2165*4kB (UM) 2103*8kB (UME) 1212*16kB (UME) 1378*32kB (UME) 1080*64kB (UME) 535*128kB (UME) 210*256kB (UME) 166*512kB (UME) 92*1024kB (UME) 43*2048kB (UME) 867*4096kB (UM) = 4098828kB [ 278.969070][ T8159] usb 20-1: enqueue for inactive port 0 [ 278.980616][T14933] Node 0 hugepages_total=6 hugepages_free=2 hugepages_surp=2 hugepages_size=2048kB [ 278.995521][T14933] 36074 total pagecache pages [ 279.000317][T14933] 19 pages in swap cache [ 279.004577][T14933] Free swap = 123036kB [ 279.008800][T14933] Total swap = 124996kB [ 279.010970][ T8159] usb 20-1: enqueue for inactive port 0 [ 279.012973][T14933] 2097051 pages RAM [ 279.012982][T14933] 0 pages HighMem/MovableOnly [ 279.012989][T14933] 80258 pages reserved [ 279.055694][T14944] SELinux: failed to load policy [ 279.062757][T14946] ªªªªªª: renamed from vlan0 [ 279.100843][ T8159] usb 20-1: enqueue for inactive port 0 [ 279.162885][T14900] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.170054][T14900] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.213279][T14900] bridge_slave_0: entered allmulticast mode [ 279.234120][T14900] bridge_slave_0: entered promiscuous mode [ 279.252791][T14900] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.260103][T14900] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.294624][T14900] bridge_slave_1: entered allmulticast mode [ 279.312237][T14900] bridge_slave_1: entered promiscuous mode [ 279.360610][T14966] loop7: detected capacity change from 0 to 8192 [ 279.419663][T14900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.447959][T14900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.458360][ T6973] bridge_slave_1: left allmulticast mode [ 279.464096][ T6973] bridge_slave_1: left promiscuous mode [ 279.469827][ T6973] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.510130][ T6973] bridge_slave_0: left allmulticast mode [ 279.516058][ T6973] bridge_slave_0: left promiscuous mode [ 279.521926][ T6973] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.571428][T14974] FAULT_INJECTION: forcing a failure. [ 279.571428][T14974] name failslab, interval 1, probability 0, space 0, times 0 [ 279.584139][T14974] CPU: 0 UID: 0 PID: 14974 Comm: syz.7.3848 Tainted: G W 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 279.584180][T14974] Tainted: [W]=WARN [ 279.584189][T14974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 279.584206][T14974] Call Trace: [ 279.584285][T14974] [ 279.584294][T14974] __dump_stack+0x1d/0x30 [ 279.584321][T14974] dump_stack_lvl+0xe8/0x140 [ 279.584344][T14974] dump_stack+0x15/0x1b [ 279.584370][T14974] should_fail_ex+0x265/0x280 [ 279.584402][T14974] ? alloc_fdtable+0x74/0x1b0 [ 279.584427][T14974] should_failslab+0x8c/0xb0 [ 279.584497][T14974] __kmalloc_cache_noprof+0x4c/0x320 [ 279.584518][T14974] alloc_fdtable+0x74/0x1b0 [ 279.584544][T14974] dup_fd+0x4c7/0x540 [ 279.584575][T14974] copy_files+0x98/0xf0 [ 279.584606][T14974] copy_process+0xc44/0x1f90 [ 279.584683][T14974] kernel_clone+0x16c/0x5b0 [ 279.584708][T14974] ? vfs_write+0x75e/0x8d0 [ 279.584748][T14974] __x64_sys_clone+0xe6/0x120 [ 279.584788][T14974] x64_sys_call+0x2c59/0x2fb0 [ 279.584872][T14974] do_syscall_64+0xd0/0x1a0 [ 279.584900][T14974] ? clear_bhb_loop+0x25/0x80 [ 279.584927][T14974] ? clear_bhb_loop+0x25/0x80 [ 279.584953][T14974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.585015][T14974] RIP: 0033:0x7f9a9848e969 [ 279.585104][T14974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.585126][T14974] RSP: 002b:00007f9a96af6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 279.585145][T14974] RAX: ffffffffffffffda RBX: 00007f9a986b5fa0 RCX: 00007f9a9848e969 [ 279.585209][T14974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 279.585223][T14974] RBP: 00007f9a96af7090 R08: 0000000000000000 R09: 0000000000000000 [ 279.585273][T14974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.585286][T14974] R13: 0000000000000000 R14: 00007f9a986b5fa0 R15: 00007ffea9d7c6e8 [ 279.585304][T14974] [ 279.792979][ T6973] team0: Port device geneve1 removed [ 279.837527][ T6973] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.847666][ T6973] bond_slave_0: left promiscuous mode [ 279.853788][ T6973] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.862912][ T6973] bond_slave_1: left promiscuous mode [ 279.869747][ T6973] $Hÿ (unregistering): Released all slaves [ 279.892152][T14982] FAULT_INJECTION: forcing a failure. [ 279.892152][T14982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.905352][T14982] CPU: 1 UID: 0 PID: 14982 Comm: +}[@ Tainted: G W 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 279.905393][T14982] Tainted: [W]=WARN [ 279.905402][T14982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 279.905418][T14982] Call Trace: [ 279.905425][T14982] [ 279.905435][T14982] __dump_stack+0x1d/0x30 [ 279.905461][T14982] dump_stack_lvl+0xe8/0x140 [ 279.905479][T14982] dump_stack+0x15/0x1b [ 279.905531][T14982] should_fail_ex+0x265/0x280 [ 279.905783][T14982] should_fail+0xb/0x20 [ 279.905810][T14982] should_fail_usercopy+0x1a/0x20 [ 279.905828][T14982] _copy_to_user+0x20/0xa0 [ 279.905862][T14982] simple_read_from_buffer+0xb5/0x130 [ 279.905933][T14982] proc_fail_nth_read+0x100/0x140 [ 279.906055][T14982] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 279.906082][T14982] vfs_read+0x19d/0x6f0 [ 279.906105][T14982] ? __rcu_read_unlock+0x4f/0x70 [ 279.906180][T14982] ? __fget_files+0x184/0x1c0 [ 279.906229][T14982] ksys_read+0xda/0x1a0 [ 279.906260][T14982] __x64_sys_read+0x40/0x50 [ 279.906283][T14982] x64_sys_call+0x2d77/0x2fb0 [ 279.906303][T14982] do_syscall_64+0xd0/0x1a0 [ 279.906328][T14982] ? clear_bhb_loop+0x25/0x80 [ 279.906416][T14982] ? clear_bhb_loop+0x25/0x80 [ 279.906470][T14982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.906567][T14982] RIP: 0033:0x7f9a9848d37c [ 279.906581][T14982] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 279.906655][T14982] RSP: 002b:00007f9a96af7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 279.906673][T14982] RAX: ffffffffffffffda RBX: 00007f9a986b5fa0 RCX: 00007f9a9848d37c [ 279.906688][T14982] RDX: 000000000000000f RSI: 00007f9a96af70a0 RDI: 0000000000000005 [ 279.906704][T14982] RBP: 00007f9a96af7090 R08: 0000000000000000 R09: 0000000000000000 [ 279.906719][T14982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.906734][T14982] R13: 0000000000000000 R14: 00007f9a986b5fa0 R15: 00007ffea9d7c6e8 [ 279.906811][T14982] [ 280.120939][T14900] team0: Port device team_slave_0 added [ 280.137853][T14900] team0: Port device team_slave_1 added [ 280.152987][T14984] loop6: detected capacity change from 0 to 512 [ 280.188003][ T6973] hsr_slave_0: left promiscuous mode [ 280.193640][ T6973] hsr_slave_1: left promiscuous mode [ 280.206238][T14984] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 280.224256][ T6973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.236000][ T6973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.257865][T14984] EXT4-fs (loop6): 1 truncate cleaned up [ 280.272999][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 280.273017][ T29] audit: type=1400 audit(1745690481.267:8936): avc: denied { unlink } for pid=14979 comm="syz.6.3852" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 280.286891][T14993] loop9: detected capacity change from 0 to 128 [ 280.316198][ T8159] usb usb20-port1: attempt power cycle [ 280.322186][ T6973] team0 (unregistering): Port device team_slave_1 removed [ 280.330079][T14993] FAT-fs (loop9): bogus number of reserved sectors [ 280.336727][T14993] FAT-fs (loop9): Can't find a valid FAT filesystem [ 280.348667][ T6973] team0 (unregistering): Port device team_slave_0 removed [ 280.413631][T14993] SELinux: ebitmap: truncated map [ 280.423527][T14900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.430547][T14900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.456666][T14900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.469484][T14993] SELinux: failed to load policy [ 280.475227][T14900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.482487][T14900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.508483][T14900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.607962][T14900] hsr_slave_0: entered promiscuous mode [ 280.615466][T14900] hsr_slave_1: entered promiscuous mode [ 280.625489][T15001] loop9: detected capacity change from 0 to 2048 [ 280.645846][T14900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.657365][T14900] Cannot create hsr debugfs directory [ 280.676001][ T5488] loop9: p1 < > p3 [ 280.680992][ T5488] loop9: p3 size 134217728 extends beyond EOD, truncated [ 280.693441][T15001] loop9: p1 < > p3 [ 280.702202][T15001] loop9: p3 size 134217728 extends beyond EOD, truncated [ 280.779208][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3857'. [ 280.805277][T15001] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3857'. [ 280.880308][T15015] netlink: 'syz.9.3863': attribute type 13 has an invalid length. [ 280.890899][T15013] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3862'. [ 280.960953][T15019] loop6: detected capacity change from 0 to 128 [ 281.026292][T15019] FAT-fs (loop6): bogus number of reserved sectors [ 281.032870][T15019] FAT-fs (loop6): Can't find a valid FAT filesystem [ 281.101607][T15019] SELinux: ebitmap: truncated map [ 281.117149][T14900] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 281.117792][T15019] SELinux: failed to load policy [ 281.136149][T14900] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 281.149687][T14900] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 281.164980][T14900] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 281.183731][T15030] loop6: detected capacity change from 0 to 1140 [ 281.190495][T15029] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3870'. [ 281.205511][T15030] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 281.217197][T15030] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 281.228645][T15030] EXT4-fs error (device loop6): __ext4_fill_super:5502: inode #2: comm syz.6.3869: iget: bad extra_isize 31868 (inode size 256) [ 281.239373][T14900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.248876][T15030] EXT4-fs (loop6): Remounting filesystem read-only [ 281.255448][T15030] EXT4-fs (loop6): get root inode failed [ 281.257667][T14900] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.261187][T15030] EXT4-fs (loop6): mount failed [ 281.293951][ T6959] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.301064][ T6959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.319668][ T6959] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.326815][ T6959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.412101][T14900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.415876][T15040] netlink: 'syz.7.3873': attribute type 13 has an invalid length. [ 281.563587][T14900] veth0_vlan: entered promiscuous mode [ 281.590697][T14900] veth1_vlan: entered promiscuous mode [ 281.616543][T14900] veth0_macvtap: entered promiscuous mode [ 281.624487][T14900] veth1_macvtap: entered promiscuous mode [ 281.625004][T15075] loop7: detected capacity change from 0 to 128 [ 281.640137][T15075] FAT-fs (loop7): bogus number of reserved sectors [ 281.643671][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.646857][T15075] FAT-fs (loop7): Can't find a valid FAT filesystem [ 281.657307][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.658960][T14900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.689639][T14900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.700163][T14900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.711103][T14900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.722260][T14900] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.725840][T15075] SELinux: ebitmap: truncated map [ 281.731129][T14900] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.743284][T15075] SELinux: failed to load policy [ 281.744809][T14900] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.758931][T14900] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.852537][T15081] tipc: Started in network mode [ 281.857491][T15081] tipc: Node identity 2ee9740ed52d, cluster identity 4711 [ 281.864721][T15081] tipc: Enabled bearer , priority 0 [ 281.887256][T15086] netlink: 'syz.6.3884': attribute type 13 has an invalid length. [ 281.900081][T15079] tipc: Disabling bearer [ 282.029884][T15086] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.037184][T15086] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.059036][ T29] audit: type=1326 audit(1745690483.037:8937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.7.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9848e969 code=0x7ffc0000 [ 282.082633][ T29] audit: type=1326 audit(1745690483.037:8938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.7.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9848e969 code=0x7ffc0000 [ 282.085747][T15102] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3889'. [ 282.134403][T15102] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3889'. [ 282.144161][ T8159] usb usb20-port1: unable to enumerate USB device [ 282.180770][T15109] loop0: detected capacity change from 0 to 512 [ 282.191671][T15109] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.207670][ T29] audit: type=1326 audit(1745690483.057:8939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.7.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9a9848e969 code=0x7ffc0000 [ 282.231353][ T29] audit: type=1326 audit(1745690483.057:8940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.7.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9848e969 code=0x7ffc0000 [ 282.255019][ T29] audit: type=1326 audit(1745690483.057:8941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.7.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a9848e969 code=0x7ffc0000 [ 282.278547][ T29] audit: type=1326 audit(1745690483.057:8942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.7.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9848e969 code=0x7ffc0000 [ 282.302199][ T29] audit: type=1326 audit(1745690483.057:8943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.7.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a9848e969 code=0x7ffc0000 [ 282.325859][ T29] audit: type=1326 audit(1745690483.057:8944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.7.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9848e969 code=0x7ffc0000 [ 282.349742][ T29] audit: type=1326 audit(1745690483.057:8945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.7.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a9848e969 code=0x7ffc0000 [ 282.451051][T15102] loop7: detected capacity change from 0 to 512 [ 282.477678][T15102] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.508187][T15086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.522515][T15109] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 282.530656][T15109] EXT4-fs (loop0): orphan cleanup on readonly fs [ 282.537418][T15109] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 282.545209][T15086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.553367][T15109] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 282.573574][T15109] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3891: bg 0: block 40: padding at end of block bitmap is not set [ 282.590020][T15102] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 282.606060][T15109] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 282.611179][T15102] EXT4-fs (loop7): orphan cleanup on readonly fs [ 282.623810][T15109] EXT4-fs (loop0): 1 truncate cleaned up [ 282.630031][T15109] EXT4-fs mount: 38 callbacks suppressed [ 282.630049][T15109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 282.649939][T15102] EXT4-fs warning (device loop7): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 282.669222][T15102] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 282.676534][T15109] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #16: comm syz.0.3891: corrupted xattr block 31: invalid header [ 282.691918][T15109] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 282.701930][T15102] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3889: bg 0: block 40: padding at end of block bitmap is not set [ 282.706226][T15086] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.725048][T15086] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.725709][T15109] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #16: comm syz.0.3891: corrupted xattr block 31: invalid header [ 282.733994][T15086] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.752170][T15102] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 282.756121][T15086] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.765278][T15102] EXT4-fs (loop7): 1 truncate cleaned up [ 282.787064][T15126] FAULT_INJECTION: forcing a failure. [ 282.787064][T15126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.800266][T15126] CPU: 1 UID: 0 PID: 15126 Comm: syz.0.3891 Tainted: G W 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 282.800354][T15126] Tainted: [W]=WARN [ 282.800364][T15126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 282.800381][T15126] Call Trace: [ 282.800390][T15126] [ 282.800406][T15126] __dump_stack+0x1d/0x30 [ 282.800435][T15126] dump_stack_lvl+0xe8/0x140 [ 282.800463][T15126] dump_stack+0x15/0x1b [ 282.800522][T15126] should_fail_ex+0x265/0x280 [ 282.800566][T15126] should_fail+0xb/0x20 [ 282.800671][T15126] should_fail_usercopy+0x1a/0x20 [ 282.800760][T15126] strncpy_from_user+0x25/0x230 [ 282.800795][T15126] ? kmem_cache_alloc_noprof+0x186/0x310 [ 282.800945][T15126] ? getname_flags+0x80/0x3b0 [ 282.800988][T15126] getname_flags+0xae/0x3b0 [ 282.801027][T15126] user_path_at+0x28/0x130 [ 282.801054][T15126] __se_sys_quotactl+0xb6/0x670 [ 282.801144][T15126] __x64_sys_quotactl+0x55/0x70 [ 282.801188][T15126] x64_sys_call+0x2886/0x2fb0 [ 282.801224][T15126] do_syscall_64+0xd0/0x1a0 [ 282.801307][T15126] ? clear_bhb_loop+0x25/0x80 [ 282.801335][T15126] ? clear_bhb_loop+0x25/0x80 [ 282.801363][T15126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.801392][T15126] RIP: 0033:0x7f99bff1e969 [ 282.801411][T15126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.801557][T15126] RSP: 002b:00007f99be566038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 282.801582][T15126] RAX: ffffffffffffffda RBX: 00007f99c0146080 RCX: 00007f99bff1e969 [ 282.801680][T15126] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffffff80000201 [ 282.801697][T15126] RBP: 00007f99be566090 R08: 0000000000000000 R09: 0000000000000000 [ 282.801714][T15126] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 282.801730][T15126] R13: 0000000000000001 R14: 00007f99c0146080 R15: 00007fff1ae0d078 [ 282.801756][T15126] [ 282.802622][T15109] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 282.811670][T15102] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 282.818224][T15109] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.3891: bad symlink. [ 282.901105][T15102] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #16: comm syz.7.3889: corrupted xattr block 31: invalid header [ 283.018450][T15109] SET target dimension over the limit! [ 283.020931][T15102] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=16 [ 283.052218][T15109] netlink: 'syz.0.3891': attribute type 10 has an invalid length. [ 283.058787][T15102] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #16: comm syz.7.3889: corrupted xattr block 31: invalid header [ 283.080367][T15127] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #16: comm syz.7.3889: corrupted xattr block 31: invalid header [ 283.106487][T15122] $Hÿ: renamed from bond0 (while UP) [ 283.113870][T15122] $Hÿ: entered promiscuous mode [ 283.113905][T15122] bond_slave_0: entered promiscuous mode [ 283.114103][T15122] bond_slave_1: entered promiscuous mode [ 283.139928][T15133] FAULT_INJECTION: forcing a failure. [ 283.139928][T15133] name failslab, interval 1, probability 0, space 0, times 0 [ 283.140006][T15133] CPU: 0 UID: 0 PID: 15133 Comm: syz.6.3895 Tainted: G W 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 283.140051][T15133] Tainted: [W]=WARN [ 283.140061][T15133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 283.140113][T15133] Call Trace: [ 283.140121][T15133] [ 283.140131][T15133] __dump_stack+0x1d/0x30 [ 283.140159][T15133] dump_stack_lvl+0xe8/0x140 [ 283.140187][T15133] dump_stack+0x15/0x1b [ 283.140291][T15133] should_fail_ex+0x265/0x280 [ 283.140332][T15133] should_failslab+0x8c/0xb0 [ 283.140371][T15133] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 283.140416][T15133] ? __d_alloc+0x3d/0x350 [ 283.140549][T15133] __d_alloc+0x3d/0x350 [ 283.140587][T15133] ? from_vfsgid+0x70/0xa0 [ 283.140667][T15133] d_alloc_pseudo+0x1e/0x80 [ 283.140704][T15133] alloc_file_pseudo+0x71/0x160 [ 283.140746][T15133] ? hugetlbfs_get_inode+0x267/0x370 [ 283.140814][T15133] hugetlb_file_setup+0x298/0x3d0 [ 283.140843][T15133] ksys_mmap_pgoff+0x157/0x310 [ 283.140879][T15133] x64_sys_call+0x1602/0x2fb0 [ 283.140938][T15133] do_syscall_64+0xd0/0x1a0 [ 283.140966][T15133] ? clear_bhb_loop+0x25/0x80 [ 283.140994][T15133] ? clear_bhb_loop+0x25/0x80 [ 283.141075][T15133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.141102][T15133] RIP: 0033:0x7fee773ae969 [ 283.141122][T15133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.141145][T15133] RSP: 002b:00007fee75a17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 283.141172][T15133] RAX: ffffffffffffffda RBX: 00007fee775d5fa0 RCX: 00007fee773ae969 [ 283.141188][T15133] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000 [ 283.141204][T15133] RBP: 00007fee75a17090 R08: ffffffffffffffff R09: 0000000000000000 [ 283.141270][T15133] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 283.141286][T15133] R13: 0000000000000000 R14: 00007fee775d5fa0 R15: 00007fff36ad1e48 [ 283.141310][T15133] [ 283.171174][T15127] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=16 [ 283.177205][T15109] batman_adv: batadv0: Adding interface: team0 [ 283.222741][T15136] random: crng reseeded on system resumption [ 283.223718][T15109] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.230194][T15127] EXT4-fs error (device loop7): ext4_get_link:106: inode #16: comm syz.7.3889: bad symlink. [ 283.233029][T15109] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 283.243090][T15102] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=16 [ 283.244538][T15138] 9pnet_fd: Insufficient options for proto=fd [ 283.248756][T15102] EXT4-fs error (device loop7): ext4_get_link:106: inode #16: comm syz.7.3889: bad symlink. [ 283.363952][T15141] SET target dimension over the limit! [ 283.484746][T12221] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.516220][T15102] netlink: 'syz.7.3889': attribute type 10 has an invalid length. [ 283.521388][T15145] loop6: detected capacity change from 0 to 512 [ 283.535928][T15145] EXT4-fs: Ignoring removed nobh option [ 283.546681][T15145] EXT4-fs (loop6): failed to initialize system zone (-117) [ 283.560219][T15145] EXT4-fs (loop6): mount failed [ 283.581903][T15102] batman_adv: batadv0: Adding interface: team0 [ 283.588051][T15145] loop6: detected capacity change from 0 to 512 [ 283.594108][T15145] ext3: Unknown parameter 'measure' [ 283.594481][T15102] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.625039][T15102] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 283.693318][T13873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.707761][T15152] ip6tnl1: entered promiscuous mode [ 283.713026][T15152] ip6tnl1: entered allmulticast mode [ 283.743258][T15155] loop6: detected capacity change from 0 to 512 [ 283.768763][T15155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.782815][T15156] vhci_hcd: invalid port number 96 [ 283.785088][T15155] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.788085][T15156] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 283.801140][T15155] EXT4-fs (loop6): shut down requested (2) [ 283.876191][T15155] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.929374][T15163] __nla_validate_parse: 2 callbacks suppressed [ 283.929394][T15163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3905'. [ 283.973848][T15163] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3905'. [ 283.997502][T15163] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3905'. [ 284.006775][T15163] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3905'. [ 284.073974][T15171] loop6: detected capacity change from 0 to 1024 [ 284.090594][T15174] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3908'. [ 284.098616][T15173] loop0: detected capacity change from 0 to 1024 [ 284.101166][T15174] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3908'. [ 284.119584][T15171] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 284.119615][T15171] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 284.120883][T15171] JBD2: no valid journal superblock found [ 284.120929][T15171] EXT4-fs (loop6): Could not load journal inode [ 284.126503][T15173] EXT4-fs: Ignoring removed nobh option [ 284.181387][T15173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.265457][T15180] loop9: detected capacity change from 0 to 512 [ 284.288901][T12221] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.299212][T15180] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 284.307613][T15180] EXT4-fs (loop9): orphan cleanup on readonly fs [ 284.320045][T15180] EXT4-fs warning (device loop9): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 284.385702][T15180] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 284.426239][T15189] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 284.427303][T15180] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3908: bg 0: block 40: padding at end of block bitmap is not set [ 284.468724][T15180] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 284.478486][T15189] tipc: Enabled bearer , priority 0 [ 284.501158][T15180] EXT4-fs (loop9): 1 truncate cleaned up [ 284.508566][T15180] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 284.532268][T15201] ip6t_rpfilter: unknown options [ 284.537600][T15188] tipc: Resetting bearer [ 284.554993][T15174] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #16: comm syz.9.3908: corrupted xattr block 31: invalid header [ 284.567030][T15188] tipc: Disabling bearer [ 284.574856][T15174] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=16 [ 284.584346][T15174] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #16: comm syz.9.3908: corrupted xattr block 31: invalid header [ 284.601605][T15174] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=16 [ 284.610999][T15180] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #16: comm syz.9.3908: corrupted xattr block 31: invalid header [ 284.629754][T15201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.641285][T15174] EXT4-fs error (device loop9): ext4_get_link:106: inode #16: comm syz.9.3908: bad symlink. [ 284.652224][T15180] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=16 [ 284.662467][T15180] EXT4-fs error (device loop9): ext4_get_link:106: inode #16: comm syz.9.3908: bad symlink. [ 284.681022][T15174] SET target dimension over the limit! [ 284.711939][T15206] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3920'. [ 284.760101][T15206] loop7: detected capacity change from 0 to 512 [ 284.797352][T15206] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.825652][T15206] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 284.865112][T13873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.897913][ T6657] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.917692][T15218] loop7: detected capacity change from 0 to 512 [ 284.940500][T15218] EXT4-fs: Ignoring removed nobh option [ 284.981899][T15222] netlink: 'syz.6.3927': attribute type 21 has an invalid length. [ 285.002314][T15222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3927'. [ 285.046618][T15218] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #16: comm syz.7.3924: corrupted inode contents [ 285.063811][T15222] loop6: detected capacity change from 0 to 256 [ 285.077385][T15222] vfat: Unknown parameter 'shortnam' [ 285.107759][T15218] EXT4-fs (loop7): Remounting filesystem read-only [ 285.115100][T15218] EXT4-fs (loop7): 1 truncate cleaned up [ 285.121386][T15218] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.134249][ T6971] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 285.144956][ T6971] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 285.156101][ T6971] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 285.195315][T15218] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.224361][T15218] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3924'. [ 285.291705][T15233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.330991][T15234] loop9: detected capacity change from 0 to 512 [ 285.338027][T15234] EXT4-fs: inline encryption not supported [ 285.351880][T15234] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.360421][T15234] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 285.369489][T15234] EXT4-fs (loop9): blocks per group (39) and clusters per group (32768) inconsistent [ 285.463397][T15233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.555654][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 285.555672][ T29] audit: type=1326 audit(1745690486.537:9127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.7.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9848e969 code=0x7ffc0000 [ 285.585533][ T29] audit: type=1326 audit(1745690486.537:9128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.7.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9848e969 code=0x7ffc0000 [ 286.163523][ T29] audit: type=1326 audit(1745690486.637:9129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.7.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9a9848e969 code=0x7ffc0000 [ 286.187191][ T29] audit: type=1326 audit(1745690486.637:9130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.7.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9848e969 code=0x7ffc0000 [ 286.210787][ T29] audit: type=1326 audit(1745690486.637:9131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.7.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9848e969 code=0x7ffc0000 [ 286.234294][ T29] audit: type=1400 audit(1745690487.107:9132): avc: denied { read write } for pid=14900 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 286.259525][ T29] audit: type=1400 audit(1745690487.107:9133): avc: denied { open } for pid=14900 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 286.283827][ T29] audit: type=1400 audit(1745690487.107:9134): avc: denied { ioctl } for pid=14900 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 286.309587][ T29] audit: type=1400 audit(1745690487.157:9135): avc: denied { unmount } for pid=13873 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 286.473826][T15234] loop9: detected capacity change from 0 to 8192 [ 286.481534][T13873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.537115][ T29] audit: type=1400 audit(1745690487.477:9136): avc: denied { mounton } for pid=15230 comm="syz.9.3929" path="/594/file0" dev="tmpfs" ino=3335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 286.768430][T15251] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 286.951543][T15261] loop6: detected capacity change from 0 to 512 [ 286.979525][T15261] EXT4-fs: Ignoring removed nobh option [ 287.031765][T15261] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.3940: corrupted inode contents [ 287.054227][T15261] EXT4-fs (loop6): Remounting filesystem read-only [ 287.087632][T15261] EXT4-fs (loop6): 1 truncate cleaned up [ 287.093810][T15261] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.106793][ T6982] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 287.117436][ T6982] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 287.128151][ T6982] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 287.136910][T15261] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.169884][T15267] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 287.176445][T15267] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 287.184225][T15267] vhci_hcd vhci_hcd.0: Device attached [ 287.234260][T15265] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3941'. [ 287.249911][T15267] loop7: detected capacity change from 0 to 512 [ 287.290671][T15267] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 287.301901][T15261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.312536][T15261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.323549][T15267] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 287.340040][T15267] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.372350][T15267] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.3942: Failed to acquire dquot type 0 [ 287.389763][T15268] vhci_hcd: connection closed [ 287.390045][ T6959] vhci_hcd: stop threads [ 287.399102][ T6959] vhci_hcd: release socket [ 287.403738][ T6959] vhci_hcd: disconnect device [ 287.418125][T15276] vcan1: entered promiscuous mode [ 287.423620][T15276] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 287.435491][T15276] bond0: (slave vcan1): Error -95 calling set_mac_address [ 287.564626][T15290] loop0: detected capacity change from 0 to 512 [ 287.584422][T15290] EXT4-fs: Ignoring removed nobh option [ 287.628254][T15290] EXT4-fs (loop0): failed to initialize system zone (-117) [ 287.635502][T15290] EXT4-fs (loop0): mount failed [ 287.658456][T15290] loop0: detected capacity change from 0 to 512 [ 287.879463][T15290] ext3: Unknown parameter 'measure' [ 288.073440][T13873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 288.086524][T13694] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.233524][T15313] loop7: detected capacity change from 0 to 512 [ 288.241576][T15312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=15312 comm=syz.0.3956 [ 288.261040][T15313] EXT4-fs: Ignoring removed mblk_io_submit option [ 288.282413][T15313] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 288.404125][T15313] EXT4-fs (loop7): 1 truncate cleaned up [ 288.434351][T15313] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.451120][T15326] loop8: detected capacity change from 0 to 1024 [ 288.478401][T15299] chnl_net:caif_netlink_parms(): no params data found [ 288.508825][T15331] loop6: detected capacity change from 0 to 512 [ 288.517730][T15326] EXT4-fs: Ignoring removed orlov option [ 288.527806][T15326] EXT4-fs: quotafile must be on filesystem root [ 288.541264][T15326] netlink: 'syz.8.3959': attribute type 1 has an invalid length. [ 288.561468][T15331] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 288.587682][T15331] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.601729][T15331] 9pnet_fd: Insufficient options for proto=fd [ 288.609560][T15299] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.616736][T15299] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.635876][T15299] bridge_slave_0: entered allmulticast mode [ 288.642604][T15299] bridge_slave_0: entered promiscuous mode [ 288.650926][T15299] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.658111][T15299] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.667523][T15299] bridge_slave_1: entered allmulticast mode [ 288.677611][T13694] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 288.683186][T15299] bridge_slave_1: entered promiscuous mode [ 288.730584][T15343] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 288.735616][T15299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.737122][T15343] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 288.737316][T15343] vhci_hcd vhci_hcd.0: Device attached [ 288.755552][T15299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.788082][T15299] team0: Port device team_slave_0 added [ 288.796973][ T7019] hsr0: left allmulticast mode [ 288.801794][ T7019] hsr_slave_0: left allmulticast mode [ 288.807238][ T7019] hsr_slave_1: left allmulticast mode [ 288.809098][T15343] loop8: detected capacity change from 0 to 512 [ 288.812615][ T7019] hsr0: left promiscuous mode [ 288.812743][ T7019] bridge0: port 3(hsr0) entered disabled state [ 288.837413][T15343] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 288.837704][ T7019] bridge_slave_1: left allmulticast mode [ 288.851643][ T7019] bridge_slave_1: left promiscuous mode [ 288.857352][ T7019] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.864983][ T7019] bridge_slave_0: left allmulticast mode [ 288.871070][ T7019] bridge_slave_0: left promiscuous mode [ 288.876773][ T7019] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.889285][T15343] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 288.902340][T15343] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.902617][T13873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.922421][ T7019] team0: Port device geneve1 removed [ 288.931909][T15343] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.3963: Failed to acquire dquot type 0 [ 288.955290][T15357] loop7: detected capacity change from 0 to 128 [ 288.961128][T15344] vhci_hcd: connection closed [ 288.961976][ T6982] vhci_hcd: stop threads [ 288.971001][T15357] FAT-fs (loop7): bogus number of reserved sectors [ 288.971073][ T6982] vhci_hcd: release socket [ 288.977646][T15357] FAT-fs (loop7): Can't find a valid FAT filesystem [ 288.979898][T15357] warn_alloc: 3 callbacks suppressed [ 288.979915][T15357] syz.7.3966: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 288.982123][ T6982] vhci_hcd: disconnect device [ 289.011344][T15357] ,cpuset=/,mems_allowed=0 [ 289.015839][T15357] CPU: 1 UID: 0 PID: 15357 Comm: syz.7.3966 Tainted: G W 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 289.015942][T15357] Tainted: [W]=WARN [ 289.015949][T15357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 289.015961][T15357] Call Trace: [ 289.015971][T15357] [ 289.015981][T15357] __dump_stack+0x1d/0x30 [ 289.016041][T15357] dump_stack_lvl+0xe8/0x140 [ 289.016067][T15357] dump_stack+0x15/0x1b [ 289.016151][T15357] warn_alloc+0x12b/0x1a0 [ 289.016254][T15357] ? kmem_cache_free+0xdd/0x2f0 [ 289.016284][T15357] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 289.016316][T15357] ? slow_avc_audit+0x104/0x140 [ 289.016431][T15357] ? should_fail_ex+0x30/0x280 [ 289.016469][T15357] ? xskq_create+0x36/0xe0 [ 289.016528][T15357] ? should_failslab+0x8c/0xb0 [ 289.016562][T15357] vmalloc_user_noprof+0x59/0x70 [ 289.016612][T15357] ? xskq_create+0x80/0xe0 [ 289.016645][T15357] xskq_create+0x80/0xe0 [ 289.016680][T15357] xsk_init_queue+0x95/0xf0 [ 289.016706][T15357] xsk_setsockopt+0x35c/0x510 [ 289.016791][T15357] ? __pfx_xsk_setsockopt+0x10/0x10 [ 289.016823][T15357] __sys_setsockopt+0x181/0x200 [ 289.016912][T15357] ? fpregs_restore_userregs+0xbb/0x190 [ 289.016948][T15357] __x64_sys_setsockopt+0x64/0x80 [ 289.016989][T15357] x64_sys_call+0x2bd5/0x2fb0 [ 289.017017][T15357] do_syscall_64+0xd0/0x1a0 [ 289.017051][T15357] ? clear_bhb_loop+0x25/0x80 [ 289.017074][T15357] ? clear_bhb_loop+0x25/0x80 [ 289.017101][T15357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.017190][T15357] RIP: 0033:0x7f9a9848e969 [ 289.017212][T15357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.017234][T15357] RSP: 002b:00007f9a96af7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 289.017329][T15357] RAX: ffffffffffffffda RBX: 00007f9a986b5fa0 RCX: 00007f9a9848e969 [ 289.017341][T15357] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 289.017428][T15357] RBP: 00007f9a98510ab1 R08: 0000000000000004 R09: 0000000000000000 [ 289.017446][T15357] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.017463][T15357] R13: 0000000000000000 R14: 00007f9a986b5fa0 R15: 00007ffea9d7c6e8 [ 289.017486][T15357] [ 289.017494][T15357] Mem-Info: [ 289.099203][T15358] SELinux: ebitmap: truncated map [ 289.104109][T15357] active_anon:12213 inactive_anon:1 isolated_anon:0 [ 289.104109][T15357] active_file:21820 inactive_file:2433 isolated_file:0 [ 289.104109][T15357] unevictable:0 dirty:448 writeback:0 [ 289.104109][T15357] slab_reclaimable:3458 slab_unreclaimable:56927 [ 289.104109][T15357] mapped:29213 shmem:6206 pagetables:1299 [ 289.104109][T15357] sec_pagetables:0 bounce:0 [ 289.104109][T15357] kernel_misc_reclaimable:0 [ 289.104109][T15357] free:1817282 free_pcp:22545 free_cma:0 [ 289.112203][T15358] SELinux: failed to load policy [ 289.112839][T15357] Node 0 active_anon:48852kB inactive_anon:4kB active_file:87280kB inactive_file:9732kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116852kB dirty:1792kB writeback:0kB shmem:24824kB writeback_tmp:0kB kernel_stack:4832kB pagetables:5196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 289.331587][T15357] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 289.358763][T15357] lowmem_reserve[]: 0 2884 7863 7863 [ 289.364091][T15357] Node 0 DMA32 free:2949936kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 289.392759][T15357] lowmem_reserve[]: 0 0 4978 4978 [ 289.397996][T15357] Node 0 Normal free:4303832kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:48736kB inactive_anon:4kB active_file:87280kB inactive_file:9732kB unevictable:0kB writepending:1792kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:86528kB local_pcp:82908kB free_cma:0kB [ 289.428234][T15357] lowmem_reserve[]: 0 0 0 0 [ 289.432834][T15357] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 289.445627][T15357] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949936kB [ 289.461956][T15357] Node 0 Normal: 2*4kB (ME) 623*8kB (ME) 1857*16kB (ME) 1474*32kB (UME) 1107*64kB (UME) 622*128kB (UME) 296*256kB (UME) 200*512kB (UME) 76*1024kB (UME) 9*2048kB (UME) 927*4096kB (UM) = 4303760kB [ 289.481386][T15357] Node 0 hugepages_total=6 hugepages_free=2 hugepages_surp=2 hugepages_size=2048kB [ 289.490810][T15357] 30426 total pagecache pages [ 289.495502][T15357] 1 pages in swap cache [ 289.499700][T15357] Free swap = 124992kB [ 289.503871][T15357] Total swap = 124996kB [ 289.508090][T15357] 2097051 pages RAM [ 289.511914][T15357] 0 pages HighMem/MovableOnly [ 289.516634][T15357] 80258 pages reserved [ 289.535974][T14900] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 289.546879][ T7019] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.562994][ T7019] bond_slave_0: left promiscuous mode [ 289.569450][ T7019] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.578787][ T7019] bond_slave_1: left promiscuous mode [ 289.584440][ T7019] $Hÿ (unregistering): Released all slaves [ 289.601575][ T7019] bond1 (unregistering): Released all slaves [ 289.612352][T15369] loop0: detected capacity change from 0 to 512 [ 289.630600][T15299] team0: Port device team_slave_1 added [ 289.648497][T15369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 289.662481][T15369] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.683254][T15299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.690325][T15299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.716536][T15299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.757967][T15369] 9pnet_fd: Insufficient options for proto=fd [ 289.796119][T12221] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 289.805854][ T7019] tipc: Left network mode [ 289.810816][T15299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.817805][T15299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.843980][T15299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.915266][ T7019] hsr_slave_0: left promiscuous mode [ 289.923629][T15389] loop8: detected capacity change from 0 to 512 [ 289.930134][ T7019] hsr_slave_1: left promiscuous mode [ 289.932571][T15389] EXT4-fs: Ignoring removed nobh option [ 289.943946][ T7019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.954730][T15389] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #16: comm syz.8.3979: corrupted inode contents [ 289.976004][ T7019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.001892][T15389] EXT4-fs (loop8): Remounting filesystem read-only [ 290.028517][T15389] EXT4-fs (loop8): 1 truncate cleaned up [ 290.040365][ T7019] team0 (unregistering): Port device team_slave_1 removed [ 290.048594][ T6971] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 290.059269][ T6971] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 290.075126][T15389] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.089376][ T7019] team0 (unregistering): Port device team_slave_0 removed [ 290.102060][T15389] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.118211][ T6971] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 290.153359][T15389] __nla_validate_parse: 7 callbacks suppressed [ 290.153377][T15389] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3979'. [ 290.206328][T15399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.214883][T15399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.303404][T15299] hsr_slave_0: entered promiscuous mode [ 290.325535][T15299] hsr_slave_1: entered promiscuous mode [ 290.343250][T15299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.360891][T15299] Cannot create hsr debugfs directory [ 290.374153][T15403] loop0: detected capacity change from 0 to 1024 [ 290.383052][T15403] ext4: Unknown parameter 'nouser_xattr' [ 290.754975][T15299] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 290.807823][T15299] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 290.818225][T15299] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 290.828342][T15299] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 290.894121][T14900] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.901570][T15299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.927790][T15299] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.938617][ T6982] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.945792][ T6982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.984800][ T6982] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.992036][ T6982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.033947][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 291.033980][ T29] audit: type=1400 audit(1745690492.027:9301): avc: denied { create } for pid=15408 comm="syz.6.3985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 291.062520][T15410] netlink: 'syz.6.3985': attribute type 32 has an invalid length. [ 291.099143][ T29] audit: type=1400 audit(1745690492.057:9302): avc: denied { connect } for pid=15408 comm="syz.6.3985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 291.119286][ T29] audit: type=1400 audit(1745690492.057:9303): avc: denied { write } for pid=15408 comm="syz.6.3985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 291.139573][ T29] audit: type=1400 audit(1745690492.057:9304): avc: denied { nlmsg_write } for pid=15408 comm="syz.6.3985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 291.160400][ T29] audit: type=1400 audit(1745690492.077:9305): avc: denied { tracepoint } for pid=15408 comm="syz.6.3985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 291.227380][T15417] loop8: detected capacity change from 0 to 128 [ 291.239766][T15299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.256250][T15417] FAT-fs (loop8): bogus number of reserved sectors [ 291.262877][T15417] FAT-fs (loop8): Can't find a valid FAT filesystem [ 291.303030][T15422] netlink: 'syz.6.3988': attribute type 13 has an invalid length. [ 291.360816][T15417] SELinux: ebitmap: truncated map [ 291.373459][T15417] SELinux: failed to load policy [ 291.402317][T15426] loop6: detected capacity change from 0 to 512 [ 291.417003][T15426] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 291.467677][T15426] EXT4-fs (loop6): 1 truncate cleaned up [ 291.487810][ T29] audit: type=1400 audit(1745690492.487:9306): avc: denied { create } for pid=15435 comm="syz.0.3990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 291.507715][ T29] audit: type=1400 audit(1745690492.487:9307): avc: denied { write } for pid=15435 comm="syz.0.3990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 291.527928][T15426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.534861][ T29] audit: type=1400 audit(1745690492.487:9308): avc: denied { create } for pid=15435 comm="syz.0.3990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 291.541157][T15437] loop0: detected capacity change from 0 to 512 [ 291.560221][ T29] audit: type=1400 audit(1745690492.487:9309): avc: denied { accept } for pid=15435 comm="syz.0.3990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 291.574655][T15440] loop8: detected capacity change from 0 to 512 [ 291.600778][ T29] audit: type=1400 audit(1745690492.597:9310): avc: denied { remove_name } for pid=15424 comm="syz.6.3989" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 291.615433][T15440] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 291.658291][T15437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.671973][T15299] veth0_vlan: entered promiscuous mode [ 291.683721][T15440] EXT4-fs (loop8): 1 truncate cleaned up [ 291.692911][T15299] veth1_vlan: entered promiscuous mode [ 291.706746][T15299] veth0_macvtap: entered promiscuous mode [ 291.706759][T15437] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.714382][T15299] veth1_macvtap: entered promiscuous mode [ 291.727797][T13694] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.730330][T15440] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.770510][T15437] EXT4-fs (loop0): shut down requested (2) [ 291.787379][T15299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.797969][T15299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.814901][T15299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.827931][T15299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.832753][T15437] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.838561][T15299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.866416][T15299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.875409][T14900] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.893411][T15299] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.902216][T15299] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.911088][T15299] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.919965][T15299] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.011032][T15464] netlink: 'syz.0.3998': attribute type 13 has an invalid length. [ 292.047468][T15466] loop8: detected capacity change from 0 to 512 [ 292.089632][T15466] EXT4-fs: Ignoring removed nobh option [ 292.149157][T15466] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #16: comm syz.8.3999: corrupted inode contents [ 292.235159][T15466] EXT4-fs (loop8): Remounting filesystem read-only [ 292.244914][T15466] EXT4-fs (loop8): 1 truncate cleaned up [ 292.255734][ T7019] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 292.266327][ T7019] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 292.279696][T15466] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.292854][T15466] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.307961][ T7019] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 292.333904][T15481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4004'. [ 292.381908][T15466] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3999'. [ 292.403261][T15466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.419367][T15466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.606553][T15493] loop7: detected capacity change from 0 to 512 [ 292.614845][T15493] EXT4-fs (loop7): orphan cleanup on readonly fs [ 292.621574][T15493] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.4007: bad orphan inode 13 [ 292.632097][T15493] ext4_test_bit(bit=12, block=18) = 1 [ 292.637699][T15493] is_bad_inode(inode)=0 [ 292.641923][T15493] NEXT_ORPHAN(inode)=2130706432 [ 292.646848][T15493] max_ino=32 [ 292.650096][T15493] i_nlink=1 [ 292.653804][T15493] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 292.773287][T15493] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4007'. [ 292.849851][T13873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.900975][T15502] netlink: 'syz.7.4010': attribute type 13 has an invalid length. [ 292.941730][T14900] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.076433][T15515] loop8: detected capacity change from 0 to 512 [ 293.083479][T15515] EXT4-fs: inline encryption not supported [ 293.105933][T15515] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.114624][T15515] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 293.123740][T15515] EXT4-fs (loop8): blocks per group (39) and clusters per group (32768) inconsistent [ 293.274733][T15519] loop0: detected capacity change from 0 to 512 [ 293.341512][T15522] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4018'. [ 293.351226][T15519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.442818][T15519] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.454040][T15526] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4019'. [ 293.472657][T15519] EXT4-fs (loop0): shut down requested (2) [ 293.541436][T15519] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.142558][T15515] loop8: detected capacity change from 0 to 8192 [ 294.410165][T15555] loop7: detected capacity change from 0 to 512 [ 294.424992][T15555] EXT4-fs (loop7): orphan cleanup on readonly fs [ 294.433063][T15555] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.4031: bad orphan inode 13 [ 294.444026][T15555] ext4_test_bit(bit=12, block=18) = 1 [ 294.449471][T15555] is_bad_inode(inode)=0 [ 294.453652][T15555] NEXT_ORPHAN(inode)=2130706432 [ 294.458557][T15555] max_ino=32 [ 294.461770][T15555] i_nlink=1 [ 294.470945][T15553] capability: warning: `syz.9.4030' uses 32-bit capabilities (legacy support in use) [ 294.482385][T15555] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 294.795758][T15559] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4031'. [ 294.847388][T15563] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 294.943969][T15574] loop8: detected capacity change from 0 to 512 [ 294.955754][T13873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.970362][T15574] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.983430][T15570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4035'. [ 294.996221][T15574] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.019303][T15574] EXT4-fs (loop8): shut down requested (2) [ 295.060982][T15574] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.135232][T15597] loop9: detected capacity change from 0 to 512 [ 295.158993][T15597] EXT4-fs: Ignoring removed nobh option [ 295.195706][T15597] EXT4-fs (loop9): failed to initialize system zone (-117) [ 295.209182][T15597] EXT4-fs (loop9): mount failed [ 295.230499][T15597] loop9: detected capacity change from 0 to 512 [ 295.264878][T15609] loop8: detected capacity change from 0 to 512 [ 295.273799][T15597] ext3: Unknown parameter 'measure' [ 295.316585][T15609] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4048: bg 0: block 248: padding at end of block bitmap is not set [ 295.341941][T15609] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.4048: Failed to acquire dquot type 1 [ 295.355367][T15609] EXT4-fs (loop8): 1 truncate cleaned up [ 295.362065][T15609] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.377271][T15609] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.393116][T15629] loop9: detected capacity change from 0 to 1024 [ 295.403392][T15629] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.410212][T15629] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.434180][T15631] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 295.434273][T15633] loop6: detected capacity change from 0 to 2048 [ 295.440837][T15631] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 295.454926][T15631] vhci_hcd vhci_hcd.0: Device attached [ 295.472724][T15629] EXT4-fs: Mount option(s) incompatible with ext2 [ 295.479151][T15638] loop7: detected capacity change from 0 to 1024 [ 295.487701][T15638] EXT4-fs: Ignoring removed orlov option [ 295.493457][T15638] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.502795][T15634] vhci_hcd: connection closed [ 295.503171][ T6982] vhci_hcd: stop threads [ 295.512411][ T6982] vhci_hcd: release socket [ 295.516969][ T6982] vhci_hcd: disconnect device [ 295.557567][T14900] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.559431][T15638] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.580124][ T7019] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:64: Failed to release dquot type 1 [ 295.607906][T15638] vhci_hcd: invalid port number 236 [ 295.608689][T15649] loop8: detected capacity change from 0 to 128 [ 295.625295][T15649] FAT-fs (loop8): bogus number of reserved sectors [ 295.631991][T15649] FAT-fs (loop8): Can't find a valid FAT filesystem [ 295.651625][T13873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.747497][T15653] loop9: detected capacity change from 0 to 512 [ 295.754568][T15653] EXT4-fs: inline encryption not supported [ 295.763494][T15653] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 295.772214][T15653] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 295.781582][T15653] EXT4-fs (loop9): blocks per group (39) and clusters per group (32768) inconsistent [ 295.831525][T15649] SELinux: ebitmap: truncated map [ 295.837897][T15649] SELinux: failed to load policy [ 295.978801][T15656] loop7: detected capacity change from 0 to 512 [ 296.042268][T15656] EXT4-fs: Ignoring removed oldalloc option [ 296.050319][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 296.050334][ T29] audit: type=1400 audit(1745690497.047:9419): avc: denied { accept } for pid=15657 comm="syz.8.4066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 296.130639][T15656] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.4065: Parent and EA inode have the same ino 15 [ 296.173267][ T29] audit: type=1400 audit(1745690497.077:9420): avc: denied { getopt } for pid=15657 comm="syz.8.4066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 296.193015][ T29] audit: type=1400 audit(1745690497.077:9421): avc: denied { bind } for pid=15657 comm="syz.8.4066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 296.212593][ T29] audit: type=1326 audit(1745690497.147:9422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15661 comm="syz.0.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bff1e969 code=0x7ffc0000 [ 296.236251][ T29] audit: type=1326 audit(1745690497.147:9423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15661 comm="syz.0.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bff1e969 code=0x7ffc0000 [ 296.259816][ T29] audit: type=1326 audit(1745690497.147:9424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15661 comm="syz.0.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f99bff1e969 code=0x7ffc0000 [ 296.283508][ T29] audit: type=1326 audit(1745690497.147:9425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15661 comm="syz.0.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bff1e969 code=0x7ffc0000 [ 296.350716][T15656] EXT4-fs (loop7): Remounting filesystem read-only [ 296.357437][T15656] EXT4-fs warning (device loop7): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 296.385298][T15656] EXT4-fs (loop7): 1 orphan inode deleted [ 296.392212][T15656] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.471922][T15656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.622979][T15674] loop6: detected capacity change from 0 to 512 [ 296.811315][T15653] loop9: detected capacity change from 0 to 8192 [ 296.826222][T15675] loop0: detected capacity change from 0 to 512 [ 296.836190][T15675] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 296.851820][T15656] SELinux: policydb string does not match my string SE Linux [ 296.911429][T15656] SELinux: failed to load policy [ 297.175450][T15674] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.201600][ T29] audit: type=1400 audit(1745690497.907:9426): avc: denied { unmount } for pid=14900 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 297.223834][T15675] EXT4-fs (loop0): 1 truncate cleaned up [ 297.230069][T15675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.258397][T15681] FAULT_INJECTION: forcing a failure. [ 297.258397][T15681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.271808][T15681] CPU: 0 UID: 0 PID: 15681 Comm: syz.8.4073 Tainted: G W 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 297.271851][T15681] Tainted: [W]=WARN [ 297.271860][T15681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 297.271877][T15681] Call Trace: [ 297.271920][T15681] [ 297.271927][T15681] __dump_stack+0x1d/0x30 [ 297.272018][T15681] dump_stack_lvl+0xe8/0x140 [ 297.272037][T15681] dump_stack+0x15/0x1b [ 297.272056][T15681] should_fail_ex+0x265/0x280 [ 297.272089][T15681] should_fail+0xb/0x20 [ 297.272116][T15681] should_fail_usercopy+0x1a/0x20 [ 297.272139][T15681] _copy_to_user+0x20/0xa0 [ 297.272166][T15681] simple_read_from_buffer+0xb5/0x130 [ 297.272278][T15681] proc_fail_nth_read+0x100/0x140 [ 297.272311][T15681] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.272338][T15681] vfs_read+0x19d/0x6f0 [ 297.272370][T15681] ? __rcu_read_unlock+0x4f/0x70 [ 297.272452][T15681] ? __fget_files+0x184/0x1c0 [ 297.272490][T15681] ksys_read+0xda/0x1a0 [ 297.272593][T15681] __x64_sys_read+0x40/0x50 [ 297.272664][T15681] x64_sys_call+0x2d77/0x2fb0 [ 297.272686][T15681] do_syscall_64+0xd0/0x1a0 [ 297.272709][T15681] ? clear_bhb_loop+0x25/0x80 [ 297.272736][T15681] ? clear_bhb_loop+0x25/0x80 [ 297.272760][T15681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.272787][T15681] RIP: 0033:0x7fcdb850d37c [ 297.272807][T15681] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 297.272862][T15681] RSP: 002b:00007fcdb6b77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 297.272886][T15681] RAX: ffffffffffffffda RBX: 00007fcdb8735fa0 RCX: 00007fcdb850d37c [ 297.272901][T15681] RDX: 000000000000000f RSI: 00007fcdb6b770a0 RDI: 0000000000000017 [ 297.272917][T15681] RBP: 00007fcdb6b77090 R08: 0000000000000000 R09: 0000000000000000 [ 297.272932][T15681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.273067][T15681] R13: 0000000000000000 R14: 00007fcdb8735fa0 R15: 00007ffec97f27e8 [ 297.273091][T15681] [ 297.479997][T15674] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.578262][T13694] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.657959][T12221] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.723274][ T29] audit: type=1326 audit(1745690498.717:9427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15684 comm="syz.7.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9848e969 code=0x7ffc0000 [ 297.777766][ T29] audit: type=1326 audit(1745690498.747:9428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15684 comm="syz.7.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a9848e969 code=0x7ffc0000 [ 297.920247][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4074'. [ 297.975110][T15701] loop9: detected capacity change from 0 to 512 [ 298.007245][T15701] EXT4-fs (loop9): orphan cleanup on readonly fs [ 298.028506][T15701] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.4082: bad orphan inode 13 [ 298.049285][T15701] ext4_test_bit(bit=12, block=18) = 1 [ 298.054855][T15701] is_bad_inode(inode)=0 [ 298.059103][T15701] NEXT_ORPHAN(inode)=2130706432 [ 298.064063][T15701] max_ino=32 [ 298.067372][T15701] i_nlink=1 [ 298.072786][T15701] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 298.240337][T15701] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4082'. [ 298.337139][T15299] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.469422][T15718] loop9: detected capacity change from 0 to 2048 [ 298.544866][T15720] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 298.544866][T15720] program syz.7.4089 not setting count and/or reply_len properly [ 298.566442][T15722] loop9: detected capacity change from 0 to 512 [ 298.575348][T15722] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 298.590760][T15722] EXT4-fs (loop9): 1 truncate cleaned up [ 298.597121][T15722] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.611785][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4090'. [ 298.621006][T15722] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 298.643088][T15299] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.810405][T15736] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 298.817066][T15736] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 298.824903][T15736] vhci_hcd vhci_hcd.0: Device attached [ 298.835015][T15735] loop9: detected capacity change from 0 to 512 [ 298.863916][T15742] loop8: detected capacity change from 0 to 512 [ 298.899286][T15735] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.4094: Failed to acquire dquot type 1 [ 298.915196][T15745] SELinux: policydb version 350934605 does not match my version range 15-34 [ 298.932869][T15745] SELinux: failed to load policy [ 298.935972][T15742] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 298.938327][T15735] EXT4-fs (loop9): 1 truncate cleaned up [ 298.953180][T15735] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.989824][T15735] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.003087][T15742] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 299.032168][T15738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.042323][T15742] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.055336][T15738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.067581][T15736] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.4095: Failed to acquire dquot type 0 [ 299.081263][T15739] vhci_hcd: connection closed [ 299.081896][ T6973] vhci_hcd: stop threads [ 299.089960][T15752] loop0: detected capacity change from 0 to 128 [ 299.090895][ T6973] vhci_hcd: release socket [ 299.100740][T15752] FAT-fs (loop0): bogus number of reserved sectors [ 299.101663][ T6973] vhci_hcd: disconnect device [ 299.108191][T15752] FAT-fs (loop0): Can't find a valid FAT filesystem [ 299.114639][T15752] warn_alloc: 2 callbacks suppressed [ 299.114655][T15752] syz.0.4098: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 299.119760][T10316] usb 18-1: enqueue for inactive port 0 [ 299.124885][T15752] ,cpuset=/,mems_allowed=0 [ 299.147553][T15752] CPU: 1 UID: 0 PID: 15752 Comm: syz.0.4098 Tainted: G W 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 299.147644][T15752] Tainted: [W]=WARN [ 299.147651][T15752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 299.147664][T15752] Call Trace: [ 299.147671][T15752] [ 299.147679][T15752] __dump_stack+0x1d/0x30 [ 299.147699][T15752] dump_stack_lvl+0xe8/0x140 [ 299.147725][T15752] dump_stack+0x15/0x1b [ 299.147767][T15752] warn_alloc+0x12b/0x1a0 [ 299.147791][T15752] ? update_curr+0x16e/0x320 [ 299.147855][T15752] ? enqueue_task_fair+0x6c3/0x990 [ 299.147888][T15752] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 299.147916][T15752] ? probe_sched_wakeup+0x85/0xa0 [ 299.147988][T15752] ? ttwu_do_activate+0x1cf/0x210 [ 299.148029][T15752] ? __rcu_read_unlock+0x4f/0x70 [ 299.148055][T15752] ? avc_has_perm_noaudit+0x1b1/0x200 [ 299.148169][T15752] ? should_fail_ex+0x30/0x280 [ 299.148263][T15752] ? xskq_create+0x36/0xe0 [ 299.148290][T15752] ? should_failslab+0x8c/0xb0 [ 299.148382][T15752] vmalloc_user_noprof+0x59/0x70 [ 299.148412][T15752] ? xskq_create+0x80/0xe0 [ 299.148500][T15752] xskq_create+0x80/0xe0 [ 299.148534][T15752] xsk_init_queue+0x95/0xf0 [ 299.148603][T15752] xsk_setsockopt+0x35c/0x510 [ 299.148647][T15752] ? __pfx_xsk_setsockopt+0x10/0x10 [ 299.148742][T15752] __sys_setsockopt+0x181/0x200 [ 299.148783][T15752] ? fpregs_restore_userregs+0xbb/0x190 [ 299.148867][T15752] __x64_sys_setsockopt+0x64/0x80 [ 299.148906][T15752] x64_sys_call+0x2bd5/0x2fb0 [ 299.148931][T15752] do_syscall_64+0xd0/0x1a0 [ 299.148951][T15752] ? clear_bhb_loop+0x25/0x80 [ 299.149037][T15752] ? clear_bhb_loop+0x25/0x80 [ 299.149063][T15752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.149083][T15752] RIP: 0033:0x7f99bff1e969 [ 299.149098][T15752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.149146][T15752] RSP: 002b:00007f99be587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 299.149170][T15752] RAX: ffffffffffffffda RBX: 00007f99c0145fa0 RCX: 00007f99bff1e969 [ 299.149209][T15752] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 299.149221][T15752] RBP: 00007f99bffa0ab1 R08: 0000000000000004 R09: 0000000000000000 [ 299.149241][T15752] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.149256][T15752] R13: 0000000000000000 R14: 00007f99c0145fa0 R15: 00007fff1ae0d078 [ 299.149274][T15752] [ 299.149280][T15752] Mem-Info: [ 299.304203][T15754] SELinux: ebitmap: truncated map [ 299.308639][T15752] active_anon:13199 inactive_anon:1 isolated_anon:0 [ 299.308639][T15752] active_file:21821 inactive_file:2411 isolated_file:0 [ 299.308639][T15752] unevictable:0 dirty:504 writeback:17 [ 299.308639][T15752] slab_reclaimable:3462 slab_unreclaimable:56612 [ 299.308639][T15752] mapped:29233 shmem:6294 pagetables:1354 [ 299.308639][T15752] sec_pagetables:0 bounce:0 [ 299.308639][T15752] kernel_misc_reclaimable:0 [ 299.308639][T15752] free:1827380 free_pcp:12238 free_cma:0 [ 299.337273][T15754] SELinux: failed to load policy [ 299.343282][T15752] Node 0 active_anon:52912kB inactive_anon:4kB active_file:87284kB inactive_file:9644kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116932kB dirty:2016kB writeback:68kB shmem:25176kB writeback_tmp:0kB kernel_stack:4880kB pagetables:5416kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 299.352726][T10316] usb 18-1: enqueue for inactive port 0 [ 299.359731][T15752] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.514719][T15752] lowmem_reserve[]: 0 2884 7863 7863 [ 299.520158][T15752] Node 0 DMA32 free:2949936kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 299.548824][T15752] lowmem_reserve[]: 0 0 4978 4978 [ 299.548863][T15752] Node 0 Normal free:4342252kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:54536kB inactive_anon:4kB active_file:87284kB inactive_file:9644kB unevictable:0kB writepending:2084kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:45668kB local_pcp:44376kB free_cma:0kB [ 299.584108][T15752] lowmem_reserve[]: 0 0 0 0 [ 299.588776][T15752] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 299.601591][T15752] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949936kB [ 299.618080][T15752] Node 0 Normal: 1185*4kB (UME) 2149*8kB (UME) 1914*16kB (UME) 1600*32kB (UME) 1201*64kB (UME) 634*128kB (UME) 309*256kB (UME) 205*512kB (UME) 79*1024kB (UME) 9*2048kB (UME) 927*4096kB (UM) = 4342156kB [ 299.638185][T15752] Node 0 hugepages_total=6 hugepages_free=2 hugepages_surp=2 hugepages_size=2048kB [ 299.647549][T15752] 30516 total pagecache pages [ 299.652230][T15752] 1 pages in swap cache [ 299.656532][T15752] Free swap = 124988kB [ 299.660696][T15752] Total swap = 124996kB [ 299.664957][T15752] 2097051 pages RAM [ 299.668828][T15752] 0 pages HighMem/MovableOnly [ 299.673512][T15752] 80258 pages reserved [ 299.715939][T15759] netlink: 'syz.6.4099': attribute type 13 has an invalid length. [ 299.745478][T15299] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.777949][T15763] FAULT_INJECTION: forcing a failure. [ 299.777949][T15763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.791232][T15763] CPU: 1 UID: 0 PID: 15763 Comm: syz.6.4102 Tainted: G W 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 299.791268][T15763] Tainted: [W]=WARN [ 299.791274][T15763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 299.791288][T15763] Call Trace: [ 299.791295][T15763] [ 299.791304][T15763] __dump_stack+0x1d/0x30 [ 299.791364][T15763] dump_stack_lvl+0xe8/0x140 [ 299.791384][T15763] dump_stack+0x15/0x1b [ 299.791492][T15763] should_fail_ex+0x265/0x280 [ 299.791523][T15763] should_fail+0xb/0x20 [ 299.791626][T15763] should_fail_usercopy+0x1a/0x20 [ 299.791649][T15763] _copy_from_user+0x1c/0xb0 [ 299.791672][T15763] ___bpf_copy_key+0xa5/0x110 [ 299.791765][T15763] map_update_elem+0x165/0x520 [ 299.791797][T15763] __sys_bpf+0x5d7/0x790 [ 299.791838][T15763] __x64_sys_bpf+0x41/0x50 [ 299.791907][T15763] x64_sys_call+0x2478/0x2fb0 [ 299.791934][T15763] do_syscall_64+0xd0/0x1a0 [ 299.791991][T15763] ? clear_bhb_loop+0x25/0x80 [ 299.792022][T15763] ? clear_bhb_loop+0x25/0x80 [ 299.792069][T15763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.792089][T15763] RIP: 0033:0x7fee773ae969 [ 299.792104][T15763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.792155][T15763] RSP: 002b:00007fee75a17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 299.792176][T15763] RAX: ffffffffffffffda RBX: 00007fee775d5fa0 RCX: 00007fee773ae969 [ 299.792192][T15763] RDX: 0000000000000020 RSI: 0000200000000a80 RDI: 0000000000000002 [ 299.792208][T15763] RBP: 00007fee75a17090 R08: 0000000000000000 R09: 0000000000000000 [ 299.792223][T15763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.792239][T15763] R13: 0000000000000000 R14: 00007fee775d5fa0 R15: 00007fff36ad1e48 [ 299.792259][T15763] [ 299.999588][T15772] FAULT_INJECTION: forcing a failure. [ 299.999588][T15772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.012783][T15772] CPU: 0 UID: 0 PID: 15772 Comm: syz.9.4101 Tainted: G W 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 300.012818][T15772] Tainted: [W]=WARN [ 300.012886][T15772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 300.012902][T15772] Call Trace: [ 300.012909][T15772] [ 300.012916][T15772] __dump_stack+0x1d/0x30 [ 300.012950][T15772] dump_stack_lvl+0xe8/0x140 [ 300.012973][T15772] dump_stack+0x15/0x1b [ 300.012989][T15772] should_fail_ex+0x265/0x280 [ 300.013131][T15772] should_fail+0xb/0x20 [ 300.013164][T15772] should_fail_usercopy+0x1a/0x20 [ 300.013181][T15772] copy_page_from_iter_atomic+0x21b/0xff0 [ 300.013205][T15772] ? shmem_write_begin+0xa8/0x190 [ 300.013229][T15772] ? shmem_write_begin+0xe1/0x190 [ 300.013321][T15772] generic_perform_write+0x2c2/0x490 [ 300.013371][T15772] shmem_file_write_iter+0xc5/0xf0 [ 300.013411][T15772] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 300.013458][T15772] vfs_write+0x49d/0x8d0 [ 300.013574][T15772] ksys_write+0xda/0x1a0 [ 300.013601][T15772] __x64_sys_write+0x40/0x50 [ 300.013627][T15772] x64_sys_call+0x2cdd/0x2fb0 [ 300.013651][T15772] do_syscall_64+0xd0/0x1a0 [ 300.013677][T15772] ? clear_bhb_loop+0x25/0x80 [ 300.013716][T15772] ? clear_bhb_loop+0x25/0x80 [ 300.013770][T15772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.013854][T15772] RIP: 0033:0x7f129177d41f [ 300.013873][T15772] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 300.013891][T15772] RSP: 002b:00007f128fde6d40 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 300.013911][T15772] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f129177d41f [ 300.013926][T15772] RDX: 0000000000100000 RSI: 00007f12879c7000 RDI: 0000000000000004 [ 300.013946][T15772] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000005ba [ 300.013962][T15772] R10: 00002000000005c2 R11: 0000000000000293 R12: 0000000000000004 [ 300.013977][T15772] R13: 00007f128fde6dec R14: 00007f128fde6df0 R15: 00007f12879c7000 [ 300.013997][T15772] [ 300.223747][T15772] loop9: detected capacity change from 0 to 2048 [ 300.276216][T15772] Alternate GPT is invalid, using primary GPT. [ 300.282602][T15772] loop9: p1 p2 p3 [ 300.300060][T15776] loop6: detected capacity change from 0 to 512 [ 300.307534][T15776] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 300.318990][ T3006] Alternate GPT is invalid, using primary GPT. [ 300.325439][ T3006] loop9: p1 p2 p3 [ 300.340280][T14900] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 300.358791][T15776] EXT4-fs (loop6): 1 truncate cleaned up [ 300.377902][T15780] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4106'. [ 300.404828][T15776] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.487943][T15776] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4105'. [ 300.497337][T15776] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 300.516650][T15782] $Hÿ: renamed from bond0 (while UP) [ 300.530840][ T5488] udevd[5488]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 300.547009][T13379] udevd[13379]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 300.547604][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 300.571284][T15782] $Hÿ: entered promiscuous mode [ 300.576393][T15782] bond_slave_0: entered promiscuous mode [ 300.582231][T15782] bond_slave_1: entered promiscuous mode [ 300.603772][T13694] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.646091][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 300.653510][T13379] udevd[13379]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 300.656297][T10316] usb usb18-port1: attempt power cycle [ 300.675736][ T5488] udevd[5488]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 300.716628][T15796] openvswitch: netlink: Message has 6 unknown bytes. [ 300.724391][T15796] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 300.732401][T15796] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4112'. [ 300.841943][T15804] loop0: detected capacity change from 0 to 512 [ 300.852451][T15804] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 300.879153][T15804] EXT4-fs (loop0): 1 truncate cleaned up [ 300.905648][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4118'. [ 300.968623][T15819] loop0: detected capacity change from 0 to 512 [ 301.005442][T15819] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 301.055364][T15819] EXT4-fs (loop0): 1 truncate cleaned up [ 301.064681][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4119'. [ 301.074161][T15819] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 301.193659][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 301.193678][ T29] audit: type=1400 audit(1745690502.187:9494): avc: denied { write } for pid=15829 comm="syz.0.4123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 301.281862][T15837] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4126'. [ 301.330901][ T29] audit: type=1400 audit(1745690502.327:9495): avc: denied { name_connect } for pid=15843 comm="syz.7.4129" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 301.351347][ T29] audit: type=1400 audit(1745690502.337:9496): avc: denied { setopt } for pid=15843 comm="syz.7.4129" lport=58407 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 301.380239][ T29] audit: type=1400 audit(1745690502.377:9497): avc: denied { listen } for pid=15843 comm="syz.7.4129" lport=58407 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 301.404005][ T29] audit: type=1400 audit(1745690502.377:9498): avc: denied { accept } for pid=15843 comm="syz.7.4129" lport=58407 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 301.434896][ T29] audit: type=1326 audit(1745690502.427:9499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15846 comm="syz.7.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9848e969 code=0x7ffc0000 [ 301.458997][ T29] audit: type=1326 audit(1745690502.427:9500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15846 comm="syz.7.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9848e969 code=0x7ffc0000 [ 301.482637][ T29] audit: type=1326 audit(1745690502.427:9501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15846 comm="syz.7.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f9a9848e969 code=0x7ffc0000 [ 301.506197][ T29] audit: type=1326 audit(1745690502.427:9502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15846 comm="syz.7.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9848e969 code=0x7ffc0000 [ 301.529743][ T29] audit: type=1326 audit(1745690502.427:9503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15846 comm="syz.7.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9848e969 code=0x7ffc0000 [ 301.556318][T15849] loop0: detected capacity change from 0 to 512 [ 301.564770][T15849] EXT4-fs: Ignoring removed nobh option [ 301.600098][T15849] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.4131: corrupted inode contents [ 301.612627][T15849] EXT4-fs (loop0): Remounting filesystem read-only [ 301.622838][T15849] EXT4-fs (loop0): 1 truncate cleaned up [ 301.629138][T15849] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.645821][ T6940] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 301.656514][ T6940] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 301.656675][T15857] loop7: detected capacity change from 0 to 2048 [ 301.674194][ T6940] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 301.703271][T15849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4131'. [ 301.708987][T15861] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 301.713547][T15849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.719735][T15861] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 301.729643][T15849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.744199][ T5488] Alternate GPT is invalid, using primary GPT. [ 301.750590][ T5488] loop7: p1 p2 p3 [ 301.760626][T15857] Alternate GPT is invalid, using primary GPT. [ 301.767017][T15857] loop7: p1 p2 p3 [ 301.819438][T15865] loop6: detected capacity change from 0 to 256 [ 301.838711][T15865] FAT-fs (loop6): codepage cp865 not found [ 301.842984][ T5488] udevd[5488]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 301.858547][T13379] udevd[13379]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 301.861095][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 301.916489][T15870] loop7: detected capacity change from 0 to 512 [ 301.947056][T15870] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #16: comm syz.7.4139: corrupted inode contents [ 301.960418][T15870] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #16: comm syz.7.4139: mark_inode_dirty error [ 301.974033][T15870] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #16: comm syz.7.4139: corrupted inode contents [ 301.986723][T15870] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.4139: mark_inode_dirty error [ 301.999018][T15870] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #16: comm syz.7.4139: corrupted inode contents [ 302.011561][T15870] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 302.023101][T15870] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #16: comm syz.7.4139: corrupted inode contents [ 302.035450][T15870] EXT4-fs error (device loop7): ext4_truncate:4255: inode #16: comm syz.7.4139: mark_inode_dirty error [ 302.036776][T15870] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 302.037087][T15870] EXT4-fs (loop7): 1 truncate cleaned up [ 302.037536][T15870] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.038058][ T6940] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:16: Failed to release dquot type 1 [ 302.245280][T15900] loop8: detected capacity change from 0 to 512 [ 302.252338][T15900] EXT4-fs: inline encryption not supported [ 302.259996][T15900] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 302.268666][T15900] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 302.277756][T15900] EXT4-fs (loop8): blocks per group (39) and clusters per group (32768) inconsistent [ 302.526085][T10316] usb usb18-port1: unable to enumerate USB device [ 303.277491][T15900] loop8: detected capacity change from 0 to 8192 [ 303.347380][T15919] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 303.591623][T15932] batadv1: entered promiscuous mode [ 303.754443][T15938] __nla_validate_parse: 6 callbacks suppressed [ 303.754513][T15938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4164'. [ 303.814225][T15942] loop7: detected capacity change from 0 to 512 [ 303.842256][T15942] EXT4-fs: Ignoring removed nobh option [ 303.897258][T15942] EXT4-fs (loop7): failed to initialize system zone (-117) [ 303.937125][T15942] EXT4-fs (loop7): mount failed [ 303.998015][T15942] loop7: detected capacity change from 0 to 512 [ 304.004515][T15942] ext3: Unknown parameter 'measure' [ 304.021196][T15956] loop0: detected capacity change from 0 to 512 [ 304.028673][T15956] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 304.064894][T15956] EXT4-fs (loop0): 1 truncate cleaned up [ 304.106961][T15962] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4173'. [ 304.155055][T15972] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4177'. [ 304.164280][T15972] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4177'. [ 304.175847][T15972] FAULT_INJECTION: forcing a failure. [ 304.175847][T15972] name failslab, interval 1, probability 0, space 0, times 0 [ 304.188651][T15972] CPU: 1 UID: 0 PID: 15972 Comm: syz.6.4177 Tainted: G W 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 304.188691][T15972] Tainted: [W]=WARN [ 304.188699][T15972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.188715][T15972] Call Trace: [ 304.188723][T15972] [ 304.188731][T15972] __dump_stack+0x1d/0x30 [ 304.188752][T15972] dump_stack_lvl+0xe8/0x140 [ 304.188771][T15972] dump_stack+0x15/0x1b [ 304.188842][T15972] should_fail_ex+0x265/0x280 [ 304.188873][T15972] ? __hw_addr_add_ex+0x162/0x440 [ 304.188900][T15972] should_failslab+0x8c/0xb0 [ 304.188998][T15972] __kmalloc_cache_noprof+0x4c/0x320 [ 304.189099][T15972] __hw_addr_add_ex+0x162/0x440 [ 304.189216][T15972] dev_addr_init+0xb1/0x120 [ 304.189256][T15972] alloc_netdev_mqs+0x212/0xab0 [ 304.189317][T15972] ? __pfx_bond_setup+0x10/0x10 [ 304.189353][T15972] rtnl_create_link+0x239/0x710 [ 304.189395][T15972] rtnl_newlink_create+0x151/0x630 [ 304.189429][T15972] ? __schedule+0x6a2/0xb20 [ 304.189523][T15972] rtnl_newlink+0xf29/0x12d0 [ 304.189561][T15972] ? xas_load+0x413/0x430 [ 304.189653][T15972] ? cgroup_rstat_updated+0xa3/0x510 [ 304.189690][T15972] ? __rcu_read_unlock+0x4f/0x70 [ 304.189717][T15972] ? __rcu_read_unlock+0x4f/0x70 [ 304.189743][T15972] ? avc_has_perm_noaudit+0x1b1/0x200 [ 304.189829][T15972] ? selinux_capable+0x1f9/0x270 [ 304.189855][T15972] ? security_capable+0x83/0x90 [ 304.189920][T15972] ? ns_capable+0x7d/0xb0 [ 304.189944][T15972] ? __pfx_rtnl_newlink+0x10/0x10 [ 304.190012][T15972] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 304.190104][T15972] ? avc_has_perm_noaudit+0x1b1/0x200 [ 304.190141][T15972] netlink_rcv_skb+0x120/0x220 [ 304.190182][T15972] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 304.190220][T15972] rtnetlink_rcv+0x1c/0x30 [ 304.190239][T15972] netlink_unicast+0x59e/0x670 [ 304.190272][T15972] netlink_sendmsg+0x58b/0x6b0 [ 304.190363][T15972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.190408][T15972] __sock_sendmsg+0x142/0x180 [ 304.190477][T15972] ____sys_sendmsg+0x31e/0x4e0 [ 304.190523][T15972] ___sys_sendmsg+0x17b/0x1d0 [ 304.190561][T15972] __x64_sys_sendmsg+0xd4/0x160 [ 304.190596][T15972] x64_sys_call+0x2999/0x2fb0 [ 304.190624][T15972] do_syscall_64+0xd0/0x1a0 [ 304.190651][T15972] ? clear_bhb_loop+0x25/0x80 [ 304.190691][T15972] ? clear_bhb_loop+0x25/0x80 [ 304.190714][T15972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.190742][T15972] RIP: 0033:0x7fee773ae969 [ 304.190761][T15972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.190785][T15972] RSP: 002b:00007fee75a17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.190879][T15972] RAX: ffffffffffffffda RBX: 00007fee775d5fa0 RCX: 00007fee773ae969 [ 304.190895][T15972] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 304.190910][T15972] RBP: 00007fee75a17090 R08: 0000000000000000 R09: 0000000000000000 [ 304.190925][T15972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.190970][T15972] R13: 0000000000000000 R14: 00007fee775d5fa0 R15: 00007fff36ad1e48 [ 304.191044][T15972] [ 304.207528][T15975] netlink: 'syz.7.4178': attribute type 1 has an invalid length. [ 304.268267][T15981] loop0: detected capacity change from 0 to 512 [ 304.272537][T15975] netlink: 'syz.7.4178': attribute type 2 has an invalid length. [ 304.288475][T15983] loop6: detected capacity change from 0 to 512 [ 304.292839][T15981] EXT4-fs: inline encryption not supported [ 304.297918][T15983] EXT4-fs: Ignoring removed mblk_io_submit option [ 304.306480][T15981] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 304.315199][T15983] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 304.316270][T15981] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 304.316298][T15981] EXT4-fs (loop0): blocks per group (39) and clusters per group (32768) inconsistent [ 304.322756][T15983] EXT4-fs (loop6): 1 truncate cleaned up [ 304.655064][T15977] loop0: detected capacity change from 0 to 8192 [ 304.684709][T15988] loop0: detected capacity change from 0 to 512 [ 304.691651][T15988] EXT4-fs: Ignoring removed nobh option [ 304.709065][T15988] EXT4-fs (loop0): failed to initialize system zone (-117) [ 304.717243][T15988] EXT4-fs (loop0): mount failed [ 304.727981][T15988] loop0: detected capacity change from 0 to 512 [ 304.735690][T15988] ext3: Unknown parameter 'measure' [ 304.908742][T16007] netlink: 'syz.7.4192': attribute type 13 has an invalid length. [ 305.017286][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4199'. [ 305.046585][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4199'. [ 305.201245][T16050] netlink: 'syz.0.4206': attribute type 13 has an invalid length. [ 305.248069][T16055] FAULT_INJECTION: forcing a failure. [ 305.248069][T16055] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 305.261477][T16055] CPU: 0 UID: 0 PID: 16055 Comm: syz.9.4209 Tainted: G W 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 305.261535][T16055] Tainted: [W]=WARN [ 305.261544][T16055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 305.261557][T16055] Call Trace: [ 305.261564][T16055] [ 305.261573][T16055] __dump_stack+0x1d/0x30 [ 305.261594][T16055] dump_stack_lvl+0xe8/0x140 [ 305.261722][T16055] dump_stack+0x15/0x1b [ 305.261744][T16055] should_fail_ex+0x265/0x280 [ 305.261784][T16055] should_fail_alloc_page+0xf2/0x100 [ 305.261833][T16055] __alloc_frozen_pages_noprof+0xff/0x360 [ 305.261862][T16055] alloc_pages_mpol+0xb3/0x250 [ 305.261884][T16055] folio_alloc_noprof+0x97/0x150 [ 305.261908][T16055] filemap_alloc_folio_noprof+0x66/0x210 [ 305.261967][T16055] filemap_get_pages+0x4a7/0x1160 [ 305.262011][T16055] ? _raw_spin_unlock+0x26/0x50 [ 305.262062][T16055] filemap_splice_read+0x333/0x6b0 [ 305.262115][T16055] ? __pfx_filemap_splice_read+0x10/0x10 [ 305.262217][T16055] splice_direct_to_actor+0x26c/0x680 [ 305.262241][T16055] ? __pfx_direct_splice_actor+0x10/0x10 [ 305.262287][T16055] do_splice_direct+0xda/0x150 [ 305.262314][T16055] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 305.262350][T16055] do_sendfile+0x380/0x640 [ 305.262459][T16055] __x64_sys_sendfile64+0x105/0x150 [ 305.262500][T16055] x64_sys_call+0xb39/0x2fb0 [ 305.262570][T16055] do_syscall_64+0xd0/0x1a0 [ 305.262594][T16055] ? clear_bhb_loop+0x25/0x80 [ 305.262633][T16055] ? clear_bhb_loop+0x25/0x80 [ 305.262661][T16055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.262683][T16055] RIP: 0033:0x7f129177e969 [ 305.262703][T16055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.262772][T16055] RSP: 002b:00007f128fde7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 305.262790][T16055] RAX: ffffffffffffffda RBX: 00007f12919a5fa0 RCX: 00007f129177e969 [ 305.262802][T16055] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 305.262814][T16055] RBP: 00007f128fde7090 R08: 0000000000000000 R09: 0000000000000000 [ 305.262826][T16055] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 305.262841][T16055] R13: 0000000000000000 R14: 00007f12919a5fa0 R15: 00007ffc879f4408 [ 305.262935][T16055] [ 305.614567][T16053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4208'. [ 305.703236][T16063] loop0: detected capacity change from 0 to 128 [ 305.711463][T16058] loop6: detected capacity change from 0 to 1024 [ 305.719965][T16063] FAT-fs (loop0): bogus number of reserved sectors [ 305.726622][T16063] FAT-fs (loop0): Can't find a valid FAT filesystem [ 305.750853][T16058] EXT4-fs: Ignoring removed oldalloc option [ 305.806186][T16063] SELinux: policydb magic number 0x40000000 does not match expected magic number 0xf97cff8c [ 305.817666][T16058] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.822144][T16063] SELinux: failed to load policy [ 305.954939][T10316] hid-generic 0000:0004:0000.0006: unknown main item tag 0x4 [ 305.963666][T10316] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 305.971213][T10316] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 305.978664][T10316] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 305.986137][T10316] hid-generic 0000:0004:0000.0006: unknown main item tag 0x2 [ 305.993538][T10316] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 306.001042][T10316] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 306.008574][T10316] hid-generic 0000:0004:0000.0006: item fetching failed at offset 8/35 [ 306.061728][T16079] loop9: detected capacity change from 0 to 128 [ 306.072469][T16081] loop0: detected capacity change from 0 to 512 [ 306.081812][T10316] hid-generic 0000:0004:0000.0006: probe with driver hid-generic failed with error -22 [ 306.094459][T16079] FAT-fs (loop9): bogus number of reserved sectors [ 306.095404][T16081] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.101088][T16079] FAT-fs (loop9): Can't find a valid FAT filesystem [ 306.136459][T16080] loop8: detected capacity change from 0 to 2048 [ 306.195776][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 306.195815][ T29] audit: type=1326 audit(1745690507.197:9649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16077 comm="syz.8.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcdb850e969 code=0x7ffc0000 [ 306.237995][ T29] audit: type=1326 audit(1745690507.197:9650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16077 comm="syz.8.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb850e969 code=0x7ffc0000 [ 306.261600][ T29] audit: type=1326 audit(1745690507.197:9651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16077 comm="syz.8.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcdb850e969 code=0x7ffc0000 [ 306.285191][ T29] audit: type=1326 audit(1745690507.197:9652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16077 comm="syz.8.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb850e969 code=0x7ffc0000 [ 306.308980][ T29] audit: type=1326 audit(1745690507.197:9653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16077 comm="syz.8.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb850e969 code=0x7ffc0000 [ 306.332861][ T29] audit: type=1326 audit(1745690507.197:9654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16077 comm="syz.8.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcdb850e969 code=0x7ffc0000 [ 306.356493][ T29] audit: type=1326 audit(1745690507.197:9655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16078 comm="syz.0.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bff1e969 code=0x7ffc0000 [ 306.380035][ T29] audit: type=1326 audit(1745690507.197:9656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16078 comm="syz.0.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bff1e969 code=0x7ffc0000 [ 306.393746][T16079] SELinux: policydb magic number 0x40000000 does not match expected magic number 0xf97cff8c [ 306.403556][ T29] audit: type=1326 audit(1745690507.197:9657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16078 comm="syz.0.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99bff1e969 code=0x7ffc0000 [ 306.403596][ T29] audit: type=1400 audit(1745690507.197:9658): avc: denied { ioctl } for pid=16078 comm="syz.0.4216" path="/275/bus/cgroup.controllers" dev="loop0" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 306.462927][T16079] SELinux: failed to load policy [ 306.570502][T16094] loop6: detected capacity change from 0 to 512 [ 306.577342][T16094] EXT4-fs: Ignoring removed nobh option [ 306.596481][T16094] EXT4-fs (loop6): failed to initialize system zone (-117) [ 306.659568][T16094] EXT4-fs (loop6): mount failed [ 306.687530][T16101] loop8: detected capacity change from 0 to 512 [ 306.703352][T16101] EXT4-fs (loop8): orphan cleanup on readonly fs [ 306.710296][T16101] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.4226: bad orphan inode 13 [ 306.729100][T16101] ext4_test_bit(bit=12, block=18) = 1 [ 306.734589][T16101] is_bad_inode(inode)=0 [ 306.738950][T16101] NEXT_ORPHAN(inode)=2130706432 [ 306.743812][T16101] max_ino=32 [ 306.747131][T16101] i_nlink=1 [ 306.767919][T16094] loop6: detected capacity change from 0 to 512 [ 306.774505][T16094] ext3: Unknown parameter 'measure' [ 306.961893][T16109] loop6: detected capacity change from 0 to 512 [ 307.013072][T16109] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 307.026098][T16101] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4226'. [ 307.042239][T16115] loop7: detected capacity change from 0 to 512 [ 307.049062][T16115] EXT4-fs: Ignoring removed nobh option [ 307.062543][T16109] EXT4-fs (loop6): 1 truncate cleaned up [ 307.068570][T16115] EXT4-fs (loop7): failed to initialize system zone (-117) [ 307.075951][T16115] EXT4-fs (loop7): mount failed [ 307.216062][T16123] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4233'. [ 307.217104][T16121] loop7: detected capacity change from 0 to 512 [ 307.293037][T16127] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 307.327065][T16125] 9pnet_fd: Insufficient options for proto=fd [ 307.342398][T16121] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.481637][T16135] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4237'. [ 307.622350][T16154] FAULT_INJECTION: forcing a failure. [ 307.622350][T16154] name failslab, interval 1, probability 0, space 0, times 0 [ 307.635125][T16154] CPU: 0 UID: 0 PID: 16154 Comm: syz.7.4244 Tainted: G W 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 307.635158][T16154] Tainted: [W]=WARN [ 307.635167][T16154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 307.635214][T16154] Call Trace: [ 307.635223][T16154] [ 307.635231][T16154] __dump_stack+0x1d/0x30 [ 307.635254][T16154] dump_stack_lvl+0xe8/0x140 [ 307.635344][T16154] dump_stack+0x15/0x1b [ 307.635365][T16154] should_fail_ex+0x265/0x280 [ 307.635405][T16154] should_failslab+0x8c/0xb0 [ 307.635450][T16154] kmem_cache_alloc_noprof+0x50/0x310 [ 307.635501][T16154] ? xfrm_state_alloc+0x2c/0x190 [ 307.635539][T16154] xfrm_state_alloc+0x2c/0x190 [ 307.635581][T16154] xfrm_state_find+0x2056/0x2e50 [ 307.635682][T16154] ? xas_load+0x413/0x430 [ 307.635701][T16154] ? __rcu_read_unlock+0x4f/0x70 [ 307.635725][T16154] xfrm_resolve_and_create_bundle+0x575/0x1f30 [ 307.635767][T16154] ? memcg_list_lru_alloc+0xc2/0x490 [ 307.635823][T16154] ? xfrm_expand_policies+0x24a/0x2b0 [ 307.635848][T16154] xfrm_lookup_with_ifid+0x1da/0x1360 [ 307.635879][T16154] ? __rcu_read_unlock+0x34/0x70 [ 307.635908][T16154] xfrm_lookup_route+0x3a/0x110 [ 307.635981][T16154] ip_route_output_flow+0xf1/0x130 [ 307.636018][T16154] tcp_v4_connect+0x471/0xab0 [ 307.636122][T16154] tcp_v6_connect+0x7ec/0xbe0 [ 307.636153][T16154] __inet_stream_connect+0x166/0x7e0 [ 307.636188][T16154] ? _raw_spin_unlock_bh+0x36/0x40 [ 307.636238][T16154] ? release_sock+0x116/0x150 [ 307.636271][T16154] ? _raw_spin_unlock_bh+0x36/0x40 [ 307.636303][T16154] ? lock_sock_nested+0x112/0x140 [ 307.636338][T16154] ? selinux_netlbl_socket_connect+0x115/0x130 [ 307.636402][T16154] inet_stream_connect+0x44/0x70 [ 307.636435][T16154] ? __pfx_inet_stream_connect+0x10/0x10 [ 307.636470][T16154] __sys_connect+0x1ef/0x2b0 [ 307.636525][T16154] __x64_sys_connect+0x3f/0x50 [ 307.636560][T16154] x64_sys_call+0x1daa/0x2fb0 [ 307.636611][T16154] do_syscall_64+0xd0/0x1a0 [ 307.636632][T16154] ? clear_bhb_loop+0x25/0x80 [ 307.636654][T16154] ? clear_bhb_loop+0x25/0x80 [ 307.636681][T16154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.636781][T16154] RIP: 0033:0x7f9a9848e969 [ 307.636807][T16154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.636829][T16154] RSP: 002b:00007f9a96af7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 307.636856][T16154] RAX: ffffffffffffffda RBX: 00007f9a986b5fa0 RCX: 00007f9a9848e969 [ 307.636872][T16154] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000005 [ 307.636887][T16154] RBP: 00007f9a96af7090 R08: 0000000000000000 R09: 0000000000000000 [ 307.636903][T16154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.636921][T16154] R13: 0000000000000000 R14: 00007f9a986b5fa0 R15: 00007ffea9d7c6e8 [ 307.636983][T16154] [ 307.922950][T16152] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 307.929672][T16152] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 307.937419][T16152] vhci_hcd vhci_hcd.0: Device attached [ 307.951149][T16152] loop8: detected capacity change from 0 to 512 [ 307.972932][T16152] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 307.991802][T16158] loop0: detected capacity change from 0 to 512 [ 307.992931][T16160] loop7: detected capacity change from 0 to 512 [ 308.005278][T16158] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 308.094282][T16158] EXT4-fs (loop0): 1 truncate cleaned up [ 308.102278][T16152] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.138068][T16152] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.4243: Failed to acquire dquot type 0 [ 308.159391][T16160] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.177206][T16155] vhci_hcd: connection closed [ 308.178538][ T6955] vhci_hcd: stop threads [ 308.187571][ T6955] vhci_hcd: release socket [ 308.192005][ T6955] vhci_hcd: disconnect device [ 308.207390][T16160] EXT4-fs (loop7): shut down requested (2) [ 308.215755][ T7124] usb 18-1: enqueue for inactive port 0 [ 308.227661][T16172] loop0: detected capacity change from 0 to 512 [ 308.262201][T16172] EXT4-fs: Ignoring removed mblk_io_submit option [ 308.279046][T16172] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 308.319170][T16172] EXT4-fs (loop0): 1 truncate cleaned up [ 308.339611][T16184] netlink: 'syz.7.4254': attribute type 13 has an invalid length. [ 308.371679][T16189] bond0: entered promiscuous mode [ 308.376912][T16189] bond0: entered allmulticast mode [ 308.390813][T16189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.419273][T16197] loop9: detected capacity change from 0 to 128 [ 308.425970][T16192] loop7: detected capacity change from 0 to 1024 [ 308.432858][T16197] EXT4-fs: Ignoring removed orlov option [ 308.438533][ T7124] usb 18-1: enqueue for inactive port 0 [ 308.444697][T16192] EXT4-fs: Ignoring removed orlov option [ 308.454374][T16192] EXT4-fs: quotafile must be on filesystem root [ 308.464129][T16197] EXT4-fs: Ignoring removed orlov option [ 308.554038][T16197] ext4: Unknown parameter 'appraise_type' [ 308.560547][T16192] netlink: 'syz.7.4256': attribute type 1 has an invalid length. [ 308.753426][T16205] loop8: detected capacity change from 0 to 512 [ 308.774372][T16205] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 308.794112][T16205] EXT4-fs (loop8): 1 truncate cleaned up [ 308.808633][T16208] loop7: detected capacity change from 0 to 512 [ 308.835420][T16208] EXT4-fs (loop7): orphan cleanup on readonly fs [ 308.844814][T16208] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.4262: bad orphan inode 13 [ 308.856621][T16208] ext4_test_bit(bit=12, block=18) = 1 [ 308.862165][T16208] is_bad_inode(inode)=0 [ 308.866520][T16208] NEXT_ORPHAN(inode)=2130706432 [ 308.871604][T16208] max_ino=32 [ 308.874886][T16208] i_nlink=1 [ 308.916626][T16213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.927537][T16220] netlink: 'syz.0.4266': attribute type 13 has an invalid length. [ 308.930268][T16213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.956703][T16213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.976448][T16213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.025017][T16226] loop9: detected capacity change from 0 to 512 [ 309.033779][T16226] EXT4-fs: Ignoring removed nobh option [ 309.060286][T16226] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #16: comm syz.9.4270: corrupted inode contents [ 309.075212][T16226] EXT4-fs (loop9): Remounting filesystem read-only [ 309.082496][T16226] EXT4-fs (loop9): 1 truncate cleaned up [ 309.089269][T16228] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 309.095812][T16228] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 309.103648][T16228] vhci_hcd vhci_hcd.0: Device attached [ 309.104943][T16226] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.120298][T16228] loop0: detected capacity change from 0 to 512 [ 309.127701][ T7019] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 309.138330][ T7019] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 309.139029][T16228] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 309.157905][T16208] __nla_validate_parse: 6 callbacks suppressed [ 309.157921][T16208] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4262'. [ 309.173431][ T7019] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 309.183054][T16226] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4270'. [ 309.195501][T16228] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.210446][T16228] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.4271: Failed to acquire dquot type 0 [ 309.223954][T16232] vhci_hcd: connection closed [ 309.224237][ T7019] vhci_hcd: stop threads [ 309.233246][ T7019] vhci_hcd: release socket [ 309.237719][ T7019] vhci_hcd: disconnect device [ 309.243258][T16236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.251952][T16236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.363769][ T5488] ================================================================== [ 309.371911][ T5488] BUG: KCSAN: data-race in generic_fillattr / inode_set_ctime_to_ts [ 309.379921][ T5488] [ 309.382339][ T5488] write to 0xffff8881020ed258 of 8 bytes by task 13379 on cpu 0: [ 309.390059][ T5488] inode_set_ctime_to_ts+0x72/0x170 [ 309.395265][ T5488] setattr_copy+0x33f/0x4b0 [ 309.399865][ T5488] shmem_setattr+0x566/0x840 [ 309.404473][ T5488] notify_change+0x806/0x890 [ 309.409071][ T5488] vfs_utimes+0x2fc/0x410 [ 309.413420][ T5488] do_utimes+0x150/0x210 [ 309.417677][ T5488] __x64_sys_utimensat+0xc4/0x170 [ 309.422722][ T5488] x64_sys_call+0x1a2c/0x2fb0 [ 309.427408][ T5488] do_syscall_64+0xd0/0x1a0 [ 309.431957][ T5488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.437909][ T5488] [ 309.440251][ T5488] read to 0xffff8881020ed258 of 8 bytes by task 5488 on cpu 1: [ 309.447812][ T5488] generic_fillattr+0x1c4/0x340 [ 309.452681][ T5488] shmem_getattr+0x181/0x200 [ 309.457295][ T5488] vfs_getattr_nosec+0x143/0x1e0 [ 309.462253][ T5488] vfs_statx+0x11a/0x380 [ 309.466510][ T5488] vfs_fstatat+0xe1/0x160 [ 309.470859][ T5488] __se_sys_newfstatat+0x55/0x260 [ 309.475916][ T5488] __x64_sys_newfstatat+0x55/0x70 [ 309.480964][ T5488] x64_sys_call+0x2c22/0x2fb0 [ 309.485677][ T5488] do_syscall_64+0xd0/0x1a0 [ 309.490187][ T5488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.496112][ T5488] [ 309.498432][ T5488] value changed: 0x00000000680d1f8d -> 0x00000000680d1f8e [ 309.505591][ T5488] [ 309.507928][ T5488] Reported by Kernel Concurrency Sanitizer on: [ 309.514109][ T5488] CPU: 1 UID: 0 PID: 5488 Comm: udevd Tainted: G W 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 309.527762][ T5488] Tainted: [W]=WARN [ 309.531569][ T5488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.541633][ T5488] ================================================================== [ 309.563009][T16243] loop7: detected capacity change from 0 to 512 [ 309.570333][T16243] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 309.575911][ T7124] usb usb18-port1: attempt power cycle [ 309.581997][T16243] EXT4-fs (loop7): 1 truncate cleaned up [ 311.425964][ T7124] usb usb18-port1: unable to enumerate USB device