last executing test programs: 7m26.31305181s ago: executing program 2 (id=1207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r2, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x20, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r2, r2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 7m25.881102397s ago: executing program 2 (id=1210): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080009efff000000100000000000000041e5ebcc54f30dbcf9c9e1d8258e54d96aceba50007d210ff9e5d5788bd927b132a311efbb8c724a9636b8b4893ef9cfbdfff4ebe5b7441b85f2d271ff7bb3fe6d86cf5b894f530d105c11445f99c9a5371a09bfd86a4d873560d2eb8cd523447baaef8363dfb2a0705f00"], 0x24, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010329bd7000100000000200000403000007020000001400110069616376746170300000000000000000080006002503"], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='exofs\x00', 0x88000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b0404000000000018001280080001"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) pipe(&(0x7f0000000040)) io_setup(0x4, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/248, 0xf8}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/228, 0xe4}], 0x1, 0x0) 7m24.877723612s ago: executing program 2 (id=1215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) setgid(0x0) 7m24.877047382s ago: executing program 2 (id=1216): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000400)={[{@grpjquota_path={'grpjquota', 0x3d, './bus'}}, {@usrjquota}, {@i_version}, {@lazytime}, {@auto_da_alloc}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6000}}, {@errors_remount}, {@bh}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x102, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x10}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r2 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x3fec00}], 0x2, 0x1400, 0x0, 0x3) ioctl$TCFLSH(r0, 0x540b, 0x2) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000400)={[{@grpjquota_path={'grpjquota', 0x3d, './bus'}}, {@usrjquota}, {@i_version}, {@lazytime}, {@auto_da_alloc}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6000}}, {@errors_remount}, {@bh}]}, 0x1, 0x775, &(0x7f0000001180)="$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") (async) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) (async) write(r1, &(0x7f0000004200)='t', 0x1) (async) sendfile(r1, r0, 0x0, 0x3ffff) (async) sendfile(r1, r0, 0x0, 0x7ffff000) (async) fallocate(r0, 0x0, 0x0, 0x1001f0) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") (async) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) (async) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) (async) chdir(&(0x7f00000001c0)='./file0\x00') (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x102, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x10}) (async) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") (async) open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) (async) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x3fec00}], 0x2, 0x1400, 0x0, 0x3) (async) ioctl$TCFLSH(r0, 0x540b, 0x2) (async) 7m23.194079707s ago: executing program 2 (id=1224): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000400)=0x13) poll(&(0x7f00000002c0)=[{r6, 0xc000}], 0x1, 0xe7f5) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000040)={0x3d15, 0x0, 0x0, 0x7, 0x0, "0001000000000000649300"}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f0000000280)=0x13) 7m21.184450127s ago: executing program 2 (id=1229): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) msync(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="00000000f60ba1047795275740f2202732f095da40478c11efb26d9707d0e10ee55259f27a1059df33302548ecc3b626114b033501c9d2d6918d16ce2431da9065e6a53f32fdc62dc93b1525832b0d29218c2087e9b360a158a5b7c0ca6e9f506df7d1bdb4", @ANYRES16=r4, @ANYBLOB="01060000000000000000090000001c0004801300010062726f6164636173742d6c696e6b00"], 0x30}}, 0xc000) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x130, r4, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x40, 0x3, "11fcfbc103b359acbe482f0be106886d6135afd9dd927c255ae8897a16a12ab3362a9635137002bdd5ff2515006bf5ad5e3a917bc8c24cdc00677736"}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa9}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000081) sendmmsg$inet6(r1, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000034"], 0x2e8}}], 0x2, 0x0) 7m21.184322227s ago: executing program 32 (id=1229): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) msync(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="00000000f60ba1047795275740f2202732f095da40478c11efb26d9707d0e10ee55259f27a1059df33302548ecc3b626114b033501c9d2d6918d16ce2431da9065e6a53f32fdc62dc93b1525832b0d29218c2087e9b360a158a5b7c0ca6e9f506df7d1bdb4", @ANYRES16=r4, @ANYBLOB="01060000000000000000090000001c0004801300010062726f6164636173742d6c696e6b00"], 0x30}}, 0xc000) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x130, r4, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x40, 0x3, "11fcfbc103b359acbe482f0be106886d6135afd9dd927c255ae8897a16a12ab3362a9635137002bdd5ff2515006bf5ad5e3a917bc8c24cdc00677736"}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa9}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000081) sendmmsg$inet6(r1, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000034"], 0x2e8}}], 0x2, 0x0) 4m46.559622211s ago: executing program 4 (id=2013): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x97ffffff}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) 4m46.497795672s ago: executing program 4 (id=2015): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) keyctl$link(0x8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f00000007c0), 0x0}, 0x20) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x8}, 0x8) syz_io_uring_complete(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000aff9f00000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m45.465962257s ago: executing program 4 (id=2023): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r6, 0x4e, 0x0) write$binfmt_script(r4, &(0x7f0000000800)={'#! ', './file0'}, 0xb) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pivot_root(0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x20) 4m43.852240422s ago: executing program 4 (id=2033): r0 = syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x450, &(0x7f00000069c0)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x2, 0x5567, &(0x7f0000006f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x8000, 0x8000, 0x5c, 0x5, {{0x12, 0x4, 0x3, 0x8, 0x48, 0x65, 0x0, 0x3, 0x2b, 0x0, @broadcast, @multicast2, {[@ssrr={0x89, 0x27, 0x76, [@loopback, @broadcast, @rand_addr=0x64010100, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x48, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x459}]}]}}}}}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRES64=r3, @ANYBLOB="dc1354dd2325b48e11e290a0c76943b04f1ee951c1ce59bc82b263950318602d56422d2d55a72fc24beb71a49749aeff439e8c596b28fc33bb9ec3fbef99effb104f106504cde3739dda612d7f63fa24a012761692c5fc3c54768bff5cd2c5b2c737755b6a34c86a9e758a5a03f830a39e5b8d226322d5d0096cf0d4393a985307bed43895bfaedda9fe9e4f1110d75f79b409fa40b7b222f4e4eb81719ff644cc7551737018a33ab2cc312a24b82cf30fb7ce2e2b947c593a96f0eec05c86c9c40aabdc6b40c63f86b8cb796b3767281de33616c82ad00b380c0bfae7be94d8e1007eda640dc8fcd2fc95e4069ab2ff2405a72fbe9adb83b19f37736a1dc5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) (async) sched_setaffinity(r5, 0xfffffffffffffd0b, &(0x7f00000002c0)=0x8ff) (async, rerun: 64) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000004c0)=@abs, 0x6e) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r10, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x3ff, 0xfffffffffffffffc}) (async, rerun: 64) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r8, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) (async) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') getdents(r11, &(0x7f00000001c0)=""/36, 0x24) 4m42.142171456s ago: executing program 4 (id=2039): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000018000000000000711219000000000095000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000002680)={0x2020}, 0x2020) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x90) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) 4m42.141675136s ago: executing program 4 (id=2040): fremovexattr(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[], 0xfd, 0x1bf, &(0x7f0000000300)="$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") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xffffffff, {0x0, 0x0, 0x8100, 0x0, 0x1159b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}, 0x1, 0x400000000000000}, 0x0) 4m41.95840778s ago: executing program 33 (id=2040): fremovexattr(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[], 0xfd, 0x1bf, &(0x7f0000000300)="$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") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xffffffff, {0x0, 0x0, 0x8100, 0x0, 0x1159b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}, 0x1, 0x400000000000000}, 0x0) 3m20.561528683s ago: executing program 6 (id=2353): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000200), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5d}}}, &(0x7f0000000040)='GPL\x00'}, 0x90) 3m20.484773104s ago: executing program 6 (id=2354): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000400)={0x5, 0x745, 0x3}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000891}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000002000000ffff7f000001", @ANYRES32], 0x5c}}, 0x0) 3m18.922358908s ago: executing program 6 (id=2358): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x4000000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) 3m18.921829597s ago: executing program 6 (id=2359): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400)={[{@bsdgroups}, {@inlinecrypt}, {@nodioread_nolock}, {@test_dummy_encryption}, {@oldalloc}, {@quota}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbc9, &(0x7f0000001740)="$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") syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") truncate(0x0, 0xc88) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpid() unshare(0x20000400) unshare(0x42020880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) inotify_init() r1 = syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x40, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000ec0)='./file0/../file0\x00', &(0x7f0000000280), 0x53c01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000f00)=ANY=[@ANYRES8=r0], &(0x7f0000000e00)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000022c0)='./bus\x00', 0x810094, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESHEX], 0x6, 0x2de, &(0x7f0000000480)="$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") madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032cbd7000ffdbdf25160000001c0001801500010069623a765268d9885adadc0eacc9e26574"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4004010) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x200000, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) io_submit(0x0, 0x9, &(0x7f0000002880)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f00000003c0)="2954850f019a7df128423220f4c52b165774d86425ba3c9c7005f4ba3309ef6ef3233faa105266efdd66366d84d3a795", 0x30, 0x10, 0x0, 0x3}, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x8, 0xd, 0xffffffffffffffff, &(0x7f0000002280), 0x0, 0x1, 0x0, 0x1}, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffffffffffff, &(0x7f0000002300)="096c407e54655d6eadeb59209962701b1f77cd51a9be841bc508ed944e3bac1f62cbac077925fd63062dc9f54f6c27f8b5b1f490bfcc1a0abfffe9049c", 0x3d, 0x80000000, 0x0, 0x2}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000002440)="4c9cd987b1230c676bc4a171efeabd9d9eeb87d561d10495d1b58f45e504f5e894b671f682dce2a34582e1c0bcb31ab9a41c9b754dae74c400752f82d965582018b3181680b17dbd48e759194bb2940defd3d8f23b0a4cef69d294f82c97b714b683fc5e64d072cecfe744155daa520fb335b11f46d9c055855baef73a3a99a64690b584a1335be9faa9ed00b6b3d61f80ff0fbe7a414aa9ad86596946195b648ac55d817797bca59b286a79b58c41cf93135a588d2d18aa660ed499d5d3cef358456e68fa5cba7f1849", 0xca, 0x4, 0x0, 0x6}, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x5, 0x1000, 0xffffffffffffffff, &(0x7f0000002d80)="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", 0x1000, 0x3, 0x0, 0x1}, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x8, 0x100, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffff873, 0x0, 0x6}, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x2, 0x4006, 0xffffffffffffffff, &(0x7f0000002600)="cb00c7335a81ea0aaaecf528d45c3573373207f6fa4a7f59552a2b35916c6d4af405760bbcfcb61775ce6505bdd879376be765c03e8bffac7d7527b9aab56dc43c9c4a32566421f48ab4b5fdac25afa6408ee814fc008ce5979970b1ce2c646a6e695af1c020b33cc577a3c83441f509d6f7637d29b468707725e2bf57b60412efd14cfdaa7668f9adea3c5c48b47f3873b6926536da4b6a67222d375cac09acd915e0dab53803f4f084802c1b0d585df06b", 0xb2, 0xfffffffffffffffe, 0x0, 0x2}, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0xe, 0x3, 0xffffffffffffffff, &(0x7f0000002700)="ad909a60a479e4457fd87ddb67131221aaa54fa57414c2e93b0ea6df873b757ae12888f9c3d37f8b83b6cdaf0df5de3479fa06b7771faac29cb4145f116c4963fab75e5d972bee3fc1643941f54eefdbf3f8303ad490f2f129c8230a187a8c3216ec765c345b6973f75ea111ddb8e7e9f5470005ce2feb80d130b0075a21104bf6eda934da1acf03e991f8fe35d46a24a850ce5eeecd", 0x96, 0x6, 0x0, 0x3, r5}, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x5, 0xa8b, 0xffffffffffffffff, &(0x7f0000000a00)="39de8e5b7f56fb1fab392952ac2e20df3864b10553eb6f98bd2f21f389b83248c10816306003d6df06b585f9b69996f2d8223b7bb9d78c9a9c9f35715360fba80abf8bfafc2b8fe7e2ff1a9f730c3dd6d07d8a69db6eb8a33e59e1810dd961622780563dcdf1b80a77c9af3500bdb57133fcdb2e85052b7e14af4e93d6ea503b0494d9a207efd45b5ebc20993b239d2a283a86455d76cdf1a30873fdfa08338dd41f591a893621503df833d65674a3666013dcc094fa92c1be27f06ecea87dc6d151b4347fb8791614d7e3e4c68253bb8698b5da8f8542", 0xd7, 0x7, 0x0, 0x3}]) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000840)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x18) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0x278f, 0x40000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) 3m18.008155921s ago: executing program 6 (id=2362): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0xffff1f0000000000, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) 3m17.709599636s ago: executing program 6 (id=2368): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000300d9c1bc0d"], 0x40}, 0x1, 0xd}, 0x0) 3m17.579698638s ago: executing program 34 (id=2368): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000300d9c1bc0d"], 0x40}, 0x1, 0xd}, 0x0) 13.573665248s ago: executing program 1 (id=3083): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000b00)={'syz1\x00', {0x10, 0x4, 0x5, 0x4}, 0xe, [0x1000, 0xa, 0x5, 0x5, 0x3, 0x9, 0xf1, 0x51, 0x8, 0x9, 0x80000000, 0x8, 0x3800, 0x8, 0xf4a9, 0x101, 0x10000, 0x6, 0xa, 0x1, 0x7ff, 0x8, 0x870, 0x3, 0x7, 0x0, 0x1, 0x1, 0x5, 0x18, 0x0, 0x8, 0x77, 0x401, 0x52, 0x1, 0xffffffff, 0x5, 0x7fff, 0x1241, 0x4, 0x3599f3ab, 0x4000000, 0x1, 0x52f, 0x201, 0x1, 0xfffffffe, 0x40, 0x416f, 0x18, 0x5, 0x8, 0xf, 0x953d, 0x80, 0x1, 0x7, 0x7, 0x3, 0x1, 0x7fffffff, 0x81, 0x1], [0x5, 0x0, 0x6, 0x410, 0x4, 0x9a40, 0x2, 0x5, 0x78, 0x2, 0x6, 0x4, 0x6, 0x81, 0x36a7, 0x9, 0x8000, 0x9, 0x1, 0xff, 0x4, 0x500, 0x9, 0x8, 0x200, 0x1ff, 0x8e, 0x40, 0x7, 0x6, 0xf7, 0x6, 0xfd5, 0x6, 0xc4e, 0x4, 0x1, 0x3, 0x9, 0x1, 0x2, 0x1, 0x200, 0x5, 0x5, 0x6a, 0x93, 0x7ff, 0x7ff, 0x7, 0x4, 0x10001, 0x8, 0x5, 0xfffffffb, 0xfffffff8, 0x9, 0x5, 0x8001, 0x80000001, 0x1, 0x40, 0x2, 0x1], [0x5, 0x6, 0x6, 0x401, 0xd21, 0x4, 0x2, 0x8000, 0x7, 0x47c0, 0x96bd, 0x9, 0xffffffe1, 0x8, 0x10001, 0x6, 0x3, 0xd, 0x2, 0x0, 0x8, 0x2, 0xffffffff, 0x6c3, 0x57b6d056, 0x100, 0x80, 0xfffffffb, 0x1, 0x6f25, 0x5, 0x10001, 0x6, 0x0, 0x40, 0x1, 0x7ff, 0x8, 0x8, 0xd65e, 0x0, 0x1, 0x893c, 0xfffffffe, 0x4, 0x1511, 0x3c2, 0x2, 0x2, 0x4, 0xe, 0x7, 0x7, 0x17, 0x5e, 0x7, 0xa, 0x9, 0x4, 0x200, 0x7f, 0x8, 0x3, 0x2], [0x2, 0xd3f8, 0x6, 0xdd20, 0xffffffff, 0x9, 0x105, 0x6, 0xb, 0x5e, 0xfff, 0xfb, 0x3, 0x1, 0x9, 0xcb7b, 0xdfa, 0x1ff, 0x8b9, 0x0, 0x6, 0x2, 0x81, 0x1, 0x1, 0x4d58, 0x8, 0x9, 0x1, 0x31, 0x7, 0x6, 0x2, 0x2, 0x0, 0xfffffff9, 0x1, 0x8, 0xea5, 0x0, 0xffffff11, 0x2, 0x0, 0x9, 0x6, 0xd, 0x9, 0x6, 0x5, 0x2, 0x0, 0xb, 0x0, 0x1, 0x40, 0x4, 0xfffffff8, 0x5, 0x9, 0xf2, 0x4, 0x4, 0xffff, 0x1]}, 0x45c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x2080009) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000180)=0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 12.245208127s ago: executing program 1 (id=3088): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") r0 = open(&(0x7f0000000480)='./bus\x00', 0x1050c1, 0x170) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50}, 0xffd3) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x1000004, 0x0, 0x6d4a, 0x100, 0x7fff, 0x80, {0x6, 0x9, 0x80000001, 0x5, 0xd25f, 0xab, 0x4, 0x9, 0x0, 0x1000, 0x8, 0x0, 0x0, 0x0, 0xfffffffa}}}, 0x90) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 9.525749898s ago: executing program 1 (id=3091): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ustat(0x5, &(0x7f0000000400)) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/10], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 9.460201249s ago: executing program 5 (id=3095): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0xffffffa1, 0x4000c00}, 0x0) 9.341495611s ago: executing program 5 (id=3096): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x4, 0x8000446, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, 0xfffffffb}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x6, 0x405}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x600}}}], []]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x44830) 9.329000681s ago: executing program 5 (id=3098): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085000000230000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000800)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@inlinecrypt}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 7.193315923s ago: executing program 5 (id=3100): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB="0000000000000000bbd6f23499cf866cda01968296a98400"/35, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, 0x0, 0x0, 0x4}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x10000, 0x0, 0x9d}) r3 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000001000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/26], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xfffffeb2, 0x2}]}}}]}, 0x9c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=r10, @ANYBLOB="8750a754ac0000003c0012800b000100697036746e6c00002c00028014000300fe"], 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) unlink(&(0x7f0000000380)='./file1\x00') r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000900)={0x10003, 0x0, 0xffff1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) 5.965062222s ago: executing program 0 (id=3103): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x14d, 0x5}, {0x10000, 0x1}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) syz_usb_connect(0x2, 0x47, &(0x7f0000000000)=ANY=[], 0x0) 5.535915318s ago: executing program 5 (id=3108): r0 = creat(&(0x7f0000001600)='./file0\x00', 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000001640)={0x4, 0x0, [{}, {}, {}, {}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e640500000000007502faff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000002b000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6d5b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa387a8077927a1ad367c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f20002b35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8c367d1bfd1aea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82dc568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000000000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac6f09c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccf5e882602897a85bf8523d891080593d831d758deb4f2c7e49c6d6b35d8fd92601c8500febb0c5fe0be294bf6bbbecad444695277a9e3992a354492513b43091d161c7c7cdbbe44e8e83b4cf333238a52f214b278c6485236ea880db2f113f6381187679a4620d6149808b0af024b3b3e6ba99b4b15ca"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000000}, 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001e40)=0xffffffffffffffff, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000", 0x4) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000001580), &(0x7f00000015c0)=0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], &(0x7f0000001fc0)=""/4121, 0x3d, 0x1019, 0x1}, 0x28) 4.398114485s ago: executing program 7 (id=3110): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0x1, 0x1, 0x1000000}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}, @fda={0x66646185, 0x0, 0x1, 0x19}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 4.387337225s ago: executing program 7 (id=3111): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) keyctl$chown(0x4, 0x0, 0xee01, 0x0) r6 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0x0, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0xf000000, [{0x61}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 3.788627364s ago: executing program 3 (id=3113): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000000) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_getparam(r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x0, 0xffefffff}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 3.699757545s ago: executing program 5 (id=3114): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000000)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x1, 0x573, &(0x7f0000000ec0)="$eJzs3T1sG+UbAPDnzvG/X/mTIoEEqEMFSEWq6iT9gMLUrohKlTogsUDkuFEVJ47iBJooQ7pXiA4IUJeywcAIYmBALIysLCBmpIpGIDUdwMhfaZo4wSl1XHK/n3T2vfee/bzvnZ/XvtOdHEBmHa0/pBHPRsTFJGJoXd1AtCqPNtdbXVkq3ltZKiZRq136LYkkIu6uLBXb6yet50MRsRwRz0TEd/mI4+nmuNWFxcmxcrk02yoPz03NDFcXFk9cmRqbKE2Upk+98uqZs6fPjJ4cXf+ye7X1pfzO+nr95xvvX//h9Vs3Pv/iyHLxw7EkzsVgq259Px6l5jbJx7kNy0/3IlgfJf1uAA8l18rzeio9HUORa2V9J7WhXW0a0GO1fRE1IKMS+Q8Z1f4dUD/+bU+7+fvj9vnmAUg97mpratYMNM9NxP7GscnB35MHjkzqx5uHd7Oh7EnL1yJiZGBg8+c/aX3+Ht7Io2ggPfXt+eaO2rz/07XxJzqMP4Ptc6f/Unv8W900/t2Pn9ti/LvYZYw/3/rlky3jX4t4rmP8ZC1+0iF+GhHvdBn/5ptfn92qrvZpxLHoHL8t2f788PDlK+XSSPOxY4xvjh15bbv+H9wifvOc7f7G10yn7T/TZf+/+v7L55e3if/SC9vv/07b/0BEfNBl/CfvfvbGVnW3ryV36r8Cdrr/68tudRn/5XNHf+pyVQAAAAAAAAAAYAfSxrVsSVpYm0/TQqF5D+9TcTAtV6pzxy9X5qfHm9e8HY582r7SaqhZTurl0db1uO3yyQ3lU7lWwNyBRrlQrJTH+9x3AAAAAAAAAAAAAAAAAAAAeFwc2nD//x+5xv3/G/+uGtirtv7Lb2Cvk/+QXQ/mf9K3dgC7z/c/ZFZN/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv8AAAAAAAAAAAAAAAAAAAAAAAAAANATFy9cqE+1eytLxXp5fGBhfrLy7onxUnWyMDVfLBQrszOFiUplolwqFCtT//R+SaUyMxLT81eH50rVueHqwuLbU5X56fZ/ipbyPe8RAAAAAAAAAAAAAAAAAAAA/PcMNqYkLURE2phP00Ih4v8RcTjyyeUr5dJIRDwRET/m8vvq5dF+NxoAAAAAAAAAAAAAAAAAAAD2mOrC4uRYuVyazcjMwE5WjojlR9uM+jvu+FX51r56XLahmSzM9HlgAgAAAAAAAAAAAAAAAACADLp/02+3r/irtw0CAAAAAAAAAAAAAAAAAACATEp/TSKiPh0benFwY+3/ktVc4zki3rt56aOrY3Nzs6P15XfWls993Fp+sh/tB7rVztN2HgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3VRcWJ8fK5dJsD2f63UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh/F3AAAA///pCdd8") syz_usb_connect(0x3, 0x2d, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000229639010861a2d754d2d0102030109021b0001000000000904010001e90cbd00090503"], 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, r1}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x10, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81}, {}, {}, [@call={0x85, 0x0, 0x0, 0xb7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @host}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd26, 0x3, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x200}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110710000ffffff0800"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc6, &(0x7f0000000680)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) getdents64(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socket$nl_route(0x10, 0x3, 0x0) dup(r6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 3.512499958s ago: executing program 1 (id=3101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000005600b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703040008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000002c0)=ANY=[], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001680), &(0x7f0000001340), 0xede8, r5}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="86", 0x1}], 0x1, 0x0, 0xfffffffffffffd8e}, 0x0) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, 0x0, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x3c, r9, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000100000000000000000071120d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) 3.42177557s ago: executing program 7 (id=3115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000020018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.41924905s ago: executing program 7 (id=3116): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf188d7f165bc7370, 0x2a, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x70) 2.890997047s ago: executing program 3 (id=3117): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000240)='bpf_lsm_sk_free_security\x00') (async) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x2, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000080)='syzkaller\x00', 0x14a6, 0xd5, &(0x7f00000000c0)=""/213, 0x41100, 0x7a, '\x00', 0x0, @fallback=0x36, r2, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, r3, r4, 0x1, 0x0, &(0x7f00000002c0)=[{0x0, 0x2, 0xe, 0x1}], 0x10, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r5}, 0x20) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', r1, 0xffffffffffffffff, 0x3, 0x9, 0x2}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x9, 0x6, 0xffffff4d, 0x50, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x4, 0x0, 0x2, 0x6}, 0x50) (async) r9 = dup3(r0, r4, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1b, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @alu={0x7, 0x1, 0x3, 0x0, 0xe, 0xffffffffffffffe8, 0x8}, @map_val={0x18, 0xefcb95140df368c4, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000640)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x8, 0x80000000, 0x574}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r8, r9], 0x0, 0x10, 0x8}, 0x94) (async) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000840), &(0x7f0000000880), 0x2, 0x2) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, &(0x7f00000008c0)=0x9, 0x4) r11 = syz_clone(0x40081c00, &(0x7f0000001d40)="e71e87763806a29f580b6f1640e93fa7182cd0d1b496099bfbc1d7f7", 0x1c, &(0x7f0000001d80), &(0x7f0000001dc0), &(0x7f0000001e00)="3c5372353add0322fae7a2f60072fbed0bbbda1d2861e98e61ce8a131e31995be51ebdd8a4f6e55dee66650f9bcd5e67d8861876f3c8c2bb00b5c9d0c24f83036ac2315c4129c7b4e2fa38f3c437a4e4cf956e213d30455cdffd2ff5960b247011950b3fa8c923fa52bda3c4a6157ab6721be1187ca3c92be78f1ee3d883898163373519da537ff5f012e9336784271c252ea6f3efe37398634f11fe8f51fd84d50411de8cfdf96c3261df465b6a8e23cbb40267eb708c2accaef72ed422acd4901960ffcb105933c880bdf5a848dc36bd7ccf4cd2096f4f5d67481fbef1899198460cc9807e28ec528ea05fcb7e68d56b176cafaf1068") getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000001f00)={0x0, 0x0}, &(0x7f0000001f40)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001f80)={0x0, 0x0, 0x0}, &(0x7f0000001fc0)=0xc) (async) r14 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002000), 0x20000, 0x0) (async) ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000002040)=0x0) (async) statx(r9, &(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, 0x8, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f0000002200)='./file0\x00', &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r18 = socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$TIOCGSID(r9, 0x5429, &(0x7f00000022c0)=0x0) (async) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000004340)={0x0, 0x0, 0x0}, &(0x7f0000004380)=0xc) (async) fcntl$getownex(r2, 0x10, &(0x7f0000005b00)={0x0, 0x0}) (async) fstat(r7, &(0x7f0000005b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000005bc0)={0x0, 0x0}, &(0x7f0000005c00)=0xc) r25 = getgid() (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005c40)={0x0, 0x0}, &(0x7f0000005c80)=0xc) sendmmsg$unix(r9, &(0x7f0000009f40)=[{{&(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="c0d669f9c8fc16ae6a7aa67d1f63107d73a54b0267998810b9f7d43ee081f8a809909f7d0c11a7c0bd6f9fa13b8f17aaef54f1310ab7d3f0bc83c44b81bfd95bd17d14b046f48a58e85e2bb343202950bdea119282fca51f28bf0b82f64bc6c2dc020f35b351a3588b82d55d83aaf190dfcefc9a171ee25debf1c7e0eaccc3ba606bcaf9d160929b501697d3fe4137fe3e138968c922071719988d87ae0be1297761c4", 0xa3}, {&(0x7f0000001b40)="50c89088f2ca54ffa57bda07012a1acfe4465f46d722ee2a7f816359abe4a78d617afe2eb76e15cd34ffdf8b72379fd758fa302d99693f659c4780fb16a8b5e3d208f0028059e847f0aed348ce63fc7b42e65a89c4a64de0634d078f9e0b835a2661f2e266e5566a3708046bfd916177f68b2f9f2958be42a1f087d36743e912bf75f6979208ea8cd740c1684144f7c93f94cf580665e4dd6607cc83c51a8872c3f3d54d7c15554f03603aeb07995873d2b69fdebf991f772366d86da9fb832eeed14fbb723cab1c9d84da38650a3a57bf332a89ab00", 0xd6}], 0x4, &(0x7f0000001c80), 0x0, 0x24000000}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001cc0)="1b9a078448e41f2ee8aed167ecf252086bbe643eeee93c1518847f687eed18635e0e5feeb6cc4903059df453b03a78fa7ea1e01f9152ddb4f9", 0x39}], 0x1, &(0x7f00000043c0)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x38, 0x1, 0x1, [r2, r10, r9, r9, r9, r8, r5, r5, r4, r7]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r0, r6, r10, r4, r7, r14, r10, r0]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @rights={{0x20, 0x1, 0x1, [r0, r9, r10, r4]}}, @rights={{0x34, 0x1, 0x1, [r10, r8, r18, r2, 0xffffffffffffffff, r7, r2, r7, r2]}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}], 0x148, 0x4000}}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000004540)="8617fcf8781b9d49924aed30b1e4752f44c6b24f3ea990aae4d995b875335fb3663b333c52b5dcb28f8433da8012375a56e2ba3d8ed82a820ae6d00884fb6d0c8e14429bab5042c2f3bb13a5799b4a42b43e3bf0d95ca104", 0x58}, {&(0x7f00000045c0)="6fa94fa6e0626bd112843a6c70be2cd47d48302f4c44f84c7237094f8cec490bc801093519950e353648b1d6ed9fe41d6a736ddb627f36e263ccf2a6251aff276abb31f57e2b49a5babc4911bcde8db623406998db3b1c9c1fb133002521cc7906ec2a91f34f4307c977989e4c0db264e605dd1895a1cba89788a50507bb2373273c418ed0eaf6db0cb07a5d98c91e81c721b013e7f496e62e8d05c37e52b14e18be9a25aa2206f5b20b568d3a82d677c8d69a59d62177dec69eef5ae37fe95ed0134da6d9830cc684ccca119a8bfcef6e0963c3e7784fce8260e262e7fec0c52b0ab5497da1e2dc0a", 0xe9}, {&(0x7f00000046c0)="44a3a9064e72f763c730e29677da067c27a189a098b3d159f87e10b423c5838bb1c8127599cbf2f3b0b65d94bf3a54cfb7b0d47643d0d4f1a3e54456df40da1606675ec2e2c6fd023d1d88f1637eb8e7ee3c9e493ffe43063885f36c75d9e97ed72ab225ed8f375c2b37627960303bf5545df551be36", 0x76}, {&(0x7f0000004740)="34be7032d6dbd138325a7c85b631bc8e4afa8ebf3332d6a3221bba439f9ca84c1019260d13e2110d0052bcf8472b537776d9a1cbeba5d82d5844160e283e6f6037413faadf55c046d89aacef171aa45ce96bff656405d4a03f9e5ded0cff25b8cf09f01ac84a083982c0af87f3e028105504a6980ae060159e2decfd72528da5e072733fd4a76cf79441f37a1e27f53b9d0598384586a4e2ead86558653850e9df2cda0e9278500e718fb9517c29009dbf305ff2cc562d6f8a5ecaebcd2ba659ece999e67516075e3be4aff656072f47869f82e4b86a5d21ed386746de330991525f239db4c07adba94f", 0xea}, {&(0x7f0000004840)="4985bb77c1e445d27aed9a271322cf3d3517bf960974fe9a9cacb48032739aef66b4c3e38031a73b2568be823d237e8eec4b519d8031d670091f758840852db07afe2882f27cf3ffba072c0d28bc77293caa7ec01b945d15fc61b7bb0e685778c01aab7dd460f1dddf7ae11351a0991aa80df4a0f13577fd0351e252a48462ca2494c68477a078bfcd52c45cf6e8ecc981b113063011561267792a341ff50dad8639813cc7a100459825bfa8e35ab21543d2174192b8a38ed2c027b861a13bf3be0e7261bdf279fded5bcff7cf5fcd9f230384aa86b52cbddef0", 0xda}, {&(0x7f0000004940)="ccd44e90121ea8ba6cfac8d7fe061f010fb9ac9f84d02a63aa9dcc2eaf00caf386da3e42fb3a73e8d6fea430e81c644ae7f794344204cb2be4aac95d2cb6ac9dadedc230e5ce1d2ac9af5269545d88f675436ee0099a08395f7182522bd01d4420e97b912968da8ee4af8e57f75b14d17f8371b6b3831cee6856", 0x7a}, {&(0x7f00000049c0)="32df32154baf8668e2e13a7cc4990b50bfad0dcd9ebff8ab4e69ed0636ccaf18ad3c8fd757cbd63758ee2eb068aad3a774fd0de723fe7371a4e0aa85b35ad1da531619ee30181df827eca7fcfcfbeb95d16f4a2e1d4c1de771c27b71815505defe5955d372ccbaa0bb8341f71ca8637200c5164ead3b1877dd7b51d8bac40626de90a75753adc7335888501ebf0d1ef38fe7", 0x92}, {&(0x7f0000004a80)="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", 0x1000}], 0x8, &(0x7f0000009e80)=[@cred={{0x1c, 0x1, 0x2, {r22, 0x0, r23}}}, @rights={{0x30, 0x1, 0x1, [r7, r9, r0, r7, r7, r5, r10, r7]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r24, r25}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r26}}}, @cred={{0x1c}}], 0xb0, 0xc000}}], 0x3, 0x40000) 2.879199418s ago: executing program 3 (id=3118): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) pipe2(&(0x7f00000000c0), 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x7000000, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 2.337380026s ago: executing program 7 (id=3119): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380100001"], 0x44}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) creat(&(0x7f0000000000)='./bus\x00', 0x89) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1b4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x178, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file1\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0x14c, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x90, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x59, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x88, 0x1b, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x2, 0x3, 0x1}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) 2.314192056s ago: executing program 1 (id=3120): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380100001"], 0x44}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) creat(&(0x7f0000000000)='./bus\x00', 0x89) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1b4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x178, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file1\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0x14c, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x90, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x59, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x88, 0x1b, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x2, 0x3, 0x1}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) 1.34273799s ago: executing program 0 (id=3121): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) 1.34154839s ago: executing program 3 (id=3122): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") 1.267428512s ago: executing program 0 (id=3123): socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x400000002) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000080000000100"], 0x50) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000007900c001000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) 1.255186342s ago: executing program 3 (id=3124): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x84}, 0x38) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000200), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000a5e10000000000000000000000f0002ee2c6466f2cf703c474110779fcfc44e39f9983d86e622cfbf09db7b8bad602af29bf3d8af01765dd96d99ba6d9077775ad9831a48d5bddd9ccc7063d1fc525a07440423d3130354337aa3d4a20759cc3ef4183e8b54ca1a28f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f00000014c0)={0x2020}, 0x2020) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)={0x6}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@mcast1, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x60, 0x30, 0x84, 0x0, r8}, {0x62, 0x8, 0x8001, 0x8, 0x2, 0x3, 0x4, 0x4}, {0x1, 0x4, 0xba43, 0x9}, 0x800, 0x6e6bbc, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x4d2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4, 0x1, 0xd, 0x0, 0x4, 0x7}}, 0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100088e, &(0x7f0000000240)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@init_itable}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x255}}, {@nogrpid}], [{@context={'context', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfshat={'smackfshat', 0x3d, '\n:!#\x9d}^]$-!,\xbf%('}}, {@euid_lt={'euid<', r8}}, {@smackfsdef={'smackfsdef', 0x3d, '$[\xad-].(#!:^'}}, {@pcr={'pcr', 0x3d, 0x33}}]}, 0x3, 0x445, &(0x7f0000000800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 725.55289ms ago: executing program 0 (id=3125): write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x9) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000000c0)="0aa1bb1c783699be6c82f812c2103af6fda5f36dcc18893275fb38e07420f143d9911619a1c0c4b1ed9c8a7c467942895fc39905e628abbb3e8adf7b35717c96e8f4d30913cb90f7242fe58c454884ce5b2ef3ea14d87250c04a27408cbfb2f0325bcef273fe21ddf289fb620c27f1cc"}, 0x20) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) ioctl$VT_DISALLOCATE(r1, 0x5608) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, r2, &(0x7f0000000240)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x9c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x6}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) r4 = open(&(0x7f0000000440)='./file0\x00', 0x4881, 0x2) bind$unix(r4, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000500)={'\x00', 0x8, 0x1, 0x1, 0x3ff, 0x0, 0xffffffffffffffff}) ioprio_get$pid(0x1, r5) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000580)={0x0, 0x1, 0x8}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0), 0x101040, 0x0) ioctl$BTRFS_IOC_FS_INFO(r6, 0x8400941f, &(0x7f0000000600)) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000a00)={0x2, {{0x2, 0x4e22, @local}}, 0x1, 0x7, [{{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x410) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000e40)) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000f40)=""/241) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r6, 0x40046210, &(0x7f0000001040)=0x1) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000001080)={0x1ff, 0x4, 0xc2, 0x2}, 0x10) ioprio_set$uid(0x0, r2, 0x2004) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001140)={{r4, 0xffffffffffffffff}, &(0x7f00000010c0), &(0x7f0000001100)=r4}, 0x20) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001380)={0x0, @initdev, @broadcast}, &(0x7f00000013c0)=0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001600)={r6, 0x20, &(0x7f00000015c0)={&(0x7f0000001480)=""/21, 0x15, 0x0, &(0x7f00000014c0)=""/248, 0xf8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x5, 0x28, &(0x7f0000001180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5f5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000012c0)='GPL\x00', 0x7fffffff, 0x64, &(0x7f0000001300)=""/100, 0x41000, 0x14, '\x00', r8, @fallback=0x30, r4, 0x8, &(0x7f0000001400)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001440)={0x4, 0x8, 0x3, 0x4}, 0x10, r9, r6, 0x1, 0x0, &(0x7f0000001640)=[{0x5, 0x1, 0xc, 0x1}], 0x10, 0x2}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001780)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001740)="2e28d28638d56d525df6", 0xa, r6}, 0x68) mount$9p_fd(0x0, &(0x7f0000001800)='./file0\x00', &(0x7f0000001840), 0x34802, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@ignoreqv}], [{@fowner_eq={'fowner', 0x3d, r2}}, {@dont_hash}, {@measure}, {@fowner_lt={'fowner<', r2}}, {@subj_type={'subj_type', 0x3d, 'GPL\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) sendmsg$nl_route(r4, &(0x7f0000001b00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)=@bridge_getvlan={0x58, 0x72, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0xc000) 715.37517ms ago: executing program 7 (id=3126): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x400000002) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000080000000100"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f00000000c0)='.request_key_auth\x00', 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='sched_switch\x00', r5}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[], 0x144}}, 0x80) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) read$FUSE(r0, 0x0, 0x0) ioctl$UI_SET_PHYS(r6, 0x4008556c, &(0x7f0000000000)='syz0\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) (fail_nth: 12) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000900)={{0x0, 0x989680}}, 0x0) 621.528071ms ago: executing program 0 (id=3127): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendfile(r0, r1, &(0x7f0000000080)=0x8001, 0x81) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000980)={'batadv_slave_1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000200000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 122.832559ms ago: executing program 1 (id=3128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000008000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) 33.40794ms ago: executing program 3 (id=3129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006400000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073", @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="08ad741e040008d57c0007000000000000006a52984fff26979a38ae9a23a245febd731bcbf68711b87f", @ANYRES32, @ANYBLOB='\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24008844, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@sack_perm, @timestamp], 0x2) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) close(0x3) 0s ago: executing program 0 (id=3130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000005600b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703040008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000002c0)=ANY=[], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001680), &(0x7f0000001340), 0xede8, r5}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="86", 0x1}], 0x1, 0x0, 0xfffffffffffffd8e}, 0x0) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, 0x0, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x3c, r9, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000100000000000000000071120d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) kernel console output (not intermixed with test programs): syz.5.2707: bg 0: block 234: padding at end of block bitmap is not set [ 652.492931][ T9952] EXT4-fs (loop5): Remounting filesystem read-only [ 652.659344][ T9948] EXT4-fs (loop7): 1 truncate cleaned up [ 652.724815][ T9948] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 652.740464][ T9949] x_tables: duplicate underflow at hook 2 [ 653.619612][ T9960] netlink: 'syz.7.2713': attribute type 27 has an invalid length. [ 653.735580][ T9960] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.742840][ T9960] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.777922][ T4732] EXT4-fs (loop5): unmounting filesystem. [ 654.223690][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 654.231895][ T9976] 9pnet_fd: Insufficient options for proto=fd [ 654.259597][ T9970] device veth0_vlan left promiscuous mode [ 654.274388][ T9970] device veth0_vlan entered promiscuous mode [ 654.284341][ T9970] device veth1_macvtap left promiscuous mode [ 654.297596][ T9970] device veth1_macvtap entered promiscuous mode [ 654.307899][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 654.321584][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 654.334582][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 654.338045][ T9982] overlayfs: failed to resolve './file0': -2 [ 654.348322][ T6494] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.355790][ T6494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.363454][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 654.371630][ T2923] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 654.379588][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 654.388399][ T6494] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.395454][ T6494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.402921][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 654.411943][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 654.420309][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 654.429043][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 654.437259][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 654.445541][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 654.453806][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 654.462221][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 654.470565][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 654.478962][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 654.487395][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 654.496287][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 654.504662][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 654.513073][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 654.521274][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 654.529456][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 654.538245][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 654.546501][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 654.554956][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 654.563362][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 654.571358][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 654.579497][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 654.587307][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 654.594628][ T2923] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 654.604072][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 654.612138][ T2923] usb 4-1: config 0 has no interface number 0 [ 654.619307][ T2923] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 654.630610][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 654.639557][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 654.647176][ T2923] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 654.861820][ T6494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 654.869489][ T2923] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 654.881500][ T2923] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 654.904350][ T2923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.916302][ T2923] usb 4-1: config 0 descriptor?? [ 654.922566][ T2923] usb 4-1: MIDIStreaming interface descriptor not found [ 654.933528][ T2923] snd-usb-audio: probe of 4-1:0.156 failed with error -12 [ 655.052520][ T9994] loop0: detected capacity change from 0 to 1024 [ 655.059696][ T9994] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 655.111945][ T8658] EXT4-fs (loop7): unmounting filesystem. [ 655.126253][ T28] audit: type=1400 audit(1752351954.023:698): avc: denied { create } for pid=9993 comm="syz.0.2725" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=socket permissive=1 [ 655.148208][ T2923] usb 4-1: USB disconnect, device number 29 [ 655.163434][ T9998] loop0: detected capacity change from 0 to 256 [ 655.170347][ T9998] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 656.545219][ T561] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 656.577830][ T561] hid-generic 0000:0000:0000.0063: hidraw0: HID v0.00 Device [syz1] on syz0 [ 656.680881][T10011] loop1: detected capacity change from 0 to 512 [ 656.719063][T10011] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 656.728421][T10011] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 656.807409][ T285] EXT4-fs (loop1): unmounting filesystem. [ 657.359765][T10031] loop0: detected capacity change from 0 to 40427 [ 657.379012][T10031] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 657.392185][T10031] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 657.395744][T10035] loop1: detected capacity change from 0 to 40427 [ 657.407593][T10035] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 657.414062][T10035] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 657.414115][T10031] F2FS-fs (loop0): Unrecognized mount option "background_gC=on" or missing value [ 657.423626][T10035] F2FS-fs (loop1): invalid crc value [ 657.438411][T10035] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 657.470909][T10035] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 657.478074][T10035] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 657.499275][T10035] syz.1.2740: attempt to access beyond end of device [ 657.499275][T10035] loop1: rw=2049, sector=53248, nr_sectors = 128 limit=40427 [ 657.528818][ T285] syz-executor: attempt to access beyond end of device [ 657.528818][ T285] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 657.598726][T10045] tipc: Enabling of bearer rejected, already enabled [ 657.660241][T10045] tipc: Enabling of bearer rejected, already enabled [ 657.948648][ T542] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 657.982075][ T542] hid-generic 0000:0000:0000.0064: hidraw0: HID v0.00 Device [syz1] on syz0 [ 658.483591][T10074] loop7: detected capacity change from 0 to 40427 [ 658.490843][T10074] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 658.497238][T10074] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 658.506488][T10074] F2FS-fs (loop7): invalid crc value [ 658.513533][T10074] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 658.539887][T10074] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 658.546992][T10074] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 658.565897][ T8658] syz-executor: attempt to access beyond end of device [ 658.565897][ T8658] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 658.693229][ T28] audit: type=1400 audit(1752351959.350:699): avc: denied { create } for pid=10082 comm="syz.0.2755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 658.714483][T10081] loop7: detected capacity change from 0 to 1024 [ 658.727759][T10081] EXT4-fs (loop7): Test dummy encryption mode enabled [ 658.751006][T10087] binder_alloc: 10086: binder_alloc_buf size 12280 failed, no address space [ 658.758074][ T542] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 658.759764][T10087] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 658.769672][T10081] EXT4-fs error (device loop7): ext4_quota_enable:7009: inode #3: comm syz.7.2753: iget: bad extra_isize 1024 (inode size 1024) [ 658.790308][T10081] EXT4-fs (loop7): Remounting filesystem read-only [ 658.796900][T10081] EXT4-fs error (device loop7): ext4_quota_enable:7012: comm syz.7.2753: Bad quota inode: 3, type: 0 [ 658.807698][T10092] sock: sock_set_timeout: `syz.0.2757' (pid 10092) tries to set negative timeout [ 658.808198][T10081] EXT4-fs (loop7): Remounting filesystem read-only [ 658.821286][T10092] sock: sock_set_timeout: `syz.0.2757' (pid 10092) tries to set negative timeout [ 658.823775][T10081] EXT4-fs warning (device loop7): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 658.848071][T10081] EXT4-fs (loop7): mount failed [ 658.971553][ T542] usb 6-1: Using ep0 maxpacket: 32 [ 658.979149][ T542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.990652][ T542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.000640][ T542] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 659.010539][ T542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.023012][ T542] usb 6-1: config 0 descriptor?? [ 659.155110][T10098] netlink: 'syz.7.2758': attribute type 1 has an invalid length. [ 659.233215][ T2923] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 659.241421][ T2923] hid-generic 0000:0000:0000.0065: hidraw0: HID v0.00 Device [syz1] on syz0 [ 659.337579][T10109] loop3: detected capacity change from 0 to 128 [ 659.345499][T10109] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 659.365100][T10109] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 659.747645][T10113] xt_bpf: check failed: parse error [ 660.179362][ T542] savu 0003:1E7D:2D5A.0066: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 660.452639][T10114] loop1: detected capacity change from 0 to 40427 [ 660.462688][T10114] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 660.469175][T10114] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 660.516650][ T8] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 660.516835][T10114] F2FS-fs (loop1): invalid crc value [ 660.532282][ T561] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 660.540974][T10114] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 660.575427][T10114] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 660.582564][T10114] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 660.605540][ T285] syz-executor: attempt to access beyond end of device [ 660.605540][ T285] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 660.747533][ T561] usb 1-1: Using ep0 maxpacket: 32 [ 660.775612][T10133] futex_wake_op: syz.3.2769 tries to shift op by -1; fix this program [ 660.903121][ T561] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.004285][ T561] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 661.014532][ T561] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.023718][ T561] usb 1-1: Product: syz [ 661.030169][ T561] usb 1-1: Manufacturer: syz [ 661.037083][ T561] usb 1-1: SerialNumber: syz [ 661.145577][ T561] usb 1-1: config 0 descriptor?? [ 661.446017][ T561] usb 1-1: bad CDC descriptors [ 661.451754][T10136] loop7: detected capacity change from 0 to 512 [ 661.452222][ T561] usb 1-1: unsupported MDLM descriptors [ 661.548683][ T561] usb 1-1: USB disconnect, device number 39 [ 661.555343][ T1424] usb 6-1: USB disconnect, device number 11 [ 661.607519][T10136] EXT4-fs warning (device loop7): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 661.633390][T10136] EXT4-fs (loop7): mount failed [ 661.726162][T10140] loop5: detected capacity change from 0 to 256 [ 662.390014][T10146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2774'. [ 662.413624][T10146] loop3: detected capacity change from 0 to 128 [ 662.810459][ T28] audit: type=1400 audit(1752351963.213:700): avc: denied { remount } for pid=10145 comm="syz.3.2774" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 662.839564][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2774'. [ 662.997297][T10170] loop0: detected capacity change from 0 to 1024 [ 663.008779][T10150] loop5: detected capacity change from 0 to 40427 [ 663.015833][T10150] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 663.022224][T10150] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 663.035457][T10150] F2FS-fs (loop5): invalid crc value [ 663.052524][T10170] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 663.070425][T10150] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 663.099098][T10176] input: syz1 as /devices/virtual/input/input195 [ 663.230981][T10150] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 663.238106][T10150] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 663.261726][T10150] syz.5.2776: attempt to access beyond end of device [ 663.261726][T10150] loop5: rw=2049, sector=53248, nr_sectors = 128 limit=40427 [ 663.278078][T10150] syz.5.2776: attempt to access beyond end of device [ 663.278078][T10150] loop5: rw=524288, sector=77824, nr_sectors = 8 limit=40427 [ 663.294428][ T1424] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 663.306468][T10150] syz.5.2776: attempt to access beyond end of device [ 663.306468][T10150] loop5: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 663.339508][ T4732] syz-executor: attempt to access beyond end of device [ 663.339508][ T4732] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 663.525652][ T1424] usb 4-1: Using ep0 maxpacket: 16 [ 663.532022][ T1424] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 663.550119][ T1424] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.570499][ T1424] usb 4-1: config 0 has no interface number 0 [ 663.584694][ T1424] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 663.593899][ T1424] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.602003][ T1424] usb 4-1: Product: syz [ 663.606269][ T1424] usb 4-1: Manufacturer: syz [ 663.610915][ T1424] usb 4-1: SerialNumber: syz [ 663.616860][ T1424] usb 4-1: config 0 descriptor?? [ 663.628805][ T1424] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 663.635363][ T1424] usb 4-1: No valid video chain found. [ 663.838416][ T1424] usb 4-1: USB disconnect, device number 30 [ 663.840146][ T28] audit: type=1400 audit(1752351964.167:701): avc: denied { accept } for pid=10185 comm="syz.1.2784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 663.867833][ T2923] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 664.001244][ T283] EXT4-fs (loop0): unmounting filesystem. [ 664.014727][T10188] binfmt_misc: register: failed to install interpreter file ./file0 [ 664.037451][T10190] loop0: detected capacity change from 0 to 1024 [ 664.044357][T10190] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 664.052845][T10190] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 664.064000][T10190] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 664.074082][T10190] EXT4-fs error (device loop0): __ext4_iget:5078: inode #17: block 1803188595: comm syz.0.2786: invalid block [ 664.085869][ T2923] usb 6-1: Using ep0 maxpacket: 8 [ 664.086095][T10190] EXT4-fs (loop0): no journal found [ 664.093708][ T2923] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 664.105254][ T2923] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 664.113432][ T2923] usb 6-1: Product: syz [ 664.117645][ T2923] usb 6-1: Manufacturer: syz [ 664.122245][ T2923] usb 6-1: SerialNumber: syz [ 664.127586][ T2923] usb 6-1: config 0 descriptor?? [ 664.183394][T10190] device syzkaller0 entered promiscuous mode [ 664.266394][ T28] audit: type=1400 audit(1752351964.569:702): avc: denied { ioctl } for pid=10191 comm="syz.0.2787" path="socket:[50252]" dev="sockfs" ino=50252 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 664.415771][T10198] loop0: detected capacity change from 0 to 256 [ 664.422434][T10198] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 664.509771][T10198] loop0: detected capacity change from 0 to 256 [ 664.524404][T10198] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 665.357647][ T2923] usb 6-1: USB disconnect, device number 12 [ 665.538780][T10209] loop0: detected capacity change from 0 to 512 [ 665.553707][T10209] EXT4-fs: quotafile must be on filesystem root [ 665.623256][T10209] overlayfs: './file0' not a directory [ 665.844183][T10204] loop5: detected capacity change from 0 to 131072 [ 665.852954][T10204] F2FS-fs (loop5): Test dummy encryption mode enabled [ 665.863248][T10204] F2FS-fs (loop5): invalid crc value [ 665.897802][T10204] F2FS-fs (loop5): Found nat_bits in checkpoint [ 665.937031][T10204] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 666.216506][T10233] loop0: detected capacity change from 0 to 512 [ 666.227098][T10233] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 666.242795][T10233] EXT4-fs (loop0): orphan cleanup on readonly fs [ 666.253381][T10233] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2798: bg 0: block 248: padding at end of block bitmap is not set [ 666.269114][T10233] Quota error (device loop0): write_blk: dquota write failed [ 666.276734][T10233] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 666.286778][T10233] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.2798: Failed to acquire dquot type 1 [ 666.300715][T10233] EXT4-fs (loop0): 1 truncate cleaned up [ 666.322556][T10233] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 667.068319][T10244] loop7: detected capacity change from 0 to 256 [ 667.076898][T10244] FAT-fs (loop7): Unrecognized mount option "shortna\e=winnt" or missing value [ 667.218045][T10244] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2800'. [ 667.932329][ T283] EXT4-fs (loop0): unmounting filesystem. [ 667.999013][T10253] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2803'. [ 668.004737][T10247] loop3: detected capacity change from 0 to 512 [ 668.044125][T10247] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 668.059795][T10247] ext4 filesystem being mounted at /557/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 668.189537][ T284] EXT4-fs (loop3): unmounting filesystem. [ 668.209555][T10263] netlink: 'syz.3.2808': attribute type 15 has an invalid length. [ 668.221272][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2804'. [ 668.283055][ T414] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 668.487689][ T414] usb 2-1: not running at top speed; connect to a high speed hub [ 668.500208][ T414] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 668.520082][ T414] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 668.530233][T10274] xt_bpf: check failed: parse error [ 668.538906][ T414] usb 2-1: config 1 interface 0 has no altsetting 0 [ 668.554172][ T414] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 668.570173][ T414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.584095][ T414] usb 2-1: Product: é°åŒ³îœ‚ê¤ä¹£ç£šè®”轮∭溦ﮓ훾å‡î–»ä¦µá„¢ [ 668.592371][ T414] usb 2-1: Manufacturer: Ñ [ 668.597248][ T414] usb 2-1: SerialNumber: ÑŽ [ 668.613811][T10249] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 668.621239][T10249] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 669.107868][ T414] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 8 proto 2 vid 0x0525 pid 0xA4A8 [ 669.126417][ T414] usb 2-1: USB disconnect, device number 37 [ 669.133264][ T414] usblp0: removed [ 669.429331][T10298] xt_hashlimit: max too large, truncated to 1048576 [ 669.512124][T10304] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2820'. [ 669.521308][T10304] device gretap0 entered promiscuous mode [ 669.554002][T10300] loop3: detected capacity change from 0 to 512 [ 669.663726][T10300] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 669.675775][T10309] xt_bpf: check failed: parse error [ 669.685937][T10300] ext4 filesystem being mounted at /564/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 669.875106][ T284] EXT4-fs (loop3): unmounting filesystem. [ 670.271258][T10319] loop1: detected capacity change from 0 to 512 [ 670.300065][T10316] loop3: detected capacity change from 0 to 512 [ 670.318544][T10319] EXT4-fs (loop1): 1 orphan inode deleted [ 670.335922][ T8] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 670.353568][T10316] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 670.353569][ T8] EXT4-fs error (device loop1): ext4_release_dquot:6837: comm kworker/u4:0: Failed to release dquot type 1 [ 670.356623][T10319] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 670.370413][T10316] ext4 filesystem being mounted at /565/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 670.403596][T10316] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #2: comm syz.3.2823: corrupted inode contents [ 670.422202][T10316] EXT4-fs error (device loop3): ext4_dirty_inode:6120: inode #2: comm syz.3.2823: mark_inode_dirty error [ 670.441268][T10316] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #2: comm syz.3.2823: corrupted inode contents [ 670.445535][T10319] ext4 filesystem being mounted at /549/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 670.499371][T10316] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.2823: mark_inode_dirty error [ 670.645183][ T284] EXT4-fs (loop3): unmounting filesystem. [ 670.684765][T10336] loop7: detected capacity change from 0 to 40427 [ 670.694839][T10336] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 670.707332][T10336] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 670.738613][T10336] F2FS-fs (loop7): invalid crc value [ 670.774731][T10336] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 670.849338][T10336] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 670.856410][T10336] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 670.867480][ T285] EXT4-fs (loop1): unmounting filesystem. [ 670.884093][T10336] fscrypt (loop7, inode 3): Error -61 getting encryption context [ 670.931361][T10342] loop3: detected capacity change from 0 to 40427 [ 670.947757][ T1424] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 670.954261][T10342] F2FS-fs (loop3): invalid crc value [ 670.957678][ T1424] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 670.977981][T10342] F2FS-fs (loop3): Found nat_bits in checkpoint [ 670.990049][ T1424] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 671.047281][T10342] F2FS-fs (loop3): Start checkpoint disabled! [ 671.062548][T10342] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 671.094652][ T1424] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 671.126855][T10342] F2FS-fs (loop3): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 671.252535][ T28] audit: type=1326 audit(1752351971.098:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10341 comm="syz.3.2830" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaa378e929 code=0x0 [ 671.370319][T10357] netlink: 'syz.0.2833': attribute type 3 has an invalid length. [ 671.597219][ T1424] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 671.613070][T10348] loop1: detected capacity change from 0 to 40427 [ 671.628674][ T6494] kworker/u4:6: attempt to access beyond end of device [ 671.628674][ T6494] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 671.670607][T10348] F2FS-fs (loop1): Found nat_bits in checkpoint [ 671.722957][T10348] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 671.740133][ T28] audit: type=1400 audit(1752351971.557:704): avc: denied { rename } for pid=10347 comm="syz.1.2831" name="bus" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 671.740839][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2831'. [ 671.801680][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2837'. [ 671.839686][T10376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2831'. [ 671.854709][T10375] loop3: detected capacity change from 0 to 512 [ 671.871849][ T285] syz-executor: attempt to access beyond end of device [ 671.871849][ T285] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 671.877140][T10375] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 671.895119][T10375] ext4 filesystem being mounted at /567/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.957560][ T284] EXT4-fs (loop3): unmounting filesystem. [ 672.036604][T10393] xt_hashlimit: size too large, truncated to 1048576 [ 672.043335][T10393] xt_hashlimit: max too large, truncated to 1048576 [ 672.975992][T10406] loop0: detected capacity change from 0 to 256 [ 672.983022][T10406] FAT-fs (loop0): Unrecognized mount option "shortna\e=winnt" or missing value [ 673.590991][T10406] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2844'. [ 673.616367][T10406] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2844'. [ 673.674507][T10413] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2848'. [ 673.685411][T10413] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2848'. [ 673.694512][T10413] netlink: 'syz.3.2848': attribute type 6 has an invalid length. [ 673.702425][T10413] netlink: 'syz.3.2848': attribute type 5 has an invalid length. [ 673.710449][T10413] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2848'. [ 674.603565][T10425] syz.3.2850 uses obsolete (PF_INET,SOCK_PACKET) [ 674.616035][ T28] audit: type=1400 audit(1752351974.241:705): avc: denied { ioctl } for pid=10419 comm="syz.3.2850" path="socket:[50662]" dev="sockfs" ino=50662 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 674.652368][T10426] loop7: detected capacity change from 0 to 512 [ 674.659199][T10433] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2850'. [ 674.678309][T10426] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 674.687541][T10426] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 674.734874][ T8658] EXT4-fs (loop7): unmounting filesystem. [ 674.996731][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 675.387215][ T3706] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 675.509485][ T3706] hid-generic 0000:0000:0000.0067: hidraw0: HID v0.00 Device [syz1] on syz0 [ 675.845717][T10456] futex_wake_op: syz.1.2858 tries to shift op by -1; fix this program [ 675.941513][T10456] loop1: detected capacity change from 0 to 512 [ 676.900575][T10456] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 677.930255][T10456] EXT4-fs (loop1): 1 truncate cleaned up [ 677.935991][T10456] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 678.059548][T10453] loop3: detected capacity change from 0 to 40427 [ 678.076273][T10453] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 678.084623][T10453] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 678.175108][T10467] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 678.273688][T10453] F2FS-fs (loop3): invalid crc value [ 678.285985][T10451] loop0: detected capacity change from 0 to 40427 [ 678.322643][ T285] EXT4-fs (loop1): unmounting filesystem. [ 678.373534][T10453] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 678.402444][T10451] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 678.433483][T10451] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 678.511905][T10451] F2FS-fs (loop0): invalid crc value [ 678.517709][T10453] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 678.525189][T10453] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 678.536067][T10451] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 678.562599][ T284] syz-executor: attempt to access beyond end of device [ 678.562599][ T284] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 679.023515][T10485] loop5: detected capacity change from 0 to 256 [ 679.031370][T10485] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 679.079179][T10485] xt_hashlimit: max too large, truncated to 1048576 [ 679.801167][T10491] loop1: detected capacity change from 0 to 512 [ 679.848889][T10491] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 679.863637][T10491] ext4 filesystem being mounted at /557/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 680.085947][ T285] EXT4-fs (loop1): unmounting filesystem. [ 680.123963][T10496] loop5: detected capacity change from 0 to 2048 [ 680.172289][T10496] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 680.230122][T10508] loop3: detected capacity change from 0 to 1024 [ 680.240133][ T28] audit: type=1400 audit(1752351979.507:706): avc: denied { watch watch_reads } for pid=10495 comm="syz.5.2870" path="/341/file2/ext4" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 680.241545][T10508] EXT4-fs: dax option not supported [ 680.290729][ T4732] EXT4-fs (loop5): unmounting filesystem. [ 680.622824][T10519] netlink: 'syz.0.2867': attribute type 3 has an invalid length. [ 680.739364][T10521] xt_CT: You must specify a L4 protocol and not use inversions on it [ 680.748322][T10521] x_tables: duplicate underflow at hook 3 [ 681.752812][T10535] loop7: detected capacity change from 0 to 512 [ 681.889272][T10523] loop1: detected capacity change from 0 to 40427 [ 681.897742][T10535] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 681.907353][T10535] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 681.918136][T10523] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 681.924695][T10523] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 681.939664][T10523] F2FS-fs (loop1): invalid crc value [ 681.962527][T10523] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 682.279572][T10551] binder: 10550:10551 ioctl 5000940a 200000000040 returned -22 [ 682.303993][ T1424] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 682.334211][ T1424] hid-generic 0000:0000:0000.0068: hidraw0: HID v0.00 Device [syz1] on syz0 [ 682.335379][ T8658] EXT4-fs (loop7): unmounting filesystem. [ 682.376394][T10523] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 682.390099][T10523] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 682.395431][T10558] binder: BINDER_SET_CONTEXT_MGR already set [ 682.403807][T10558] binder: 10557:10558 ioctl 4018620d 200000000040 returned -16 [ 682.414855][T10523] syz.1.2877: attempt to access beyond end of device [ 682.414855][T10523] loop1: rw=2049, sector=53248, nr_sectors = 128 limit=40427 [ 682.459823][ T285] syz-executor: attempt to access beyond end of device [ 682.459823][ T285] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 682.613380][T10568] loop1: detected capacity change from 0 to 512 [ 682.632171][T10568] EXT4-fs (loop1): 1 orphan inode deleted [ 682.637995][T10568] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 683.634738][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 683.817046][T10568] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.928981][T10581] netlink: 'syz.5.2889': attribute type 3 has an invalid length. [ 684.982664][T10583] loop0: detected capacity change from 0 to 512 [ 685.017346][ T43] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 685.235222][T10583] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 685.244534][T10583] ext4 filesystem being mounted at /562/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 686.254858][ T43] EXT4-fs error (device loop1): ext4_release_dquot:6837: comm kworker/u4:2: Failed to release dquot type 1 [ 686.682444][T10597] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.2887: deleted inode referenced: 16 [ 686.708372][ T283] EXT4-fs (loop0): unmounting filesystem. [ 686.726124][ T28] audit: type=1400 audit(1752351985.578:707): avc: denied { setattr } for pid=10567 comm="syz.1.2887" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 686.820986][T10606] loop7: detected capacity change from 0 to 128 [ 687.876066][T10606] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 687.885548][T10606] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 688.144984][ T285] EXT4-fs (loop1): unmounting filesystem. [ 689.001307][ T8658] EXT4-fs (loop7): unmounting filesystem. [ 689.020062][T10617] loop5: detected capacity change from 0 to 40427 [ 689.197419][T10600] loop3: detected capacity change from 0 to 40427 [ 689.254355][T10600] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 689.262957][T10600] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 689.281381][T10600] F2FS-fs (loop3): invalid crc value [ 689.301729][T10600] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 689.791084][T10646] netlink: 'syz.3.2907': attribute type 12 has an invalid length. [ 689.844628][T10650] cgroup: Unknown subsys name 'rlimit' [ 690.139021][T10655] loop0: detected capacity change from 0 to 512 [ 690.157655][T10655] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 690.166751][T10655] ext4 filesystem being mounted at /567/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 690.217511][T10659] loop7: detected capacity change from 0 to 512 [ 690.234459][ T283] EXT4-fs (loop0): unmounting filesystem. [ 690.248938][T10659] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 690.259770][T10659] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 690.359199][ T8658] EXT4-fs (loop7): unmounting filesystem. [ 691.729041][T10692] loop1: detected capacity change from 0 to 1024 [ 691.803249][T10692] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 692.167928][ T796] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 692.179765][ T796] hid-generic 0000:0000:0000.0069: hidraw0: HID v0.00 Device [syz1] on syz0 [ 692.336283][T10682] loop0: detected capacity change from 0 to 40427 [ 692.343443][T10682] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 692.349832][T10682] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 692.358901][T10682] F2FS-fs (loop0): invalid crc value [ 692.365568][T10682] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 692.397694][T10682] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 692.404818][T10682] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 692.423060][T10682] syz.0.2917: attempt to access beyond end of device [ 692.423060][T10682] loop0: rw=2049, sector=53248, nr_sectors = 128 limit=40427 [ 692.501223][ T283] syz-executor: attempt to access beyond end of device [ 692.501223][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 692.551062][T10692] overlayfs: unrecognized mount option "verity=off" or missing value [ 692.645226][T10721] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 692.668318][T10721] loop3: detected capacity change from 0 to 128 [ 692.676311][T10721] EXT4-fs: Ignoring removed nobh option [ 692.703002][T10721] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 692.714408][T10721] ext4 filesystem being mounted at /583/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 693.018470][ T285] EXT4-fs (loop1): unmounting filesystem. [ 694.107998][ T284] EXT4-fs (loop3): unmounting filesystem. [ 694.144678][T10747] loop0: detected capacity change from 0 to 256 [ 694.648330][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2933'. [ 694.920441][T10756] loop5: detected capacity change from 0 to 40427 [ 694.939361][T10756] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 694.955228][T10756] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 694.981786][T10756] F2FS-fs (loop5): invalid crc value [ 695.015698][T10756] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 695.116772][T10756] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 695.127431][T10756] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 695.171457][T10775] loop1: detected capacity change from 0 to 512 [ 695.183409][T10756] syz.5.2939: attempt to access beyond end of device [ 695.183409][T10756] loop5: rw=2049, sector=53248, nr_sectors = 128 limit=40427 [ 695.216611][ T4732] syz-executor: attempt to access beyond end of device [ 695.216611][ T4732] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 695.243161][T10775] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 695.252189][T10775] ext4 filesystem being mounted at /566/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 695.559551][T10780] loop3: detected capacity change from 0 to 1024 [ 695.814569][T10775] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2943'. [ 695.921028][T10780] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.2941: Invalid block bitmap block 0 in block_group 0 [ 695.935038][T10780] Quota error (device loop3): write_blk: dquota write failed [ 695.942458][T10780] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 695.952403][T10780] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.2941: Failed to acquire dquot type 0 [ 695.966896][T10780] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.2941: Freeing blocks not in datazone - block = 0, count = 4096 [ 695.980868][T10780] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.2941: Invalid inode bitmap blk 0 in block_group 0 [ 695.994068][T10780] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 696.002871][T10780] EXT4-fs (loop3): 1 orphan inode deleted [ 696.008759][T10780] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 696.257637][ T8] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 696.277589][ T8] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:0: Failed to release dquot type 0 [ 696.290173][ T285] EXT4-fs (loop1): unmounting filesystem. [ 696.324469][ T3706] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 696.402547][T10800] FAULT_INJECTION: forcing a failure. [ 696.402547][T10800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.416278][T10797] incfs: Options parsing error. -22 [ 696.421659][T10797] incfs: mount failed -22 [ 696.422597][T10800] CPU: 0 PID: 10800 Comm: syz.1.2945 Not tainted 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 696.435891][T10800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 696.445960][T10800] Call Trace: [ 696.449249][T10800] [ 696.452188][T10800] __dump_stack+0x21/0x24 [ 696.456539][T10800] dump_stack_lvl+0xee/0x150 [ 696.461148][T10800] ? __cfi_dump_stack_lvl+0x8/0x8 [ 696.466193][T10800] dump_stack+0x15/0x24 [ 696.470360][T10800] should_fail_ex+0x3d4/0x520 [ 696.475048][T10800] should_fail+0xb/0x10 [ 696.479213][T10800] should_fail_usercopy+0x1a/0x20 [ 696.484240][T10800] _copy_from_user+0x1e/0xc0 [ 696.488834][T10800] bpf_prog_test_run_skb+0x286/0x1290 [ 696.494215][T10800] ? __fget_files+0x2d5/0x330 [ 696.498907][T10800] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 696.504765][T10800] bpf_prog_test_run+0x3e3/0x630 [ 696.509712][T10800] ? slab_free_freelist_hook+0xc2/0x190 [ 696.515266][T10800] ? bpf_prog_query+0x270/0x270 [ 696.520118][T10800] ? selinux_bpf+0xce/0xf0 [ 696.524549][T10800] ? security_bpf+0x93/0xb0 [ 696.529063][T10800] __sys_bpf+0x56d/0x780 [ 696.533314][T10800] ? bpf_link_show_fdinfo+0x320/0x320 [ 696.538703][T10800] ? __cfi_ksys_write+0x10/0x10 [ 696.543561][T10800] ? debug_smp_processor_id+0x17/0x20 [ 696.549389][T10800] __x64_sys_bpf+0x7c/0x90 [ 696.553822][T10800] x64_sys_call+0x488/0x9a0 [ 696.558336][T10800] do_syscall_64+0x4c/0xa0 [ 696.562760][T10800] ? clear_bhb_loop+0x30/0x80 [ 696.567447][T10800] ? clear_bhb_loop+0x30/0x80 [ 696.572138][T10800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 696.578045][T10800] RIP: 0033:0x7f90ee58e929 [ 696.582467][T10800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.602074][T10800] RSP: 002b:00007f90ef485038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 696.610492][T10800] RAX: ffffffffffffffda RBX: 00007f90ee7b5fa0 RCX: 00007f90ee58e929 [ 696.618468][T10800] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 696.626436][T10800] RBP: 00007f90ef485090 R08: 0000000000000000 R09: 0000000000000000 [ 696.634409][T10800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.642391][T10800] R13: 0000000000000000 R14: 00007f90ee7b5fa0 R15: 00007ffe85527fb8 [ 696.650371][T10800] [ 696.668072][T10787] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2946'. [ 696.944515][ T3706] usb 4-1: Using ep0 maxpacket: 8 [ 696.950801][ T3706] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.961030][ T3706] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 696.974681][ T3706] usb 4-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 696.983774][ T3706] usb 4-1: New USB device strings: Mfr=254, Product=0, SerialNumber=0 [ 696.991993][ T796] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 696.999575][ T3706] usb 4-1: Manufacturer: syz [ 697.004898][ T3706] usb 4-1: config 0 descriptor?? [ 697.169036][ T796] usb 6-1: device descriptor read/64, error -71 [ 697.457858][ T796] usb 6-1: device descriptor read/64, error -71 [ 697.508723][T10810] loop0: detected capacity change from 0 to 40427 [ 697.516598][T10810] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 697.523037][T10810] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 697.640278][T10810] F2FS-fs (loop0): invalid crc value [ 697.789114][ T796] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 697.845531][T10810] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 697.960170][ T796] usb 6-1: device descriptor read/64, error -71 [ 698.136833][T10810] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 698.144143][T10810] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 698.160475][T10810] syz.0.2954: attempt to access beyond end of device [ 698.160475][T10810] loop0: rw=2049, sector=53248, nr_sectors = 128 limit=40427 [ 698.182688][ T283] syz-executor: attempt to access beyond end of device [ 698.182688][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 698.248763][ T796] usb 6-1: device descriptor read/64, error -71 [ 698.322983][T10830] loop0: detected capacity change from 0 to 1024 [ 698.373923][ T3706] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 698.381427][ T796] usb usb6-port1: attempt power cycle [ 698.387863][ T284] EXT4-fs (loop3): unmounting filesystem. [ 698.398415][ T3706] usb 4-1: USB disconnect, device number 31 [ 698.405326][T10830] ext4: Unknown parameter 'fsname' [ 698.447629][T10834] loop7: detected capacity change from 0 to 512 [ 698.559298][T10834] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 698.569602][T10834] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 698.621511][ T8658] EXT4-fs (loop7): unmounting filesystem. [ 700.587887][T10860] loop3: detected capacity change from 0 to 512 [ 700.594950][T10860] EXT4-fs: Ignoring removed orlov option [ 701.423933][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 705.818737][T10865] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2970'. [ 705.827730][T10865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2970'. [ 705.839161][ T796] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 705.855439][T10860] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 705.864886][T10860] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 705.943038][T10872] loop1: detected capacity change from 0 to 256 [ 705.990545][ T796] usb 6-1: device descriptor read/8, error -71 [ 706.122374][T10884] loop5: detected capacity change from 0 to 128 [ 706.465493][ T796] usb 6-1: device descriptor read/8, error -71 [ 706.555024][T10884] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 706.564583][T10884] ext4 filesystem being mounted at /366/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 706.584060][T10884] xt_CT: You must specify a L4 protocol and not use inversions on it [ 707.382555][ T4732] EXT4-fs (loop5): unmounting filesystem. [ 707.562982][ T414] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 707.571194][ T414] hid-generic 0000:0000:0000.006A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 707.604032][T10901] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=274 sclass=netlink_xfrm_socket pid=10901 comm=syz.5.2980 [ 707.617830][T10874] loop7: detected capacity change from 0 to 40427 [ 707.625117][T10874] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 707.631551][T10874] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 707.641581][T10874] F2FS-fs (loop7): invalid crc value [ 707.646793][ T414] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 707.652185][T10874] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 707.665698][ T414] hid-generic 0000:0000:0000.006B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 707.690698][T10874] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 707.697822][T10874] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 707.721704][T10874] syz.7.2968: attempt to access beyond end of device [ 707.721704][T10874] loop7: rw=2049, sector=53248, nr_sectors = 128 limit=40427 [ 707.744588][ T8658] syz-executor: attempt to access beyond end of device [ 707.744588][ T8658] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 707.793205][T10901] loop5: detected capacity change from 0 to 1024 [ 707.799936][T10901] EXT4-fs: Ignoring removed i_version option [ 707.806440][T10901] EXT4-fs (loop5): Test dummy encryption mode enabled [ 707.815381][T10901] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 707.843610][T10916] loop0: detected capacity change from 0 to 256 [ 707.850871][T10916] FAT-fs (loop0): Unrecognized mount option "†×ì [ 707.850871][T10916]  ÌV" or missing value [ 708.074451][ T28] audit: type=1326 audit(1752352005.549:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10920 comm="syz.1.2985" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90ee58e929 code=0x0 [ 708.339183][ T4732] EXT4-fs (loop5): unmounting filesystem. [ 708.367632][T10931] loop5: detected capacity change from 0 to 512 [ 708.385388][T10931] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 708.394666][T10931] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 708.769093][T10937] loop0: detected capacity change from 0 to 512 [ 708.785320][ T4732] EXT4-fs (loop5): unmounting filesystem. [ 708.796419][T10937] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 708.819729][T10937] ext4 filesystem being mounted at /581/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 708.873812][T10948] netlink: 'syz.7.2992': attribute type 4 has an invalid length. [ 708.900232][T10948] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.2992'. [ 709.013421][T10960] loop5: detected capacity change from 0 to 512 [ 710.303088][T10965] futex_wake_op: syz.7.2995 tries to shift op by -1; fix this program [ 710.370862][T10966] loop7: detected capacity change from 0 to 512 [ 711.354876][T10969] device vlan3 entered promiscuous mode [ 711.400255][T10966] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 712.304568][T10960] EXT4-fs: failed to create workqueue [ 712.310009][T10960] EXT4-fs (loop5): mount failed [ 712.452010][T10966] EXT4-fs: error -4 creating inode table initialization thread [ 712.459826][T10966] EXT4-fs (loop7): mount failed [ 713.247740][T10985] netlink: 'syz.3.2999': attribute type 3 has an invalid length. [ 713.708596][T10987] futex_wake_op: syz.1.3000 tries to shift op by -1; fix this program [ 713.807420][T10988] loop1: detected capacity change from 0 to 512 [ 714.447527][T10988] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 714.934301][T10988] EXT4-fs (loop1): 1 truncate cleaned up [ 714.940129][T10988] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 714.969962][ T283] EXT4-fs (loop0): unmounting filesystem. [ 714.989683][T10993] loop3: detected capacity change from 0 to 512 [ 715.020980][T10999] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3004'. [ 715.066604][T10993] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 715.075802][T10993] ext4 filesystem being mounted at /597/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.056037][ T285] EXT4-fs (loop1): unmounting filesystem. [ 716.082557][T11008] overlayfs: missing 'lowerdir' [ 716.088701][ T284] EXT4-fs (loop3): unmounting filesystem. [ 716.606298][ T28] audit: type=1400 audit(1752352013.528:709): avc: denied { getopt } for pid=11023 comm="syz.0.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 717.069033][T11033] device vlan3 entered promiscuous mode [ 717.274143][T11043] loop7: detected capacity change from 0 to 2048 [ 717.290452][T11043] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 717.316221][ T28] audit: type=1400 audit(1752352014.192:710): avc: denied { lock } for pid=11040 comm="syz.7.3017" path="/126/file2/blkio.bfq.avg_queue_size" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 717.499393][T11048] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.514876][T11059] loop1: detected capacity change from 0 to 256 [ 717.534679][T11048] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.542660][T11048] device bridge_slave_0 entered promiscuous mode [ 717.592899][T11048] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.618865][T11048] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.627971][T11048] device bridge_slave_1 entered promiscuous mode [ 717.795497][T11048] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.802588][T11048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.810004][T11048] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.817072][T11048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.150468][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 718.165915][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.191863][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.216738][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 718.241618][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 718.261702][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.268782][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.295083][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 718.310144][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 718.326452][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.333542][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.360907][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 718.372227][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 718.374331][T11070] loop5: detected capacity change from 0 to 512 [ 718.389918][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 718.403668][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 718.428719][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 718.440732][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 718.455172][T11070] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 718.469643][T11048] device veth0_vlan entered promiscuous mode [ 718.475777][T11070] ext4 filesystem being mounted at /373/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 718.497140][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 718.508342][T11070] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #2: comm syz.5.3023: corrupted inode contents [ 718.522676][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 718.539716][T11046] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 718.545590][T11048] device veth1_macvtap entered promiscuous mode [ 718.562273][T11070] EXT4-fs error (device loop5): ext4_dirty_inode:6120: inode #2: comm syz.5.3023: mark_inode_dirty error [ 718.624169][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 718.690221][T11070] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #2: comm syz.5.3023: corrupted inode contents [ 718.693425][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 718.709945][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 718.729015][T11070] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.3023: mark_inode_dirty error [ 719.144385][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 719.292085][T11086] loop1: detected capacity change from 0 to 2048 [ 719.361310][T11086] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 719.404878][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 719.471005][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 719.636808][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 719.670632][ T4732] EXT4-fs (loop5): unmounting filesystem. [ 719.676902][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 719.705156][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 719.907934][ T294] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 720.035651][ T8658] EXT4-fs (loop7): unmounting filesystem. [ 720.073823][ T285] EXT4-fs (loop1): unmounting filesystem. [ 720.109485][T11101] loop1: detected capacity change from 0 to 512 [ 720.115975][ T294] usb 1-1: Using ep0 maxpacket: 32 [ 720.122745][ T294] usb 1-1: config 8 has an invalid interface number: 91 but max is 0 [ 720.131362][ T294] usb 1-1: config 8 has no interface number 0 [ 720.138186][ T294] usb 1-1: config 8 interface 91 has no altsetting 0 [ 720.148157][T11101] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 720.168621][ T294] usb 1-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=c4.50 [ 720.177769][T11101] ext4 filesystem being mounted at /590/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 720.188284][ T294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.196297][ T294] usb 1-1: Product: syz [ 720.203068][T11101] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #2: comm syz.1.3031: corrupted inode contents [ 720.215084][ T294] usb 1-1: Manufacturer: syz [ 720.219811][ T294] usb 1-1: SerialNumber: syz [ 721.316107][T11101] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #2: comm syz.1.3031: mark_inode_dirty error [ 721.515039][T11101] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #2: comm syz.1.3031: corrupted inode contents [ 721.527998][T11101] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.3031: mark_inode_dirty error [ 722.138294][T11115] netlink: 'syz.3.3032': attribute type 3 has an invalid length. [ 722.784700][T11116] loop7: detected capacity change from 0 to 512 [ 722.798409][T11116] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 722.945436][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3035'. [ 722.987851][T11116] EXT4-fs (loop7): 1 truncate cleaned up [ 722.993591][T11116] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 723.228498][T11127] netlink: 'syz.3.3035': attribute type 3 has an invalid length. [ 723.250872][T11123] SELinux: Context system_u:object_r:bin_t:s0 is not valid (left unmapped). [ 723.260116][T11127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3035'. [ 723.746525][ T28] audit: type=1400 audit(1752352020.207:711): avc: denied { relabelto } for pid=11100 comm="syz.1.3031" name="file0" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:bin_t:s0" [ 723.801779][T11131] loop3: detected capacity change from 0 to 512 [ 723.814706][T11131] EXT4-fs (loop3): unsupported inode size: 0 [ 723.827739][T11131] EXT4-fs (loop3): blocksize: 2048 [ 723.960999][ T294] usb 1-1: unknown interface protocol 0x6a, assuming v1 [ 723.964152][ T8658] EXT4-fs (loop7): unmounting filesystem. [ 723.968568][ T294] usb 1-1: cannot find UAC_HEADER [ 723.980936][ T294] snd-usb-audio: probe of 1-1:8.91 failed with error -22 [ 723.989111][ T294] usb 1-1: USB disconnect, device number 40 [ 724.092042][T11120] loop3: detected capacity change from 0 to 512 [ 724.101720][ T285] EXT4-fs (loop1): unmounting filesystem. [ 724.127916][T11120] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #3: comm syz.3.3035: corrupted inode contents [ 724.174070][T11120] EXT4-fs error (device loop3): ext4_dirty_inode:6120: inode #3: comm syz.3.3035: mark_inode_dirty error [ 724.263111][T11120] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #3: comm syz.3.3035: corrupted inode contents [ 724.354179][T11120] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.3035: mark_inode_dirty error [ 724.448124][T11120] Quota error (device loop3): write_blk: dquota write failed [ 724.461827][T11120] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 724.471918][T11120] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.3035: Failed to acquire dquot type 0 [ 724.484266][ T28] audit: type=1400 audit(1752352020.899:712): avc: denied { unmount } for pid=4732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 724.484774][T11146] loop1: detected capacity change from 0 to 512 [ 724.516710][T11120] EXT4-fs (loop3): 1 orphan inode deleted [ 724.522570][T11120] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 724.531653][ T8150] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 724.541596][ T8150] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:8: Failed to release dquot type 1 [ 724.553161][T11120] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 724.565855][T11146] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 724.576639][T11146] ext4 filesystem being mounted at /591/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 724.662704][T11048] EXT4-fs (loop3): unmounting filesystem. [ 724.719153][ T285] EXT4-fs (loop1): unmounting filesystem. [ 724.844347][T11161] loop1: detected capacity change from 0 to 1024 [ 724.851442][T11161] EXT4-fs: Ignoring removed orlov option [ 724.865137][T11164] xt_bpf: check failed: parse error [ 724.877649][T11161] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 725.025441][T11173] futex_wake_op: syz.3.3040 tries to shift op by -1; fix this program [ 725.150796][T11174] netlink: 'syz.7.3046': attribute type 3 has an invalid length. [ 725.372723][T11175] loop3: detected capacity change from 0 to 512 [ 725.380628][T11175] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 725.494697][T11175] EXT4-fs (loop3): 1 truncate cleaned up [ 725.500571][T11175] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 726.199868][T11048] EXT4-fs (loop3): unmounting filesystem. [ 726.362057][T11169] loop0: detected capacity change from 0 to 40427 [ 726.376894][T11169] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 726.390061][T11169] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 726.397870][T11178] loop7: detected capacity change from 0 to 40427 [ 726.405317][T11178] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 726.411804][T11178] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 726.417893][T11186] loop5: detected capacity change from 0 to 256 [ 726.420253][ T796] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 726.427896][T11169] F2FS-fs (loop0): invalid crc value [ 726.436459][T11186] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 726.440076][T11178] F2FS-fs (loop7): invalid crc value [ 726.454190][T11169] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 726.467068][T11178] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 726.479986][T11186] cgroup: Bad value for 'name' [ 726.504687][T11169] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 726.512018][T11169] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 726.518622][T11195] netlink: 165 bytes leftover after parsing attributes in process `syz.5.3051'. [ 726.529695][T11195] netlink: 277 bytes leftover after parsing attributes in process `syz.5.3051'. [ 726.529894][T11169] syz.0.3045: attempt to access beyond end of device [ 726.529894][T11169] loop0: rw=2049, sector=53248, nr_sectors = 128 limit=40427 [ 726.541357][T11178] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 726.559998][T11178] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 726.568069][ T283] syz-executor: attempt to access beyond end of device [ 726.568069][ T283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 726.599388][T11178] syz.7.3047: attempt to access beyond end of device [ 726.599388][T11178] loop7: rw=2049, sector=53248, nr_sectors = 128 limit=40427 [ 726.624014][ T8658] syz-executor: attempt to access beyond end of device [ 726.624014][ T8658] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 726.653761][ T796] usb 2-1: Using ep0 maxpacket: 32 [ 726.660057][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 726.682618][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 726.708022][ T796] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 726.717099][ T796] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 726.738564][ T796] usb 2-1: Manufacturer: syz [ 726.744594][ T796] usb 2-1: SerialNumber: syz [ 726.750110][ T796] usb 2-1: config 0 descriptor?? [ 726.826406][ T796] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input207 [ 726.846193][T11090] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 727.179509][T11179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.187980][T11179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.274895][T11090] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 727.285184][T11090] usb 6-1: config 0 has no interface number 0 [ 727.295715][T11090] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 727.340370][T11090] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 9840, setting to 1024 [ 727.351745][T11090] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 727.361013][T11090] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.371279][T11090] usb 6-1: config 0 descriptor?? [ 727.376788][T11195] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 727.454400][T11217] netlink: 'syz.3.3057': attribute type 3 has an invalid length. [ 728.291001][ T1424] usb 2-1: USB disconnect, device number 38 [ 728.309072][T11090] prodikeys 0003:041E:2801.006C: unknown main item tag 0x0 [ 728.318591][T11090] prodikeys 0003:041E:2801.006C: unknown main item tag 0x0 [ 728.333534][T11090] prodikeys 0003:041E:2801.006C: unknown main item tag 0x0 [ 728.351636][T11090] prodikeys 0003:041E:2801.006C: unknown main item tag 0x0 [ 728.365589][T11090] prodikeys 0003:041E:2801.006C: unknown main item tag 0x0 [ 728.379431][T11090] prodikeys 0003:041E:2801.006C: unknown main item tag 0x0 [ 728.392889][T11090] prodikeys 0003:041E:2801.006C: unknown main item tag 0x0 [ 728.400855][T11090] prodikeys 0003:041E:2801.006C: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input1 [ 728.412914][T11090] hid_prodikeys: hid-prodikeys: failed to find output report [ 728.412914][T11090] [ 728.430342][ T285] EXT4-fs (loop1): unmounting filesystem. [ 728.452542][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3061'. [ 728.514371][T11238] loop3: detected capacity change from 0 to 1024 [ 728.521102][T11238] EXT4-fs: Ignoring removed bh option [ 728.526844][T11238] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 728.548981][ T1424] usb 6-1: USB disconnect, device number 17 [ 728.559013][T11238] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 728.609802][T11236] loop1: detected capacity change from 0 to 40427 [ 728.616894][T11236] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 728.623344][T11236] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 728.632330][T11236] F2FS-fs (loop1): invalid crc value [ 728.638926][T11236] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 728.673115][T11236] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 728.680329][T11236] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 728.703688][T11236] syz.1.3062: attempt to access beyond end of device [ 728.703688][T11236] loop1: rw=2049, sector=53248, nr_sectors = 128 limit=40427 [ 728.726416][ T285] syz-executor: attempt to access beyond end of device [ 728.726416][ T285] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 728.795218][T11048] EXT4-fs (loop3): unmounting filesystem. [ 728.937770][T11259] loop1: detected capacity change from 0 to 256 [ 728.944518][T11259] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 730.215915][T11268] loop0: detected capacity change from 0 to 512 [ 730.222622][T11268] EXT4-fs: Ignoring removed oldalloc option [ 733.899215][T11268] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 733.923373][T11268] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.3068: invalid indirect mapped block 4294967295 (level 0) [ 733.937628][T11268] EXT4-fs (loop0): Remounting filesystem read-only [ 733.944174][T11268] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.3068: invalid indirect mapped block 4294967295 (level 1) [ 733.960591][T11268] EXT4-fs (loop0): Remounting filesystem read-only [ 733.968336][T11268] EXT4-fs (loop0): 1 orphan inode deleted [ 733.974526][T11268] EXT4-fs (loop0): 1 truncate cleaned up [ 733.980191][T11268] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 733.999918][T11274] loop7: detected capacity change from 0 to 512 [ 734.010434][T11274] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 734.034181][T11274] EXT4-fs (loop7): 1 truncate cleaned up [ 734.039888][T11274] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 734.107395][T11280] loop3: detected capacity change from 0 to 512 [ 734.116162][T11280] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.3072: casefold flag without casefold feature [ 734.960390][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 735.069930][ T283] EXT4-fs (loop0): unmounting filesystem. [ 735.075896][T11280] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.3072: couldn't read orphan inode 15 (err -117) [ 735.087984][T11280] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 735.098627][ T8658] EXT4-fs (loop7): unmounting filesystem. [ 735.178218][T11287] futex_wake_op: syz.1.3070 tries to shift op by -1; fix this program [ 735.274638][T11290] loop1: detected capacity change from 0 to 512 [ 737.470721][T11290] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 738.232112][T11290] EXT4-fs: failed to create workqueue [ 738.237541][T11290] EXT4-fs (loop1): mount failed [ 738.417946][T11300] loop5: detected capacity change from 0 to 2048 [ 738.473093][T11300] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 738.485001][T11300] ext4 filesystem being mounted at /382/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 738.560590][ T4732] EXT4-fs (loop5): unmounting filesystem. [ 738.571534][T11304] overlayfs: failed to resolve './file0': -2 [ 739.179768][T11315] futex_wake_op: syz.1.3080 tries to shift op by -1; fix this program [ 739.374182][T11317] loop1: detected capacity change from 0 to 512 [ 742.686725][T11320] loop0: detected capacity change from 0 to 256 [ 742.701486][T11317] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 742.737052][T11320] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 742.768941][T11317] EXT4-fs (loop1): 1 truncate cleaned up [ 742.774725][T11317] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 742.852915][T11325] loop5: detected capacity change from 0 to 128 [ 742.869535][T11325] EXT4-fs: Ignoring removed nobh option [ 742.921078][T11325] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 742.936662][T11325] ext4 filesystem being mounted at /384/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 743.019728][ T285] EXT4-fs (loop1): unmounting filesystem. [ 743.085493][T11048] EXT4-fs (loop3): unmounting filesystem. [ 743.097283][ T4732] EXT4-fs (loop5): unmounting filesystem. [ 744.767235][T11331] loop3: detected capacity change from 0 to 512 [ 745.038369][T11331] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 745.091873][T11331] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 745.127080][ C1] ------------[ cut here ]------------ [ 745.132620][ C1] refcount_t: addition on 0; use-after-free. [ 745.138781][ C1] WARNING: CPU: 1 PID: 11361 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0 [ 745.148283][ C1] Modules linked in: [ 745.152222][ C1] CPU: 1 PID: 11361 Comm: syz.5.3085 Not tainted 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 745.162176][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 745.172276][ C1] RIP: 0010:refcount_warn_saturate+0x104/0x1a0 [ 745.178464][ C1] Code: 05 01 48 c7 c7 60 a3 a9 85 e8 38 fb dd fe 0f 0b eb df e8 6f b5 0c ff c6 05 cf ab 0b 05 01 48 c7 c7 a0 a2 a9 85 e8 1c fb dd fe <0f> 0b eb c3 e8 53 b5 0c ff c6 05 b4 ab 0b 05 01 48 c7 c7 00 a3 a9 [ 745.198118][ C1] RSP: 0018:ffffc900001b0820 EFLAGS: 00010246 [ 745.204247][ C1] RAX: 289c7f905b395100 RBX: 0000000000000002 RCX: ffff88811b17a880 [ 745.209849][T11349] loop1: detected capacity change from 0 to 40427 [ 745.212243][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 745.223419][T11354] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.226669][ C1] RBP: ffffc900001b0830 R08: dffffc0000000000 R09: fffff52000036081 [ 745.235815][T11354] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.241659][ C1] R10: fffff52000036081 R11: 1ffff92000036080 R12: ffffc900001b09b8 [ 745.249030][T11349] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 745.256671][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff8881097e1400 [ 745.263738][T11354] device bridge_slave_0 entered promiscuous mode [ 745.270997][ C1] FS: 00007f8e866836c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 745.277454][T11349] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 745.286250][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 745.286269][ C1] CR2: 00007f90e5807000 CR3: 000000012468c000 CR4: 00000000003506a0 [ 745.295448][T11354] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.301037][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 745.301052][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 745.301066][ C1] Call Trace: [ 745.301072][ C1] [ 745.301079][ C0] ------------[ cut here ]------------ [ 745.301086][ C0] refcount_t: saturated; leaking memory. [ 745.301079][ C1] tipc_crypto_xmit+0x1822/0x2220 [ 745.301111][ C1] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 745.301134][ C1] ? skb_clone+0x228/0x380 [ 745.301175][ C1] tipc_crypto_clone_msg+0x9b/0x160 [ 745.301198][ C1] tipc_crypto_xmit+0x1992/0x2220 [ 745.301211][ C0] WARNING: CPU: 0 PID: 11354 at lib/refcount.c:22 refcount_warn_saturate+0x158/0x1a0 [ 745.301223][ C1] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 745.301244][ C0] Modules linked in: [ 745.301245][ C1] ? __copy_skb_header+0x49f/0x630 [ 745.301256][ C0] CPU: 0 PID: 11354 Comm: syz-executor Not tainted 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 745.301278][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 745.301275][ C1] tipc_bearer_xmit_skb+0x226/0x380 [ 745.301290][ C0] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 745.301301][ C1] ? __skb_clone+0x47a/0x790 [ 745.301314][ C0] Code: 05 01 48 c7 c7 40 a2 a9 85 e8 e4 fa dd fe 0f 0b eb 8b e8 1b b5 0c ff c6 05 7a ab 0b 05 01 48 c7 c7 40 a2 a9 85 e8 c8 fa dd fe <0f> 0b e9 6c ff ff ff e8 fc b4 0c ff c6 05 5f ab 0b 05 01 48 c7 c7 [ 745.301331][ C0] RSP: 0018:ffffc90000007820 EFLAGS: 00010246 [ 745.301330][ C1] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 745.301344][ C0] [ 745.301349][ C0] RAX: 49b8be39447be800 RBX: 0000000000000001 RCX: ffff888122c75100 [ 745.301358][ C1] ? skb_clone+0x228/0x380 [ 745.301364][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 745.301376][ C0] RBP: ffffc90000007830 R08: 0000000000000004 R09: 0000000000000003 [ 745.301376][ C1] tipc_disc_timeout+0x6a2/0x830 [ 745.301390][ C0] R10: fffff52000000eb4 R11: 1ffff92000000eb4 R12: ffffc900000079b8 [ 745.301405][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8881097e1400 [ 745.301401][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 745.301419][ C0] FS: 000055555cd10500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 745.301427][ C1] ? __kasan_check_write+0x14/0x20 [ 745.301438][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 745.301452][ C0] CR2: 00007f90ee5900c0 CR3: 000000010db93000 CR4: 00000000003506b0 [ 745.301456][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 745.301470][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 745.301483][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 745.301486][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 745.301496][ C0] Call Trace: [ 745.301501][ C0] [ 745.301509][ C0] tipc_crypto_xmit+0x1822/0x2220 [ 745.301510][ C1] call_timer_fn+0x46/0x2a0 [ 745.301535][ C0] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 745.301535][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 745.301563][ C0] ? skb_clone+0x228/0x380 [ 745.301564][ C1] __run_timers+0x639/0x9a0 [ 745.301582][ C0] tipc_crypto_clone_msg+0x9b/0x160 [ 745.301593][ C1] ? calc_index+0x200/0x200 [ 745.301604][ C0] tipc_crypto_xmit+0x1992/0x2220 [ 745.301619][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 745.301630][ C0] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 745.301650][ C1] run_timer_softirq+0x6a/0xf0 [ 745.301651][ C0] ? __copy_skb_header+0x49f/0x630 [ 745.301674][ C1] handle_softirqs+0x1d7/0x600 [ 745.301681][ C0] tipc_bearer_xmit_skb+0x226/0x380 [ 745.301696][ C1] ? irqtime_account_irq+0xc4/0x240 [ 745.301707][ C0] ? __skb_clone+0x47a/0x790 [ 745.301725][ C1] __irq_exit_rcu+0x52/0xf0 [ 745.301735][ C0] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 745.301745][ C1] irq_exit_rcu+0x9/0x10 [ 745.301763][ C0] ? skb_clone+0x228/0x380 [ 745.301764][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 745.301781][ C0] tipc_disc_timeout+0x6a2/0x830 [ 745.301790][ C1] [ 745.301797][ C1] [ 745.301804][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 745.301806][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 745.301826][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80 [ 745.301833][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 745.301858][ C1] Code: 40 d2 ed 86 e8 dc 0b c4 fc 4c 89 f7 48 83 3d d1 8c fd 01 00 74 30 e8 1e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 a6 50 5b fc 65 8b 05 37 28 12 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 745.301856][ C0] call_timer_fn+0x46/0x2a0 [ 745.301875][ C1] RSP: 0018:ffffc90004f4f4c0 EFLAGS: 00000206 [ 745.301880][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 745.301893][ C1] RAX: 0000000000000001 RBX: 0000000000000a02 RCX: dffffc0000000000 [ 745.301907][ C1] RDX: ffffc90009639000 RSI: 0000000000000a02 RDI: 0000000000000001 [ 745.301910][ C0] __run_timers+0x639/0x9a0 [ 745.301921][ C1] RBP: ffffc90004f4f4d0 R08: dffffc0000000000 R09: fffff94000a16a91 [ 745.301936][ C1] R10: fffff94000a16a91 R11: 1ffffd4000a16a90 R12: dffffc0000000000 [ 745.301939][ C0] ? calc_index+0x200/0x200 [ 745.301951][ C1] R13: dffffc0000000000 R14: ffffea000467ab80 R15: 0000000000000020 [ 745.301965][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 745.301971][ C1] release_pages+0x1b6/0xb20 [ 745.301994][ C0] run_timer_softirq+0x6a/0xf0 [ 745.302001][ C1] ? __cfi_release_pages+0x10/0x10 [ 745.302018][ C0] handle_softirqs+0x1d7/0x600 [ 745.302031][ C1] ? __kasan_check_read+0x11/0x20 [ 745.302040][ C0] ? irqtime_account_irq+0xc4/0x240 [ 745.302060][ C1] free_pages_and_swap_cache+0x86/0xa0 [ 745.302068][ C0] __irq_exit_rcu+0x52/0xf0 [ 745.302087][ C0] irq_exit_rcu+0x9/0x10 [ 745.302085][ C1] tlb_finish_mmu+0x1aa/0x370 [ 745.302106][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 745.302116][ C1] unmap_region+0x28d/0x2e0 [ 745.302130][ C0] [ 745.302136][ C0] [ 745.302143][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 745.302144][ C1] ? trace_raw_output_exit_mmap+0xc0/0xc0 [ 745.302165][ C0] RIP: 0010:vprintk_emit+0x148/0x410 [ 745.302188][ C0] Code: 00 00 00 bf 01 00 00 00 e8 25 3b f5 ff e8 50 14 00 00 89 c3 31 ff 89 c6 e8 35 a2 19 00 85 db 4c 8b 2c 24 74 0c e8 08 9e 19 00 d3 02 00 00 eb 45 48 c7 c3 40 ac ee 86 48 c7 c7 40 ac ee 86 be [ 745.302186][ C1] do_mas_align_munmap+0xb94/0x11b0 [ 745.302206][ C0] RSP: 0018:ffffc9000318eb80 EFLAGS: 00000293 [ 745.302217][ C1] ? do_mas_munmap+0x2b0/0x2b0 [ 745.302223][ C0] RAX: ffffffff81565b20 RBX: 0000000000000200 RCX: ffff888122c75100 [ 745.302237][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 745.302251][ C0] RBP: ffffc9000318ec28 R08: 0000000000000004 R09: 0000000000000003 [ 745.302246][ C1] ? mas_find+0x307/0x370 [ 745.302264][ C0] R10: fffff52000631d60 R11: 1ffff92000631d60 R12: dffffc0000000000 [ 745.302275][ C1] do_mas_munmap+0x241/0x2b0 [ 745.302280][ C0] R13: 1ffff92000631d74 R14: 00000000ffffffff R15: 0000000000000036 [ 745.302297][ C0] ? vprintk_emit+0x300/0x410 [ 745.302302][ C1] mmap_region+0x6d7/0x2140 [ 745.302321][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 745.302330][ C1] ? __cfi_mmap_region+0x10/0x10 [ 745.302345][ C0] vprintk_default+0x26/0x30 [ 745.302354][ C1] ? __kasan_check_read+0x11/0x20 [ 745.302367][ C0] vprintk+0x7a/0x80 [ 745.302381][ C1] ? cap_mmap_addr+0x165/0x2e0 [ 745.302392][ C0] _printk+0xcc/0x118 [ 745.302406][ C1] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10 [ 745.302416][ C0] ? __cfi__printk+0x8/0x8 [ 745.302430][ C1] ? get_unmapped_area+0x313/0x380 [ 745.302440][ C0] ? port_cost+0x1fc/0x340 [ 745.302456][ C1] do_mmap+0x7ae/0xcf0 [ 745.302465][ C0] ? br_port_carrier_check+0x3d0/0x3d0 [ 745.302481][ C1] ? __cfi_do_mmap+0x10/0x10 [ 745.302494][ C0] br_set_state+0x2ad/0x460 [ 745.302507][ C1] vm_mmap_pgoff+0x1f5/0x3f0 [ 745.302522][ C0] ? do_syscall_64+0x4c/0xa0 [ 745.302540][ C0] br_init_port+0x9c/0x210 [ 745.302537][ C1] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 745.302561][ C0] new_nbp+0x311/0x460 [ 745.302567][ C1] ? up_read+0x56/0x1d0 [ 745.302587][ C0] br_add_if+0x2a1/0xe90 [ 745.302595][ C1] ksys_mmap_pgoff+0xf6/0x1d0 [ 745.302615][ C0] ? __kernel_text_address+0xd/0x30 [ 745.302621][ C1] __x64_sys_mmap+0xfa/0x110 [ 745.302641][ C1] x64_sys_call+0x8fd/0x9a0 [ 745.302640][ C0] ? __kasan_check_read+0x11/0x20 [ 745.302665][ C1] do_syscall_64+0x4c/0xa0 [ 745.302669][ C0] br_add_slave+0x2c/0x40 [ 745.302682][ C1] ? clear_bhb_loop+0x30/0x80 [ 745.302690][ C0] do_setlink+0xdd5/0x3d50 [ 745.302704][ C1] ? clear_bhb_loop+0x30/0x80 [ 745.302716][ C0] ? __stack_depot_save+0x36/0x480 [ 745.302726][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.302746][ C1] RIP: 0033:0x7f8e8578e929 [ 745.302745][ C0] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 745.302762][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.302767][ C0] ? __sys_sendto+0x464/0x5e0 [ 745.302779][ C1] RSP: 002b:00007f8e86683038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 745.302786][ C0] ? kasan_set_track+0x60/0x70 [ 745.302799][ C1] RAX: ffffffffffffffda RBX: 00007f8e859b6240 RCX: 00007f8e8578e929 [ 745.302805][ C0] ? kasan_set_track+0x4b/0x70 [ 745.302814][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 745.302823][ C0] ? kasan_save_alloc_info+0x25/0x30 [ 745.302830][ C1] RBP: 00007f8e85810b39 R08: ffffffffffffffff R09: 0000000000000000 [ 745.302845][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 745.302849][ C0] ? __kasan_kmalloc+0x95/0xb0 [ 745.302858][ C1] R13: 0000000000000001 R14: 00007f8e859b6240 R15: 00007ffe5d852928 [ 745.302877][ C1] [ 745.302869][ C0] ? kmalloc_trace+0x40/0xb0 [ 745.302883][ C1] ---[ end trace 0000000000000000 ]--- [ 745.302903][ C1] ------------[ cut here ]------------ [ 745.302909][ C1] refcount_t: underflow; use-after-free. [ 745.302896][ C0] ? __nla_validate_parse+0x1fe0/0x29a0 [ 745.302928][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.302956][ C0] ? __nla_validate+0x60/0x60 [ 745.302987][ C0] ? mutex_is_locked+0x12/0x40 [ 745.303014][ C0] rtnl_newlink+0x17d9/0x2030 [ 745.303022][ C1] WARNING: CPU: 1 PID: 11361 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 745.303033][ C0] ? memcpy+0x56/0x70 [ 745.303052][ C1] Modules linked in: [ 745.303062][ C0] ? rtnl_newlink+0x581/0x2030 [ 745.303063][ C1] CPU: 1 PID: 11361 Comm: syz.5.3085 Tainted: G W 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 745.303084][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 745.303085][ C0] ? __cfi_rtnl_newlink+0x10/0x10 [ 745.303095][ C1] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 745.303104][ C0] ? selinux_capable+0x29c/0x380 [ 745.303118][ C1] Code: 05 01 48 c7 c7 a0 a2 a9 85 e8 1c fb dd fe 0f 0b eb c3 e8 53 b5 0c ff c6 05 b4 ab 0b 05 01 48 c7 c7 00 a3 a9 85 e8 00 fb dd fe <0f> 0b eb a7 e8 37 b5 0c ff c6 05 95 ab 0b 05 01 48 c7 c7 40 a2 a9 [ 745.303135][ C1] RSP: 0018:ffffc900001b0820 EFLAGS: 00010246 [ 745.303131][ C0] ? __cfi_selinux_capable+0x10/0x10 [ 745.303153][ C1] [ 745.303158][ C1] RAX: 289c7f905b395100 RBX: 0000000000000003 RCX: ffff88811b17a880 [ 745.303165][ C0] ? __cfi_mutex_lock+0x10/0x10 [ 745.303174][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 745.303187][ C1] RBP: ffffc900001b0830 R08: 0000000000000004 R09: 0000000000000003 [ 745.303185][ C0] ? ns_capable+0x8c/0xf0 [ 745.303200][ C1] R10: fffff520000360b4 R11: 1ffff920000360b4 R12: 00000000c0000000 [ 745.303203][ C0] ? netlink_net_capable+0x125/0x160 [ 745.303216][ C1] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff8881097e1400 [ 745.303228][ C0] ? __cfi_rtnl_newlink+0x10/0x10 [ 745.303231][ C1] FS: 00007f8e866836c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 745.303249][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 745.303247][ C0] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 745.303264][ C1] CR2: 00007f90e5807000 CR3: 000000012468c000 CR4: 00000000003506a0 [ 745.303272][ C0] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 745.303282][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 745.303295][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 745.303294][ C0] ? kernel_text_address+0xa0/0xd0 [ 745.303308][ C1] Call Trace: [ 745.303314][ C1] [ 745.303319][ C0] ? __kernel_text_address+0xd/0x30 [ 745.303321][ C1] tipc_crypto_xmit+0x195e/0x2220 [ 745.303343][ C0] ? unwind_get_return_address+0x4d/0x90 [ 745.303347][ C1] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 745.303369][ C1] ? skb_clone+0x228/0x380 [ 745.303366][ C0] ? memcpy+0x56/0x70 [ 745.303388][ C1] tipc_crypto_clone_msg+0x9b/0x160 [ 745.303393][ C0] ? avc_has_perm_noaudit+0x2f4/0x460 [ 745.303410][ C1] tipc_crypto_xmit+0x1992/0x2220 [ 745.303420][ C0] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 745.303436][ C1] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 745.303447][ C0] ? slab_post_alloc_hook+0x4f/0x2d0 [ 745.303457][ C1] ? __copy_skb_header+0x49f/0x630 [ 745.303470][ C0] ? kmem_cache_alloc_node+0x181/0x340 [ 745.303488][ C1] tipc_bearer_xmit_skb+0x226/0x380 [ 745.303494][ C0] ? __alloc_skb+0xea/0x4b0 [ 745.303514][ C1] ? __skb_clone+0x47a/0x790 [ 745.303522][ C0] ? avc_has_perm+0x158/0x240 [ 745.303542][ C1] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 745.303545][ C0] ? __alloc_skb+0x236/0x4b0 [ 745.303581][ C1] ? skb_clone+0x228/0x380 [ 745.303582][ C0] ? netlink_sendmsg+0x626/0xbc0 [ 745.303599][ C1] tipc_disc_timeout+0x6a2/0x830 [ 745.303609][ C0] ? __cfi_avc_has_perm+0x10/0x10 [ 745.303622][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 745.303632][ C0] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 745.303645][ C1] ? __kasan_check_write+0x14/0x20 [ 745.303660][ C0] netlink_rcv_skb+0x1f2/0x440 [ 745.303672][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 745.303685][ C0] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 745.303699][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 745.303706][ C0] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 745.303721][ C1] call_timer_fn+0x46/0x2a0 [ 745.303733][ C0] ? __netlink_lookup+0x387/0x3b0 [ 745.303743][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 745.303761][ C0] rtnetlink_rcv+0x1c/0x20 [ 745.303783][ C1] __run_timers+0x639/0x9a0 [ 745.303799][ C0] netlink_unicast+0x8b1/0xa30 [ 745.303811][ C1] ? calc_index+0x200/0x200 [ 745.303827][ C0] netlink_sendmsg+0x8aa/0xbc0 [ 745.303837][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 745.303858][ C0] ? __cfi_netlink_sendmsg+0x10/0x10 [ 745.303867][ C1] run_timer_softirq+0x6a/0xf0 [ 745.303885][ C0] ? call_rcu+0xb83/0xf90 [ 745.303891][ C1] handle_softirqs+0x1d7/0x600 [ 745.303914][ C1] ? irqtime_account_irq+0xc4/0x240 [ 745.303914][ C0] ? security_socket_sendmsg+0x93/0xb0 [ 745.303942][ C1] __irq_exit_rcu+0x52/0xf0 [ 745.303945][ C0] __sys_sendto+0x464/0x5e0 [ 745.303961][ C1] irq_exit_rcu+0x9/0x10 [ 745.303964][ C0] ? __cfi___sys_sendto+0x10/0x10 [ 745.303981][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 745.303985][ C0] ? blkcg_maybe_throttle_current+0x1df/0x9f0 [ 745.304005][ C1] [ 745.304011][ C1] [ 745.304011][ C0] ? __cfi_blkcg_maybe_throttle_current+0x10/0x10 [ 745.304019][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 745.304034][ C0] ? filp_close+0x111/0x160 [ 745.304041][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80 [ 745.304058][ C0] __x64_sys_sendto+0xe5/0x100 [ 745.304072][ C1] Code: 40 d2 ed 86 e8 dc 0b c4 fc 4c 89 f7 48 83 3d d1 8c fd 01 00 74 30 e8 1e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 a6 50 5b fc 65 8b 05 37 28 12 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 745.304078][ C0] x64_sys_call+0x83/0x9a0 [ 745.304089][ C1] RSP: 0018:ffffc90004f4f4c0 EFLAGS: 00000206 [ 745.304100][ C0] do_syscall_64+0x4c/0xa0 [ 745.304105][ C1] RAX: 0000000000000001 RBX: 0000000000000a02 RCX: dffffc0000000000 [ 745.304118][ C1] RDX: ffffc90009639000 RSI: 0000000000000a02 RDI: 0000000000000001 [ 745.304117][ C0] ? clear_bhb_loop+0x30/0x80 [ 745.304132][ C1] RBP: ffffc90004f4f4d0 R08: dffffc0000000000 R09: fffff94000a16a91 [ 745.304139][ C0] ? clear_bhb_loop+0x30/0x80 [ 745.304155][ C1] R10: fffff94000a16a91 R11: 1ffffd4000a16a90 R12: dffffc0000000000 [ 745.304161][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.304171][ C1] R13: dffffc0000000000 R14: ffffea000467ab80 R15: 0000000000000020 [ 745.304182][ C0] RIP: 0033:0x7fd97bd90763 [ 745.304191][ C1] release_pages+0x1b6/0xb20 [ 745.304197][ C0] Code: 64 89 02 48 c7 c0 ff ff ff ff eb b7 66 2e 0f 1f 84 00 00 00 00 00 90 80 3d e1 5d 1f 00 00 41 89 ca 74 14 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 75 c3 0f 1f 40 00 55 48 83 ec 30 44 89 4c 24 [ 745.304215][ C0] RSP: 002b:00007ffc19e4e098 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 745.304221][ C1] ? __cfi_release_pages+0x10/0x10 [ 745.304236][ C0] RAX: ffffffffffffffda RBX: 00007fd97cae4620 RCX: 00007fd97bd90763 [ 745.304251][ C0] RDX: 0000000000000028 RSI: 00007fd97cae4670 RDI: 0000000000000003 [ 745.304251][ C1] ? __kasan_check_read+0x11/0x20 [ 745.304264][ C0] RBP: 0000000000000001 R08: 00007ffc19e4e0b4 R09: 000000000000000c [ 745.304278][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 745.304279][ C1] free_pages_and_swap_cache+0x86/0xa0 [ 745.304290][ C0] R13: 0000000000000000 R14: 00007fd97cae4670 R15: 0000000000000000 [ 745.304308][ C0] [ 745.304314][ C0] ---[ end trace 0000000000000000 ]--- [ 745.304305][ C1] tlb_finish_mmu+0x1aa/0x370 [ 745.304335][ C1] unmap_region+0x28d/0x2e0 [ 745.304361][ C1] ? trace_raw_output_exit_mmap+0xc0/0xc0 [ 745.304393][ C1] do_mas_align_munmap+0xb94/0x11b0 [ 745.304423][ C1] ? do_mas_munmap+0x2b0/0x2b0 [ 745.313533][T11349] F2FS-fs (loop1): invalid crc value [ 745.319436][ C1] ? mas_find+0x307/0x370 [ 745.327592][T11354] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.335417][ C1] do_mas_munmap+0x241/0x2b0 [ 745.335447][ C1] mmap_region+0x6d7/0x2140 [ 745.335473][ C1] ? __cfi_mmap_region+0x10/0x10 [ 745.335495][ C1] ? __kasan_check_read+0x11/0x20 [ 745.335522][ C1] ? cap_mmap_addr+0x165/0x2e0 [ 745.335546][ C1] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10 [ 745.339600][T11354] device bridge_slave_1 entered promiscuous mode [ 745.341702][ C1] ? get_unmapped_area+0x313/0x380 [ 745.341732][ C1] do_mmap+0x7ae/0xcf0 [ 745.356491][T11349] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 745.357853][ C1] ? __cfi_do_mmap+0x10/0x10 [ 745.388745][T11349] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 745.392830][ C1] vm_mmap_pgoff+0x1f5/0x3f0 [ 745.396863][T11349] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 745.401856][ C1] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 747.136380][ C1] ? up_read+0x56/0x1d0 [ 747.140554][ C1] ksys_mmap_pgoff+0xf6/0x1d0 [ 747.145232][ C1] __x64_sys_mmap+0xfa/0x110 [ 747.149829][ C1] x64_sys_call+0x8fd/0x9a0 [ 747.154328][ C1] do_syscall_64+0x4c/0xa0 [ 747.158744][ C1] ? clear_bhb_loop+0x30/0x80 [ 747.163415][ C1] ? clear_bhb_loop+0x30/0x80 [ 747.168084][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 747.173981][ C1] RIP: 0033:0x7f8e8578e929 [ 747.178387][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.197994][ C1] RSP: 002b:00007f8e86683038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 747.206418][ C1] RAX: ffffffffffffffda RBX: 00007f8e859b6240 RCX: 00007f8e8578e929 [ 747.214396][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 747.222363][ C1] RBP: 00007f8e85810b39 R08: ffffffffffffffff R09: 0000000000000000 [ 747.230364][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 747.238335][ C1] R13: 0000000000000001 R14: 00007f8e859b6240 R15: 00007ffe5d852928 [ 747.246313][ C1] [ 747.249327][ C1] ---[ end trace 0000000000000000 ]--- [ 747.294605][T11349] syz.1.3088: attempt to access beyond end of device [ 747.294605][T11349] loop1: rw=2049, sector=53248, nr_sectors = 128 limit=40427 [ 747.309233][T11362] f2fs_ckpt-7:1: attempt to access beyond end of device [ 747.309233][T11362] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 747.330596][T11367] loop7: detected capacity change from 0 to 512 [ 747.339517][T11367] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 747.376208][T11048] EXT4-fs (loop3): unmounting filesystem. [ 747.436579][T10976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 747.449752][T10976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 747.470002][ T8150] tipc: Disabling bearer [ 747.475317][ T8150] tipc: Disabling bearer [ 747.488555][ T8150] tipc: Disabling bearer [ 747.506933][ T8150] tipc: Left network mode [ 747.621261][T11354] device veth0_vlan entered promiscuous mode [ 747.636208][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 747.650419][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 747.975525][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 748.038364][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 748.090287][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 748.098790][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 748.107105][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.114168][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.126138][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 748.134932][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 748.143221][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.150268][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.157681][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 748.165835][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 748.173922][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 748.181907][T11390] netlink: 'syz.1.3091': attribute type 4 has an invalid length. [ 748.272574][T11394] loop5: detected capacity change from 0 to 512 [ 748.284635][T11394] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 748.303513][T11394] EXT4-fs (loop5): orphan cleanup on readonly fs [ 748.313478][T11394] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3098: bg 0: block 248: padding at end of block bitmap is not set [ 748.329291][T11394] Quota error (device loop5): write_blk: dquota write failed [ 748.336983][T11394] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 748.347066][T11394] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.3098: Failed to acquire dquot type 1 [ 748.361577][T11394] EXT4-fs (loop5): 1 truncate cleaned up [ 748.368293][T11394] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 749.603189][T11396] loop3: detected capacity change from 0 to 256 [ 749.616710][T11354] device veth1_macvtap entered promiscuous mode [ 749.643876][ T4732] EXT4-fs (loop5): unmounting filesystem. [ 749.650448][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 749.661217][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 749.673822][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 749.718516][T11400] loop0: detected capacity change from 0 to 512 [ 749.744381][T11400] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 749.845260][T11400] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 749.916472][ T294] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 750.001803][T11408] futex_wake_op: syz.7.3102 tries to shift op by -1; fix this program [ 750.106324][T11409] loop7: detected capacity change from 0 to 512 [ 750.120249][T11409] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 750.190787][T11409] EXT4-fs (loop7): 1 truncate cleaned up [ 750.196616][T11409] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 750.951017][T11398] loop5: detected capacity change from 0 to 40427 [ 750.960495][T11398] F2FS-fs (loop5): invalid crc value [ 750.969693][T11398] F2FS-fs (loop5): Found nat_bits in checkpoint [ 751.009655][T11398] F2FS-fs (loop5): Start checkpoint disabled! [ 751.016409][T11398] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 751.087011][T11354] EXT4-fs (loop0): unmounting filesystem. [ 751.098910][ T8658] EXT4-fs (loop7): unmounting filesystem. [ 751.129282][ T28] audit: type=1400 audit(1752352047.817:713): avc: denied { setattr } for pid=11417 comm="syz.0.3103" name="file0" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 751.160370][T11418] device wg2 entered promiscuous mode [ 751.167860][T11398] F2FS-fs (loop5): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 751.203117][T11424] device macsec1 entered promiscuous mode [ 751.209482][T11424] bridge0: port 3(macsec1) entered blocking state [ 751.215988][T11424] bridge0: port 3(macsec1) entered disabled state [ 751.246480][T11411] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.253652][T11411] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.261547][T11411] device bridge_slave_0 entered promiscuous mode [ 751.268372][T11398] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3100'. [ 751.277455][T11398] netem: unknown loss type 13 [ 751.282144][T11398] netem: change failed [ 751.286386][T11411] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.293465][T11411] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.301153][T11411] device bridge_slave_1 entered promiscuous mode [ 751.307746][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3100'. [ 751.313795][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3104'. [ 751.327398][ T8150] device bridge_slave_0 left promiscuous mode [ 751.336857][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.344671][ T413] kworker/u4:5: attempt to access beyond end of device [ 751.344671][ T413] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 751.359597][ T8150] ------------[ cut here ]------------ [ 751.365143][ T8150] refcount_t: saturated; leaking memory. [ 751.384900][ T8150] WARNING: CPU: 0 PID: 8150 at lib/refcount.c:19 refcount_warn_saturate+0x13c/0x1a0 [ 751.394384][ T8150] Modules linked in: [ 751.398312][ T8150] CPU: 0 PID: 8150 Comm: kworker/u4:8 Tainted: G W 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 751.409837][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 751.420194][ T8150] Workqueue: netns cleanup_net [ 751.425168][ T8150] RIP: 0010:refcount_warn_saturate+0x13c/0x1a0 [ 751.431367][ T8150] Code: 05 01 48 c7 c7 00 a3 a9 85 e8 00 fb dd fe 0f 0b eb a7 e8 37 b5 0c ff c6 05 95 ab 0b 05 01 48 c7 c7 40 a2 a9 85 e8 e4 fa dd fe <0f> 0b eb 8b e8 1b b5 0c ff c6 05 7a ab 0b 05 01 48 c7 c7 40 a2 a9 [ 751.451228][ T8150] RSP: 0018:ffffc90008e27600 EFLAGS: 00010246 [ 751.457378][ T8150] RAX: 076d00b92f616700 RBX: 0000000000000000 RCX: ffff888120b2a880 [ 751.465373][ T8150] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 751.473373][ T8150] RBP: ffffc90008e27610 R08: dffffc0000000000 R09: fffff520011c4e3d [ 751.481406][ T8150] R10: fffff520011c4e3d R11: 1ffff920011c4e3c R12: 1ffff920011c4ecc [ 751.489445][ T8150] R13: ffffc90008e27680 R14: 0000000000000000 R15: ffff88810c57e98c [ 751.497442][ T8150] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 751.506401][ T8150] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 751.509384][ T542] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 751.513017][ T8150] CR2: 00007f548d5b7bac CR3: 0000000136037000 CR4: 00000000003506b0 [ 751.528577][ T8150] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 751.536574][ T8150] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 751.544643][ T8150] Call Trace: [ 751.547931][ T8150] [ 751.550866][ T8150] nf_nat_masq_schedule+0x46b/0x4e0 [ 751.556096][ T8150] ? __cfi_inet_cmp+0x10/0x10 [ 751.560776][ T8150] ? masq_device_event+0xd0/0xd0 [ 751.565737][ T8150] ? memcpy+0x56/0x70 [ 751.569742][ T8150] masq_inet6_event+0xe6/0x130 [ 751.574538][ T8150] atomic_notifier_call_chain+0xaa/0x120 [ 751.580301][ T8150] inet6addr_notifier_call_chain+0x24/0x30 [ 751.586180][ T8150] addrconf_ifdown+0xe12/0x1910 [ 751.591067][ T8150] ? addrconf_cleanup+0x130/0x130 [ 751.596120][ T8150] ? __kasan_check_write+0x14/0x20 [ 751.601251][ T8150] ? mutex_unlock+0x89/0x220 [ 751.605941][ T8150] ? __cfi_mutex_unlock+0x10/0x10 [ 751.610969][ T8150] ? _raw_spin_lock+0x8e/0xe0 [ 751.615670][ T8150] ? __cfi__raw_spin_lock+0x10/0x10 [ 751.620883][ T8150] addrconf_notify+0x39f/0xe40 [ 751.625649][ T8150] ? ip6mr_device_event+0x1e7/0x200 [ 751.630869][ T8150] raw_notifier_call_chain+0xa1/0x110 [ 751.636247][ T8150] unregister_netdevice_many+0xf8f/0x1820 [ 751.641985][ T8150] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 751.648155][ T8150] ? unregister_netdevice_queue+0x1aa/0x360 [ 751.654076][ T8150] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 751.660338][ T8150] ? br_dev_delete+0xfc/0x110 [ 751.665029][ T8150] default_device_exit_batch+0x9b9/0xa50 [ 751.670680][ T8150] ? idr_destroy+0x21e/0x290 [ 751.675281][ T8150] ? __cfi_mutex_lock+0x10/0x10 [ 751.680135][ T8150] ? __cfi_default_device_exit_batch+0x10/0x10 [ 751.686306][ T8150] ? rtnl_unlock+0xe/0x10 [ 751.690638][ T8150] ? __cfi_default_device_exit_batch+0x10/0x10 [ 751.691140][ T542] usb 1-1: device descriptor read/64, error -71 [ 751.696814][ T8150] cleanup_net+0x62d/0xb00 [ 751.707564][ T8150] ? __cfi_cleanup_net+0x10/0x10 [ 751.712533][ T8150] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 751.717908][ T8150] process_one_work+0x71f/0xc40 [ 751.722767][ T8150] worker_thread+0xa29/0x11f0 [ 751.727457][ T8150] kthread+0x281/0x320 [ 751.731546][ T8150] ? __cfi_worker_thread+0x10/0x10 [ 751.736664][ T8150] ? __cfi_kthread+0x10/0x10 [ 751.741273][ T8150] ret_from_fork+0x1f/0x30 [ 751.745714][ T8150] [ 751.748741][ T8150] ---[ end trace 0000000000000000 ]--- [ 751.754358][ T8150] ------------[ cut here ]------------ [ 751.759902][ T8150] WARNING: CPU: 1 PID: 8150 at lib/ref_tracker.c:77 ref_tracker_alloc+0x2ae/0x430 [ 751.769168][ T8150] Modules linked in: [ 751.773072][ T8150] CPU: 1 PID: 8150 Comm: kworker/u4:8 Tainted: G W 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 751.784645][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 751.793788][ T294] usb 4-1: device not accepting address 32, error -71 [ 751.794762][ T8150] Workqueue: netns cleanup_net [ 751.806527][ T8150] RIP: 0010:ref_tracker_alloc+0x2ae/0x430 [ 751.812272][ T8150] Code: f9 e5 fe 48 bb 00 00 00 00 00 fc ff df 4c 8b 74 24 08 48 8b 7c 24 10 48 8b 74 24 18 e8 1b 47 66 02 31 c0 eb 6d e8 52 f9 e5 fe <0f> 0b 4d 85 e4 0f 85 09 fe ff ff 4c 8b 64 24 10 4d 8d 74 24 0c 4c [ 751.831897][ T8150] RSP: 0018:ffffc90008e274e0 EFLAGS: 00010293 [ 751.837964][ T8150] RAX: ffffffff8289fe1e RBX: dffffc0000000000 RCX: ffff888120b2a880 [ 751.845945][ T8150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90008e275a0 [ 751.849389][ T3769] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 751.853949][ T8150] RBP: ffffc90008e27610 R08: dffffc0000000000 R09: ffffc90008e27520 [ 751.862000][ T3769] hid-generic 0000:0000:0000.006D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 751.869289][ T8150] R10: fffff520011c4eb4 R11: 1ffff920011c4ea4 R12: ffff888114ab8038 [ 751.886902][ T8150] R13: ffff88810c57e9a0 R14: 0000000000000a20 R15: ffff88810c57e990 [ 751.886924][ T8150] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 751.886941][ T8150] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 751.910513][ T8150] CR2: 0000001b3111dff8 CR3: 000000012defa000 CR4: 00000000003506a0 [ 751.910538][ T8150] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 751.926530][ T8150] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 751.934540][ T8150] Call Trace: [ 751.937861][ T8150] [ 751.940798][ T8150] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 751.946267][ T8150] ? kasan_save_alloc_info+0x25/0x30 [ 751.951568][ T8150] ? __kasan_kmalloc+0x95/0xb0 [ 751.956334][ T8150] ? nf_nat_masq_schedule+0x238/0x4e0 [ 751.961727][ T8150] ? kmalloc_trace+0x40/0xb0 [ 751.966328][ T8150] nf_nat_masq_schedule+0x338/0x4e0 [ 751.971634][ T8150] ? __cfi_inet_cmp+0x10/0x10 [ 751.976335][ T8150] ? masq_device_event+0xd0/0xd0 [ 751.981325][ T8150] ? memcpy+0x56/0x70 [ 751.985329][ T8150] masq_inet6_event+0xe6/0x130 [ 751.990107][ T8150] atomic_notifier_call_chain+0xaa/0x120 [ 751.995773][ T8150] inet6addr_notifier_call_chain+0x24/0x30 [ 752.001609][ T8150] addrconf_ifdown+0xe12/0x1910 [ 752.006476][ T8150] ? addrconf_cleanup+0x130/0x130 [ 752.011516][ T8150] ? __kasan_check_write+0x14/0x20 [ 752.016655][ T8150] ? mutex_unlock+0x89/0x220 [ 752.021254][ T8150] ? __cfi_mutex_unlock+0x10/0x10 [ 752.026298][ T8150] ? _raw_spin_lock+0x8e/0xe0 [ 752.030989][ T8150] ? __cfi__raw_spin_lock+0x10/0x10 [ 752.036233][ T8150] addrconf_notify+0x39f/0xe40 [ 752.041019][ T8150] ? ip6mr_device_event+0x1e7/0x200 [ 752.046327][ T8150] raw_notifier_call_chain+0xa1/0x110 [ 752.051714][ T8150] unregister_netdevice_many+0xf8f/0x1820 [ 752.057780][ T8150] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 752.064017][ T8150] ? unregister_netdevice_queue+0x1aa/0x360 [ 752.069950][ T8150] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 752.076239][ T8150] ? br_dev_delete+0xfc/0x110 [ 752.080951][ T8150] default_device_exit_batch+0x9b9/0xa50 [ 752.086622][ T8150] ? idr_destroy+0x21e/0x290 [ 752.091232][ T8150] ? __cfi_mutex_lock+0x10/0x10 [ 752.096089][ T8150] ? __cfi_default_device_exit_batch+0x10/0x10 [ 752.102287][ T8150] ? rtnl_unlock+0xe/0x10 [ 752.106660][ T8150] ? __cfi_default_device_exit_batch+0x10/0x10 [ 752.112843][ T8150] cleanup_net+0x62d/0xb00 [ 752.117267][ T8150] ? __cfi_cleanup_net+0x10/0x10 [ 752.122232][ T8150] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 752.127621][ T8150] process_one_work+0x71f/0xc40 [ 752.132499][ T8150] worker_thread+0xa29/0x11f0 [ 752.137185][ T8150] kthread+0x281/0x320 [ 752.141277][ T8150] ? __cfi_worker_thread+0x10/0x10 [ 752.146401][ T8150] ? __cfi_kthread+0x10/0x10 [ 752.151010][ T8150] ret_from_fork+0x1f/0x30 [ 752.155439][ T8150] [ 752.158470][ T8150] ---[ end trace 0000000000000000 ]--- [ 752.164263][ T3769] ------------[ cut here ]------------ [ 752.169754][ T3769] WARNING: CPU: 0 PID: 3769 at lib/ref_tracker.c:110 ref_tracker_free+0x5de/0x7c0 [ 752.179098][ T3769] Modules linked in: [ 752.183131][ T3769] CPU: 0 PID: 3769 Comm: kworker/0:8 Tainted: G W 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 752.194594][ T3769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 752.204761][ T3769] Workqueue: events iterate_cleanup_work [ 752.210516][ T3769] RIP: 0010:ref_tracker_free+0x5de/0x7c0 [ 752.216262][ T3769] Code: 85 e8 2e 70 5b 02 43 0f b6 04 2c 84 c0 4c 8b 74 24 08 0f 85 c9 01 00 00 41 8b 3f e8 dc e8 ff ff 4c 89 f6 eb 84 e8 62 f1 e5 fe <0f> 0b 4d 85 ff 0f 85 d3 fa ff ff 4c 8b 24 24 4d 8d 74 24 0c 4c 89 [ 752.236356][ T3769] RSP: 0018:ffffc90011adfb20 EFLAGS: 00010293 [ 752.242462][ T3769] RAX: ffffffff828a060e RBX: 1ffff9200235bf68 RCX: ffff888109dca880 [ 752.250540][ T3769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90011adfbe0 [ 752.258562][ T3769] RBP: ffffc90011adfc50 R08: dffffc0000000000 R09: ffffc90011adfb60 [ 752.266534][ T3769] R10: fffff5200235bf7c R11: 1ffff9200235bf6c R12: ffff88810c57e9a0 [ 752.274518][ T3769] R13: dffffc0000000000 R14: ffffc90011adfb60 R15: ffff888114ab8038 [ 752.282842][ T3769] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 752.291781][ T3769] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 752.298445][ T3769] CR2: 0000001b31116ff8 CR3: 0000000006e0f000 CR4: 00000000003506b0 [ 752.306439][ T3769] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 752.314510][ T3769] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 752.322514][ T3769] Call Trace: [ 752.325789][ T3769] [ 752.328716][ T3769] ? __cfi_ref_tracker_free+0x10/0x10 [ 752.334111][ T3769] ? __cfi_inet_cmp+0x10/0x10 [ 752.338786][ T3769] ? __kasan_check_read+0x11/0x20 [ 752.343827][ T3769] ? nf_ct_iterate_cleanup_net+0xe8/0x130 [ 752.349623][ T3769] iterate_cleanup_work+0x105/0x1f0 [ 752.353956][ T542] usb 1-1: device descriptor read/64, error -71 [ 752.354880][ T3769] ? __cfi_iterate_cleanup_work+0x10/0x10 [ 752.366818][ T3769] ? __schedule+0xb8f/0x14e0 [ 752.371408][ T3769] process_one_work+0x71f/0xc40 [ 752.376282][ T3769] worker_thread+0xa29/0x11f0 [ 752.380949][ T3769] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 752.386418][ T3769] kthread+0x281/0x320 [ 752.390480][ T3769] ? __cfi_worker_thread+0x10/0x10 [ 752.395582][ T3769] ? __cfi_kthread+0x10/0x10 [ 752.400238][ T3769] ret_from_fork+0x1f/0x30 [ 752.404680][ T3769] [ 752.407703][ T3769] ---[ end trace 0000000000000000 ]--- [ 752.842715][T11442] xt_bpf: check failed: parse error [ 752.856512][ T542] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 752.990386][T11426] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 752.999929][T11426] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 753.016769][ T542] usb 1-1: device descriptor read/64, error -71 [ 753.101569][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 753.109274][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 753.124568][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 753.133084][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 753.162661][ T9604] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.169777][ T9604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.178920][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 753.187422][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 753.195839][ T9604] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.202038][T11449] loop5: detected capacity change from 0 to 1024 [ 753.202916][ T9604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.221650][T11449] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 753.230226][T11449] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 753.237233][T11411] device veth0_vlan entered promiscuous mode [ 753.249282][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 753.258140][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 753.266544][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 753.274550][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 753.282047][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 753.289775][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 753.297846][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 753.312326][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 753.320365][ T542] usb 1-1: device descriptor read/64, error -71 [ 753.322606][T11411] device veth1_macvtap entered promiscuous mode [ 753.337090][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 753.347559][ T9604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 753.424829][ T8150] tipc: Disabling bearer [ 753.430221][ T8150] tipc: Left network mode [ 753.500276][ T542] usb usb1-port1: attempt power cycle [ 753.572789][ T796] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 753.775807][ T796] usb 6-1: Using ep0 maxpacket: 16 [ 753.784298][ T796] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 753.792495][ T796] usb 6-1: config 0 has no interface number 0 [ 753.798893][ T796] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x3 has invalid maxpacket 24475, setting to 1024 [ 753.810037][ T796] usb 6-1: config 0 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 753.822043][ T796] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 753.833176][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.841262][ T796] usb 6-1: Product: syz [ 753.845421][ T796] usb 6-1: Manufacturer: syz [ 753.850012][ T796] usb 6-1: SerialNumber: syz [ 753.855285][ T796] usb 6-1: config 0 descriptor?? [ 753.860532][T11449] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 753.936340][ T542] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 753.969294][ T542] usb 1-1: device descriptor read/8, error -71 [ 754.130258][ T542] usb 1-1: device descriptor read/8, error -71 [ 754.170444][T11470] syz.3.3118[11470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 754.170711][T11470] syz.3.3118[11470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 754.222327][T11470] loop3: detected capacity change from 0 to 512 [ 754.243855][T11470] EXT4-fs: Ignoring removed mblk_io_submit option [ 754.268984][T11470] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 754.313548][ T8150] device vlan2 left promiscuous mode [ 754.449325][ T542] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 754.458189][ T8150] bridge0: port 3(vlan2) entered disabled state [ 754.480195][T11470] EXT4-fs (loop3): 1 truncate cleaned up [ 754.485971][T11470] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 754.642445][ T542] usb 1-1: device descriptor read/8, error -71 [ 754.685141][T11403] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 754.770813][T11403] EXT4-fs (loop5): Remounting filesystem read-only [ 754.813719][ T542] usb 1-1: device descriptor read/8, error -71 [ 755.223233][ T542] usb usb1-port1: unable to enumerate USB device [ 755.486565][T11476] loop7: detected capacity change from 0 to 512 [ 755.499329][T11478] loop1: detected capacity change from 0 to 512 [ 755.509873][T11478] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 755.519959][T11476] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 755.528914][T11476] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 755.540720][T11478] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 755.540764][ T8150] device bridge_slave_1 left promiscuous mode [ 755.557900][T11048] EXT4-fs (loop3): unmounting filesystem. [ 755.566832][ T8150] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.574678][ T8150] device bridge_slave_0 left promiscuous mode [ 755.581587][T11476] EXT4-fs error (device loop7): ext4_do_update_inode:5255: inode #2: comm syz.7.3119: corrupted inode contents [ 755.594406][T11478] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #2: comm syz.1.3120: corrupted inode contents [ 755.606418][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.614723][T11476] EXT4-fs error (device loop7): ext4_dirty_inode:6120: inode #2: comm syz.7.3119: mark_inode_dirty error [ 755.626333][T11478] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #2: comm syz.1.3120: mark_inode_dirty error [ 755.638758][ T8150] device dummy0 left promiscuous mode [ 755.644225][ T8150] device veth1_to_batadv left promiscuous mode [ 755.650953][ T8150] device veth1_macvtap left promiscuous mode [ 755.657032][ T8150] device veth0_vlan left promiscuous mode [ 755.698717][T11476] EXT4-fs error (device loop7): ext4_do_update_inode:5255: inode #2: comm syz.7.3119: corrupted inode contents [ 755.700317][T11478] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #2: comm syz.1.3120: corrupted inode contents [ 755.724468][T11476] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #2: comm syz.7.3119: mark_inode_dirty error [ 755.903459][T11499] loop3: detected capacity change from 0 to 128 [ 755.957909][T11478] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.3120: mark_inode_dirty error [ 756.168020][ T8658] EXT4-fs (loop7): unmounting filesystem. [ 756.250216][ T339] usb 6-1: USB disconnect, device number 18 [ 756.270300][T11508] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.277535][T11508] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.354683][T11511] FAULT_INJECTION: forcing a failure. [ 756.354683][T11511] name failslab, interval 1, probability 0, space 0, times 0 [ 756.367424][T11511] CPU: 1 PID: 11511 Comm: syz.7.3126 Tainted: G W 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 756.378803][T11511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 756.388860][T11511] Call Trace: [ 756.392150][T11511] [ 756.395095][T11511] __dump_stack+0x21/0x24 [ 756.399457][T11511] dump_stack_lvl+0xee/0x150 [ 756.404104][T11511] ? __cfi_dump_stack_lvl+0x8/0x8 [ 756.409164][T11511] dump_stack+0x15/0x24 [ 756.413344][T11511] should_fail_ex+0x3d4/0x520 [ 756.418071][T11511] __should_failslab+0xac/0xf0 [ 756.422846][T11511] ? __request_module+0x28f/0x890 [ 756.427886][T11511] should_failslab+0x9/0x20 [ 756.432423][T11511] __kmem_cache_alloc_node+0x3d/0x2c0 [ 756.437823][T11511] ? __request_module+0x28f/0x890 [ 756.442881][T11511] __kmalloc_node_track_caller+0xa0/0x1e0 [ 756.448638][T11511] ? __kasan_kmalloc+0x95/0xb0 [ 756.453429][T11511] kstrdup+0x3b/0x80 [ 756.457348][T11511] __request_module+0x28f/0x890 [ 756.462210][T11511] ? nf_ct_netns_get+0x90/0xc0 [ 756.467010][T11511] ? __cfi___request_module+0x10/0x10 [ 756.472426][T11511] ? mutex_unlock+0x89/0x220 [ 756.477044][T11511] ? __cfi_mutex_unlock+0x10/0x10 [ 756.482081][T11511] ? mutex_unlock+0x89/0x220 [ 756.486679][T11511] ? xt_find_match+0x1f/0x280 [ 756.491478][T11511] ? xt_find_match+0x233/0x280 [ 756.496342][T11511] ? xt_find_match+0x229/0x280 [ 756.501148][T11511] xt_request_find_match+0xc5/0x130 [ 756.506361][T11511] translate_table+0x13f4/0x1ff0 [ 756.511331][T11511] ? ipt_register_table+0x7a0/0x7a0 [ 756.516545][T11511] ? sysvec_reschedule_ipi+0x78/0x80 [ 756.521844][T11511] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 756.527502][T11511] ? _copy_from_user+0x8f/0xc0 [ 756.532463][T11511] ? copy_from_sockptr_offset+0x77/0x90 [ 756.538021][T11511] do_ipt_set_ctl+0x947/0xcb0 [ 756.542709][T11511] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 756.548444][T11511] ? __switch_to_asm+0x3a/0x60 [ 756.553224][T11511] ? __cfi_do_ipt_set_ctl+0x10/0x10 [ 756.558432][T11511] ? __schedule+0xb8f/0x14e0 [ 756.563077][T11511] ? __cfi_avc_has_perm+0x10/0x10 [ 756.568111][T11511] ? bpf_prog_e95a4a16f042d2d7+0x21/0x25 [ 756.573745][T11511] ? __kasan_check_write+0x14/0x20 [ 756.578874][T11511] ? mutex_unlock+0x89/0x220 [ 756.583464][T11511] ? __cfi_mutex_unlock+0x10/0x10 [ 756.588495][T11511] ? selinux_socket_setsockopt+0x21c/0x300 [ 756.594331][T11511] nf_setsockopt+0x284/0x2b0 [ 756.598954][T11511] ip_setsockopt+0xed/0x100 [ 756.603475][T11511] udp_setsockopt+0x8a/0xa0 [ 756.607988][T11511] sock_common_setsockopt+0xb1/0xc0 [ 756.613196][T11511] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 756.619105][T11511] __sys_setsockopt+0x306/0x4e0 [ 756.623963][T11511] ? __cfi___sys_setsockopt+0x10/0x10 [ 756.629349][T11511] ? ksys_write+0x1eb/0x240 [ 756.633870][T11511] ? __kasan_check_write+0x14/0x20 [ 756.638997][T11511] ? fpregs_restore_userregs+0x128/0x260 [ 756.644642][T11511] __x64_sys_setsockopt+0xbf/0xd0 [ 756.649676][T11511] x64_sys_call+0x124/0x9a0 [ 756.654193][T11511] do_syscall_64+0x4c/0xa0 [ 756.658637][T11511] ? clear_bhb_loop+0x30/0x80 [ 756.663328][T11511] ? clear_bhb_loop+0x30/0x80 [ 756.668044][T11511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 756.673938][T11511] RIP: 0033:0x7f548d38e929 [ 756.678362][T11511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.697967][T11511] RSP: 002b:00007f548e135038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 756.706381][T11511] RAX: ffffffffffffffda RBX: 00007f548d5b6160 RCX: 00007f548d38e929 [ 756.714357][T11511] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000a [ 756.722327][T11511] RBP: 00007f548e135090 R08: 00000000000003d0 R09: 0000000000000000 [ 756.730307][T11511] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000002 [ 756.738287][T11511] R13: 0000000000000000 R14: 00007f548d5b6160 R15: 00007ffffa57f3a8 [ 756.746360][T11511] [ 756.755023][T11411] EXT4-fs (loop1): unmounting filesystem. [ 757.010565][ T8150] ================================================================== [ 757.018668][ T8150] BUG: KASAN: use-after-free in tcp_metrics_flush_all+0xd3/0x210 [ 757.026410][ T8150] Read of size 4 at addr ffff88810c57e98c by task kworker/u4:8/8150 [ 757.034485][ T8150] [ 757.036832][ T8150] CPU: 0 PID: 8150 Comm: kworker/u4:8 Tainted: G W 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 757.048299][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 757.058369][ T8150] Workqueue: netns cleanup_net [ 757.063149][ T8150] Call Trace: [ 757.066434][ T8150] [ 757.069378][ T8150] __dump_stack+0x21/0x24 [ 757.073734][ T8150] dump_stack_lvl+0xee/0x150 [ 757.078358][ T8150] ? __cfi_dump_stack_lvl+0x8/0x8 [ 757.083407][ T8150] ? __cfi__printk+0x8/0x8 [ 757.087841][ T8150] ? preempt_schedule_irq+0xbb/0x110 [ 757.093225][ T8150] ? tcp_metrics_flush_all+0xd3/0x210 [ 757.098613][ T8150] print_address_description+0x71/0x210 [ 757.104178][ T8150] print_report+0x4a/0x60 [ 757.108531][ T8150] kasan_report+0x122/0x150 [ 757.113056][ T8150] ? tcp_metrics_flush_all+0xd3/0x210 [ 757.118453][ T8150] kasan_check_range+0x280/0x290 [ 757.123442][ T8150] __kasan_check_read+0x11/0x20 [ 757.128327][ T8150] tcp_metrics_flush_all+0xd3/0x210 [ 757.133539][ T8150] ? __cfi_tcp_net_metrics_exit_batch+0x10/0x10 [ 757.139797][ T8150] tcp_net_metrics_exit_batch+0x10/0x20 [ 757.145355][ T8150] cleanup_net+0x62d/0xb00 [ 757.149793][ T8150] ? __cfi_cleanup_net+0x10/0x10 [ 757.154750][ T8150] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 757.160158][ T8150] process_one_work+0x71f/0xc40 [ 757.165032][ T8150] worker_thread+0xa29/0x11f0 [ 757.169741][ T8150] kthread+0x281/0x320 [ 757.173832][ T8150] ? __cfi_worker_thread+0x10/0x10 [ 757.178964][ T8150] ? __cfi_kthread+0x10/0x10 [ 757.183594][ T8150] ret_from_fork+0x1f/0x30 [ 757.188040][ T8150] [ 757.191074][ T8150] [ 757.193408][ T8150] Allocated by task 283: [ 757.197652][ T8150] kasan_set_track+0x4b/0x70 [ 757.202263][ T8150] kasan_save_alloc_info+0x25/0x30 [ 757.207398][ T8150] __kasan_slab_alloc+0x72/0x80 [ 757.212264][ T8150] slab_post_alloc_hook+0x4f/0x2d0 [ 757.217390][ T8150] kmem_cache_alloc+0x16e/0x330 [ 757.222260][ T8150] copy_net_ns+0x145/0x5c0 [ 757.226876][ T8150] create_new_namespaces+0x3a2/0x660 [ 757.232186][ T8150] unshare_nsproxy_namespaces+0x120/0x170 [ 757.237926][ T8150] ksys_unshare+0x4ac/0x7b0 [ 757.242456][ T8150] __x64_sys_unshare+0x38/0x40 [ 757.247239][ T8150] x64_sys_call+0x767/0x9a0 [ 757.251761][ T8150] do_syscall_64+0x4c/0xa0 [ 757.256185][ T8150] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.262091][ T8150] [ 757.264432][ T8150] Freed by task 8150: [ 757.268424][ T8150] kasan_set_track+0x4b/0x70 [ 757.273113][ T8150] kasan_save_free_info+0x31/0x50 [ 757.278158][ T8150] ____kasan_slab_free+0x132/0x180 [ 757.283281][ T8150] __kasan_slab_free+0x11/0x20 [ 757.288057][ T8150] slab_free_freelist_hook+0xc2/0x190 [ 757.293448][ T8150] kmem_cache_free+0x12d/0x300 [ 757.298309][ T8150] cleanup_net+0xa58/0xb00 [ 757.302737][ T8150] process_one_work+0x71f/0xc40 [ 757.307593][ T8150] worker_thread+0xa29/0x11f0 [ 757.312361][ T8150] kthread+0x281/0x320 [ 757.316438][ T8150] ret_from_fork+0x1f/0x30 [ 757.320959][ T8150] [ 757.323290][ T8150] Last potentially related work creation: [ 757.329002][ T8150] kasan_save_stack+0x3a/0x60 [ 757.333682][ T8150] __kasan_record_aux_stack+0xb6/0xc0 [ 757.339060][ T8150] kasan_record_aux_stack_noalloc+0xb/0x10 [ 757.344888][ T8150] insert_work+0x51/0x300 [ 757.349413][ T8150] __queue_work+0x9b1/0xd30 [ 757.353924][ T8150] delayed_work_timer_fn+0x61/0x80 [ 757.359036][ T8150] call_timer_fn+0x46/0x2a0 [ 757.363543][ T8150] __run_timers+0x667/0x9a0 [ 757.368045][ T8150] run_timer_softirq+0xb8/0xf0 [ 757.372810][ T8150] handle_softirqs+0x1d7/0x600 [ 757.377566][ T8150] __irq_exit_rcu+0x52/0xf0 [ 757.382066][ T8150] irq_exit_rcu+0x9/0x10 [ 757.386300][ T8150] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 757.391934][ T8150] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 757.397919][ T8150] [ 757.400240][ T8150] Second to last potentially related work creation: [ 757.406812][ T8150] kasan_save_stack+0x3a/0x60 [ 757.411486][ T8150] __kasan_record_aux_stack+0xb6/0xc0 [ 757.416873][ T8150] kasan_record_aux_stack_noalloc+0xb/0x10 [ 757.422683][ T8150] insert_work+0x51/0x300 [ 757.427014][ T8150] __queue_work+0x9b1/0xd30 [ 757.431517][ T8150] delayed_work_timer_fn+0x61/0x80 [ 757.436632][ T8150] call_timer_fn+0x46/0x2a0 [ 757.441140][ T8150] __run_timers+0x667/0x9a0 [ 757.445644][ T8150] run_timer_softirq+0xb8/0xf0 [ 757.450411][ T8150] handle_softirqs+0x1d7/0x600 [ 757.455197][ T8150] __irq_exit_rcu+0x52/0xf0 [ 757.459700][ T8150] irq_exit_rcu+0x9/0x10 [ 757.463949][ T8150] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 757.469588][ T8150] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 757.475564][ T8150] [ 757.477892][ T8150] The buggy address belongs to the object at ffff88810c57e900 [ 757.477892][ T8150] which belongs to the cache net_namespace of size 4224 [ 757.492202][ T8150] The buggy address is located 140 bytes inside of [ 757.492202][ T8150] 4224-byte region [ffff88810c57e900, ffff88810c57f980) [ 757.505570][ T8150] [ 757.507890][ T8150] The buggy address belongs to the physical page: [ 757.514303][ T8150] page:ffffea0004315e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810c57c600 pfn:0x10c578 [ 757.525847][ T8150] head:ffffea0004315e00 order:3 compound_mapcount:0 compound_pincount:0 [ 757.534165][ T8150] flags: 0x4000000000010200(slab|head|zone=1) [ 757.540240][ T8150] raw: 4000000000010200 ffff88810026ed10 ffffea0004834a08 ffff8881002ade00 [ 757.548820][ T8150] raw: ffff88810c57c600 0000000000070002 00000001ffffffff 0000000000000000 [ 757.557391][ T8150] page dumped because: kasan: bad access detected [ 757.563795][ T8150] page_owner tracks the page as allocated [ 757.569499][ T8150] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 283, tgid 283 (syz-executor), ts 23622960557, free_ts 23455294322 [ 757.590687][ T8150] post_alloc_hook+0x1f5/0x210 [ 757.595454][ T8150] prep_new_page+0x1c/0x110 [ 757.599966][ T8150] get_page_from_freelist+0x2c7b/0x2cf0 [ 757.605516][ T8150] __alloc_pages+0x19e/0x3a0 [ 757.610110][ T8150] alloc_slab_page+0x6e/0xf0 [ 757.614711][ T8150] new_slab+0x98/0x3d0 [ 757.618789][ T8150] ___slab_alloc+0x6f6/0xb50 [ 757.623395][ T8150] __slab_alloc+0x5e/0xa0 [ 757.627720][ T8150] kmem_cache_alloc+0x1b0/0x330 [ 757.632569][ T8150] copy_net_ns+0x145/0x5c0 [ 757.636981][ T8150] create_new_namespaces+0x3a2/0x660 [ 757.642268][ T8150] unshare_nsproxy_namespaces+0x120/0x170 [ 757.647990][ T8150] ksys_unshare+0x4ac/0x7b0 [ 757.652497][ T8150] __x64_sys_unshare+0x38/0x40 [ 757.657266][ T8150] x64_sys_call+0x767/0x9a0 [ 757.661769][ T8150] do_syscall_64+0x4c/0xa0 [ 757.666182][ T8150] page last free stack trace: [ 757.670853][ T8150] free_unref_page_prepare+0x742/0x750 [ 757.676315][ T8150] free_unref_page+0x8f/0x530 [ 757.680990][ T8150] __free_pages+0x67/0x100 [ 757.685423][ T8150] __free_slab+0xca/0x1a0 [ 757.689770][ T8150] __unfreeze_partials+0x160/0x190 [ 757.694900][ T8150] put_cpu_partial+0xa9/0x100 [ 757.699588][ T8150] __slab_free+0x1c4/0x280 [ 757.704010][ T8150] ___cache_free+0xbf/0xd0 [ 757.708432][ T8150] qlist_free_all+0xc6/0x140 [ 757.713030][ T8150] kasan_quarantine_reduce+0x14a/0x170 [ 757.718495][ T8150] __kasan_slab_alloc+0x24/0x80 [ 757.723347][ T8150] slab_post_alloc_hook+0x4f/0x2d0 [ 757.728464][ T8150] kmem_cache_alloc+0x16e/0x330 [ 757.733322][ T8150] getname_flags+0xb9/0x500 [ 757.737832][ T8150] getname+0x19/0x20 [ 757.741741][ T8150] do_sys_openat2+0xcb/0x7e0 [ 757.746338][ T8150] [ 757.748662][ T8150] Memory state around the buggy address: [ 757.754290][ T8150] ffff88810c57e880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 757.762348][ T8150] ffff88810c57e900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 757.770404][ T8150] >ffff88810c57e980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 757.778462][ T8150] ^ [ 757.782784][ T8150] ffff88810c57ea00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 757.790839][ T8150] ffff88810c57ea80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 757.798894][ T8150] ================================================================== [ 757.807293][ T8150] Disabling lock debugging due to kernel taint [ 757.900257][ T4732] EXT4-fs (loop5): unmounting filesystem. [ 757.956060][T11524] overlayfs: failed to resolve './file0': -2 [ 758.505577][T11526] loop5: detected capacity change from 0 to 40427 [ 758.513526][T11526] F2FS-fs (loop5): invalid crc value [ 758.519870][T11526] F2FS-fs (loop5): Found nat_bits in checkpoint [ 758.560747][T11526] F2FS-fs (loop5): Start checkpoint disabled! [ 758.567527][T11526] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 758.641060][T11526] F2FS-fs (loop5): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 758.756816][ T28] audit: type=1326 audit(1752352054.954:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11525 comm="syz.5.3131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e8578e929 code=0x0 [ 759.210771][ T8150] kworker/u4:8: attempt to access beyond end of device [ 759.210771][ T8150] loop5: rw=2049, sector=45096, nr_sectors = 24 limit=40427