last executing test programs: 5m53.555130582s ago: executing program 32 (id=202): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x0) 5m33.108723525s ago: executing program 33 (id=594): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_misc(r2, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x10000a0) r6 = dup(r4) inotify_rm_watch(r6, r5) 4m2.883158028s ago: executing program 34 (id=2658): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xbc, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_ctinfo={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x7, 0x7, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1, 0x44, &(0x7f0000000280)={0xa, 0x4e23, 0x2, @remote, 0xae0d}, 0x1c) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 3m9.785306042s ago: executing program 2 (id=3962): getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) (fail_nth: 2) 3m9.689398003s ago: executing program 2 (id=3963): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r3, @ANYBLOB="001100000000000040001280080001007369740034000280050009002900000008000200ac1414bb08000c000000010006000d000900000006000800150000000800030064"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 3m9.368168398s ago: executing program 2 (id=3968): getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) ioctl$TUNSETGROUP(r1, 0x400454ce, r0) 3m9.26120635s ago: executing program 2 (id=3970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x34103, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), &(0x7f00000002c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r9, 0x5522) ioctl$USBDEVFS_BULK(r9, 0x5523, 0x0) 3m9.121674022s ago: executing program 2 (id=3973): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000020", @ANYRESDEC, @ANYBLOB="1517f20e1ef6418d894c257bac55ab3e5627c455ccdd8aec5288c83778394e1d57d9a647d24ddc8dcf733fde5b38a5c42da20985a950aa63600313234808ace2fddc58ec196210c534e7d209f78ed771baff8932cf102f307d852116c9d61df98530b93bd67bcc774a95fd503dc1d47712237701b3ce52cea3b1f4f9a6b91f6beafbf438b8d9751b3730f228ce4c47ab380feb30e96032bd", @ANYRES8, @ANYRES8, @ANYRES16], 0x50) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040200000000806c010000150010001800feffffff09000d2000000401a80074efc22bb31ad49f50a03cb4d92706000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e67c20b278d56cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xc00000, 0x2) 3m8.861412875s ago: executing program 2 (id=3976): socket$inet6(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x48000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x1000}) close(0x3) setresuid(0xee01, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) timer_delete(0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) 3m8.861099846s ago: executing program 35 (id=3976): socket$inet6(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x48000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x1000}) close(0x3) setresuid(0xee01, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) timer_delete(0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) 3m5.123809953s ago: executing program 0 (id=4033): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x10, 0x1403, 0x1, 0x70bd2d}, 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x1200) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'erspan0\x00', r2, 0x7ce, 0x7800, 0x4, 0x2, {{0xb, 0x4, 0x0, 0x39, 0x2c, 0x66, 0x0, 0x7, 0x29, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0x17, 0x7a, [@private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast]}]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r4}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r1}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00050000b7080000000000007b8af0ff00000000bfa100002000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa7) request_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='syz0\x00', 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x200000000200}, 0x18) r9 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000280)='0', 0x1, r9) 3m5.008793155s ago: executing program 0 (id=4036): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x4000) fallocate(r0, 0x0, 0x0, 0x1000f4) setsockopt(r1, 0x8, 0x9, &(0x7f0000000600)="26dacb1426d1be6683e5104a35b8f7ec3f6068add6e447e2cd10d2daf2cb6cb2289a5673b5dfbfdfeee36d504419b0bdff3e9e5e46355c4fe8ae24ccaf3fe03b56f41e008c8701b8f0a3763e3e48372b19a07169e6d074ff99802957f23c6fda4a26f83c7c", 0x65) r2 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 3m4.980177295s ago: executing program 0 (id=4037): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$net_dm(&(0x7f0000000580), 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) pause() 3m4.112625999s ago: executing program 0 (id=4047): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034888a809003200030030"], 0xfdef) 3m4.02545338s ago: executing program 0 (id=4049): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r2 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa5e7b120ce4cd7cf}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x74, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_FAMILY={0x5, 0xd, 0x2c}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x74}, 0x1, 0x0, 0x0, 0x40d4}, 0x20000001) clock_gettime(0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioprio_get$pid(0x2, 0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) (async) socket$inet6(0xa, 0x400000000001, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) (async) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa5e7b120ce4cd7cf}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x74, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_FAMILY={0x5, 0xd, 0x2c}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x74}, 0x1, 0x0, 0x0, 0x40d4}, 0x20000001) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioprio_get$pid(0x2, 0xffffffffffffffff) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) (async) 3m3.944960601s ago: executing program 0 (id=4050): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000070000000000000000000085000000230000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x80000001}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@nodioread_nolock}, {}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@i_version}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x4000) fallocate(r2, 0x0, 0x0, 0x1000f4) setsockopt(r3, 0x8, 0x9, &(0x7f0000000600)="26dacb1426d1be6683e5104a35b8f7ec3f6068add6e447e2cd10d2daf2cb6cb2289a5673b5dfbfdfeee36d504419b0bdff3e9e5e46355c4fe8ae24ccaf3fe03b56f41e008c8701b8f0a3763e3e48372b19a07169e6d074ff99802957f23c6fda4a26f83c7c", 0x65) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000036c0)=@o_path={0x0, 0x0, 0x4008}, 0x18) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x500, 0x61, 0x10, 0x7b}, [@ldst={0x6, 0x0, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 2m59.989407552s ago: executing program 8 (id=4077): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x61) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0xc4}}, 0x20050800) 2m59.742307696s ago: executing program 8 (id=4079): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000040)="10208100", 0x4, 0x0, &(0x7f0000000340)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 2m59.513951529s ago: executing program 8 (id=4080): newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000001180), 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) syz_io_uring_setup(0x10c, 0x0, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x11}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m59.305701483s ago: executing program 8 (id=4081): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x34103, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), &(0x7f00000002c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) 2m59.148972844s ago: executing program 8 (id=4083): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x1200) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00050000b7080000000000007b8af0ff00000000bfa100002000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa7) request_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='syz0\x00', 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x200000000200}, 0x18) r8 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000280)='0', 0x1, r8) 2m58.959447408s ago: executing program 8 (id=4084): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) sendmsg$kcm(r2, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xc00000, 0x2) 2m58.946180888s ago: executing program 36 (id=4084): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) sendmsg$kcm(r2, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xc00000, 0x2) 2m48.853621512s ago: executing program 37 (id=4050): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000070000000000000000000085000000230000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x80000001}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@nodioread_nolock}, {}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@i_version}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x4000) fallocate(r2, 0x0, 0x0, 0x1000f4) setsockopt(r3, 0x8, 0x9, &(0x7f0000000600)="26dacb1426d1be6683e5104a35b8f7ec3f6068add6e447e2cd10d2daf2cb6cb2289a5673b5dfbfdfeee36d504419b0bdff3e9e5e46355c4fe8ae24ccaf3fe03b56f41e008c8701b8f0a3763e3e48372b19a07169e6d074ff99802957f23c6fda4a26f83c7c", 0x65) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000036c0)=@o_path={0x0, 0x0, 0x4008}, 0x18) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x500, 0x61, 0x10, 0x7b}, [@ldst={0x6, 0x0, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 2m35.164757832s ago: executing program 5 (id=4349): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000004b16f215e7b318f618110000f95cb35673cdd7bc0afd485432bfaa61a7a4b0afc3003e35b7097672b88b0951495eb18be8b08e027919f3cbfcba8293920ac4c0ae0575fbad8fecdb449f50dddb4cf383cca846c7f74f7f17fa3a1bd0248b993db9db188236b92b811d00", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYRES16=r1, @ANYRES16, @ANYRES64=r2, @ANYBLOB="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"/277], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r4, 0x0) r5 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xf6}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x2, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r6, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="1000ea7cd2eb12030000f8ff06000000"], 0x10}, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r7, &(0x7f0000000000)='./file0\x00', 0x5) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r8) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @remote, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000002c0)="79ef34395d4c410d25e52319c6a502980fd70906f311e78ea6dce2f7034f7998430f21880804822ef849375ad4", 0x2d}], 0x1, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) write$cgroup_subtree(r8, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r10, 0x0, 0x800) 2m34.350219155s ago: executing program 5 (id=4363): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = getpgrp(0x0) sched_setscheduler(r3, 0x3, &(0x7f0000000000)=0xb) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x4}) ppoll(&(0x7f0000000200)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x3) 2m33.480523258s ago: executing program 5 (id=4371): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) (async) inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) (async) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) unshare(0x62040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x800) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async, rerun: 32) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x8, 0x0, 0x300, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x97}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) (async, rerun: 32) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) (async) utime(&(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) 2m33.3493741s ago: executing program 5 (id=4372): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000002c0)={{0x4, 0xa9}, {0x1, 0x9}, 0x482348de, 0x4, 0x6}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) modify_ldt$read_default(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {@errors_remount}, {@sysvgroups}, {@norecovery}, {@oldalloc}, {@orlov}, {@oldalloc}, {@auto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x580, &(0x7f0000001b40)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r7, &(0x7f0000000f80)={0xa, 0x0, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fffffff}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYRES16=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000001f000000"], 0x13) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000c8b4fe1f24828e91c852a2ddff121420a4a229811be394bdf65d24aa381bc588652fe2aa159d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="000000000100"/28], 0x50) 2m33.065451514s ago: executing program 5 (id=4373): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$VT_DISALLOCATE(r0, 0x5608) 2m32.901331287s ago: executing program 5 (id=4374): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 2m32.881853977s ago: executing program 38 (id=4374): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 2m12.159958295s ago: executing program 7 (id=4714): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xf, &(0x7f0000000900)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095", @ANYRES32=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000680)={0x0, 0x10000}, 0x8) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5) sendmsg$NFC_CMD_DEP_LINK_UP(r5, &(0x7f0000000600)={0x0, 0xffffffffffffff24, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000008c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00a8028f7b000010cc5263b2b2bfbbc67a95c80bbe030000000040000000000000e6b063"], 0x50) r9 = inotify_init1(0x80000) inotify_add_watch(r9, &(0x7f0000000400)='.\x00', 0xa4000021) close(r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000380), &(0x7f00000003c0)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r1}, 0x20) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r15}, 0x18) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x84) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x1f00, {0x0, 0x0, 0x74, r14, {0xb, 0xfff2}, {}, {0xe, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1e, 0x26, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000003000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001800000019000400000000000200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500000086000000186a000008000000000000000400000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000000000000850000008600000018490000faffffff0000000000000000852000000200000018000000896d878f520d21b3e953c869a2030000000000100000182b000008261b66a73cb3e7c1b5992165570c72574cbb8c8f3593ed906c8261d2ce62297c94be4125a25cc1a74769b7ad85324b416e1de5a647e713843e66c2de7a47f9e527453fbbb0e6f7daa5921d3b530afb5a179e627cf28283dc2d299bcf5b22c5f4b382c4bf0feeed875d64bd8da3a89c26f2e8e8e9fe49fb", @ANYRES32=r0, @ANYBLOB="0000000007000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xff, 0x7a, &(0x7f0000000240)=""/122, 0x41000, 0x62, '\x00', r14, @fallback=0x1b, r16, 0x8, &(0x7f0000000300)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x2, 0x1, 0x4}, 0x10, 0xffffffffffffffff, r1, 0x3, &(0x7f0000000580)=[r0, r0, r0, r0, r0, r0], &(0x7f0000000640)=[{0x5, 0x2, 0x3, 0x7}, {0x4, 0x5, 0xe, 0xc}, {0x2, 0x4, 0x9, 0x2}], 0x10, 0x3, @void, @value}, 0x94) r17 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002e80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="010028bd7000fddbdf252100000008000300", @ANYRES32=r18, @ANYBLOB="1c002d"], 0x38}, 0x1, 0x0, 0x0, 0x40008d5}, 0x8000) 2m11.919627018s ago: executing program 7 (id=4720): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @multicast2}, &(0x7f0000000080)=0xc) r2 = syz_open_procfs(0x0, &(0x7f0000003640)='clear_refs\x00') write$tcp_mem(r2, &(0x7f0000004940)={0xfffffffffffffff9, 0x20, 0x7, 0x20, 0x4}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32=r0, @ANYBLOB='\t\x00'/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0300000005000000010008000000000000000a0000000000000000ff"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='rxrpc_congest\x00', r2, 0x0, 0x1ff}, 0x18) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x2, 0x1802, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) readahead(0xffffffffffffffff, 0xff, 0x80000) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x8, &(0x7f0000000080), 0x4, 0x4f3, &(0x7f00000012c0)="$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") socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) 2m11.024228972s ago: executing program 7 (id=4754): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x74, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (fail_nth: 1) 2m10.782648466s ago: executing program 7 (id=4757): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000240)=@framed={{}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x4}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x320, 0x3d8, 0x3d8, 0x320, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@ecn={{0x28}, {0x10, 0x2, 0x7, 0x3}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4bb, &(0x7f0000000580)="$eJzs3cuLXFUaAPCvqtLP9EweMwxJBiaBDGQepKsfDOmemcUMDMzMIjBMwI1CbLsrbUx1V9NVHdNNFh3dZeFCFAVx4d6/wI1ZGQVxrXtxIRGNLagglNxbVUm/KpaxUyV9fz+o9Dn33NR3Thff4da59/YNILNOJf/kIkYi4oOIONSobt3hVOPHxt3rs8krF/X6hc9z6X5JvbVr6/8djIj1iBiMiP//O+Kp3M641dW1KzPlcmm5WS/WFpaK1dW1s5cXZuZL86XF8alz09NTY5MT03s21psvPHPz/Fv/7X/z6+fv3H7xnbeTbo002zaPYy81ht4XRzZtOxARf38UwXqg0BzPUK87wkNJPr9fRcTpNP8PRSH9NIEsqNfr9e/qA+2a1+vAvpVPj4Fz+dGIaJTz/6qPNo7hfx3D+XKlWvvzpcrK4lzjWPlw9OUvXS6XxprfFQ5HXy6pj6fl+/WJbfXJiPQY+KXCUFofna2U57o71QHbHNyW/18V8vnRpBJ/6nXXgG7wlR+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kN2yX/IpP+dP5+86q373+eurq5cqVw9O5fMCQsrs6OzleWl0flKZT69Z2fhh96vXKksjf8lVq4Va6VqrVhdXbu4UFlZrF1M7+u/WOrryqiAThw5eeujXESs/3UofSX6m21yFfa3ej0Xvb4HGeiNQq8nIKBnLP1BdvmOD+zyJ3q3GGzXsLT3fQG6I9/rDgA9c+a483+QVdb/Ibus/0N2OcYHrP9D9lj/h+wa2fn8r/T5P7/Y9OyusYj4ZUR8WOgbaD3rC9gP8p/mmsf/Zw79fmR7a3/um/QUQX9EPPvahVeuzdRqy+PJ9i/uba+92tw+0Yv+A51q5WkrjwGA7Nq4e3229epm3M/+2bgIYWf8A821ycH0HOXwRm7LtQq5Pbp2Yf1GRBzbLX6u+bzzxpmP4Y3CjvhHmz9zjbdI+3sgfW56d+If3xT/d5vin/jJvxXIhlvJ/DO2W/7l05yOe/m3df4Z2aNrJ9rPf/l781+hzfx3ssMYT7/+3Cdt49+IOLFr/Fa8wTTW9vhJ3850GP/OE4/9pl1b/Y3G++wWvyUpFWsLS8Xq6trZ9O/IzZcWx6fOTU9PjU1OTBfTNepia6V6p78de//2g8Y/3CZ+u/H/o9mnP3Y4/m9/+97jpx4Q/w+nd//8j7aJnxj6EU/o/3Li4yfbtSXx59qMP78z/rvD0WqNmOwwfvXl/wx0uCsA0AXV1bUrM+VyaVlBQeEhCgM/j27seaHXMxPwqN1P+l73BAAAAAAAAAAAAOhUNy4n7vUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2g+8DAAD//3bC1tg=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107040, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x3920e, r3, 0x5, 0x1, 0x9000000, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x74, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free\x00', r6}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000030000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r8}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r9}, 0x10) sysinfo(0x0) preadv(r7, &(0x7f0000000200)=[{&(0x7f0000000640)=""/106, 0x6a}], 0x1, 0xfb, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x6, 0x1, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x15}], &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0xd0, &(0x7f00000004c0)=""/208, 0x40f00, 0x3ceb18fbd60f20db, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f00000001c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xe, 0x0, 0x2a5156c6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[{0x0, 0x5, 0x7, 0x1}, {0x2, 0x2, 0xf, 0xc}, {0x0, 0x5, 0xa}], 0x10, 0xfffffffb, @value=r7}, 0x94) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m10.253881774s ago: executing program 7 (id=4769): clock_gettime(0xa, 0x0) r0 = socket$inet(0x2, 0x3, 0x100) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 2m9.792132231s ago: executing program 7 (id=4777): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000380)="b2553df3e680934669686620422ac6d682eab7174b54bfb775f1abbbf13fbdea27107a88cb9771fa391c4c5d1821b1dc6b5388c72b78d1b1115143d5a2856ecf3600c89d6a052c44bff24a159cc4d407a21ad44d9bddfd530be2108cfd9c572fe5e5b838001c988b5f5c007b3a62fc62dff7f5ffe6e77fdcb3739f2ae87314e43521488e7d"}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000040)=0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) close_range(r5, r3, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100400086dd6000000000383a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa030090"], 0x0) 2m9.689182123s ago: executing program 39 (id=4777): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000380)="b2553df3e680934669686620422ac6d682eab7174b54bfb775f1abbbf13fbdea27107a88cb9771fa391c4c5d1821b1dc6b5388c72b78d1b1115143d5a2856ecf3600c89d6a052c44bff24a159cc4d407a21ad44d9bddfd530be2108cfd9c572fe5e5b838001c988b5f5c007b3a62fc62dff7f5ffe6e77fdcb3739f2ae87314e43521488e7d"}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000040)=0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) close_range(r5, r3, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100400086dd6000000000383a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa030090"], 0x0) 2.277662945s ago: executing program 4 (id=7425): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x541b, 0x1000000000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='Q', 0x1, 0x200980) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) ppoll(&(0x7f0000000c40)=[{0xffffffffffffffff, 0x20}], 0x1, 0x0, 0x0, 0x300) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.95313411s ago: executing program 1 (id=7436): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f00000003c0)=0xe8) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000002000010300000000000000000200000000000000000000000c001400", @ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="7b4907be6ed9d3236d2477f04cb1d4ce63b943469a1378d9d88fc85816058c27a676f9bbc5a051703b79ea74b05bbb9aa33679199f6d686bb9d724de4c3ff2e7da2f677b0482862b0bf4c05be07285"], 0x28}}, 0x40800) ioprio_get$uid(0x0, r6) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002e40)=ANY=[@ANYBLOB="fc140000280001000000000000600000e91400800c0000000000000000000000fc134f808097fab694d813d0721e8ade578e1a35f5ae07d49fecfe7f43fc631d4967bcafa4afee204fccdb41daa182da9eb0a827c157071db4efb79b6bc859cb77e02761c9dfb5cf5d8a56c4816d75a4132e34baad35a2c4bad24595c3b018f83bd6f94ac2fc08dd967e8a1560c7c00532d68901c156967444a3327712220094c1dd5ca187ded10b41b9864043701f7fd5e8c8e22f6747efed484f29eb90a283018ddccd67accef16f844cef25165117d173b1834b16496e1ce13afc9817117b800800e900", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0400cd000700b900212f0000f60045800400148008004e00", @ANYRES32=r7, @ANYBLOB="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"], 0x14fc}], 0x1, 0x0, 0x0, 0x44010}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfffffffffffffff7}}, './file1\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x25dfdbff, {0x1c}, [@NDA_VLAN={0x6, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x4004840) sendmsg$NL80211_CMD_SET_MPATH(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00083679819bfcdbdf251600000008000300", @ANYRES32=r10, @ANYBLOB="0c0099000a000000000000000a001a0008021100000100000a000600ffffffffffff00000a00060008021100000000000a001a00ffffffffffff0000"], 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r12 = syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") r13 = mmap$IORING_OFF_CQ_RING(&(0x7f000063d000/0x1000)=nil, 0x1000, 0x200000c, 0x10, r12, 0x8000000) syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x0, 0x3, 0xbfdffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000080)=0xc12, 0x0, 0x4) syz_io_uring_submit(r14, r15, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r16 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) syz_io_uring_submit(r13, r15, &(0x7f0000000380)=@IORING_OP_SHUTDOWN={0x22, 0x26, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r16}}) 1.853473512s ago: executing program 1 (id=7439): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001"], 0x20000) (fail_nth: 1) 1.655819455s ago: executing program 1 (id=7441): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x7e9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 1.639936075s ago: executing program 1 (id=7442): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$net_dm(&(0x7f0000000580), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000300)='\x00', r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x10) pause() bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='ext4_allocate_blocks\x00', r3, 0x0, 0x4}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendmsg$tipc(r9, &(0x7f0000000740)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x1}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000002c0)="2fb94423346fa448f04d1b51994e8caff9b820d24338154cf9381e8c7cb965cf0b7cfc08613a4fd4a64c290c295d5d5f0feae5dc74b9a40297312758a9cf17169ca73124c4d0be92e78d82df675ea0f614cdaa2998dce0b35db6ab036b95f5bc983b1d2a28d560ef6da45bddb445d774b344e4a0fabe80ae883a09e0f7a580586062cd76640e245a76b633bb3d7cf6b2e470f84181951513bf23cfddebc8a8aacb587f33e09072531dadbb84de61560b1adda94e256c2ea1c5fa8e9914c4cf7bf678d02891a04360", 0xc8}, {&(0x7f0000000140)="bd3310215d4e01a6b2a67139305cfead01f19d739d6bb4380458c342b2f08276ce6aab465e1b289131a550966133e9b5e0dacb6520df6badd2cc8111996cadcfc034e9ca40afc6b4673891be7d2ff28b39bc975bf5da46879cd448b81f22e6d9cc4ac9405bb07ad0eb", 0x69}, {&(0x7f00000003c0)="caf8db85fa73a098f5f3eb093e2695e1a5f2151bd404193cff0758aaaac4445bc4b09c6f0dfe78cf2164c8e4574a5e9c3a13bc996b9560faaf94d5bf6e6c65663f8afa36c96d09f51cb0570de02fa9", 0x4f}, {&(0x7f0000000ac0)="9905fb7b4135ae83adecab7a6f1c595593270f013ccef773cc29a4c6170dbc9e1e9bae1fc1d873fa5025653ed5b3be068cb569a53d47725501d161fb5e4b585b68f99cd57d29038e9ebe8506f2fd3cceabb027e012c3f435d95c8a63073281f3f9757cd598943366a6a07c5213d88678025ab69b4d4563a8c6c4e5a8c217438d162c0d469d163439b8dced169ab45937c872a6ff1d4fd433010ff3925e80699e5915755dbf69c865fce75a183a0dc96a6294abbad51db511dc0fb112974eb51031ec2f4740ee9c5dc38deba06ca0217843c3b429f0e16cb84c7bdf19698d", 0xde}, {&(0x7f0000000540)="ed095c8a27c9da849b288f5faa957231491624fa30062c91de20a8bb3a0c8bb3066027cb6904079634819ad3ab56e505f2afca9257d255b4d2b17c390203e6d8728f6da233e2c41df6c181a7cb6a7249220744147e70ae177a4e3a9fc42162616969ae7db2fab739a2cc207c0cd3936549f14155d589665c1523932b4d73f30167eea4d7c4a7642d1add1f791af2a4c2d761457d43608be5d9810cc567f63433873817f25860415115ea52d7382c97959cfb28d2180cac09e16d8d5afb7221a186a5b6217b9ed5dab3b665", 0xcb}, {&(0x7f0000000640)="684b5a0712d15cd47d9e01401e5becfe4be030fe57013339dda20eb502a9f9829ec512c7fbac61cd080b95596cb2050dcf4803f89ef33191326db3b470d8e6bc3f9e04aaa0b780020f61207071487fcc7c4bfe93df6555e080fc7c009df78632e710ad7901bfc15cf010d55a177b799e6c01d9f7c807925f2aff5e96f5d7feb2a056e570073cc497aba97541201ee1df270cb4b7683ec312456d85e6b4a1df4e1c992bd773a49a6352c41ad175df30ea6d9861c4327703593752079092b084a2061b11682a72ce38748ed2e1f52c36b9104071f6231df03db0b14b18", 0xdc}, {&(0x7f0000000a00)="6d82e99d2d765e64ad6213b311489d30c04537b784befb19a7ab6b8fe7608a97ca1ed1c967b87a16b078326417be974c82d5dec830a0a704c27b1d1b5354f7e16400a697cc4b9c65dc00a288b67819ec8699cad2586412e09a86e4f8abf4200c3dd541ef0316edc8649342614513f0428516541362690980e6fff7bc39aa7e11ea2f10", 0x83}, {&(0x7f0000000880)="fc1a67bc90ae8e97ecac9764d440f5baef5b1e1f7dfc76c6b89cf2e230b503e7aa744baca6df78ff8223107e8d5f41fb2f069e1c46d205a0cab354107122d9b29844f0a3238e2ea2eead6a0222f952a3dca9a2f98646b4a5203515f05f472c578a49590d090384c995", 0x69}], 0x8, &(0x7f0000000980)="aa7e0b5e5493566a505388c197a8023347b50aa18d9f552aff85b71ae2e5ceec534caa29591ce704dfd48d5571c3268f28f9d994857f03c08e2213adfe8acc85bf6d3e7d227bde93108390d989f145ad3f0daee30790a8559e2718bbed159887dfaebea4fda62d158cda8edcf629a2480ba46d7d1e8da467", 0x78, 0x40}, 0x810) sendfile(r9, r9, 0x0, 0x7a680000) 1.510901357s ago: executing program 9 (id=7443): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x3) 1.473773137s ago: executing program 9 (id=7444): r0 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x668, &(0x7f0000000e80)="$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") bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x202000, 0x0) getdents(r2, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x700, 0x12) r4 = openat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4'], 0x34}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',debug=0x0000000000000007,access=user,noextend,', @ANYRESDEC=0x0]) getsockopt$bt_hci(r6, 0x84, 0x7d, &(0x7f0000002e40)=""/4127, &(0x7f0000000000)=0x101f) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) 1.385593719s ago: executing program 4 (id=7445): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x390fe744) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x1ffffdf3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x380cc52, &(0x7f0000000040)={[{@map_off}, {@utf8}, {@nocompress}, {@showassoc}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@cruft}, {@unhide}, {@check_relaxed}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@map_off}, {@mode={'mode', 0x3d, 0x6}}], [{@uid_eq}], 0x2c}, 0x3, 0x9bf, &(0x7f0000001640)="$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") 1.30848575s ago: executing program 4 (id=7447): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x390fe744) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x1ffffdf3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x380cc52, &(0x7f0000000040)={[{@map_off}, {@utf8}, {@nocompress}, {@showassoc}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@cruft}, {@unhide}, {@check_relaxed}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@map_off}, {@mode={'mode', 0x3d, 0x6}}], [{@uid_eq}], 0x2c}, 0x3, 0x9bf, &(0x7f0000001640)="$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") 1.224462831s ago: executing program 9 (id=7450): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0xfffffffe}, {0x5, 0x7}], 0xee01}, 0x18, 0x0) 1.219288402s ago: executing program 4 (id=7451): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x400, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) r4 = msgget$private(0x0, 0x10c) msgctl$IPC_SET(r4, 0x1, &(0x7f0000258f88)) msgsnd(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="030000"], 0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0x3, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(r4, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, r5}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x2, r2, 0x0, r3, r5, 0x100, 0x4}, 0x0, 0x0, 0x21b, 0x4, 0x7, 0x8, 0x4, 0xf3, 0x5, 0x6db3}) r6 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000f0e000/0x2000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) getgroups(0x5, &(0x7f0000000080)=[0xee00, 0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) r8 = getgid() r9 = getegid() r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x300, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x10000000}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'dummy0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) r11 = getegid() setgroups(0xa, &(0x7f00000000c0)=[r1, r5, r7, 0xee01, 0xee00, r8, r9, 0xee01, 0x0, r11]) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.209986722s ago: executing program 3 (id=7452): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x7e9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 1.164168102s ago: executing program 3 (id=7453): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6aac8b23cc537cd8}, 0x1320, 0xffffffff, 0x3, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r2 = gettid() ioprio_get$pid(0x0, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) r5 = socket$pppl2tp(0x18, 0x1, 0x1) fchown(r5, 0x0, 0xee00) fchown(r5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x800800000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 1.110627723s ago: executing program 9 (id=7454): openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf3c4}, @TCA_FQ_CODEL_FLOWS={0xc, 0x5, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1e, 0x2, 0x3, 0x9, 0x2, 0xffffffff, 0x3}}, {0x4}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.065071524s ago: executing program 9 (id=7455): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.011253834s ago: executing program 9 (id=7457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYRESOCT=r0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r9}, 0x10) 867.564117ms ago: executing program 4 (id=7459): writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200980) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = socket(0x1e, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) ppoll(&(0x7f0000000c40)=[{r1, 0x20}], 0x1, 0x0, 0x0, 0x300) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 857.246857ms ago: executing program 6 (id=7460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x54583}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x3}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYRESDEC=r2], 0x14b0}}, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty}}}], 0x20}}], 0x1, 0x80) 758.919078ms ago: executing program 3 (id=7461): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) get_mempolicy(&(0x7f0000000000), &(0x7f0000000080), 0x58, &(0x7f0000ffa000/0x3000)=nil, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 758.614118ms ago: executing program 6 (id=7462): r0 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000300)='\x00', r0) 725.471369ms ago: executing program 3 (id=7463): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x7e9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 720.570359ms ago: executing program 6 (id=7464): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioperm(0x5, 0x8004, 0xa) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080), 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe050003000800"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$VT_DISALLOCATE(r0, 0x5608) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc040ff0b, &(0x7f0000000180)) sendto$inet6(r5, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) 710.063099ms ago: executing program 1 (id=7465): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x7e9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 496.456732ms ago: executing program 3 (id=7466): openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf3c4}, @TCA_FQ_CODEL_FLOWS={0xc, 0x5, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1e, 0x2, 0x3, 0x9, 0x2, 0xffffffff, 0x3}}, {0x4}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 495.530922ms ago: executing program 3 (id=7467): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$net_dm(&(0x7f0000000580), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000300)='\x00', r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x10) pause() bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='ext4_allocate_blocks\x00', r3, 0x0, 0x4}, 0x18) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendmsg$tipc(r10, &(0x7f0000000740)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x1}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000002c0)="2fb94423346fa448f04d1b51994e8caff9b820d24338154cf9381e8c7cb965cf0b7cfc08613a4fd4a64c290c295d5d5f0feae5dc74b9a40297312758a9cf17169ca73124c4d0be92e78d82df675ea0f614cdaa2998dce0b35db6ab036b95f5bc983b1d2a28d560ef6da45bddb445d774b344e4a0fabe80ae883a09e0f7a580586062cd76640e245a76b633bb3d7cf6b2e470f84181951513bf23cfddebc8a8aacb587f33e09072531dadbb84de61560b1adda94e256c2ea1c5fa8e9914c4cf7bf678d02891a04360", 0xc8}, {&(0x7f0000000140)="bd3310215d4e01a6b2a67139305cfead01f19d739d6bb4380458c342b2f08276ce6aab465e1b289131a550966133e9b5e0dacb6520df6badd2cc8111996cadcfc034e9ca40afc6b4673891be7d2ff28b39bc975bf5da46879cd448b81f22e6d9cc4ac9405bb07ad0eb", 0x69}, {&(0x7f00000003c0)="caf8db85fa73a098f5f3eb093e2695e1a5f2151bd404193cff0758aaaac4445bc4b09c6f0dfe78cf2164c8e4574a5e9c3a13bc996b9560faaf94d5bf6e6c65663f8afa36c96d09f51cb0570de02fa9", 0x4f}, {&(0x7f0000000ac0)="9905fb7b4135ae83adecab7a6f1c595593270f013ccef773cc29a4c6170dbc9e1e9bae1fc1d873fa5025653ed5b3be068cb569a53d47725501d161fb5e4b585b68f99cd57d29038e9ebe8506f2fd3cceabb027e012c3f435d95c8a63073281f3f9757cd598943366a6a07c5213d88678025ab69b4d4563a8c6c4e5a8c217438d162c0d469d163439b8dced169ab45937c872a6ff1d4fd433010ff3925e80699e5915755dbf69c865fce75a183a0dc96a6294abbad51db511dc0fb112974eb51031ec2f4740ee9c5dc38deba06ca0217843c3b429f0e16cb84c7bdf19698d", 0xde}, {&(0x7f0000000540)="ed095c8a27c9da849b288f5faa957231491624fa30062c91de20a8bb3a0c8bb3066027cb6904079634819ad3ab56e505f2afca9257d255b4d2b17c390203e6d8728f6da233e2c41df6c181a7cb6a7249220744147e70ae177a4e3a9fc42162616969ae7db2fab739a2cc207c0cd3936549f14155d589665c1523932b4d73f30167eea4d7c4a7642d1add1f791af2a4c2d761457d43608be5d9810cc567f63433873817f25860415115ea52d7382c97959cfb28d2180cac09e16d8d5afb7221a186a5b6217b9ed5dab3b665", 0xcb}, {&(0x7f0000000640)="684b5a0712d15cd47d9e01401e5becfe4be030fe57013339dda20eb502a9f9829ec512c7fbac61cd080b95596cb2050dcf4803f89ef33191326db3b470d8e6bc3f9e04aaa0b780020f61207071487fcc7c4bfe93df6555e080fc7c009df78632e710ad7901bfc15cf010d55a177b799e6c01d9f7c807925f2aff5e96f5d7feb2a056e570073cc497aba97541201ee1df270cb4b7683ec312456d85e6b4a1df4e1c992bd773a49a6352c41ad175df30ea6d9861c4327703593752079092b084a2061b11682a72ce38748ed2e1f52c36b9104071f6231df03db0b14b18", 0xdc}, {&(0x7f0000000a00)="6d82e99d2d765e64ad6213b311489d30c04537b784befb19a7ab6b8fe7608a97ca1ed1c967b87a16b078326417be974c82d5dec830a0a704c27b1d1b5354f7e16400a697cc4b9c65dc00a288b67819ec8699cad2586412e09a86e4f8abf4200c3dd541ef0316edc8649342614513f0428516541362690980e6fff7bc39aa7e11ea2f10", 0x83}, {&(0x7f0000000880)="fc1a67bc90ae8e97ecac9764d440f5baef5b1e1f7dfc76c6b89cf2e230b503e7aa744baca6df78ff8223107e8d5f41fb2f069e1c46d205a0cab354107122d9b29844f0a3238e2ea2eead6a0222f952a3dca9a2f98646b4a5203515f05f472c578a49590d090384c995", 0x69}], 0x8, &(0x7f0000000980)="aa7e0b5e5493566a505388c197a8023347b50aa18d9f552aff85b71ae2e5ceec534caa29591ce704dfd48d5571c3268f28f9d994857f03c08e2213adfe8acc85bf6d3e7d227bde93108390d989f145ad3f0daee30790a8559e2718bbed159887dfaebea4fda62d158cda8edcf629a2480ba46d7d1e8da467", 0x78, 0x40}, 0x810) sendfile(r10, r10, 0x0, 0x7a680000) 375.303124ms ago: executing program 1 (id=7468): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 53.497299ms ago: executing program 6 (id=7469): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000080000008500000078000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 47.762899ms ago: executing program 4 (id=7470): r0 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 22.58936ms ago: executing program 6 (id=7471): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x54583}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x3}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYRESDEC=r2], 0x14b0}}, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty}}}], 0x20}}], 0x1, 0x80) 0s ago: executing program 6 (id=7472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), 0x0}, 0x20) kernel console output (not intermixed with test programs): -000000000000. [ 353.732919][T22973] SELinux: policydb version 0 does not match my version range 15-34 [ 353.744979][T22973] SELinux: failed to load policy [ 353.779029][T22975] netlink: 'syz.3.6756': attribute type 3 has an invalid length. [ 353.872944][T22981] loop9: detected capacity change from 0 to 256 [ 353.884420][T22981] msdos: Bad value for 'gid' [ 353.889175][T22981] msdos: Bad value for 'gid' [ 353.936163][T22955] Set syz1 is full, maxelem 65536 reached [ 353.968843][T15273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.032645][T16283] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.122419][T22999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6765'. [ 354.155008][T23004] sd 0:0:1:0: device reset [ 354.159934][T23002] loop1: detected capacity change from 0 to 1764 [ 354.211634][T23005] bond0: entered promiscuous mode [ 354.216788][T23005] bond0: entered allmulticast mode [ 354.222432][T23005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.237568][T23005] bond0 (unregistering): Released all slaves [ 354.299972][T23008] loop6: detected capacity change from 0 to 2048 [ 354.329199][T23008] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.368074][T23016] loop1: detected capacity change from 0 to 2048 [ 354.500072][T23016] loop1: unable to read partition table [ 354.518693][T23016] loop1: partition table beyond EOD, truncated [ 354.525060][T23016] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 354.616436][T23021] bond1: entered promiscuous mode [ 354.621568][T23021] bond1: entered allmulticast mode [ 354.647598][T23021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.740337][T23025] loop9: detected capacity change from 0 to 2048 [ 354.796448][T23021] bond1 (unregistering): Released all slaves [ 354.804383][T23025] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.062825][T23037] FAULT_INJECTION: forcing a failure. [ 355.062825][T23037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.076042][T23037] CPU: 0 UID: 0 PID: 23037 Comm: syz.3.6776 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 355.076071][T23037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 355.076086][T23037] Call Trace: [ 355.076094][T23037] [ 355.076103][T23037] dump_stack_lvl+0xf6/0x150 [ 355.076171][T23037] dump_stack+0x15/0x1a [ 355.076188][T23037] should_fail_ex+0x261/0x270 [ 355.076220][T23037] should_fail+0xb/0x10 [ 355.076346][T23037] should_fail_usercopy+0x1a/0x20 [ 355.076382][T23037] _copy_from_user+0x1c/0xa0 [ 355.076415][T23037] memdup_sockptr_noprof+0x8b/0x120 [ 355.076445][T23037] ipv6_set_mcast_msfilter+0x8c/0x160 [ 355.076518][T23037] do_ipv6_setsockopt+0x1171/0x2240 [ 355.076546][T23037] ? kstrtouint+0x7b/0xc0 [ 355.076573][T23037] ? avc_has_perm_noaudit+0x1cc/0x210 [ 355.076654][T23037] ? selinux_netlbl_socket_setsockopt+0xea/0x2d0 [ 355.076693][T23037] ? avc_has_perm+0xd6/0x150 [ 355.076722][T23037] ipv6_setsockopt+0x57/0x130 [ 355.076756][T23037] tcp_setsockopt+0x93/0xb0 [ 355.076822][T23037] sock_common_setsockopt+0x64/0x80 [ 355.076844][T23037] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 355.076925][T23037] __sys_setsockopt+0x187/0x200 [ 355.077001][T23037] __x64_sys_setsockopt+0x66/0x80 [ 355.077029][T23037] x64_sys_call+0x2a09/0x2e10 [ 355.077054][T23037] do_syscall_64+0xc9/0x1c0 [ 355.077088][T23037] ? clear_bhb_loop+0x25/0x80 [ 355.077111][T23037] ? clear_bhb_loop+0x25/0x80 [ 355.077186][T23037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.077211][T23037] RIP: 0033:0x7f2693a1d169 [ 355.077228][T23037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.077307][T23037] RSP: 002b:00007f269207f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 355.077328][T23037] RAX: ffffffffffffffda RBX: 00007f2693c35fa0 RCX: 00007f2693a1d169 [ 355.077342][T23037] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000003 [ 355.077371][T23037] RBP: 00007f269207f090 R08: 0000000000020000 R09: 0000000000000000 [ 355.077386][T23037] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 355.077399][T23037] R13: 0000000000000000 R14: 00007f2693c35fa0 R15: 00007ffc20815928 [ 355.077420][T23037] [ 355.136665][T23043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6777'. [ 355.333027][T23047] loop3: detected capacity change from 0 to 128 [ 355.336827][T23024] Set syz1 is full, maxelem 65536 reached [ 355.350787][T14851] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.589405][T14962] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.638825][T23060] random: crng reseeded on system resumption [ 355.674054][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 355.674069][ T29] audit: type=1326 audit(1744319126.686:12059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23057 comm="syz.1.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd31d169 code=0x7ffc0000 [ 355.737340][T23061] loop1: detected capacity change from 0 to 2048 [ 355.744040][ T29] audit: type=1326 audit(1744319126.736:12060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23057 comm="syz.1.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fd2bd31d169 code=0x7ffc0000 [ 355.767744][ T29] audit: type=1326 audit(1744319126.736:12061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23057 comm="syz.1.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd31d169 code=0x7ffc0000 [ 355.791565][ T29] audit: type=1326 audit(1744319126.736:12062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23057 comm="syz.1.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fd2bd31d169 code=0x7ffc0000 [ 355.815322][ T29] audit: type=1326 audit(1744319126.736:12063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23057 comm="syz.1.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd31d169 code=0x7ffc0000 [ 355.838937][ T29] audit: type=1326 audit(1744319126.736:12064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23057 comm="syz.1.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd31d169 code=0x7ffc0000 [ 355.862613][ T29] audit: type=1326 audit(1744319126.736:12065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23059 comm="syz.9.6784" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2578a7d169 code=0x0 [ 355.885779][ T29] audit: type=1326 audit(1744319126.736:12066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23057 comm="syz.1.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd2bd31d169 code=0x7ffc0000 [ 355.909413][ T29] audit: type=1326 audit(1744319126.736:12067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23057 comm="syz.1.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd2bd31d1a3 code=0x7ffc0000 [ 355.932840][ T29] audit: type=1326 audit(1744319126.736:12068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23057 comm="syz.1.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd2bd31bc1f code=0x7ffc0000 [ 355.981172][T23068] bond0: entered promiscuous mode [ 355.986361][T23068] bond0: entered allmulticast mode [ 355.997014][T23065] loop6: detected capacity change from 0 to 2048 [ 356.003611][T23068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.008823][T23061] loop1: unable to read partition table [ 356.034222][T23061] loop1: partition table beyond EOD, truncated [ 356.040612][T23061] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 356.058959][T23068] bond0 (unregistering): Released all slaves [ 356.097422][T23065] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.323145][T23085] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6793'. [ 356.342895][T23085] vlan2: entered promiscuous mode [ 356.348442][T23085] dummy0: entered promiscuous mode [ 356.400362][T23096] loop9: detected capacity change from 0 to 2048 [ 356.441904][T23098] bond1: entered promiscuous mode [ 356.447056][T23098] bond1: entered allmulticast mode [ 356.467153][T23098] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.529309][T23103] loop3: detected capacity change from 0 to 2048 [ 356.551765][T23105] loop4: detected capacity change from 0 to 256 [ 356.592866][T23096] loop9: unable to read partition table [ 356.602613][T23105] msdos: Bad value for 'gid' [ 356.607383][T23105] msdos: Bad value for 'gid' [ 356.612925][T23098] bond1 (unregistering): Released all slaves [ 356.632661][T23096] loop9: partition table beyond EOD, truncated [ 356.639000][T23096] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 356.676525][T23103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.722583][T14851] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.992332][T17542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.097233][T23135] loop9: detected capacity change from 0 to 2048 [ 357.164417][T23135] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.412298][T23144] loop1: detected capacity change from 0 to 256 [ 357.442046][T23144] msdos: Bad value for 'gid' [ 357.446802][T23144] msdos: Bad value for 'gid' [ 357.644602][T23159] bond2: entered promiscuous mode [ 357.649754][T23159] bond2: entered allmulticast mode [ 357.769902][T23159] 8021q: adding VLAN 0 to HW filter on device bond2 [ 357.826771][T23162] loop1: detected capacity change from 0 to 2048 [ 357.941958][T23167] SELinux: policydb version 0 does not match my version range 15-34 [ 357.959381][T14962] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.969823][T23169] random: crng reseeded on system resumption [ 357.981756][T23167] SELinux: failed to load policy [ 358.028999][T23159] bond2 (unregistering): Released all slaves [ 358.065081][T23171] loop3: detected capacity change from 0 to 1764 [ 358.240891][T23162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.351282][T23179] loop9: detected capacity change from 0 to 512 [ 358.360224][T23179] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 358.381923][T23179] EXT4-fs (loop9): orphan cleanup on readonly fs [ 358.384200][T23152] Set syz1 is full, maxelem 65536 reached [ 358.393117][T23179] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6819: bg 0: block 248: padding at end of block bitmap is not set [ 358.411965][T23179] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.6819: Failed to acquire dquot type 1 [ 358.425990][T23182] SELinux: policydb version 0 does not match my version range 15-34 [ 358.434149][T23182] SELinux: failed to load policy [ 358.436251][T23179] EXT4-fs (loop9): 1 truncate cleaned up [ 358.466451][T23179] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 358.481107][T15273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.682156][T23202] loop3: detected capacity change from 0 to 2048 [ 358.697686][T23203] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6831'. [ 358.770836][T23204] sd 0:0:1:0: device reset [ 358.879207][T23202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.023769][T23217] bond0: entered promiscuous mode [ 359.028932][T23217] bond0: entered allmulticast mode [ 359.034313][T23217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.053568][T14962] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.088529][T23219] loop4: detected capacity change from 0 to 2048 [ 359.124019][T23217] bond0 (unregistering): Released all slaves [ 359.146745][T23224] loop9: detected capacity change from 0 to 128 [ 359.180216][T23222] loop6: detected capacity change from 0 to 2048 [ 359.249032][T23228] syz.9.6836: attempt to access beyond end of device [ 359.249032][T23228] loop9: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 359.284842][T23222] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.324495][T23219] loop4: unable to read partition table [ 359.345512][T23228] syz.9.6836: attempt to access beyond end of device [ 359.345512][T23228] loop9: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 359.359153][T23219] loop4: partition table beyond EOD, truncated [ 359.365463][T23219] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 359.414104][T23228] syz.9.6836: attempt to access beyond end of device [ 359.414104][T23228] loop9: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 359.427863][T23228] syz.9.6836: attempt to access beyond end of device [ 359.427863][T23228] loop9: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 359.558343][T23228] syz.9.6836: attempt to access beyond end of device [ 359.558343][T23228] loop9: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 359.690376][T23228] syz.9.6836: attempt to access beyond end of device [ 359.690376][T23228] loop9: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 359.815402][T23228] syz.9.6836: attempt to access beyond end of device [ 359.815402][T23228] loop9: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 359.854789][T23216] Set syz1 is full, maxelem 65536 reached [ 359.855470][T23228] syz.9.6836: attempt to access beyond end of device [ 359.855470][T23228] loop9: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 359.879546][T23228] syz.9.6836: attempt to access beyond end of device [ 359.879546][T23228] loop9: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 359.900180][T17542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.911597][T23228] syz.9.6836: attempt to access beyond end of device [ 359.911597][T23228] loop9: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 359.971149][T14851] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.005492][T23239] random: crng reseeded on system resumption [ 360.080978][T23243] loop6: detected capacity change from 0 to 1024 [ 360.392057][T23256] loop9: detected capacity change from 0 to 512 [ 360.402275][T23243] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.420015][T23256] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 360.445777][T23256] EXT4-fs (loop9): orphan cleanup on readonly fs [ 360.458063][T23256] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6846: bg 0: block 248: padding at end of block bitmap is not set [ 360.472794][T23256] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.6846: Failed to acquire dquot type 1 [ 360.488948][T23256] EXT4-fs (loop9): 1 truncate cleaned up [ 360.498315][T23256] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 360.529230][T14851] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.581461][T23275] random: crng reseeded on system resumption [ 360.682574][T23281] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6854'. [ 360.697715][T23283] random: crng reseeded on system resumption [ 360.726941][T23281] loop1: detected capacity change from 0 to 1764 [ 360.764709][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 360.770944][ T29] audit: type=1326 audit(1744319131.776:12137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23282 comm="syz.4.6855" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ab1bed169 code=0x0 [ 360.807553][T23290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6857'. [ 360.901390][T23290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6857'. [ 360.914398][T23295] SELinux: policydb version 0 does not match my version range 15-34 [ 360.922712][T23295] SELinux: failed to load policy [ 361.083065][T23308] random: crng reseeded on system resumption [ 361.318357][T14962] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.328780][T23313] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6867'. [ 361.410122][T23315] netlink: 'syz.1.6866': attribute type 5 has an invalid length. [ 361.410143][T23315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6866'. [ 361.440975][T23315] SELinux: Context system_u:object_r:udev_helper_exec_t:s0 is not valid (left unmapped). [ 361.445170][T23313] loop9: detected capacity change from 0 to 1764 [ 361.465479][T23315] loop1: detected capacity change from 0 to 512 [ 361.469332][ T29] audit: type=1400 audit(1744319132.456:12138): avc: denied { mac_admin } for pid=23314 comm="syz.1.6866" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 361.469364][ T29] audit: type=1400 audit(1744319132.456:12139): avc: denied { relabelto } for pid=23314 comm="syz.1.6866" name="file1" dev="tmpfs" ino=2941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:udev_helper_exec_t:s0" [ 361.469479][ T29] audit: type=1400 audit(1744319132.456:12140): avc: denied { associate } for pid=23314 comm="syz.1.6866" name="file1" dev="tmpfs" ino=2941 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:udev_helper_exec_t:s0" [ 361.525818][T23315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 361.681498][T23322] random: crng reseeded on system resumption [ 361.780415][T23315] ext4 filesystem being mounted at /552/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.853678][ T29] audit: type=1326 audit(1744319132.866:12141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23320 comm="syz.9.6869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2578a7d169 code=0x0 [ 361.868074][T23301] Set syz1 is full, maxelem 65536 reached [ 361.928271][T23327] SELinux: policydb version 0 does not match my version range 15-34 [ 361.974629][T23327] SELinux: failed to load policy [ 362.095439][T23337] netlink: 'syz.6.6876': attribute type 1 has an invalid length. [ 362.143344][T23350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6881'. [ 362.176555][ T29] audit: type=1326 audit(1744319133.186:12142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23354 comm="syz.6.6883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6b08d169 code=0x7ffc0000 [ 362.200361][ T29] audit: type=1326 audit(1744319133.186:12143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23354 comm="syz.6.6883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6b08d169 code=0x7ffc0000 [ 362.224135][ T29] audit: type=1326 audit(1744319133.186:12144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23354 comm="syz.6.6883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab6b08d169 code=0x7ffc0000 [ 362.247803][ T29] audit: type=1326 audit(1744319133.186:12145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23354 comm="syz.6.6883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6b08d169 code=0x7ffc0000 [ 362.271489][ T29] audit: type=1326 audit(1744319133.186:12146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23354 comm="syz.6.6883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab6b08d169 code=0x7ffc0000 [ 362.305275][T23359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6881'. [ 362.352256][T23363] bond1: entered promiscuous mode [ 362.357394][T23363] bond1: entered allmulticast mode [ 362.359191][T23356] loop4: detected capacity change from 0 to 1024 [ 362.391401][T23363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 362.398366][T23366] loop9: detected capacity change from 0 to 2048 [ 362.414039][T23355] loop6: detected capacity change from 0 to 1024 [ 362.539516][T23372] random: crng reseeded on system resumption [ 362.628378][T23373] loop1: detected capacity change from 0 to 2048 [ 362.639847][T23363] bond1 (unregistering): Released all slaves [ 362.701139][T23367] bond2: entered promiscuous mode [ 362.706324][T23367] bond2: entered allmulticast mode [ 362.714506][T23356] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.733661][T23367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 362.963801][T23367] bond2 (unregistering): Released all slaves [ 362.977030][T23386] xt_hashlimit: max too large, truncated to 1048576 [ 363.193020][T23392] bond1: entered promiscuous mode [ 363.198118][T23392] bond1: entered allmulticast mode [ 363.277981][T23398] SELinux: policydb version 0 does not match my version range 15-34 [ 363.302830][T23398] SELinux: failed to load policy [ 363.331033][T23392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.381072][T23392] bond1 (unregistering): Released all slaves [ 363.414427][T23407] loop4: detected capacity change from 0 to 2048 [ 363.426333][T23401] loop3: detected capacity change from 0 to 2048 [ 363.450339][T23409] loop9: detected capacity change from 0 to 256 [ 363.481700][T23409] msdos: Bad value for 'gid' [ 363.486389][T23409] msdos: Bad value for 'gid' [ 363.561713][T23415] random: crng reseeded on system resumption [ 363.583170][T23407] loop4: unable to read partition table [ 363.635205][T23407] loop4: partition table beyond EOD, truncated [ 363.641415][T23407] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 363.770864][T23422] loop4: detected capacity change from 0 to 1024 [ 363.811457][T23422] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.827850][T23420] loop1: detected capacity change from 0 to 512 [ 363.829468][T23420] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 363.856317][T23422] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6900: bg 0: block 393: padding at end of block bitmap is not set [ 363.867306][T23420] EXT4-fs (loop1): orphan cleanup on readonly fs [ 363.892679][T23422] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 117 [ 363.905888][T23422] EXT4-fs (loop4): This should not happen!! Data will be lost [ 363.905888][T23422] [ 363.923003][T23420] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6899: bg 0: block 248: padding at end of block bitmap is not set [ 363.948432][T23420] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.6899: Failed to acquire dquot type 1 [ 363.975833][T23420] EXT4-fs (loop1): 1 truncate cleaned up [ 364.086844][T23432] xt_hashlimit: max too large, truncated to 1048576 [ 364.215003][T23437] bond1: entered promiscuous mode [ 364.220191][T23437] bond1: entered allmulticast mode [ 364.238682][T23437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.365865][T23435] loop3: detected capacity change from 0 to 2048 [ 364.512663][T23426] Set syz1 is full, maxelem 65536 reached [ 364.521633][T23437] bond1 (unregistering): Released all slaves [ 364.542399][T23443] loop6: detected capacity change from 0 to 256 [ 364.549159][T23443] msdos: Bad value for 'gid' [ 364.553872][T23443] msdos: Bad value for 'gid' [ 364.620343][T23453] loop6: detected capacity change from 0 to 1764 [ 364.736790][T23457] loop6: detected capacity change from 0 to 512 [ 364.749856][T23457] EXT4-fs: Ignoring removed i_version option [ 364.778218][T23457] ext4 filesystem being mounted at /581/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.791843][T23462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6911'. [ 364.814099][T23457] random: crng reseeded on system resumption [ 364.922596][T23470] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 364.980386][T23477] FAULT_INJECTION: forcing a failure. [ 364.980386][T23477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.993622][T23477] CPU: 1 UID: 0 PID: 23477 Comm: syz.3.6916 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 364.993654][T23477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 364.993705][T23477] Call Trace: [ 364.993711][T23477] [ 364.993718][T23477] dump_stack_lvl+0xf6/0x150 [ 364.993744][T23477] dump_stack+0x15/0x1a [ 364.993770][T23477] should_fail_ex+0x261/0x270 [ 364.993803][T23477] should_fail+0xb/0x10 [ 364.993831][T23477] should_fail_usercopy+0x1a/0x20 [ 364.993866][T23477] _copy_from_user+0x1c/0xa0 [ 364.993953][T23477] copy_msghdr_from_user+0x54/0x2b0 [ 364.994073][T23477] ? __fget_files+0x186/0x1c0 [ 364.994100][T23477] __sys_sendmsg+0x141/0x240 [ 364.994149][T23477] __x64_sys_sendmsg+0x46/0x50 [ 364.994176][T23477] x64_sys_call+0x26f3/0x2e10 [ 364.994253][T23477] do_syscall_64+0xc9/0x1c0 [ 364.994289][T23477] ? clear_bhb_loop+0x25/0x80 [ 364.994355][T23477] ? clear_bhb_loop+0x25/0x80 [ 364.994381][T23477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.994402][T23477] RIP: 0033:0x7f2693a1d169 [ 364.994463][T23477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.994483][T23477] RSP: 002b:00007f269207f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.994506][T23477] RAX: ffffffffffffffda RBX: 00007f2693c35fa0 RCX: 00007f2693a1d169 [ 364.994520][T23477] RDX: 000000000000c054 RSI: 0000200000004b80 RDI: 0000000000000003 [ 364.994534][T23477] RBP: 00007f269207f090 R08: 0000000000000000 R09: 0000000000000000 [ 364.994548][T23477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.994570][T23477] R13: 0000000000000000 R14: 00007f2693c35fa0 R15: 00007ffc20815928 [ 364.994592][T23477] [ 365.230861][T23482] loop3: detected capacity change from 0 to 256 [ 365.290227][T23482] msdos: Bad value for 'gid' [ 365.294926][T23482] msdos: Bad value for 'gid' [ 365.358747][T23492] loop4: detected capacity change from 0 to 2048 [ 365.383288][T23494] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6923'. [ 365.392439][T23494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6923'. [ 365.514071][T23492] loop4: unable to read partition table [ 365.532143][T23487] loop6: detected capacity change from 0 to 512 [ 365.544801][T23492] loop4: partition table beyond EOD, truncated [ 365.551062][T23492] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 365.563610][T23487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 365.585827][T23487] EXT4-fs (loop6): orphan cleanup on readonly fs [ 365.592900][T23487] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6921: bg 0: block 248: padding at end of block bitmap is not set [ 365.608083][T23487] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.6921: Failed to acquire dquot type 1 [ 365.620679][T23487] EXT4-fs (loop6): 1 truncate cleaned up [ 365.679508][T23507] netlink: 'syz.4.6927': attribute type 5 has an invalid length. [ 365.687503][T23507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6927'. [ 365.738862][T23507] loop4: detected capacity change from 0 to 512 [ 365.782708][T23515] netlink: 'syz.3.6930': attribute type 5 has an invalid length. [ 365.790547][T23515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6930'. [ 365.811948][T23518] netlink: 'syz.9.6931': attribute type 5 has an invalid length. [ 365.819833][T23518] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6931'. [ 365.820004][T23515] loop3: detected capacity change from 0 to 512 [ 365.838205][T23507] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.863496][T23515] ext4 filesystem being mounted at /440/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.883501][T23520] bond2: entered promiscuous mode [ 365.888724][T23520] bond2: entered allmulticast mode [ 365.900262][T23527] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6933'. [ 365.934291][T23527] SELinux: policydb version 0 does not match my version range 15-34 [ 365.948858][T23527] SELinux: failed to load policy [ 365.950342][T23520] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.023884][T23530] loop1: detected capacity change from 0 to 2048 [ 366.025093][T23529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6934'. [ 366.039419][T23529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6934'. [ 366.054566][T23520] bond2 (unregistering): Released all slaves [ 366.056154][T23527] loop9: detected capacity change from 0 to 1764 [ 366.119322][T23525] loop4: detected capacity change from 0 to 1024 [ 366.223078][T23525] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.248895][T23542] loop3: detected capacity change from 0 to 2048 [ 366.300684][T23525] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6932: bg 0: block 393: padding at end of block bitmap is not set [ 366.323140][T23525] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 117 [ 366.336386][T23525] EXT4-fs (loop4): This should not happen!! Data will be lost [ 366.336386][T23525] [ 366.338371][T23548] loop6: detected capacity change from 0 to 1764 [ 366.401181][T23551] loop6: detected capacity change from 0 to 1024 [ 366.419291][T23542] loop3: unable to read partition table [ 366.427229][T23542] loop3: partition table beyond EOD, truncated [ 366.433493][T23542] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 366.471955][T23551] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.493781][T23525] xt_hashlimit: max too large, truncated to 1048576 [ 366.520029][T23557] bond1: entered promiscuous mode [ 366.525172][T23557] bond1: entered allmulticast mode [ 366.586378][T23557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 366.594632][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 366.594649][ T29] audit: type=1400 audit(1744319137.606:12280): avc: denied { bind } for pid=23563 comm="syz.6.6945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 366.620764][ T29] audit: type=1400 audit(1744319137.606:12281): avc: denied { ioctl } for pid=23563 comm="syz.6.6945" path="socket:[71458]" dev="sockfs" ino=71458 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 366.648475][T23568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6945'. [ 366.657914][T23567] loop3: detected capacity change from 0 to 512 [ 366.668484][T23566] loop9: detected capacity change from 0 to 2048 [ 366.677214][T23557] bond1 (unregistering): Released all slaves [ 366.686630][T23567] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.708100][T23560] netlink: 'syz.1.6943': attribute type 5 has an invalid length. [ 366.716027][T23560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6943'. [ 366.725756][T23562] netlink: 'syz.3.6944': attribute type 5 has an invalid length. [ 366.733586][T23562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6944'. [ 366.742843][T23568] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 366.872642][ T29] audit: type=1326 audit(1744319137.886:12282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23583 comm="syz.3.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 366.896432][ T29] audit: type=1326 audit(1744319137.886:12283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23583 comm="syz.3.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 366.926475][ T29] audit: type=1326 audit(1744319137.886:12284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23583 comm="syz.3.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 366.950199][ T29] audit: type=1326 audit(1744319137.886:12285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23583 comm="syz.3.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 366.973872][ T29] audit: type=1326 audit(1744319137.886:12286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23583 comm="syz.3.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 366.997540][ T29] audit: type=1326 audit(1744319137.886:12287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23583 comm="syz.3.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 367.128604][T23600] loop3: detected capacity change from 0 to 2048 [ 367.205423][T23600] loop3: unable to read partition table [ 367.211121][T23600] loop3: partition table beyond EOD, truncated [ 367.217448][T23600] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 367.283280][T23609] loop1: detected capacity change from 0 to 2048 [ 367.290440][T23603] bond1: entered promiscuous mode [ 367.295609][T23603] bond1: entered allmulticast mode [ 367.337556][T23603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 367.350608][T23613] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6959'. [ 367.379466][T23606] loop4: detected capacity change from 0 to 2048 [ 367.390995][T23613] loop9: detected capacity change from 0 to 1764 [ 367.400758][T23603] bond1 (unregistering): Released all slaves [ 367.411051][T23619] random: crng reseeded on system resumption [ 367.481156][ T29] audit: type=1326 audit(1744319138.486:12288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23618 comm="syz.6.6963" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab6b08d169 code=0x0 [ 367.510652][T23593] bond2: entered promiscuous mode [ 367.515850][T23593] bond2: entered allmulticast mode [ 367.535394][T23593] 8021q: adding VLAN 0 to HW filter on device bond2 [ 367.546460][T23593] bond2 (unregistering): Released all slaves [ 367.603045][ T29] audit: type=1326 audit(1744319138.616:12289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23629 comm="syz.6.6965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6b08d169 code=0x7ffc0000 [ 367.755216][T23646] loop3: detected capacity change from 0 to 4096 [ 367.764277][T23646] FAULT_INJECTION: forcing a failure. [ 367.764277][T23646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.777492][T23646] CPU: 0 UID: 0 PID: 23646 Comm: syz.3.6972 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 367.777606][T23646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 367.777679][T23646] Call Trace: [ 367.777687][T23646] [ 367.777695][T23646] dump_stack_lvl+0xf6/0x150 [ 367.777720][T23646] dump_stack+0x15/0x1a [ 367.777737][T23646] should_fail_ex+0x261/0x270 [ 367.777765][T23646] should_fail+0xb/0x10 [ 367.777815][T23646] should_fail_usercopy+0x1a/0x20 [ 367.777891][T23646] strncpy_from_user+0x25/0x230 [ 367.777918][T23646] ? getname_flags+0x81/0x3b0 [ 367.777942][T23646] getname_flags+0xb0/0x3b0 [ 367.778036][T23646] __x64_sys_unlinkat+0x75/0xb0 [ 367.778072][T23646] x64_sys_call+0x237a/0x2e10 [ 367.778151][T23646] do_syscall_64+0xc9/0x1c0 [ 367.778186][T23646] ? clear_bhb_loop+0x25/0x80 [ 367.778210][T23646] ? clear_bhb_loop+0x25/0x80 [ 367.778235][T23646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.778263][T23646] RIP: 0033:0x7f2693a1d169 [ 367.778278][T23646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.778296][T23646] RSP: 002b:00007f269207f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 367.778315][T23646] RAX: ffffffffffffffda RBX: 00007f2693c35fa0 RCX: 00007f2693a1d169 [ 367.778439][T23646] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 367.778455][T23646] RBP: 00007f269207f090 R08: 0000000000000000 R09: 0000000000000000 [ 367.778472][T23646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.778487][T23646] R13: 0000000000000000 R14: 00007f2693c35fa0 R15: 00007ffc20815928 [ 367.778507][T23646] [ 368.018023][T23649] bond1: entered promiscuous mode [ 368.023109][T23649] bond1: entered allmulticast mode [ 368.028549][T23649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.033713][T23655] random: crng reseeded on system resumption [ 368.072406][T23661] loop3: detected capacity change from 0 to 512 [ 368.101034][T23661] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.112409][T23649] bond1 (unregistering): Released all slaves [ 368.126859][T23658] loop9: detected capacity change from 0 to 2048 [ 368.154432][T23657] netlink: 'syz.3.6975': attribute type 5 has an invalid length. [ 368.246159][T23668] bond1: entered promiscuous mode [ 368.251288][T23668] bond1: entered allmulticast mode [ 368.264955][T23668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.280477][T23673] loop4: detected capacity change from 0 to 2048 [ 368.296030][T23668] bond1 (unregistering): Released all slaves [ 368.314159][T23672] netlink: 'syz.3.6978': attribute type 5 has an invalid length. [ 368.354087][T23672] loop3: detected capacity change from 0 to 512 [ 368.373542][T23672] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.579714][T23690] loop3: detected capacity change from 0 to 2048 [ 368.628689][T23696] netlink: 'syz.6.6987': attribute type 5 has an invalid length. [ 368.660946][T23696] loop6: detected capacity change from 0 to 512 [ 368.671509][T23690] loop3: unable to read partition table [ 368.677660][T23690] loop3: partition table beyond EOD, truncated [ 368.683875][T23690] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 368.700422][T23696] ext4 filesystem being mounted at /599/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.897992][T14851] : (slave syz_tun): Releasing backup interface [ 369.003958][T23731] loop1: detected capacity change from 0 to 2048 [ 369.098600][T16283] EXT4-fs unmount: 48 callbacks suppressed [ 369.098619][T16283] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.140207][T23719] lo speed is unknown, defaulting to 1000 [ 369.146909][T23731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.159466][T23740] loop9: detected capacity change from 0 to 1764 [ 369.195852][T23719] lo speed is unknown, defaulting to 1000 [ 369.410702][T23719] chnl_net:caif_netlink_parms(): no params data found [ 369.645718][T23751] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 369.766657][T23722] Set syz1 is full, maxelem 65536 reached [ 369.782592][T15273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.812347][T23719] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.819576][T23719] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.827019][T23719] bridge_slave_0: entered allmulticast mode [ 369.833620][T23719] bridge_slave_0: entered promiscuous mode [ 369.842495][T23719] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.849683][T23719] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.857018][T23719] bridge_slave_1: entered allmulticast mode [ 369.863871][T23719] bridge_slave_1: entered promiscuous mode [ 369.921262][T23719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.929752][T23769] loop1: detected capacity change from 0 to 2048 [ 369.932376][T23719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.963899][T23719] team0: Port device team_slave_0 added [ 369.970928][T23719] team0: Port device team_slave_1 added [ 370.021363][T23719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.028398][T23719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.032573][T23769] loop1: unable to read partition table [ 370.054413][T23719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.072213][T23769] loop1: partition table beyond EOD, truncated [ 370.078495][T23769] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 370.099653][T23719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.106675][T23719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.132760][T23719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.224692][T23773] bond1: entered promiscuous mode [ 370.231975][T23773] bond1: entered allmulticast mode [ 370.240479][T23773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 370.269023][T23787] loop3: detected capacity change from 0 to 2048 [ 370.271231][T23781] loop4: detected capacity change from 0 to 1764 [ 370.308656][T23773] bond1 (unregistering): Released all slaves [ 370.330529][T23787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.508651][T23719] hsr_slave_0: entered promiscuous mode [ 370.522621][T23719] hsr_slave_1: entered promiscuous mode [ 370.534635][T23719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.543608][T23719] Cannot create hsr debugfs directory [ 370.786149][T23820] __nla_validate_parse: 9 callbacks suppressed [ 370.786213][T23820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7029'. [ 370.807838][T23816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7028'. [ 371.040648][T23790] Set syz1 is full, maxelem 65536 reached [ 371.075448][T23719] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.122822][T17542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.193457][T23719] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.236656][T23832] random: crng reseeded on system resumption [ 371.258716][T23719] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.400952][T23843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7035'. [ 371.522800][T23719] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.602909][T23849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7035'. [ 371.670172][T23823] loop9: detected capacity change from 0 to 2048 [ 371.693730][T23846] bond1: entered promiscuous mode [ 371.698894][T23846] bond1: entered allmulticast mode [ 371.714409][T23846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.786428][T23823] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.807360][T23851] loop4: detected capacity change from 0 to 2048 [ 371.839684][T23851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.977732][T23827] Set syz1 is full, maxelem 65536 reached [ 372.029542][T23846] bond1 (unregistering): Released all slaves [ 372.044305][T23858] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7036'. [ 372.062306][T23838] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 372.087814][T23858] loop1: detected capacity change from 0 to 1764 [ 372.113947][T14962] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.129300][T23719] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 372.174675][T23719] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 372.212054][T23719] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 372.227838][T23864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7040'. [ 372.241680][T23719] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 372.387596][T23719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.395044][T16283] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.407704][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 372.407721][ T29] audit: type=1326 audit(1744319143.426:12413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23877 comm="syz.3.7047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 372.439151][T23719] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.453516][T23881] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7048'. [ 372.466435][T23879] bond2: entered promiscuous mode [ 372.466457][T23879] bond2: entered allmulticast mode [ 372.466612][T23879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 372.467228][ T29] audit: type=1326 audit(1744319143.456:12414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23877 comm="syz.3.7047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 372.467262][ T29] audit: type=1326 audit(1744319143.456:12415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23877 comm="syz.3.7047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 372.467290][ T29] audit: type=1326 audit(1744319143.456:12416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23877 comm="syz.3.7047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 372.467356][ T29] audit: type=1326 audit(1744319143.456:12417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23877 comm="syz.3.7047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 372.609559][T23892] loop1: detected capacity change from 0 to 2048 [ 372.618197][T23879] bond2 (unregistering): Released all slaves [ 372.629589][T18601] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.636730][T18601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.641635][T23881] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7048'. [ 372.668116][T23892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.669113][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.687234][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.709101][T23719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 372.719532][T23719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 372.743122][T23897] bond1: entered promiscuous mode [ 372.748297][T23897] bond1: entered allmulticast mode [ 372.758656][T23897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 372.774046][T23897] bond1 (unregistering): Released all slaves [ 372.874661][T23905] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7051'. [ 372.943769][T23910] SELinux: policydb version 0 does not match my version range 15-34 [ 372.975162][T23719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.989379][T23910] SELinux: failed to load policy [ 373.233446][T23923] bond1: entered promiscuous mode [ 373.238601][T23923] bond1: entered allmulticast mode [ 373.278177][T23923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.315852][T23925] loop9: detected capacity change from 0 to 2048 [ 373.353211][T23884] Set syz1 is full, maxelem 65536 reached [ 373.364318][T15273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.404213][T23923] bond1 (unregistering): Released all slaves [ 373.452566][T23925] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.491962][ T29] audit: type=1326 audit(1744319144.496:12418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23935 comm="syz.3.7058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 373.515686][ T29] audit: type=1326 audit(1744319144.496:12419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23935 comm="syz.3.7058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 373.539453][ T29] audit: type=1326 audit(1744319144.496:12420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23935 comm="syz.3.7058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 373.563053][ T29] audit: type=1326 audit(1744319144.496:12421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23935 comm="syz.3.7058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 373.586943][ T29] audit: type=1326 audit(1744319144.496:12422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23935 comm="syz.3.7058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 373.612605][T23938] netlink: 'syz.4.7059': attribute type 5 has an invalid length. [ 373.613917][T23941] SELinux: policydb version 0 does not match my version range 15-34 [ 373.620491][T23938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7059'. [ 373.679456][T23941] SELinux: failed to load policy [ 373.683392][T23719] veth0_vlan: entered promiscuous mode [ 373.705444][T23719] veth1_vlan: entered promiscuous mode [ 373.705818][T23940] loop1: detected capacity change from 0 to 1764 [ 373.722466][T23950] SELinux: policydb version 0 does not match my version range 15-34 [ 373.744318][T23950] SELinux: failed to load policy [ 373.757779][T23719] veth0_macvtap: entered promiscuous mode [ 373.775143][T23719] veth1_macvtap: entered promiscuous mode [ 373.793717][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.804307][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.804348][T23955] loop1: detected capacity change from 0 to 2048 [ 373.814178][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.831042][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.841049][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.851502][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.861377][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.871951][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.881856][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.892371][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.902270][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.912791][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.922664][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.933128][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.943018][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.943281][T23961] loop4: detected capacity change from 0 to 2048 [ 373.953559][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.953600][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.953618][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.987914][T23961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.990119][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.012594][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.022472][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.032987][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.044020][T14962] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.044631][T23719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.062381][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.072994][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.082911][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.093442][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.103383][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.113845][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.123760][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.134218][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.144149][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.154630][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.164155][T23969] loop9: detected capacity change from 0 to 256 [ 374.164622][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.171319][T23969] msdos: Bad value for 'gid' [ 374.181355][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.181384][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.181403][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.181423][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.181438][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.181510][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.186134][T23969] msdos: Bad value for 'gid' [ 374.195903][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.195923][T23719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.272151][T23719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.285311][T23719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.288311][T23955] loop1: unable to read partition table [ 374.298519][T23955] loop1: partition table beyond EOD, truncated [ 374.304767][T23955] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 374.307235][T23958] bond1: entered promiscuous mode [ 374.317969][T23958] bond1: entered allmulticast mode [ 374.330042][T23958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.387364][T23974] loop9: detected capacity change from 0 to 1024 [ 374.413885][T23958] bond1 (unregistering): Released all slaves [ 374.443245][T23719] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.443374][T23974] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.452137][T23719] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.452176][T23719] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.452209][T23719] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.500485][T23974] ext4 filesystem being mounted at /621/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.590540][T23981] netlink: 'syz.3.7071': attribute type 5 has an invalid length. [ 374.621287][T16283] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.635481][T23974] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.7069: bg 0: block 393: padding at end of block bitmap is not set [ 374.660933][T23974] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 117 [ 374.676753][T23974] EXT4-fs (loop9): This should not happen!! Data will be lost [ 374.676753][T23974] [ 374.703518][T23989] SELinux: policydb version 0 does not match my version range 15-34 [ 374.743085][T23991] loop1: detected capacity change from 0 to 2048 [ 374.761482][T23989] SELinux: failed to load policy [ 374.792839][T23996] loop3: detected capacity change from 0 to 1764 [ 374.805606][T23974] xt_hashlimit: max too large, truncated to 1048576 [ 374.858981][T23991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.891933][T24000] netlink: 'syz.4.7075': attribute type 27 has an invalid length. [ 374.900809][T14962] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.941579][T24009] bond1: entered promiscuous mode [ 374.946733][T24009] bond1: entered allmulticast mode [ 374.973897][T24008] loop3: detected capacity change from 0 to 1764 [ 375.037637][T24009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 375.074639][T24014] loop6: detected capacity change from 0 to 2048 [ 375.099199][T24022] loop4: detected capacity change from 0 to 512 [ 375.115150][T24022] EXT4-fs: Ignoring removed i_version option [ 375.117364][T24009] bond1 (unregistering): Released all slaves [ 375.186849][T24021] loop3: detected capacity change from 0 to 8192 [ 375.198979][T24022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.211756][T24022] ext4 filesystem being mounted at /485/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.227437][T24014] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.241245][T24000] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.248483][T24000] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.268460][T24021] loop3: p2 p3 p4 [ 375.272307][T24021] loop3: p2 start 452985088 is beyond EOD, truncated [ 375.279084][T24021] loop3: p3 size 33554432 extends beyond EOD, truncated [ 375.306181][T24021] loop3: p4 start 8388607 is beyond EOD, truncated [ 375.369977][T24000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.374264][T15273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.380344][T24000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.425051][T24000] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.433994][T24000] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.443117][T24000] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.452519][T24000] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.484133][T24000] ipip0: left promiscuous mode [ 375.489905][T24000] vlan2: left promiscuous mode [ 375.494788][T24000] dummy0: left promiscuous mode [ 375.645991][T24032] loop3: detected capacity change from 0 to 512 [ 375.678784][T23719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.678923][T24032] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 375.707721][T16283] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.718844][T24032] EXT4-fs (loop3): orphan cleanup on readonly fs [ 375.732082][T24011] lo speed is unknown, defaulting to 1000 [ 375.733216][T24032] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7082: bg 0: block 248: padding at end of block bitmap is not set [ 375.780748][T24011] lo speed is unknown, defaulting to 1000 [ 375.802792][T24032] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.7082: Failed to acquire dquot type 1 [ 375.829745][T24032] EXT4-fs (loop3): 1 truncate cleaned up [ 375.845772][T24049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.855720][T24049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.860447][T24032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 375.886549][T24011] chnl_net:caif_netlink_parms(): no params data found [ 375.926395][T24011] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.933521][T24011] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.940872][T24011] bridge_slave_0: entered allmulticast mode [ 375.947806][T24011] bridge_slave_0: entered promiscuous mode [ 375.954961][T24011] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.962080][T24011] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.969632][T24011] bridge_slave_1: entered allmulticast mode [ 375.976322][T24011] bridge_slave_1: entered promiscuous mode [ 375.996820][T24011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.007577][T24011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.031122][T24011] team0: Port device team_slave_0 added [ 376.038128][T24011] team0: Port device team_slave_1 added [ 376.056074][T24011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.063160][T24011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.089139][T24011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.101607][T24011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.108609][T24011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.134579][T24011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.163656][T24011] hsr_slave_0: entered promiscuous mode [ 376.169938][T24011] hsr_slave_1: entered promiscuous mode [ 376.176187][T24011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.183767][T24011] Cannot create hsr debugfs directory [ 376.307034][T17542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.331580][T24058] netlink: 'syz.3.7087': attribute type 5 has an invalid length. [ 376.339420][T24058] __nla_validate_parse: 4 callbacks suppressed [ 376.339437][T24058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7087'. [ 376.361910][T24060] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7088'. [ 376.387880][T24060] loop1: detected capacity change from 0 to 1764 [ 376.490476][T24011] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 376.505514][T24011] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 376.524677][T24011] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 376.546676][T24011] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 376.564688][T24075] loop1: detected capacity change from 0 to 2048 [ 376.624658][T24075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.733818][T24083] random: crng reseeded on system resumption [ 376.762661][T24011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.790967][T24011] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.808239][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.815471][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.826340][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.833525][ T416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.924471][T24089] netlink: 'syz.6.7098': attribute type 5 has an invalid length. [ 376.932347][T24089] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7098'. [ 377.053965][T24011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.307810][T24112] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7101'. [ 377.441369][T24011] veth0_vlan: entered promiscuous mode [ 377.472155][T24112] loop6: detected capacity change from 0 to 1764 [ 377.491268][T24011] veth1_vlan: entered promiscuous mode [ 377.568391][T24091] Set syz1 is full, maxelem 65536 reached [ 377.613830][T24011] veth0_macvtap: entered promiscuous mode [ 377.643368][T24011] veth1_macvtap: entered promiscuous mode [ 377.678660][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.689188][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.699156][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.709688][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.719555][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.730030][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.739882][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.750353][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.760222][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.770795][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.780654][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.791134][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.800988][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.811475][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.821340][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.831851][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.841693][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.852200][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.862530][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.873045][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.873454][T15273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.882874][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.882891][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.892724][T24011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.926543][T24129] loop3: detected capacity change from 0 to 1024 [ 377.933354][T24129] EXT4-fs: Ignoring removed orlov option [ 377.939392][T24129] EXT4-fs: Ignoring removed nomblk_io_submit option [ 377.942127][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.956704][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.966620][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.977184][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.987031][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.997467][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.007431][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.017916][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.027835][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.038368][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.048287][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.058756][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.058776][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.075659][T24129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.079204][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.101288][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.111737][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.121569][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.132025][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.141924][T24011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.152448][T24011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.165051][T24011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.168070][T17542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.173929][T24011] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.190275][T24011] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.199005][T24011] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.207817][T24011] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.357391][T24147] loop9: detected capacity change from 0 to 4096 [ 378.547319][T24163] loop1: detected capacity change from 0 to 2048 [ 378.556780][T24165] loop6: detected capacity change from 0 to 1024 [ 378.602809][T24173] random: crng reseeded on system resumption [ 378.610769][T24165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.725104][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 378.725122][ T29] audit: type=1400 audit(1744319149.746:12739): avc: denied { getopt } for pid=24177 comm="syz.3.7124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 378.732790][T24163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.769262][T24165] openvswitch: netlink: Message has 6 unknown bytes. [ 378.780456][ T29] audit: type=1326 audit(1744319149.796:12740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24183 comm="syz.3.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 378.805090][ T29] audit: type=1326 audit(1744319149.826:12741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24183 comm="syz.3.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 378.829012][ T29] audit: type=1326 audit(1744319149.826:12742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24183 comm="syz.3.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 378.852923][ T29] audit: type=1326 audit(1744319149.826:12743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24183 comm="syz.3.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 378.876694][ T29] audit: type=1326 audit(1744319149.826:12744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24183 comm="syz.3.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 378.900688][ T29] audit: type=1326 audit(1744319149.826:12745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24183 comm="syz.3.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 378.932457][ T29] audit: type=1326 audit(1744319149.826:12746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24183 comm="syz.3.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 378.956129][ T29] audit: type=1326 audit(1744319149.826:12747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24183 comm="syz.3.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 378.979884][ T29] audit: type=1326 audit(1744319149.826:12748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24183 comm="syz.3.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 379.166073][T24194] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 379.273285][T15273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.343667][T24206] netlink: 'syz.1.7134': attribute type 5 has an invalid length. [ 379.351601][T24206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7134'. [ 379.371599][T24207] bond1: entered promiscuous mode [ 379.377023][T24207] bond1: entered allmulticast mode [ 379.382826][T24207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 379.394329][T24207] bond1 (unregistering): Released all slaves [ 379.410699][T24212] random: crng reseeded on system resumption [ 379.418749][T23719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.449504][T24213] loop4: detected capacity change from 0 to 2048 [ 379.466928][T24213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.613599][T24231] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7143'. [ 379.652211][T24231] loop6: detected capacity change from 0 to 1764 [ 379.747168][T24227] lo speed is unknown, defaulting to 1000 [ 379.800464][T24227] lo speed is unknown, defaulting to 1000 [ 379.851804][T24253] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7151'. [ 379.907074][T24256] loop6: detected capacity change from 0 to 8192 [ 379.918365][T24227] chnl_net:caif_netlink_parms(): no params data found [ 379.975892][T24263] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7155'. [ 380.012941][T24227] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.020104][T24227] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.053965][T24227] bridge_slave_0: entered allmulticast mode [ 380.054532][T24263] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7155'. [ 380.069660][T24227] bridge_slave_0: entered promiscuous mode [ 380.077028][T24227] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.084115][T24227] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.091819][T24227] bridge_slave_1: entered allmulticast mode [ 380.099553][T24227] bridge_slave_1: entered promiscuous mode [ 380.166473][T16283] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.179623][T24263] team0 (unregistering): Port device team_slave_0 removed [ 380.190816][T24263] team0 (unregistering): Port device team_slave_1 removed [ 380.293060][T24227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.311719][T24227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.340508][T24290] netlink: 'syz.3.7167': attribute type 5 has an invalid length. [ 380.348332][T24290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7167'. [ 380.364419][T24227] team0: Port device team_slave_0 added [ 380.372708][T24227] team0: Port device team_slave_1 added [ 380.460973][T24227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.468157][T24227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.494129][T24227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.518081][T24306] netlink: 'syz.4.7174': attribute type 5 has an invalid length. [ 380.526637][T24227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.533716][T24227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.559916][T24227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.594808][T24227] hsr_slave_0: entered promiscuous mode [ 380.601468][T24227] hsr_slave_1: entered promiscuous mode [ 380.607619][T24227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.615554][T24227] Cannot create hsr debugfs directory [ 380.646747][T24316] bond1: entered promiscuous mode [ 380.651923][T24316] bond1: entered allmulticast mode [ 380.657583][T24316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 380.668321][T24316] bond1 (unregistering): Released all slaves [ 380.696524][T24319] loop3: detected capacity change from 0 to 2048 [ 380.708269][T24319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.740597][T24227] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.798115][T24227] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.848295][T24227] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.898265][T24227] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.972594][T24227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 380.982092][T24227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 380.991089][T24227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 381.000145][T24227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 381.044614][T24227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.057460][T24227] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.070638][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.077748][ T4244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.090147][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.097271][ T416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.180574][T24332] netlink: 'syz.9.7180': attribute type 5 has an invalid length. [ 381.200142][T24227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.273224][T24227] veth0_vlan: entered promiscuous mode [ 381.309175][T24227] veth1_vlan: entered promiscuous mode [ 381.318273][T17542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.337275][T24227] veth0_macvtap: entered promiscuous mode [ 381.348290][T24227] veth1_macvtap: entered promiscuous mode [ 381.388497][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.388529][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.388545][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.388561][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.388587][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.388600][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.388612][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.388624][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.388635][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.388649][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.388662][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.388678][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.388756][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.388769][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.388782][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.388795][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.388817][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.388833][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.388850][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.388895][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.388909][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.388925][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.388939][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.388951][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.389826][T24227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.390736][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.390882][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.390897][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.390912][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.391006][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.391090][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.391104][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.391117][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.391129][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.391145][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.391195][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.391212][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.391226][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.391239][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.391252][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.391301][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.391320][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.391359][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.391372][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.391385][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.391397][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.391413][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.392573][T24227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.407271][T24227] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.407314][T24227] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.407414][T24227] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.407449][T24227] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.418687][T24350] loop6: detected capacity change from 0 to 2048 [ 381.519930][T24350] loop6: unable to read partition table [ 381.979542][T24350] loop6: partition table beyond EOD, truncated [ 381.979561][T24350] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 382.192506][T24387] __nla_validate_parse: 2 callbacks suppressed [ 382.192525][T24387] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7201'. [ 382.297202][T24396] ipip0: entered promiscuous mode [ 382.373231][T24394] loop1: detected capacity change from 0 to 8192 [ 382.490709][T24419] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7215'. [ 382.512031][T24421] SELinux: policydb version 0 does not match my version range 15-34 [ 382.562137][T24421] SELinux: failed to load policy [ 382.567400][T24423] SELinux: policydb string SE L does not match my string SE Linux [ 382.579243][T24423] SELinux: failed to load policy [ 382.586219][T24424] loop9: detected capacity change from 0 to 2048 [ 382.602815][T24428] loop4: detected capacity change from 0 to 1764 [ 383.043536][T24443] loop6: detected capacity change from 0 to 2048 [ 383.160408][T24424] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.190662][T24443] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.194290][T24441] bond1: entered promiscuous mode [ 383.207947][T24441] bond1: entered allmulticast mode [ 383.220749][T24441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.249553][T24441] bond1 (unregistering): Released all slaves [ 383.453745][T24011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.509007][T23719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.536632][T24460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7229'. [ 383.545893][T24462] loop3: detected capacity change from 0 to 256 [ 383.552602][T24462] msdos: Bad value for 'gid' [ 383.557415][T24462] msdos: Bad value for 'gid' [ 383.562194][T24464] loop6: detected capacity change from 0 to 512 [ 383.597405][T24464] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 383.616416][T24464] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.640252][T24472] SELinux: policydb version 0 does not match my version range 15-34 [ 383.648631][T24472] SELinux: failed to load policy [ 383.655144][T24460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7229'. [ 383.724514][T24472] loop9: detected capacity change from 0 to 1764 [ 383.755948][T24460] team0 (unregistering): Port device team_slave_0 removed [ 383.765999][T24460] team0 (unregistering): Port device team_slave_1 removed [ 383.818923][T24480] loop9: detected capacity change from 0 to 1764 [ 383.857917][T24464] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #19: comm syz.6.7228: corrupted inode contents [ 383.874147][T24464] EXT4-fs error (device loop6): ext4_dirty_inode:6074: inode #19: comm syz.6.7228: mark_inode_dirty error [ 383.891333][T24464] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #19: comm syz.6.7228: corrupted inode contents [ 383.933829][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 383.933846][ T29] audit: type=1326 audit(1744319154.946:12958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24484 comm="syz.9.7237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e805d169 code=0x7ffc0000 [ 383.963745][ T29] audit: type=1326 audit(1744319154.946:12959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24484 comm="syz.9.7237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e805d169 code=0x7ffc0000 [ 383.987467][ T29] audit: type=1326 audit(1744319154.946:12960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24484 comm="syz.9.7237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f19e805d169 code=0x7ffc0000 [ 384.004756][T24464] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #19: comm syz.6.7228: mark_inode_dirty error [ 384.011039][ T29] audit: type=1326 audit(1744319154.946:12961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24484 comm="syz.9.7237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e805d169 code=0x7ffc0000 [ 384.031660][T24464] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #19: comm syz.6.7228: mark inode dirty (error -117) [ 384.046526][ T29] audit: type=1326 audit(1744319154.946:12962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24484 comm="syz.9.7237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e805d169 code=0x7ffc0000 [ 384.082747][ T29] audit: type=1326 audit(1744319154.946:12963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24484 comm="syz.9.7237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f19e805d169 code=0x7ffc0000 [ 384.106429][ T29] audit: type=1326 audit(1744319154.946:12964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24484 comm="syz.9.7237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e805d169 code=0x7ffc0000 [ 384.130095][ T29] audit: type=1326 audit(1744319154.946:12965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24484 comm="syz.9.7237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e805d169 code=0x7ffc0000 [ 384.192522][T24464] EXT4-fs warning (device loop6): ext4_evict_inode:279: xattr delete (err -117) [ 384.221768][T24488] bond1: entered promiscuous mode [ 384.226995][T24488] bond1: entered allmulticast mode [ 384.291528][T24488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.300206][T24491] loop3: detected capacity change from 0 to 2048 [ 384.334014][T24500] loop9: detected capacity change from 0 to 2048 [ 384.401225][T24491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.459196][T24488] bond1 (unregistering): Released all slaves [ 384.743684][T24500] loop9: unable to read partition table [ 384.766524][T24500] loop9: partition table beyond EOD, truncated [ 384.772850][T24500] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 384.820826][T24509] loop9: detected capacity change from 0 to 256 [ 384.832793][T24509] msdos: Bad value for 'gid' [ 384.837650][T24509] msdos: Bad value for 'gid' [ 384.918957][T24504] lo speed is unknown, defaulting to 1000 [ 385.122227][T24504] lo speed is unknown, defaulting to 1000 [ 385.219963][T24521] netlink: 'syz.4.7247': attribute type 5 has an invalid length. [ 385.227857][T24521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7247'. [ 385.255913][T17542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.592841][T24515] Set syz1 is full, maxelem 65536 reached [ 385.810745][T24552] loop4: detected capacity change from 0 to 2048 [ 385.852273][T24554] loop9: detected capacity change from 0 to 1024 [ 385.865968][T24554] EXT4-fs: Ignoring removed nobh option [ 385.883371][T24552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.884767][T23719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 385.940489][T24554] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.050275][T24554] netlink: 524 bytes leftover after parsing attributes in process `+}[@'. [ 386.122812][T24566] loop3: detected capacity change from 0 to 512 [ 386.130422][T24566] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 386.142742][T24566] EXT4-fs (loop3): orphan cleanup on readonly fs [ 386.152020][T24566] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7262: bg 0: block 248: padding at end of block bitmap is not set [ 386.166917][T24566] Quota error (device loop3): write_blk: dquota write failed [ 386.174442][T24566] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 386.184915][T24566] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.7262: Failed to acquire dquot type 1 [ 386.204991][T24566] EXT4-fs (loop3): 1 truncate cleaned up [ 386.211960][T24566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 386.741039][T24554] lo speed is unknown, defaulting to 1000 [ 387.015021][T16283] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.133845][T24554] lo speed is unknown, defaulting to 1000 [ 387.273094][T24575] Set syz1 is full, maxelem 65536 reached [ 387.289610][T17542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.461608][T24011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.506002][T24606] netlink: 'syz.4.7281': attribute type 5 has an invalid length. [ 387.513856][T24606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7281'. [ 387.768031][T24650] netlink: 'syz.9.7302': attribute type 5 has an invalid length. [ 387.775963][T24650] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7302'. [ 387.820792][T24654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7304'. [ 387.925727][T24663] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7307'. [ 387.995080][T24663] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7307'. [ 388.033189][T24668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7304'. [ 388.405334][T24663] team0 (unregistering): Port device team_slave_0 removed [ 388.420467][T24663] team0 (unregistering): Port device team_slave_1 removed [ 388.471772][T24688] FAULT_INJECTION: forcing a failure. [ 388.471772][T24688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.484997][T24688] CPU: 0 UID: 0 PID: 24688 Comm: syz.4.7316 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 388.485028][T24688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 388.485123][T24688] Call Trace: [ 388.485131][T24688] [ 388.485140][T24688] dump_stack_lvl+0xf6/0x150 [ 388.485169][T24688] dump_stack+0x15/0x1a [ 388.485295][T24688] should_fail_ex+0x261/0x270 [ 388.485328][T24688] should_fail+0xb/0x10 [ 388.485356][T24688] should_fail_usercopy+0x1a/0x20 [ 388.485391][T24688] _copy_from_user+0x1c/0xa0 [ 388.485488][T24688] copy_msghdr_from_user+0x54/0x2b0 [ 388.485601][T24688] ? __fget_files+0x186/0x1c0 [ 388.485628][T24688] __sys_sendmsg+0x141/0x240 [ 388.485677][T24688] __x64_sys_sendmsg+0x46/0x50 [ 388.485747][T24688] x64_sys_call+0x26f3/0x2e10 [ 388.485774][T24688] do_syscall_64+0xc9/0x1c0 [ 388.485918][T24688] ? clear_bhb_loop+0x25/0x80 [ 388.485944][T24688] ? clear_bhb_loop+0x25/0x80 [ 388.486003][T24688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.486028][T24688] RIP: 0033:0x7f0ab1bed169 [ 388.486046][T24688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.486068][T24688] RSP: 002b:00007f0ab024f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.486104][T24688] RAX: ffffffffffffffda RBX: 00007f0ab1e05fa0 RCX: 00007f0ab1bed169 [ 388.486119][T24688] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 388.486133][T24688] RBP: 00007f0ab024f090 R08: 0000000000000000 R09: 0000000000000000 [ 388.486147][T24688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.486161][T24688] R13: 0000000000000000 R14: 00007f0ab1e05fa0 R15: 00007fffcaaaf858 [ 388.486228][T24688] [ 388.730017][T24695] loop3: detected capacity change from 0 to 2048 [ 388.741944][T24692] netlink: 'syz.9.7318': attribute type 5 has an invalid length. [ 388.749894][T24692] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7318'. [ 388.752691][ T3380] IPVS: starting estimator thread 0... [ 388.769800][T24697] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7320'. [ 388.835864][T24705] bond1: entered promiscuous mode [ 388.840989][T24705] bond1: entered allmulticast mode [ 388.870069][T24705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.876837][T24698] IPVS: using max 2304 ests per chain, 115200 per kthread [ 388.893751][T24708] loop1: detected capacity change from 0 to 2048 [ 388.894176][T24695] loop3: unable to read partition table [ 388.906291][T24695] loop3: partition table beyond EOD, truncated [ 388.912645][T24695] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 388.957154][T24705] bond1 (unregistering): Released all slaves [ 388.999401][T24708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.024973][T24718] loop3: detected capacity change from 0 to 8192 [ 389.032559][T24704] loop9: detected capacity change from 0 to 1024 [ 389.052064][T24702] loop4: detected capacity change from 0 to 512 [ 389.068174][T24702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 389.107244][T24702] EXT4-fs (loop4): orphan cleanup on readonly fs [ 389.125603][T24704] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.129861][T24726] loop3: detected capacity change from 0 to 2048 [ 389.148918][T24704] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.155359][T24702] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7321: bg 0: block 248: padding at end of block bitmap is not set [ 389.176285][T24721] loop6: detected capacity change from 0 to 1024 [ 389.176811][T24702] __quota_error: 5 callbacks suppressed [ 389.176827][T24702] Quota error (device loop4): write_blk: dquota write failed [ 389.196266][T24702] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 389.206212][T24702] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7321: Failed to acquire dquot type 1 [ 389.228883][T24704] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.7322: bg 0: block 393: padding at end of block bitmap is not set [ 389.229351][T24702] EXT4-fs (loop4): 1 truncate cleaned up [ 389.252289][T24702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 389.277051][T24704] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 117 [ 389.284392][T24721] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.290601][T24704] EXT4-fs (loop9): This should not happen!! Data will be lost [ 389.290601][T24704] [ 389.310714][T24721] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.330113][T24726] loop3: unable to read partition table [ 389.335986][T24726] loop3: partition table beyond EOD, truncated [ 389.342182][T24726] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 389.363600][T24704] xt_hashlimit: max too large, truncated to 1048576 [ 389.377050][T24227] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.402546][T24721] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7325: bg 0: block 393: padding at end of block bitmap is not set [ 389.424844][T24721] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 117 [ 389.438687][T24721] EXT4-fs (loop6): This should not happen!! Data will be lost [ 389.438687][T24721] [ 389.438774][T24011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.498099][T23719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.499118][ T29] audit: type=1326 audit(1744319160.516:12971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24735 comm="syz.3.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 389.542210][ T29] audit: type=1326 audit(1744319160.556:12972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24735 comm="syz.3.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 389.566079][ T29] audit: type=1326 audit(1744319160.556:12973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24735 comm="syz.3.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 389.590066][ T29] audit: type=1326 audit(1744319160.556:12974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24735 comm="syz.3.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 389.613932][ T29] audit: type=1326 audit(1744319160.556:12975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24735 comm="syz.3.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 389.637632][ T29] audit: type=1326 audit(1744319160.556:12976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24735 comm="syz.3.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 389.661408][ T29] audit: type=1326 audit(1744319160.556:12977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24735 comm="syz.3.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2693a1d169 code=0x7ffc0000 [ 389.703184][T24748] netlink: 'syz.3.7332': attribute type 5 has an invalid length. [ 389.711039][T24748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7332'. [ 389.737485][T24747] bond1: entered promiscuous mode [ 389.742729][T24747] bond1: entered allmulticast mode [ 389.802884][T16283] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.849265][T24747] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.887013][T24747] bond1 (unregistering): Released all slaves [ 389.912756][T24764] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7338'. [ 390.071232][T24773] SELinux: policydb version 0 does not match my version range 15-34 [ 390.128975][T24773] SELinux: failed to load policy [ 390.180340][T24773] loop1: detected capacity change from 0 to 1764 [ 390.193932][T24771] loop6: detected capacity change from 0 to 1024 [ 390.269630][T24739] loop9: detected capacity change from 0 to 2048 [ 390.318201][T24739] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.400753][T24771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.485561][T24771] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.567758][T24771] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7339: bg 0: block 393: padding at end of block bitmap is not set [ 390.618091][T24771] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 117 [ 390.631801][T24771] EXT4-fs (loop6): This should not happen!! Data will be lost [ 390.631801][T24771] [ 390.635912][T24757] Set syz1 is full, maxelem 65536 reached [ 390.699488][T24783] loop1: detected capacity change from 0 to 2048 [ 390.805376][T24011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.820235][T24792] netlink: 'syz.3.7348': attribute type 5 has an invalid length. [ 390.824923][T24783] loop1: unable to read partition table [ 390.836147][T23719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.847060][T24783] loop1: partition table beyond EOD, truncated [ 390.853325][T24783] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 390.913671][T24803] SELinux: policydb version 0 does not match my version range 15-34 [ 390.921885][T24803] SELinux: failed to load policy [ 390.950639][T24803] loop1: detected capacity change from 0 to 1764 [ 391.075961][ T29] audit: type=1400 audit(1744319162.086:12978): avc: denied { write } for pid=24816 comm="syz.1.7355" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 391.129602][T24821] bond1: entered promiscuous mode [ 391.134845][T24821] bond1: entered allmulticast mode [ 391.146052][T24821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.161428][T24821] bond1 (unregistering): Released all slaves [ 391.231334][ T3382] IPVS: starting estimator thread 0... [ 391.245168][T24824] loop6: detected capacity change from 0 to 2048 [ 391.258764][T24824] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.299789][T24823] bond1: entered promiscuous mode [ 391.304927][T24823] bond1: entered allmulticast mode [ 391.310607][T24823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.320284][T24823] bond1 (unregistering): Released all slaves [ 391.326501][T24827] IPVS: using max 1776 ests per chain, 88800 per kthread [ 391.347486][T24834] loop4: detected capacity change from 0 to 2048 [ 391.358947][T24833] loop1: detected capacity change from 0 to 1024 [ 391.393850][T24833] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.427360][T24833] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7358: bg 0: block 393: padding at end of block bitmap is not set [ 391.446260][T24833] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 117 [ 391.459869][T24833] EXT4-fs (loop1): This should not happen!! Data will be lost [ 391.459869][T24833] [ 391.545827][T24839] xt_hashlimit: max too large, truncated to 1048576 [ 391.868907][T24862] loop6: detected capacity change from 0 to 128 [ 391.923456][T24863] loop9: detected capacity change from 0 to 2048 [ 391.943144][T24862] bio_check_eod: 102 callbacks suppressed [ 391.943163][T24862] syz.6.7367: attempt to access beyond end of device [ 391.943163][T24862] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 391.964122][T24862] syz.6.7367: attempt to access beyond end of device [ 391.964122][T24862] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 391.987860][T24862] syz.6.7367: attempt to access beyond end of device [ 391.987860][T24862] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 392.008172][T24862] syz.6.7367: attempt to access beyond end of device [ 392.008172][T24862] loop6: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 392.032189][T24862] syz.6.7367: attempt to access beyond end of device [ 392.032189][T24862] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 392.045830][T24862] syz.6.7367: attempt to access beyond end of device [ 392.045830][T24862] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 392.059778][T24862] syz.6.7367: attempt to access beyond end of device [ 392.059778][T24862] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 392.073435][T24862] syz.6.7367: attempt to access beyond end of device [ 392.073435][T24862] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 392.087074][T24862] syz.6.7367: attempt to access beyond end of device [ 392.087074][T24862] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 392.100705][T24862] syz.6.7367: attempt to access beyond end of device [ 392.100705][T24862] loop6: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 392.404236][T24883] bond1: entered promiscuous mode [ 392.409438][T24883] bond1: entered allmulticast mode [ 392.428303][T24883] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.529142][T24883] bond1 (unregistering): Released all slaves [ 392.659104][T24887] loop6: detected capacity change from 0 to 512 [ 392.674826][T24887] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 392.699686][T24887] EXT4-fs (loop6): orphan cleanup on readonly fs [ 392.723261][T24887] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7375: bg 0: block 248: padding at end of block bitmap is not set [ 392.811810][T24887] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.7375: Failed to acquire dquot type 1 [ 392.828657][T24874] loop4: detected capacity change from 0 to 2048 [ 392.836160][T24898] loop1: detected capacity change from 0 to 2048 [ 392.858201][T24887] EXT4-fs (loop6): 1 truncate cleaned up [ 392.931236][T24898] loop1: unable to read partition table [ 392.941332][T24906] bond1: entered promiscuous mode [ 392.943214][T24898] loop1: partition table beyond EOD, truncated [ 392.946485][T24906] bond1: entered allmulticast mode [ 392.952617][T24898] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 392.977527][T24906] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.053987][T24908] loop3: detected capacity change from 0 to 2048 [ 393.081865][T24906] bond1 (unregistering): Released all slaves [ 393.190463][T24918] ipip0: entered promiscuous mode [ 393.220881][T24913] __nla_validate_parse: 4 callbacks suppressed [ 393.220899][T24913] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7382'. [ 393.449129][T24932] loop1: detected capacity change from 0 to 2048 [ 393.535082][T24940] bond1: entered promiscuous mode [ 393.540256][T24940] bond1: entered allmulticast mode [ 393.545947][T24940] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.570547][T24942] loop6: detected capacity change from 0 to 2048 [ 393.578505][T24940] bond1 (unregistering): Released all slaves [ 393.788325][T24950] SELinux: policydb version 0 does not match my version range 15-34 [ 393.796852][T24950] SELinux: failed to load policy [ 393.812086][T24950] loop3: detected capacity change from 0 to 1764 [ 394.158607][T24961] loop3: detected capacity change from 0 to 512 [ 394.177784][T24961] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 394.198627][T24961] EXT4-fs (loop3): orphan cleanup on readonly fs [ 394.207441][T24961] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7398: bg 0: block 248: padding at end of block bitmap is not set [ 394.223081][T24961] __quota_error: 422 callbacks suppressed [ 394.223098][T24961] Quota error (device loop3): write_blk: dquota write failed [ 394.236428][T24961] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 394.241689][T24972] loop4: detected capacity change from 0 to 2048 [ 394.246462][T24961] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.7398: Failed to acquire dquot type 1 [ 394.269894][T24961] EXT4-fs (loop3): 1 truncate cleaned up [ 394.292679][T24974] FAULT_INJECTION: forcing a failure. [ 394.292679][T24974] name failslab, interval 1, probability 0, space 0, times 0 [ 394.305530][T24974] CPU: 0 UID: 0 PID: 24974 Comm: syz.6.7404 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 394.305564][T24974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 394.305619][T24974] Call Trace: [ 394.305628][T24974] [ 394.305638][T24974] dump_stack_lvl+0xf6/0x150 [ 394.305665][T24974] dump_stack+0x15/0x1a [ 394.305686][T24974] should_fail_ex+0x261/0x270 [ 394.305720][T24974] should_failslab+0x8f/0xb0 [ 394.305884][T24974] kmem_cache_alloc_noprof+0x59/0x340 [ 394.305912][T24974] ? alloc_empty_file+0x78/0x200 [ 394.305936][T24974] ? _raw_spin_unlock+0x26/0x50 [ 394.305962][T24974] alloc_empty_file+0x78/0x200 [ 394.306029][T24974] alloc_file_pseudo+0xcb/0x160 [ 394.306070][T24974] __shmem_file_setup+0x1bb/0x1f0 [ 394.306106][T24974] shmem_file_setup+0x3b/0x50 [ 394.306142][T24974] __se_sys_memfd_create+0x2e1/0x5a0 [ 394.306241][T24974] __x64_sys_memfd_create+0x31/0x40 [ 394.306273][T24974] x64_sys_call+0x1163/0x2e10 [ 394.306300][T24974] do_syscall_64+0xc9/0x1c0 [ 394.306335][T24974] ? clear_bhb_loop+0x25/0x80 [ 394.306436][T24974] ? clear_bhb_loop+0x25/0x80 [ 394.306463][T24974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.306558][T24974] RIP: 0033:0x7f15bdf3d169 [ 394.306572][T24974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.306590][T24974] RSP: 002b:00007f15bc5a6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 394.306608][T24974] RAX: ffffffffffffffda RBX: 0000000000000573 RCX: 00007f15bdf3d169 [ 394.306621][T24974] RDX: 00007f15bc5a6ef0 RSI: 0000000000000000 RDI: 00007f15bdfbf0cc [ 394.306633][T24974] RBP: 0000200000000ec0 R08: 00007f15bc5a6bb7 R09: 00007f15bc5a6e40 [ 394.306645][T24974] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000580 [ 394.306657][T24974] R13: 00007f15bc5a6ef0 R14: 00007f15bc5a6eb0 R15: 0000200000000340 [ 394.306726][T24974] [ 394.381389][T24972] loop4: unable to read partition table [ 394.513423][T24972] loop4: partition table beyond EOD, truncated [ 394.519660][T24972] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 394.609642][ T29] audit: type=1326 audit(1744319165.626:13399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24985 comm="syz.1.7410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd313b1d169 code=0x7ffc0000 [ 394.639876][ T29] audit: type=1326 audit(1744319165.626:13400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24985 comm="syz.1.7410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd313b1d169 code=0x7ffc0000 [ 394.663840][ T29] audit: type=1326 audit(1744319165.626:13401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24985 comm="syz.1.7410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd313b1d169 code=0x7ffc0000 [ 394.687541][ T29] audit: type=1326 audit(1744319165.626:13402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24985 comm="syz.1.7410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd313b1d169 code=0x7ffc0000 [ 394.711259][ T29] audit: type=1326 audit(1744319165.626:13403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24985 comm="syz.1.7410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd313b1d169 code=0x7ffc0000 [ 394.735754][ T29] audit: type=1326 audit(1744319165.626:13404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24985 comm="syz.1.7410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd313b1d169 code=0x7ffc0000 [ 394.759751][ T29] audit: type=1326 audit(1744319165.626:13405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24985 comm="syz.1.7410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd313b1d169 code=0x7ffc0000 [ 394.783365][ T29] audit: type=1326 audit(1744319165.626:13406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24985 comm="syz.1.7410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd313b1d169 code=0x7ffc0000 [ 394.843032][T24998] loop9: detected capacity change from 0 to 2048 [ 394.906774][T24995] bond1: entered promiscuous mode [ 394.911878][T24995] bond1: entered allmulticast mode [ 394.960358][T25004] loop6: detected capacity change from 0 to 1764 [ 394.963687][T24995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.981210][T25002] loop4: detected capacity change from 0 to 2048 [ 395.025328][T24995] bond1 (unregistering): Released all slaves [ 395.099872][T25012] loop6: detected capacity change from 0 to 256 [ 395.108807][T25012] msdos: Bad value for 'gid' [ 395.113505][T25012] msdos: Bad value for 'gid' [ 395.266467][T25019] loop6: detected capacity change from 0 to 1024 [ 395.300021][T25024] loop4: detected capacity change from 0 to 512 [ 395.323373][T25019] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.325601][T25028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7423'. [ 395.372653][T25024] EXT4-fs (loop4): 1 orphan inode deleted [ 395.379430][T25024] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.395119][ T5764] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 395.437000][T25033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7423'. [ 395.700923][T25043] loop3: detected capacity change from 0 to 512 [ 395.708276][T25043] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 395.726431][T25043] EXT4-fs (loop3): orphan cleanup on readonly fs [ 395.738068][T25043] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7428: bg 0: block 248: padding at end of block bitmap is not set [ 395.753575][T25043] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.7428: Failed to acquire dquot type 1 [ 395.768619][T25043] EXT4-fs (loop3): 1 truncate cleaned up [ 395.786758][T25062] loop9: detected capacity change from 0 to 128 [ 395.793457][T25062] EXT4-fs: Ignoring removed nobh option [ 395.819298][T25062] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 395.840568][T25072] FAULT_INJECTION: forcing a failure. [ 395.840568][T25072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.853757][T25072] CPU: 0 UID: 0 PID: 25072 Comm: syz.1.7439 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 395.853869][T25072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 395.853883][T25072] Call Trace: [ 395.853891][T25072] [ 395.853900][T25072] dump_stack_lvl+0xf6/0x150 [ 395.853929][T25072] dump_stack+0x15/0x1a [ 395.853950][T25072] should_fail_ex+0x261/0x270 [ 395.854054][T25072] should_fail+0xb/0x10 [ 395.854083][T25072] should_fail_usercopy+0x1a/0x20 [ 395.854112][T25072] _copy_from_user+0x1c/0xa0 [ 395.854191][T25072] do_ipv6_setsockopt+0x1d6/0x2240 [ 395.854225][T25072] ? kstrtouint+0x7b/0xc0 [ 395.854247][T25072] ? avc_has_perm_noaudit+0x1cc/0x210 [ 395.854279][T25072] ? selinux_netlbl_socket_setsockopt+0xea/0x2d0 [ 395.854320][T25072] ? avc_has_perm+0xd6/0x150 [ 395.854354][T25072] ipv6_setsockopt+0x57/0x130 [ 395.854386][T25072] tcp_setsockopt+0x93/0xb0 [ 395.854412][T25072] sock_common_setsockopt+0x64/0x80 [ 395.854436][T25072] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 395.854532][T25072] __sys_setsockopt+0x187/0x200 [ 395.854564][T25072] __x64_sys_setsockopt+0x66/0x80 [ 395.854593][T25072] x64_sys_call+0x2a09/0x2e10 [ 395.854615][T25072] do_syscall_64+0xc9/0x1c0 [ 395.854659][T25072] ? clear_bhb_loop+0x25/0x80 [ 395.854721][T25072] ? clear_bhb_loop+0x25/0x80 [ 395.854746][T25072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.854770][T25072] RIP: 0033:0x7fd313b1d169 [ 395.854829][T25072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.854852][T25072] RSP: 002b:00007fd312187038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 395.854874][T25072] RAX: ffffffffffffffda RBX: 00007fd313d35fa0 RCX: 00007fd313b1d169 [ 395.854969][T25072] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000003 [ 395.854983][T25072] RBP: 00007fd312187090 R08: 0000000000020000 R09: 0000000000000000 [ 395.854997][T25072] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 395.855081][T25072] R13: 0000000000000000 R14: 00007fd313d35fa0 R15: 00007ffff4914d18 [ 395.855104][T25072] [ 396.162236][T25081] SELinux: policydb version 0 does not match my version range 15-34 [ 396.171230][T25081] SELinux: failed to load policy [ 396.194319][T25081] loop9: detected capacity change from 0 to 1764 [ 396.245130][T25084] loop1: detected capacity change from 0 to 2048 [ 396.272135][T25087] loop9: detected capacity change from 0 to 164 [ 396.279776][T25087] Unable to read rock-ridge attributes [ 396.293983][T25087] Unable to read rock-ridge attributes [ 396.305128][T25087] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 396.316446][T25087] Unable to read rock-ridge attributes [ 396.322204][T25087] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 396.369469][T25087] Unable to read rock-ridge attributes [ 396.399047][T25091] loop4: detected capacity change from 0 to 1764 [ 396.464111][T25094] loop4: detected capacity change from 0 to 1764 [ 396.534325][T25105] xt_hashlimit: size too large, truncated to 1048576 [ 396.639018][T25112] netlink: 'syz.9.7454': attribute type 5 has an invalid length. [ 396.646891][T25112] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7454'. [ 396.734403][T25105] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 396.769381][T25122] loop6: detected capacity change from 0 to 128 [ 396.905991][T25125] loop9: detected capacity change from 0 to 512 [ 396.913210][T25125] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 396.924136][T25125] EXT4-fs (loop9): orphan cleanup on readonly fs [ 396.931681][T25125] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.7457: bg 0: block 248: padding at end of block bitmap is not set [ 396.946464][T25125] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.7457: Failed to acquire dquot type 1 [ 396.965306][T25125] EXT4-fs (loop9): 1 truncate cleaned up [ 397.040343][T25143] netlink: 'syz.3.7466': attribute type 5 has an invalid length. [ 397.048311][T25143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7466'. [ 397.265201][T25151] bond1: entered promiscuous mode [ 397.270299][T25151] bond1: entered allmulticast mode [ 397.286636][T25151] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.392893][T25154] loop3: detected capacity change from 0 to 2048 [ 397.418834][T25151] bond1 (unregistering): Released all slaves [ 397.645288][T25141] Set syz1 is full, maxelem 65536 reached [ 397.754693][T24011] ================================================================== [ 397.762927][T24011] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 397.770715][T24011] [ 397.773052][T24011] write to 0xffff888237d25a28 of 1 bytes by task 25154 on cpu 1: [ 397.780801][T24011] folios_put_refs+0x272/0x2b0 [ 397.785610][T24011] folio_batch_move_lru+0x20b/0x230 [ 397.790856][T24011] folio_add_lru+0x148/0x1f0 [ 397.795531][T24011] filemap_add_folio+0x135/0x1b0 [ 397.800493][T24011] page_cache_ra_unbounded+0x1c1/0x350 [ 397.805982][T24011] page_cache_async_ra+0x41d/0x450 [ 397.811143][T24011] filemap_get_pages+0x512/0x11b0 [ 397.816206][T24011] filemap_splice_read+0x35a/0x930 [ 397.821357][T24011] ext4_file_splice_read+0x8f/0xb0 [ 397.826496][T24011] splice_direct_to_actor+0x26c/0x680 [ 397.831908][T24011] do_splice_direct+0xd9/0x150 [ 397.836713][T24011] do_sendfile+0x40a/0x690 [ 397.841154][T24011] __x64_sys_sendfile64+0x113/0x160 [ 397.846381][T24011] x64_sys_call+0xfc3/0x2e10 [ 397.851002][T24011] do_syscall_64+0xc9/0x1c0 [ 397.855546][T24011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.861464][T24011] [ 397.863805][T24011] read to 0xffff888237d25a28 of 1 bytes by task 24011 on cpu 0: [ 397.871452][T24011] __lru_add_drain_all+0x136/0x3f0 [ 397.876605][T24011] lru_add_drain_all+0x10/0x20 [ 397.881397][T24011] invalidate_bdev+0x47/0x70 [ 397.886035][T24011] ext4_put_super+0x65b/0x910 [ 397.890746][T24011] generic_shutdown_super+0xe5/0x220 [ 397.896084][T24011] kill_block_super+0x2a/0x70 [ 397.900808][T24011] ext4_kill_sb+0x44/0x80 [ 397.905163][T24011] deactivate_locked_super+0x7d/0x1c0 [ 397.910562][T24011] deactivate_super+0x9f/0xb0 [ 397.915308][T24011] cleanup_mnt+0x26e/0x2e0 [ 397.919779][T24011] __cleanup_mnt+0x19/0x20 [ 397.924347][T24011] task_work_run+0x13c/0x1b0 [ 397.928975][T24011] syscall_exit_to_user_mode+0xa8/0x120 [ 397.934561][T24011] do_syscall_64+0xd6/0x1c0 [ 397.939099][T24011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.945056][T24011] [ 397.947389][T24011] value changed: 0x1f -> 0x01 [ 397.952075][T24011] [ 397.954412][T24011] Reported by Kernel Concurrency Sanitizer on: [ 397.960586][T24011] CPU: 0 UID: 0 PID: 24011 Comm: syz-executor Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 397.973284][T24011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 397.983346][T24011] ==================================================================