last executing test programs: 43.10211656s ago: executing program 32 (id=389): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$eJzs3U9oFFccB/DfzO42TbKUtL0USv9AKaUNhPRW6CW9tBAoIZRSaAsppfSiJEJM8JZ48uJBj6KSk5cg3oweJZfgRRE8Rc0hXgQNHgweVFjZnQTyTxOzmx1xPh+YzEzy5v3eMPN9ExaGDaCweiJiICJKEdEbEZWISDY2+DJbetZ2ZzoXRiJqtd8eJ4122X5m/bjuiJiOiB8iYj5N4lA5YnLur+Wni798c3Ki8vWFuT8723qSa1aWl35dPT904vLg95M3bz8cSmIgqpvOq/WSHX5XTiI+Oohib4mknPcI2IvhY5fu1HP/cUR81ch/JdLILt6p8ffmK/HduVcde/rRrU/bOVag9Wq1Sv0ZOF0DCieNiGokaV9EZNtp2teX/Q9/t9SVHh4bP9r7/9jE6H95z1RAq1Qjln6+2nGle0v+H5Sy/APvqOxDqaXfh2fv1TdWS3kPCGiLz7JV/fnf+8/UtyH/UDjyD8Ul/1Bc8g/FJf9QXPIPxSX/UFzyD8Ul/1Bc+87/mRcHNyigLTbmHwAollrHvt4abv2LyEDb5T3/AAAAAAAAAAAAAAAAAAAA2810LoysL63psbxri+tnI1Z+yppur19qfB9xxPuNn11Pkk09Jnuq8Hp/f9FkB026mPPb1x/cz7f+jc/zrT81GjF9PCL6y+Xt91+ydv/t34e7/L3yb5MF3lCyZf/HP9pbf6vns/nWH1yMuFaff/p3mn/S+KSx3nn+qdavX5P1jzxrsgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa5mUAAAD//7FLbdg=") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x0) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 35.096798769s ago: executing program 33 (id=501): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00'}, 0x18) syz_io_uring_setup(0x6f01, &(0x7f0000000140)={0x0, 0xfad6, 0x8, 0x0, 0x3}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 31.060980189s ago: executing program 6 (id=559): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x485f}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18) 31.02724269s ago: executing program 6 (id=561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRES32, @ANYBLOB="f37470bdccdc62f6cd"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 7) 30.907035012s ago: executing program 6 (id=564): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0xae, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382900000000000000000000f9000000000000ff020000000000000000000000000001"], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r5, 0x0, 0x7}, 0x18) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000340)={0x23, 0x0, 0x0, 0x2}, 0x10) ioctl$SIOCPNENABLEPIPE(r6, 0x89ed, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r8}, &(0x7f0000000a00), &(0x7f0000000a40)=r7}, 0x20) 30.906655692s ago: executing program 34 (id=563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffe0, 0x3}, {}, {0x3, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x4, 0xb, 0x6e}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) 30.865001032s ago: executing program 6 (id=566): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x1fa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x80000000, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_WKALM_SET(r6, 0x40187013, &(0x7f0000000040)={0x1, 0x0, {0x0, 0xfffffffb, 0x0, 0x0, 0x5}}) r7 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) poll(&(0x7f0000000000)=[{r7, 0x74885c80f3dcccd1}, {r3, 0x10a}, {r1, 0xd081}], 0x3, 0xffff0001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x205a2, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) write$hidraw(r0, 0x0, 0x1a) 30.473270848s ago: executing program 6 (id=569): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400000045000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000400)={0x0, 0x2}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40002, @private1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, 0xffffffffffffffff, 0x9dffffff}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x8, 0x0, 0x0, 0x1000000, 0x18040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0x1, 0x840000, 0xc, 0x1, 0x1, 0xdb, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x10) setitimer(0x0, 0x0, 0x0) getsockopt$llc_int(r0, 0x10c, 0x8, 0x0, &(0x7f0000000000)) 29.505630643s ago: executing program 3 (id=578): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 29.414437164s ago: executing program 3 (id=580): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400000045000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000400)={0x0, 0x2}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40002, @private1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, 0xffffffffffffffff, 0x9dffffff}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x8, 0x0, 0x0, 0x1000000, 0x18040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0x1, 0x840000, 0xc, 0x1, 0x1, 0xdb, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x10) setitimer(0x0, 0x0, 0x0) getsockopt$llc_int(r0, 0x10c, 0x8, 0x0, &(0x7f0000000000)) 29.262916606s ago: executing program 3 (id=583): unshare(0x60600) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xecba54c02f0b471d}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80884}, 0x20000000) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x7, 0x6, @vifc_lcl_ifindex=r3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000001f) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) mount(&(0x7f0000000200)=@filename='.\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x1000000, &(0x7f0000000300)='trans=rdma,') socket$inet6(0xa, 0x5, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r6) r7 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r7, 0x0, 0x0, 0x844) socket$inet6(0xa, 0x5, 0x0) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) fcntl$notify(r8, 0x402, 0x20) 29.061736209s ago: executing program 3 (id=587): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x1fa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x80000000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x40187013, &(0x7f0000000040)={0x1, 0x0, {0x0, 0xfffffffb, 0x0, 0x0, 0x5}}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x205a2, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) write$hidraw(r0, 0x0, 0x1a) 28.782365973s ago: executing program 3 (id=588): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='timer_start\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) (fail_nth: 5) 28.523949847s ago: executing program 3 (id=591): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) fcntl$getflags(r1, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES32=0x1, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001faf1000000000587e18ed1267947e2bc02d0af794b5b6a51877358c17734adb55600cf314c3049801b62f1af32ff34f6b2df7b146220b819b3fb9b5085ac29297308aa0e10c199c7b7508b50518bb8a061c025cce58115e9c9193035a422661f960f563bb8e4ef7f8ba5ead643b88420a49fbbe22d1"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, 0xfffffffffffffffe, &(0x7f0000000a40)=r0}, 0x20) 28.515237727s ago: executing program 35 (id=591): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) fcntl$getflags(r1, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES32=0x1, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001faf1000000000587e18ed1267947e2bc02d0af794b5b6a51877358c17734adb55600cf314c3049801b62f1af32ff34f6b2df7b146220b819b3fb9b5085ac29297308aa0e10c199c7b7508b50518bb8a061c025cce58115e9c9193035a422661f960f563bb8e4ef7f8ba5ead643b88420a49fbbe22d1"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, 0xfffffffffffffffe, &(0x7f0000000a40)=r0}, 0x20) 28.143383883s ago: executing program 6 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) io_setup(0x2, &(0x7f0000002380)=0x0) getgroups(0x2, &(0x7f00000026c0)=[0x0, 0x0]) setfsgid(r3) setfsgid(r3) eventfd2(0x6, 0x80000) r4 = eventfd(0x6) r5 = socket$netlink(0x10, 0x3, 0xa) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x24, 0x453, 0x100, 0x70bd2d, 0x25dfdbff, "003791f889c48d7abd06bd74f100fb4f44"}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x4000040) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5000, 0x0, 0x0, r4}]) 28.100008003s ago: executing program 36 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) io_setup(0x2, &(0x7f0000002380)=0x0) getgroups(0x2, &(0x7f00000026c0)=[0x0, 0x0]) setfsgid(r3) setfsgid(r3) eventfd2(0x6, 0x80000) r4 = eventfd(0x6) r5 = socket$netlink(0x10, 0x3, 0xa) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x24, 0x453, 0x100, 0x70bd2d, 0x25dfdbff, "003791f889c48d7abd06bd74f100fb4f44"}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x4000040) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5000, 0x0, 0x0, r4}]) 24.787649073s ago: executing program 0 (id=622): rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x9, 0x1ff}, 0x6}, 0x20, 0x1, 0x0) syz_clone3(&(0x7f0000000240)={0x80100000, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, {0x2f}, &(0x7f0000000140)=""/87, 0x57, &(0x7f00000001c0)=""/49, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58) process_vm_readv(r0, &(0x7f0000002540)=[{&(0x7f00000002c0)=""/125, 0x7d}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/95, 0x5f}, {&(0x7f00000013c0)=""/38, 0x26}, {&(0x7f0000001400)=""/131, 0x83}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/43, 0x2b}, {&(0x7f0000002500)=""/18, 0x12}], 0x8, &(0x7f0000003780)=[{&(0x7f00000025c0)=""/2, 0x2}, {&(0x7f0000002600)=""/143, 0x8f}, {&(0x7f00000026c0)=""/145, 0x91}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x4, 0x0) process_vm_writev(0x0, &(0x7f0000003a40)=[{&(0x7f00000037c0)=""/146, 0x92}, {&(0x7f0000003880)=""/46, 0x2e}, {&(0x7f00000038c0)=""/101, 0x65}, {&(0x7f0000003940)=""/208, 0xd0}], 0x4, &(0x7f0000004ac0)=[{&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/47, 0x2f}], 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000004d40)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004d00)={&(0x7f0000004b40)={0x1c0, 0x2c, 0x100, 0x70bd27, 0x25dfdbfc, {0x11}, [@nested={0x3f, 0x6f, 0x0, 0x1, [@typed={0x8, 0x83, 0x0, 0x0, @pid=r1}, @generic="9417f7cc7dc1b4895b9c496a94d321ece439622a042bdd39a29347", @typed={0xc, 0x103, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x36}, @typed={0x8, 0xfa, 0x0, 0x0, @ipv4=@empty}]}, @typed={0xc, 0x148, 0x0, 0x0, @u64}, @generic="9ab7f81d865b70703bfc893098511df42b9fba2a645679287d3b73da3f7710192a1f30253db1ae4c34c7f639ca629e91aa354e02b237292f628eff1cfa86a65530798ed26430d8e5422ee82773c106ebf281f8d3be179ac5e183317cb9d1bbe283b8e2de33e423c686e2a8a11e1f9ab4f3e225e3d534a2c8db52609d25b00ae160a56c4ab206437941f5f8f107a62badb9c6a04ad2f65c79abb31594e1f97467b9c1d7297edafa", @typed={0xa, 0x139, 0x0, 0x0, @str='$%[].\x00'}, @generic="c5421c8c167b743c26ec7a95298575553809add9460bf635c55da640d565b20be461d04252ed6051349aa9a632a589909a9fc3d6a5a5538258df6b1f518be4368a81e216da79c82f297029bbba3aed31c51fd3d7b15508c78170739420b76b47a8342f7a20e853adc7c4c208dbd9bf3f3f6df158ddedddefce91df8a2c7f81a7967a3cb01c649c1dd542b3275d2ad1acb34c0f0d64edbccaf33706", @typed={0x8, 0x149, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x8, 0xef, 0x0, 0x1, [@nested={0x4, 0x119}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x40000}, 0xc080) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000004e00)={{r2, 0xffffffffffffffff}, &(0x7f0000004d80), &(0x7f0000004dc0)='%pB \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004e40)={'team0\x00', 0x0}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000004e80)={0x1b, 0x0, 0x0, 0x3, 0x0, r3, 0x72, '\x00', r4, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) tkill(r1, 0x7) r6 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000004f00)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000004f40)=0x80000000, 0x8) r7 = syz_io_uring_setup(0x3eef, &(0x7f0000004f80)={0x0, 0xa0ff, 0x40, 0x2, 0x99}, &(0x7f0000005000), &(0x7f0000005040)) io_uring_register$IORING_UNREGISTER_RING_FDS(r7, 0x15, &(0x7f0000009d80)=[{0x8, 0x1, 0x0, &(0x7f00000075c0)=[{&(0x7f0000005080)=""/215, 0xd7}, {&(0x7f0000005180)=""/204, 0xcc}, {&(0x7f0000005280)=""/202, 0xca}, {&(0x7f0000005380)=""/163, 0xa3}, {&(0x7f0000005440)=""/4096, 0x1000}, {&(0x7f0000006440)=""/4096, 0x1000}, {&(0x7f0000007440)=""/197, 0xc5}, {&(0x7f0000007540)=""/80, 0x50}], &(0x7f0000007640)=[0x5, 0x18000000000, 0x0, 0x100000000, 0x5]}, {0xa, 0x1, 0x0, &(0x7f0000007d40)=[{&(0x7f0000007680)=""/175, 0xaf}, {&(0x7f0000007740)=""/132, 0x84}, {&(0x7f0000007800)=""/146, 0x92}, {&(0x7f00000078c0)=""/72, 0x48}, {&(0x7f0000007940)=""/105, 0x69}, {&(0x7f00000079c0)=""/194, 0xc2}, {&(0x7f0000007ac0)=""/129, 0x81}, {&(0x7f0000007b80)=""/189, 0xbd}, {&(0x7f0000007c40)=""/152, 0x98}, {&(0x7f0000007d00)=""/56, 0x38}], &(0x7f0000007e00)=[0x101]}, {0x6, 0x0, 0x0, &(0x7f0000009180)=[{&(0x7f0000007e40)=""/48, 0x30}, {&(0x7f0000007e80)=""/134, 0x86}, {&(0x7f0000007f40)=""/156, 0x9c}, {&(0x7f0000008000)=""/4096, 0x1000}, {&(0x7f0000009000)=""/111, 0x6f}, {&(0x7f0000009080)=""/216, 0xd8}], &(0x7f0000009200)=[0x9, 0x7fffffffffffffff, 0x4, 0x2000000000000, 0x5, 0x291, 0x200, 0x7fffffff, 0x2]}, {0x1, 0x1, 0x0, &(0x7f0000009340)=[{&(0x7f0000009280)=""/165, 0xa5}], &(0x7f0000009380)=[0x0, 0x3, 0x1]}, {0x2, 0x1, 0x0, &(0x7f00000095c0)=[{&(0x7f00000093c0)=""/219, 0xdb}, {&(0x7f00000094c0)=""/233, 0xe9}], &(0x7f0000009600)=[0x9]}, {0x6, 0x1, 0x0, &(0x7f0000009a00)=[{&(0x7f0000009640)=""/122, 0x7a}, {&(0x7f00000096c0)=""/191, 0xbf}, {&(0x7f0000009780)=""/191, 0xbf}, {&(0x7f0000009840)=""/113, 0x71}, {&(0x7f00000098c0)=""/153, 0x99}, {&(0x7f0000009980)=""/124, 0x7c}], &(0x7f0000009a80)=[0xee3, 0x7, 0x6, 0xe3, 0x3]}, {0x3, 0x0, 0x0, &(0x7f0000009d00)=[{&(0x7f0000009ac0)=""/21, 0x15}, {&(0x7f0000009b00)=""/240, 0xf0}, {&(0x7f0000009c00)=""/239, 0xef}], &(0x7f0000009d40)=[0xc, 0x670, 0x0, 0xfffffffffffffffa, 0x5, 0xffffffff, 0xcc0]}], 0x7) semctl$SETVAL(0x0, 0x3, 0x10, &(0x7f0000009e80)=0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000009ec0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff}}, './file0\x00'}) read$qrtrtun(r8, &(0x7f0000009f00)=""/181, 0xb5) eventfd2(0xd3, 0x800) socket$tipc(0x1e, 0x2, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009fc0)='/sys/kernel/oops_count', 0x0, 0x182) getitimer(0x2, &(0x7f000000a000)) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000a2c0)={0x18, 0xa, &(0x7f000000a080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x81}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f000000a100)='syzkaller\x00', 0x3, 0xbd, &(0x7f000000a140)=""/189, 0x100, 0x77, '\x00', r4, 0x0, r8, 0x8, &(0x7f000000a200)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f000000a240)=[0x1, r5, 0x1], &(0x7f000000a280)=[{0x5, 0x3, 0x10, 0x3}, {0x4, 0x5, 0x6, 0x5}, {0x1, 0x4, 0x2, 0x7}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f000000a380)={&(0x7f000000a040)='damon_aggregated\x00', r10, 0x0, 0x1}, 0x18) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f000000a480)={&(0x7f000000a3c0)={0x10, 0x0, 0x0, 0x350ce4d3e8f7d307}, 0xc, &(0x7f000000a440)={&(0x7f000000a400)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x5) mkdirat(0xffffffffffffffff, &(0x7f000000a4c0)='./file0\x00', 0x10) r11 = semget$private(0x0, 0x4, 0x0) semctl$SEM_INFO(r11, 0x3, 0x13, &(0x7f000000a500)=""/10) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f000000a540)={0x20000000}) semctl$SEM_STAT_ANY(r11, 0x2, 0x14, &(0x7f000000a580)=""/209) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f000000a680)={0x80000000}) 24.586706696s ago: executing program 0 (id=623): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000400), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) acct(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pipe(&(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r3 = syz_open_pts(r2, 0x101) r4 = dup3(r3, r2, 0x0) write$UHID_INPUT(r4, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) 24.560407496s ago: executing program 0 (id=624): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000101b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = semget$private(0x0, 0x6, 0x0) semtimedop(r5, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) 24.513322917s ago: executing program 0 (id=625): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$eJzs3U1vW1kZAODXzpeTyUwywywAIaYMAwVVdRJ3JhrNAoYVQqgSokuQ2pC4URQ7jmKnNKGL9j8gUYkVLPkBrLviJyDYsYEFEh8RqKnE4qJ7bbduajduk9hp/DzS1b3nnmu/5yS559hvEp8ARtaliLgfEZMRcSsi5lrnc60tPm9u6XWPD+6tHh7cW81Fktz4Vy6rT89Fx2NSb7WesxARP/5+xM9yL8at7+1vrlQq5Z1mcXqhUd1eqO/tX92orqyX18tbpdLy0vLip9c+KZ1aXz+oTjYPxtIGfvsXabNmW3Wd/ThNza5PPI2TGo+IH55FsCEYa/VnctgN4bXkI+K9iPgwu//nYiz7bgIAF1mSzEUy11kGAC66fJYDy+WLrVzAbOTzxWIzh/d+zOQrtXrjyu3a7tZaM1c2HxP52xuV8mIrVzgfE7m0vJQdPyuXjpSvRcS7EfHLqemsXFytVdaG+cIHAEbYW0fm//9ONed/AOCCKwy7AQDAwJn/AWD0mP8BYPSY/wFg9Jj/AWD0mP8BYPSY/wFgpPzo+vV0Sw5bn3+9dmdvd7N25+paub5ZrO6uFldrO9vF9VptPfvMnupxz1ep1baXPo7du/Pf2a43Fup7+zertd2txs3sc71vlicG0isA4GXe/eDRn3MRcf+z6WyLjrUczNVwseWH3QBgaMaG3QBgaKz2BaPrBO/xpQfgguiyRO9zChExffTqJEmSs20WcIYuf0n+H0ZVR/7fXwHDiJH/h9HVb/7/uPwA8OZJkly/a/5HvxcCAOebHD/Q4/39e63971q/HPjp2tErHp5lqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB8a6//W2ytBT4b+XyxGPF2RMzHRO72RqW8GBHvRMSfpiam0vLSkNsMAJxU/u+51vpfl+c+mj1aO5l7MpXtI+Lnv77xq7srjcbOH9Pz/356vvGwdb40jPYDAMdpz9PZvuON/OODe6vtbZDt+cf3IqLQjH94MBmHT+OPx3i2L8RERMz8J9cqN+U6chcncf9BRHyxW/9zMZvlQJornx6Nn8Z+e6Dx88/Fz2d1zX36tfjCK0dO5k6h+fBGe5SOP593u//ycSnbd7//C9kIdXKt8S99qtXDbAx8Fr89/o31GP8u9Rvj4z/8oHk0/WLdg4gvj0e0Yx92jD/t+Lke8T/qM/5fvvLVD3vVJb+JuBzd43fGWmhUtxfqe/tXN6or6+X18laptLy0vPjptU9KC1mOeqH3bPDPz66806su7f9Mj/iFY/r/jT77/9v/3frJ114S/1tf7xY/H++/JH46J36zz/grM78v9KpL46917X9b7/5f6TP+X/+2/8Ky4QDA8NT39jdXKpXyziAP2i8kBhrUwQU4SH9qzkEzuh58d1CxJuOVHpUkrxWr14hxGlk34Dxo3utJeScingy7MQAAAAAAAAAAAAAAQFeD+I+lYfcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAi+v/AQAA//+XC86k") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x1fa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x80000000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x205a2, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) write$hidraw(r0, 0x0, 0x1a) 24.182836432s ago: executing program 0 (id=626): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 23.535269581s ago: executing program 0 (id=627): r0 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) 23.535021011s ago: executing program 37 (id=627): r0 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) 19.086131787s ago: executing program 7 (id=690): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x55}, @val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x24000050) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="204fdf54183c83af4e8fc2311da7060000003e000701fcfffffffea10f0aeadb"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014, 0x20808}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007b116000000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000180), &(0x7f0000000240)=r9}, 0x20) 18.474930047s ago: executing program 7 (id=708): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 18.282525149s ago: executing program 7 (id=713): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x8500) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x4, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x7, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) ioctl$EVIOCGABS20(r2, 0x40044591, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r8}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0) sendmsg$kcm(r6, &(0x7f0000002580)={&(0x7f0000000340)=@ieee802154={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x80, &(0x7f0000002300)=[{&(0x7f00000007c0)="08feef5132bb78355b288f9d08bddfcfc640f1b9e3ab50a80866e6f47c333c2675949883e3bf4bbd4f0f9702214e15debfabfdb7cb674bb54efc22dabd85b884c346f3f10fdab753ded9e8be46e83370d7d66f3d7e7468de3693d0a3f43ac3757d921f4be0a72f7cf454853d3555a7725cefd3d21e992998d0a3598c2be6faf943a197204717b5bbb4c3a6711bb9fbd4316b5bf7377c09409c354e23ec3a795480fb23bcdae900d91fe02e93a9314d9247ebe85321419172f0926a70efa995b6d567b1d914faacce104cf25c935be4c83661948cb207a00535cb3327400ccd98c639755dd5d1d34d5a87ecae966b808354d3d466f232176075bf5e3ade110bccf5a080f0af8ad7480b538ed126e596c57eb8b851c4c1b16bc889ab919bc0ad96433d13ae111899d48e85bca152e1c10575a938ec084beaac69caa197b48c4f92bd67ff2bdbf841df3e6c9183e862503e12248b0cc2d3b5da4c3fe9ab1166b44daa8d7aec6660b01bc1487d7d324a0661992e8ed20593f1779eb225b2118c3abd144f5c7e197679936d82ea7a9eb3d6dfc977017c5a59a4bd73ca1faf595e5e276a6f920aaffcc4757795573ec741d7e79b4232902928d2d2ccf999907e164581e1db80c3db9e9fbdceb5daf07032580de89dcf8a35a20786d83b37d08aaa3e8b93900eb4c4e4c07d27916ea343bd4ec364320408e68397be6b2d2105cbf850bab59c4e9977b45e95ddd96c2ce770cb93b98cef59e1267c304103c1e4a8877591acf95fa511adced880e5dffb0202135a5e98a658446553113c84e68a242c8fb9faf054ae805e0e29106cfbc5357722728c2929163f4d43fa87695c294b4cfc593c0176bec83a091102dbdcf168f0357a8e9c475e98b609b982a83df9b16f717bf531b272925150418735b44601266af968120728e6642bc790905ca7ff57389926bd68115712ad83975b8965988cce35fddaad107e17dafa0947384b788ab7557abb8e123759a4c7265237cee62689a171b4ad9e5d04366f61284206d76b2b9bae7fbe17a1ea5dbb497eac538a867e6ff6ee884630cd245cb275b55bddbd11cebf87eedef2e65cb69f99c1ca36188b97a69def70db09274f2748495cd67d26a0fb6a6503548ef58c7d346054408c4fabf3418612acb2b303a4b40c2007cf9bd993d3f67b2918b3ad9928337cf5a4b0e48dcf5647e198be84e86ea7dad6404317120d19d8a116964f4e153a830fe2117b11f5523b7f79a6d19aae6d78b2158679b8a24a5876318a983f3f498fdb7374e6242d1ebabd7dfeb90c28cc68d351b92860683ee320274469332113450a50954abeb1c92be40decfac280079acb4dda79c378c613712f339c4386c56b967fec5184098d94a529d142794b05495a20e39df1cd32c615d698a4f14ba3e1b9ad4af513b0fc197146a8d186682e05b2e8ade8df88f93742f4439cf10ab37d9db5a4ad11f1171807c5b829b0382a3fe17b9a6c732661cb0e7ac7f6040239ba8e2e8b0f3ecaf59ba65b14cec8b504ebfe7e17e33c02f54bf76c30da95125750dd5693ff0b98dcdcfec1d71edaba2efe75465f6580db68cefc402e9b5d559b8f4aa2d4fca30267fbff1d46d7530ffae20a8474be75719a64e94e5227b77aa9707ac570e4115efa8fbeca43c71c25c96dbb6b2d6fd679dc9f18cca60e2607ee02dff5c34551897f7e306422cbd28f4a5f9107aad14c35709165ee1fefd69f726f8a01c868150ad65fc97ae8b544808076db07fae182377b20e5f66a58772e92066fc5194cb0f8f5192b409d28344ef3a338f24771b27cc1542b1fca3f2d0fcec792801eabc28c99774f1dee4de42a562c07540b1f68a0034f72ab8cdf7be70710656a1d0c2121c5bed045e9281f47081025baca398efde2978603175e4d74088e727cee0ed1c44825191cc9e2504b6e340dee255286fa77cec35a7876b89b85651701de05036f4b44d7248f55e4a6b1710c7142cf670906bb8af5aac30bb4633a6f5a3067fffc8447169c52f6dbc49bb13f159f04b808d924a77177dcf050a1bf126c4fba3e2dc1bd37d7508f7ccde1c442230cd6536b622094c6b371e00d125941a383bcc79e70ef0b0cbfba9d43182485117b800b60624d90541228f58e105cea4fee1f0fa1f2389de4af76814497655729ed7ab4efdc16406faad0494893fdf4cd3d06237ca7a66217198cc034aa9a146dfae123899f0aa783b932d4a996edabf4a68f28f634a97943ee052a8030623149080fda54e7da9568eadb74c228c2be70afdde98b1654dd2ed59ec67c7aba771f64cd97cafb8b195cb9bbed03c80be9b29c37439e137e937c8328afe2db66e0b26d522c643b59be9e1a94581d603fa0988081995ca4ac169ec37278109f62b9873d6c69f5477cb44677e80932147808d215ab9d94e4d7e57e9052961e4e170571d1cf96a7fbbdfd6673aee4185c2c671620b0d8ba67623edb9e0780dbf01ddeb561f92e62035a3e5e33763547b392eaf6f58dde05ef2017d31c2f4dbefcccc717bec599ec400a0543f2d57e6f46765a1b6f3f03336d0c7a633a7d6094a725059e9f8a3b930e0d948107ef2c32a4359cdcd610ebf9e869848f38feb3552071f5a6d629c7a4161a9fe39c6633bd87a0284a95b808d06d131b33901e29676560b405e1625aabdf4174a76e02ae94430d3b95cb275930424ba808aa9de6432fcf60f5d104d747ee852a205bff10b6f241d0febf8f73f1230b9fa8c739db602d86f96ad10f7e7cf32ab02efc11e7819e11dea7960f31b21a60997d29c733786721672d259ba51562a7325df448ed1b836618e476d43fe1ebd3e18dbb57549589699ea9e687b9de75f157e99faabbe41560780f1d61f5b3a919f691550e3bd0f8f3a889fbad95b82a97928faf0c7fef7d0e3817d2fdf25aa978e255d26fa36034899a67f1c2aa665301d32ed41b8b73eee8c8885b6628ac821919543ca43344572a46175de1704e4779bd97b82e8cc3b10bc0e3c5e5cab9ddb3fe4f5a1dabcb22dfc916c449a8e4e6ae83c603da67bc65592ef20c04de015141598d342f36582f587a3577eeb0f83be9ce623b7e477c31dbc40685fafa0cf067c9192686804119238ad80d99e35bccb87389833bfc0422ecf6a948bb9a94d1d15985ccc38d623c163143742dda2d3e34bd523817cbfb8351d30365683ab994f624b685a42ac98264198636a2397a3baa71fc211374b5d42a011e2a80e45e8b8c901b5b18ba5a46cee8b57b87563c305d606e795e414f4900c6be3499427a900f1522e1462acd06837f09e768a4ed18a7de5504b787ff8c9ba0ba18c97c12c892dd713555f67c91cd9e29828ac82b06c1774cca72ebe7d741203ca43be7606f5e4cdac605ed889079237fa85fd10ac4e2f7f124d98cf2427dfa3955c87c15f16112bd44646f0ee16af8cd7c4797ec0ee6c3607d6062da8ecb35514563e89961bf790760eed368ed26819a2f4c9e11278f4b65805a4307e1416e1f91156a506ee8eb04a8aca26164d7f2d70ba26779d54578c7887a58d16f77acfc6acd5e1d78e73d67f01e5afbcbe346a5083daf283ebf167fb5965b1c0a5263d815a9945c85da533836fd74a23bce95d32da8fcd8883bbb8c2c4399596c25767ec5ad39709cc9db8a36acd7a870b02eeb59daafa522c26d0a6acf62ae341f68f6de264a90c0fa349aac584c11682a458642d2a8f203207b7c1bf03a0cdc09dcbb8a773d7245fd52cc5a0542e4da80ca1cea3af411f701edfce645f56b96c890f57d9bba7b83a638ca61c739c17bdce5ebfb002fd017c48fe7d9cfd75ef7a9f35334a5f41a06283aff05b0a4b904d4e29332b6b12f121f573135edb28473ae094680fa057bc426dea5822b2566e7ab57336939fa50fff1aeefdf0f6907bb92cafedbeaa4b9bb2ed3adf7bed3872aeaac23ea1bc69906464978e5379b8cd78feacb9f024aa08f08d93c0535d77440942b7071f9046015f964d6743201968e3278de8fc83dcea9e1c08750baa5d56f9d68eaac9fda77a55a1c13a102a75af944b393539393439b4679f3ae9498e4124da59e9917a1853a32f655ae200e213c6a4970062630337e933bd794d64b80dac5bf5842e1b46ed0a56bcb2b9c558be5a13effb62cb484210c23cf431013fbee16d2775e2189d22261fb3c81e9c7c65c1c97feb57812f763f436c43cd04b682b95d375defcd1fadb7d740571f0987bfb251187ce1a16208e5ef91d37227542fe962eb2a65205c95ebc18037e0f1d67e4e2e4adfce54febb111aff2544e1d4a71b360464672d7b39f7e8f500d599961525f3bf286d3b42859804eaa66b89f88b258291a173d14712fda6e5997493db9b6aeb4bd86db4a724801fe0c831694656e80098480f642121322a94902a88b154d1b9ad3b80abd525ee2c10c32fcfe723e40e9bbd003bbd203b2c52e8909b1a2377525bb472d7327608e6b2c5222c34af0d13d771903feb86e3a20681a2e30b8a5514384057c525137ab2fa1770244c53c138c97d965d1d6468e178d9ea5bf471a560db09ea8b24acc57fca795cdfa30f1a1a3d9d05e6b1517de7151b576dc287207505eec1b6f16f82e4acf0bb4d573fbc542fbc1c32c0d217c5be0632c8d0c0a8e8cab4d60cd886f968679cbb8d09943c9cee0ad2bb666af41f888c22cac15f4640794ec3a8ddddbd97e9401b2129e3635f26ea83803c647b0b28498193d1337bc9fa9141db9d8980e80f085bcaf25650ee21df7812c4964f7f1dd1bec1e4ff8387fe56e25affd41e6cfa008d62fb500f93f85ef7ea3c499a85ba644cd88d502280b88be1aa34bdbdcefcb64617ef23763e697b44c8e8921c464df5f53b9517c68afcd3f56d1a89a2fc17023c0049f560e3bef24dff3f7ab54bed1a31f5d3e0af0a7e02b6da96d1cc082c522368ad195c0f5a6c8402dec7cc3acaac8a3ef379a3a12aa000091eaa953b6062801f7b7ed3160933fa0893fbc63f9766b6040ba1439c5f82876474d1a454b9ef176287c23dd06eacdd632f0ea6bd20862927e2db6dac78359bf22195be50635580e94d8aac7dae591bd35695b4fdeef85992d0dc447bcc189be58912541ceeaa60d5b3ba9666e45fb19e61795b012ff00a22393074abbde02466cde5b13ea452c39379003587fc55845d84f7cd037dcfaa13782153cecc558a3a6fd44e753c25fe3563a2d2b4223c6d28cd32649368614a21a35a1eb206d73febfd78a1fd1e8f6f3b927d286ec30c48268e5ca4478c419afd651bbf0e2f4fae13252da6c60f0cda2929b7ef3ab78e4e740ac1fe2ee0ccfd4d9c246ba7b3dd43c688e7be8efffcc8beedf08d8b22baeffb90024cabcd03458b99d0831b6650f91f2c1eaec057179af267ccea1d19f5ef94d8edc31d3e944b0be43d3308ea5927f20ff47e61267d65dc270cf5ab498e1c4d53af8cc37bcab353607e0fb26c60100d42d97a61fe9a35a0c29d307437e84b5cc7a0d80213116341a66ca3511bca5c9a256ad1c29ddb7d13c665dd52a6809b9ac1c20539cac71d94e2cf50bed6b00e523b328fa64388e0d406eb708aa94fd5b6aeeadf76bebdb9cf68df6ccd556407fab24e2a63abb42c4c77f43830818ee9f4823cf7bfcecd51542b25f516b5b55737fa9cb99e5809b4964d64afb75d1729ea5cbfb3513a4be557794c3897b6a9387331b890eae536d4ec610252d52308963c58953dfc84e5385dd6a47b8a5f28180a75330e63bdf9138f80fab4420da4503899d15a9bda991d6ee306c7581fd0c07666a4e5ff7f520ce815303c9d656e6c0", 0x1000}, {&(0x7f0000002100)="f490db0bc5945daae104b49873ae7f8daed35fbda3ec2438408e65678b3f9191911c8a49e414216399ff6bf4cc03e6c0591f12a73eb13e43d11fdf93d8b98cc180248c7036fef241255983282cd207022688f5bb06b1f9f3cff17e29354e7e0306e9e9d2bc1a05b674ca335356ed8f307ce112f936d8a0f46511d070269740d4f4a63a5e6657cfc9fe620b5e5b7ea337b9c028260da5460bdf17c3a12ec2fb790376df22d3cb7a1237c0ce75199beab34ef772881490a4c005ac423d1f5b5964c095", 0xc2}, {&(0x7f0000000680)="8367fc469ac52f493a4fa824c8bf420cadb0f034e86974ea657197a9aa548e678ab3008e381bbc7756630a769a8b4b23716c2318ed66e44cb4864c3c6bc6cafa90c80e7f06ab934e4ee786b2f35d67f9a59d355d0cb2b35174d2494a7f07b87740f455eea59ef7594d2a7d9703963a6f60e3c235385d64415ae017934263c26582846ed277b25e", 0x87}, {&(0x7f0000000400)='r', 0x1}, {&(0x7f0000002200)="e933a6cd4cf5bd3b48fe66cbd439e2342af10d91f51a96f27ffe63e62422ef8d43dfe6ee0cf9f24fe91fd1fb1051adf847149da2d60521b79a127d455cfed15d0b9accb5a4f4676bc40a779ef6d466320275399b51f84a17a8c4e1ebf6de3b05ec63418383bdcbbe2ae00849e11f3ad30f7fa28771955cecc2e9433d009e7bd887bd07c6ea045e8965776c0acba5119ed485bf0d015c8f3eddf494310b7d2a459ef33dd5ae7560abb9624351991d1b58e1c2b835f59f8380ee17673e95fb90d814900bb6f560af900e58d8a1c74e0146e34564ec55da4f8e335aa5a5b8852a1040b086ec3876c9eba180f663d33b40946d28a0cc5844324465cb", 0xfa}, {&(0x7f0000000480)="0e89633144b9854d45295d72cb519af503b0f3c07e9051ae51aa55aef67ef479a7999fd7161646d18480fd7ebe8ff57741ac3972580049870c64e71bec0691", 0x3f}, {&(0x7f00000005c0)="5437f852e174f6e5b490539f3ec5818a4294098d0edafe779098971279c57fc92138b36f2d6a4276744df742e4f1e0c70dc20768f7f84df11e15176f38c5c3323309e81f96ec8266cd13592a1831a6d8d93edf8dd0c54d0fbce4e41aa4c38cce37ab7acb", 0x64}, {&(0x7f00000004c0)="1f306ca0f00e34815c4d196a6e500c6f44d5c4554df7a09190", 0x19}, {&(0x7f00000017c0)="67783ba2e2c0a04971ccfe2abe865f98f807fc9026ded949a881c58f0e435390f555213e43c37898cc3d4e63dab978cb64867a70918662f7e401d96dc68cb8de94c4e546aa17911951f8e5aad5535dc20cc80554f0bcacc0b2d74ce96017ed651bc5aebb045ea723c8c83ff8af5117180b", 0x71}], 0x9, &(0x7f00000023c0)=[{0xf8, 0x88, 0x3, "a9d23bc37ebf6ac92976cc1d25979227bab97dc0b3eba8446867551112ae7c74753bd7da049739bf8ffe62e6b3a7b4f313464564470035f572b1dd6707e16d0beca8f575f1ea9dda3ee613808a72bb7947a78af59c0d3a00e0909f87170304e4740b9432c52cb8d4c75c8211782abed0ade4151dc23730c8f44d8be6ec708748b05aedf10dd72e6eb6cd9e2e16da64a0220ff8d80d988fa4aae387716a79024544675ee30b5b1a8c5646537327d72de2c8139df6b1b07c21b80ccad7ba79a978acb6a013fcda1b4ae8a5497d1ef4c5a84e70148a6368c6982ff957e6f47682eae468780229b5e4"}, {0x68, 0x84, 0x5, "71a0fe4a37b84cc8814d6909f0029d0443e1fe62c3f84d2fbc47cd0e440f499f9407b104cf95d51e0b2caefbc46b743fca06dc491a0fba024a14c2a13df2068c862cafede8b60ef3dc8e4d478b0a298c17e8"}, {0x30, 0x10f, 0x8, "df63edf27d8156d2b9c7447767afefc7f2729a88ffeb81c2ca547f"}], 0x190}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x8000}, 0x18) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r11, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r12], 0x44}}, 0x0) 18.18395178s ago: executing program 7 (id=716): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x80000000}, 0x8) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x205a2, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) write$hidraw(r0, 0x0, 0x1a) 17.995164793s ago: executing program 7 (id=718): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 17.693392018s ago: executing program 4 (id=720): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x1, 0x3}}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r0], 0x48) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = socket$rds(0x15, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000180), &(0x7f0000000580)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000004400)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000000c0)=""/18, 0x12}, 0x0, 0x79}}], 0x30, 0x8000}, 0x0) 17.291994004s ago: executing program 4 (id=722): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8800000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r3}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x2}, r5, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r5}}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r8) write$binfmt_misc(r7, &(0x7f0000000040), 0xffc1) fallocate(r6, 0x10, 0x3, 0x5) timer_create(0x203e4093f5b38ae3, 0x0, 0x0) r9 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) write$selinux_access(r9, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563d497723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 17.051611287s ago: executing program 7 (id=726): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000540)={'ip_vti0\x00', r5, 0x20, 0x20, 0x9, 0x6, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x66, 0x0, 0x80, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0x90, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x971d}, {@remote, 0x4}, {@empty, 0x2}, {@broadcast, 0x100}, {@local, 0x9}]}, @noop, @end, @timestamp_addr={0x44, 0x44, 0x9c, 0x1, 0x0, [{@multicast2, 0x5}, {@local, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x7}, 0x4}, {@empty, 0x844}, {@multicast1, 0xd}, {@multicast1, 0xfd6}, {@dev={0xac, 0x14, 0x14, 0x3}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @ssrr={0x89, 0x13, 0x5d, [@private=0xa010102, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x19}]}]}}}}}) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, 0x2500}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x24004090) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000240)=ANY=[], 0x0) close_range(r8, 0xffffffffffffffff, 0x200000000000000) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x44}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x1}]}) sched_setscheduler(0x0, 0x2, 0x0) r12 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000040)={0x4}) pselect6(0x76, &(0x7f0000000080)={0x0, 0x0, 0x200000000000}, 0x0, &(0x7f0000000100)={0x18}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00000006c0)={{}, {0x0, 0x9}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0xfff, 0x14c6c3) 17.002076728s ago: executing program 38 (id=726): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000540)={'ip_vti0\x00', r5, 0x20, 0x20, 0x9, 0x6, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x66, 0x0, 0x80, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0x90, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x971d}, {@remote, 0x4}, {@empty, 0x2}, {@broadcast, 0x100}, {@local, 0x9}]}, @noop, @end, @timestamp_addr={0x44, 0x44, 0x9c, 0x1, 0x0, [{@multicast2, 0x5}, {@local, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x7}, 0x4}, {@empty, 0x844}, {@multicast1, 0xd}, {@multicast1, 0xfd6}, {@dev={0xac, 0x14, 0x14, 0x3}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @ssrr={0x89, 0x13, 0x5d, [@private=0xa010102, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x19}]}]}}}}}) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, 0x2500}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x24004090) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000240)=ANY=[], 0x0) close_range(r8, 0xffffffffffffffff, 0x200000000000000) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x44}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x1}]}) sched_setscheduler(0x0, 0x2, 0x0) r12 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000040)={0x4}) pselect6(0x76, &(0x7f0000000080)={0x0, 0x0, 0x200000000000}, 0x0, &(0x7f0000000100)={0x18}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00000006c0)={{}, {0x0, 0x9}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0xfff, 0x14c6c3) 16.85469917s ago: executing program 4 (id=733): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)=@v2={0x2000000, [{0x6}, {0x0, 0x9d}]}, 0x14, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x84) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000640), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x54) recvmsg$can_raw(r0, &(0x7f0000000600)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/221, 0xdd}, {&(0x7f00000002c0)=""/50, 0x32}, {&(0x7f0000000400)=""/67, 0x43}, {&(0x7f0000000480)=""/77, 0x4d}, {&(0x7f0000000180)=""/15, 0xf}], 0x5, &(0x7f0000000280)=""/18, 0x12}, 0x40010043) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r2, 0x40284504, &(0x7f0000000000)=""/56) pipe2$9p(&(0x7f00000001c0), 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x4c, 0x2, 0x40, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast2, 0x7, 0x47, 0x10, 0x1}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) 16.730734562s ago: executing program 4 (id=737): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x1fa) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x80000000}, 0x8) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x205a2, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) write$hidraw(r0, 0x0, 0x1a) 16.152511931s ago: executing program 4 (id=743): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24000080, 0x0, 0x0) 15.629152059s ago: executing program 4 (id=748): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) personality(0x5400004) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x9}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x8, 0x1, 0x6, 0xe0}, {0xf800, 0x8, 0x81, 0x9}]}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 15.590984849s ago: executing program 39 (id=748): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) personality(0x5400004) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x9}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x8, 0x1, 0x6, 0xe0}, {0xf800, 0x8, 0x81, 0x9}]}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 4.299660206s ago: executing program 2 (id=854): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="cdaa00000000000071101b000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x3, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x400000000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffffdbe}]}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000400)=ANY=[@ANYRES8=r2, @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000001140)=ANY=[@ANYRES8=0x0, @ANYBLOB="150372626c9d5f3317ad8221d37e160e79c5f6e278be2130ca7330b2", @ANYRESDEC, @ANYRES16, @ANYBLOB="017bd269f7dd3a93fa412d09c2790257816e859e38befc7634f092626c62b45f123b8f0f84059ba4351abe0bfd3933e564c513028b41a418555d5e4c744478e7ca03d24a2c1b0f248513f8f9cfc324431f5d5a6999ad47b61152edad98c141cf359dfcf021d4e8a18166aa7767e69420c5308149bcddd4a62a31d8f902a24645ef50e8395e891793f46aaa025a260c8d784a1ec9233755d12803582f0700000000000000df6c634447f23d2cd9e65d3461d3a09b93f7318e486e862f288bb7ce21e0df72e59ed16f3796c260b5be486b21c5d7cf21996406b4b3240f4255406a009a12c844c2d35cefba99e2b26b01a1347225c1a8cb9f6630d930847f193662a5eea4daf62aeb29324a86f8ec6367bf3105d3529316d3e044bbeedf80c3b301686b44cd51c9ff53690e9269caf72a039b5e32b3e543b8fbba25a1eaf60c3e1da6becef1750a9e8d991ef03ce3d14d85d69f6ff54465fba8ad4aef62561284fdc9cba6fea9a38fb5244e7729c047949660af09fa91fd17928f55f6bed589cdf6e6dde72206336961da8ce2c100ff90ac4a598e9846bc2b868a640021bec390b7f460d14330beadd5458a0352cde0d6c8bc1655da9121090c98cdf98438ab1baa3bbbb60db2436ae26fad78755d3df25b0f03c4c8f39f27a668aa45aa2953ebd6a34233a386f3d63a07f7e491a2db98af12cc6fc814e8a75efcf90c0e2a56a833d53b086be1ec10efe3c7d46abfedb36fc2fc75ebbdabcd356e489fe87dbf67bfe8de6d24d4db48c65da860ccf9f9b2f8b1fc8c8d2e7293a465ea21757521a1b0677f50901ea19c53fd3a8ca59fbc328e69b0d064746a000000a1ed7631a64c8ecb86645f66b4efc49b74ec93f4897a56c7dbb42f094e6685051a0d42bed7598cc30ffc08bc2db500c5e5f9d51fc89d25f3a202b0abc67dd7926f915d61c24e031636d984759a36ba0b3a06151764621bdbe91b510a6064aa51e0a73317ccb02dbb89c701eac52445561f7355071ef71ae5427f612f8620f6b9a80c440af2f162"], 0x40, 0x2f6, &(0x7f0000000e40)="$eJzs3M9r02AYwPGnXbd2HVt7EEFF9qIXvYSt3oUiG4gFZa7iDxCyNdXS2JamTCri6smr/4Zjx11koPMP2MWbJy/iZRfBy0BnpU3q0i3dus4tG/1+YLzP8r5Pm+R9W54Uko37b5/ls5aW1SsSjCgJitRkSyTeiBzzoyISkIA0myF7Y8RuanJ15OeXi0pEkqnU1IxS08nZawml1Nj4h+cvly+tVUburYythmU9/njjR+Lb+tn1cxt/Zp/mLJWzVKFYUbqaK36t6HOmoTI5K68pdcc0dMtQuYJllO3+YsV5WymVqkovZEajpbJhWUovVFXeqKpKUVXKVaU/0XMFpWmaGo1K/9gcbzalg+all2Zm9GSPbzrfYx7+u7U9e8vl1ofnU729J710dPsEAABOqlb9H3bX/5vt9X/AaYPu+t9Rk1qj/r/74OGtLur/1aEO9X9xV/3vXF9IW3/WLFL/9yqye1N6aaD3+h+nRHlYwrIs25/o14+WJ5oB9T8AAAAAAAAAAAAAAAAAAAAAAKfBZr0eq9frsUYbFDtu/IWdG0Za//u9nzga7vm35zrUmHXmv0+4btyLiJhvFtILabu1+5NZyYkphkxITH4314PDjqdvpqYCqikuH81FJ39xIT3Qnj8pMYl750/a+ao9f1Ci7vyExOSMd37CM39Irlx25WsSk8/zUhRTMs11vZ3/alKpG7dTO/KHJeNxxxwAAAAAAKeRpv7xvH7XtE79dn43vw9MeF6fh+R8yN9jBwAAAACgX1jVF3ndNI3yvsE7J2Pfwd+dgV2/8mGDwQMcRbfB+2YQ6PTKkQOduiMIWs9k3nPwsDOorcv5eWbxcLsx6Mexj/tywkONRe/aEu04eGzA64TvFYSdpzI3tmzVd4y5vnLhl39r7Fi/hgAAAAAcg+2i3+89AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACgfx3H48T8PkYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpPgbAAD//zi/FSY=") r7 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x9100) fstatfs(r7, 0x0) setresuid(r3, r4, r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000500)={0x2, 0xfc, 0x8}) 4.06499163s ago: executing program 1 (id=855): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r0 = syz_usbip_server_init(0x3) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_submit(r2, 0x2, &(0x7f0000000400)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0xc1dbf613c3a238e7, 0x115e, r0, &(0x7f0000000000)="41c230f0422b1b67dc2000d576c2c2f602af57f5465aba9c74", 0x19, 0x4, 0x0, 0x3}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x9, r1, &(0x7f0000000300)="ade276c251aab5df1fd30f578cff66e55d06a950b50c0c166442e91e25a39379776963fd924f1f7235cecbc423241318e860f1874ef3dc073fa243869d63344951a70a5f5411d5395a4ac58d8fa62ed6dc2b8e55b4d05e8f274468eae2c175b67d9121b78c1b4ecb01a8d8745c6f1b9d1119d86bc24c2829bf7689f5c188db94511edb483e226c83e8436c976bdff147beb607b4064d3da89f", 0x99, 0xbb, 0x0, 0x1}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) r4 = socket(0x10, 0x3, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = io_uring_setup(0x19, &(0x7f0000000640)={0x0, 0xfffffffe, 0x8, 0x3, 0x160}) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @initdev, @multicast1}, &(0x7f00000001c0)=0xc) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x1, 0x0, 0x9, @vifc_lcl_ifindex=r9, @loopback}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) 3.433732229s ago: executing program 2 (id=864): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0xae, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382900000000000000000000f9000000000000ff020000000000000000000000000001"], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x15, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r5, 0x0, 0x7}, 0x18) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000340)={0x23, 0x0, 0x0, 0x2}, 0x10) ioctl$SIOCPNENABLEPIPE(r6, 0x89ed, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r8}, &(0x7f0000000a00), &(0x7f0000000a40)=r7}, 0x20) 3.285105841s ago: executing program 2 (id=865): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000010140)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@barrier}, {@bsdgroups}]}, 0x1, 0x562, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x91}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3, 0x0, 0x5}, 0x18) r4 = openat(0xffffffffffffff9c, 0x0, 0x84042, 0x1fb) write$P9_RUNLINKAT(r4, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, 0x0) lremovexattr(0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@errors_remount}, {@bsdgroups}, {@nouid32}, {@jqfmt_vfsv0}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000540)='./file0\x00', 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="000200000000000007"], 0x20) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) geteuid() pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) io_uring_setup(0x194a, &(0x7f0000000100)={0x0, 0xcba6, 0x1, 0x3, 0x1a3, 0x0, r0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f00000000c0)={0x17c04, r6, 0x14d0, 0xfff, 0x7fffffffc}) 3.097921944s ago: executing program 9 (id=866): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10000) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000340)="d57c3f6846bd0cdbd7a5db2e0d39cb19d84b6732f729f9aace395931ef6712c7539a349e5adfe39f59cddb1f457098968b8b6d3b60c7735ac907660f84ddaa282d3bbdde8b202a539c68b09242ee8a148253161feb14fd8ceb48e6920bb2e8570807898fd3104cbb", 0x68, 0x40005, &(0x7f00000001c0)={0x11, 0x17, 0x0, 0x1, 0x5, 0x6, @broadcast}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff, 0x0, '\x00\x00@\x00'}) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ff00"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x12) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f00000003c0)=0x6) setsockopt$inet_tcp_buf(r4, 0x6, 0xd, &(0x7f00000023c0)="5d3fff98", 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.936010737s ago: executing program 2 (id=867): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xca74, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xff, 0x1da, &(0x7f0000000580)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r3, 0x0, 0x4ab}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000180)='kfree\x00', r8}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) getdents64(r0, &(0x7f00000002c0)=""/191, 0xbf) 2.316909546s ago: executing program 1 (id=870): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 2.223040137s ago: executing program 5 (id=872): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 2.175137478s ago: executing program 9 (id=873): socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0xc, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x81400, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x2, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000640)=0x13) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000280)={0xfeff, 0x8, 0x8, 0xfffe, 0x11, "0100000000000080"}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xa) 2.129623838s ago: executing program 5 (id=874): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x138, 0x10, 0x1, 0x0, 0x200017, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x32}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {0xffffffffffffffff}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 2.01806466s ago: executing program 9 (id=876): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.911145162s ago: executing program 5 (id=877): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18b201010000000500ea651a0000000000000000", @ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095", @ANYBLOB="10a7498c76083ccac351", @ANYRESOCT=r0], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x8}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000400)={0xa}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0x6, 0xffffffffffffffff, 'id1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'sit0\x00', 0x0}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r9 = dup(r8) r10 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r10, 0xee72) sendfile(r9, r10, 0x0, 0x8000fffffffe) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYRES64=r9, @ANYRES32=r2, @ANYBLOB="ff0100"/20, @ANYRES32=0x0, @ANYRES64=r9, @ANYBLOB="0200009277550a4deb000500000001000000f80b1427000000000000e1ffffff0000079ae4429a12e9f3e4522ad3a2f6b325ac33d9e086f328bb05062f8b93acd25de0579afed193bf8980103167bd20247f6793287a9001ffa5bc0c266aff62f4acba8541260ffbf7a3e3b28dd31c86b26204864ba7dea067c91827d0960ef4efcd914641ed464258ffc592f74c9d1129bb7e5f4d881b518b9c3532a8ce171aaeee9d3ab69c83c62960996e46eb6074d13b6aa2b630fe7944331796b6c3e6c97dec2aaccfc8f12828cfd271d35462918e180f521e44e3b17edeba1f2d262917ebbc1cf0"], 0x50) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x3, 0xc, &(0x7f0000000bc0)=ANY=[@ANYRESOCT, @ANYRES32=r13, @ANYBLOB="0000b7080000000002107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704f9000000925e970000000100000095265ad25b038d7b59172903fbf5bb5189b0050ae02ea9c3624e80be20d609a8142a187b27b5f13d21030ad2cf5e8a32dd0beb774a2de603622149cfceb1a7105ac7009ddb157af5e33da97542c31e12afd886435e87742a5f0eff55deab5a0947eb170949ae6958df7b0d78662be18d0b1c002237bdd688bf049064c8cc61c73a67c743c1467bd59f53c27b85826acbd9ece82a7f50d5b61334fdcb36fcc7938df96e8232184396016743cf1baf9a32fd063b1bbbd12318545eb820f99378"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r14}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r13}, &(0x7f0000000380), &(0x7f00000003c0)=r14}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x28, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000f00000000000000c300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32, @ANYBLOB="00090000ffffffffff070000eb5ab2bb66ff62a600f16f9be99c28667676d519b445748f57e2562b6a5cec5a8a92466ce8376834a18758", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000082000000b7080000000000007b8af8ff00000000b7080000e20000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYRESHEX=r6], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x6, &(0x7f0000000200)=""/6, 0x41000, 0x8, '\x00', r7, 0x0, r10, 0x8, &(0x7f0000000280)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xb, 0x3, 0xc}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x1, r11, r12, r13], &(0x7f00000005c0), 0x10, 0x343, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=r2, @ANYBLOB="08000004000000000000000000c55851508f000058e5fb3a678962954ac6ef659c7be6da0100000098ede4375421211f781ad400a06440063f330d24a6018ab690505f16bbafffb1630c405c491696ed59a345bd1cbc6303c8202d6f42297f457c043dc7dcc8c4e353d07966dedb7c", @ANYRES32=r7, @ANYRES32, @ANYBLOB="010000000200"/28], 0x50) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f7465616d"], 0x110}}, 0x0) 1.579527047s ago: executing program 1 (id=878): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x123, 0x123, 0x3, [@enum={0x6, 0x1, 0x0, 0x6, 0x4, [{0x5, 0xeb}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x8}}, @typedef={0x7, 0x0, 0x0, 0x8, 0x5}, @datasec={0xa, 0x1, 0x0, 0xf, 0x3, [{0x2, 0xfff, 0x8}], '^.!'}, @struct={0xf, 0x2, 0x0, 0x4, 0x0, 0xd8, [{0x8, 0x1, 0x1}, {0x10, 0x4, 0x595fd479}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x65, 0x0, 0x12}, @enum={0xb, 0x2, 0x0, 0x6, 0x4, [{0x2, 0x5}, {0x4, 0x6}]}, @var={0x6, 0x0, 0x0, 0xe, 0x4, 0x3}, @struct={0xa, 0x7, 0x0, 0x4, 0x0, 0x4, [{0xd, 0x5, 0xa87}, {0x5, 0x0, 0xfffffffa}, {0x6, 0x1}, {0xd, 0x1, 0x1d6d}, {0x8, 0x0, 0x2}, {0x0, 0x2, 0x2}, {0x3, 0x0, 0xa2}]}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x3, 0x8}]}, {0x0, [0x30]}}, &(0x7f00000000c0)=""/152, 0x13f, 0x98, 0x0, 0x8e, 0x0, @void, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)={0x3, 0x800000, 0x5, 0x2}) (async) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r2]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) (async) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:tmp_t:s0\x00', 0x1b, 0x3) 1.409653489s ago: executing program 9 (id=879): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0xf2cccc7fae7881b8, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) mknod$loop(&(0x7f00000007c0)='./file0\x00', 0x100000000000600d, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r7, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2000000}]) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 1.315066381s ago: executing program 1 (id=880): sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x8014) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095000000ef000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001940)=@newtfilter={0x30, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r5, {0x10}, {0xffe0}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x2e, 0x0, &(0x7f00000064c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r10, 0x0, 0x1000100000000}, 0x18) bind$bt_hci(r9, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a3000000000540003"], 0xa8}}, 0x0) 1.106649384s ago: executing program 8 (id=881): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, 0x0, &(0x7f0000000280)=0x0) timer_getoverrun(r2) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0400080004000059c1b0b80cf62e70a6589ad383f66c000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 1.027011705s ago: executing program 1 (id=882): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 996.765275ms ago: executing program 9 (id=883): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6de6b45"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10000) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000340)="d57c3f6846bd0cdbd7a5db2e0d39cb19d84b6732f729f9aace395931ef6712c7539a349e5adfe39f59cddb1f457098968b8b6d3b60c7735ac907660f84ddaa282d3bbdde8b202a539c68b09242ee8a148253161feb14fd8ceb48e6920bb2e8570807898fd3104cbb", 0x68, 0x40005, &(0x7f00000001c0)={0x11, 0x17, 0x0, 0x1, 0x5, 0x6, @broadcast}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff, 0x0, '\x00\x00@\x00'}) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ff00"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x12) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f00000003c0)=0x6) setsockopt$inet_tcp_buf(r4, 0x6, 0xd, &(0x7f00000023c0)="5d3fff98", 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 993.429325ms ago: executing program 5 (id=884): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r4, 0x3516, 0xc03e, 0x4, 0x0, 0x0) 918.855007ms ago: executing program 2 (id=885): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x39f0c2) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x2, 0x4001}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r7 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000780)=0x97) sendmsg$key(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x2, 0x2, 0x2d, 0x5, 0x6, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_lifetime={0x4, 0x4, 0x2, 0x800, 0x7fffffff, 0x6e}]}, 0x30}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) getsockopt$inet_buf(r8, 0x0, 0x30, &(0x7f0000000b80)=""/225, &(0x7f0000000140)=0xe1) r10 = socket(0x10, 0x3, 0x0) connect$netlink(r10, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000400000000000000000000009500000000000000b55dd8f759297092befa9063a626b845f26fc9a3fcc847ac947ab59682bd4f8255516d0c0b233bc08e07eef7fa7cffd98e91b0216509d2a7219bce2044db8bf0397230d851b354787145ed538e212a5be67f9b57881bc042b510a459b282c0078c2bbaf8df8661a69aa5084f29e341ea4bfb2c9e091517711d97c76e3daad0133c0c9d5327d8c5fc88fcce0dfd4dda3d36de83bb231dd855c9748cb981c520d7a675fa8e46d7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1e00010000000000000000000000007f00000100000000000000000000000000040000000000000a0080005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000b22d432000000ac141400000000000000000000000000fdffffffffffffff00000000000000040100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000200000000000000000000000000100000000000000000000300000000000001010000000000000002000400000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000004f7d000000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) (fail_nth: 6) close_range(r2, r3, 0x0) 882.027347ms ago: executing program 8 (id=886): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getpid() ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}, @IFLA_GRE_OKEY={0x8, 0x5, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r9}, 0x18) r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r10, &(0x7f0000000300)='system_u:object_r:var_run_t:s0\x00', 0x1f) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 709.899479ms ago: executing program 8 (id=887): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x138, 0x10, 0x1, 0x0, 0x200017, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x32}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {0xffffffffffffffff}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 709.38461ms ago: executing program 1 (id=888): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 659.66289ms ago: executing program 8 (id=889): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 606.280991ms ago: executing program 5 (id=890): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 279.345196ms ago: executing program 8 (id=891): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x3}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000240)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) getpgid(0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) fdatasync(0xffffffffffffffff) 267.952406ms ago: executing program 2 (id=892): socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0xc, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc1400, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0x3fcf5ad, 0x8000}, 0x100510, 0x2, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x88, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f00000003c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r1) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000640)=0x13) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000280)={0xfeff, 0x8, 0x8, 0xfffe, 0x11, "0100000000000080"}) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000006c0)=0xa) 183.414887ms ago: executing program 5 (id=893): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000d00)=ANY=[@ANYRES16, @ANYBLOB="bfa727f464da622a60389ab3b9687aed902ec5ea043175068a657e9a1800b0d2cca869dfae857509d4b4a127eac31aff9aa283ccda978ec15248910e4081e24253f2401f293a22eba89e1f2dad0c79563ab437d4faa8b16238618b931dd44a265ec9d5747cc7b8f0332bc63dbfebb626e45340073a344d1db6e186501ab9f5f723e3ede1540e5f8799", @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000240)={'syz_tun\x00', {0x2, 0x0, @initdev}}) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000240)={0x8, 0x0, '\x00', 0x1, &(0x7f0000000040)}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) getdents64(r5, &(0x7f0000000f80)=""/4087, 0xbdf) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x60000080) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") 90.965489ms ago: executing program 8 (id=894): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x80010, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x2, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x60400) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000400)={0xa}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014ff02800800030000000000080005000200000053d727c56baa18478d6e3b35ee417b55361abe2c9aa6278670bb1b61e744f046"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 0s ago: executing program 9 (id=895): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = inotify_add_watch(r0, 0x0, 0x8c7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x69) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='pwc_handler_exit\x00'}, 0x18) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x100000000000}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x1f, 0x30, 0x5, 0x6, 0x0, 0x3, 0x0}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x3, 0xff, "0062ba7d820000000001001f820dac4eb71eed"}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x40140) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f0000000200)={0x1c, 0x9, 0x9}) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000400)={0x0, 0xa, 0x8001}) kernel console output (not intermixed with test programs): nr_sectors = 1 limit=128 [ 67.799079][ T5189] Buffer I/O error on dev loop0, logical block 157, lost async page write [ 67.809774][ T5189] syz.0.523: attempt to access beyond end of device [ 67.809774][ T5189] loop0: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 67.823179][ T5189] Buffer I/O error on dev loop0, logical block 158, lost async page write [ 67.833029][ T5189] syz.0.523: attempt to access beyond end of device [ 67.833029][ T5189] loop0: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 67.846448][ T5189] Buffer I/O error on dev loop0, logical block 159, lost async page write [ 67.858400][ T5189] syz.0.523: attempt to access beyond end of device [ 67.858400][ T5189] loop0: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 67.866245][ T5191] netlink: 'syz.0.523': attribute type 21 has an invalid length. [ 67.871752][ T5189] Buffer I/O error on dev loop0, logical block 160, lost async page write [ 67.879883][ T12] team0 (unregistering): Port device team_slave_1 removed [ 67.889842][ T5189] syz.0.523: attempt to access beyond end of device [ 67.889842][ T5189] loop0: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 67.908650][ T5189] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 67.925378][ T12] team0 (unregistering): Port device team_slave_0 removed [ 67.937846][ T5189] syz.0.523: attempt to access beyond end of device [ 67.937846][ T5189] loop0: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 67.951228][ T5189] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 67.968668][ T5189] syz.0.523: attempt to access beyond end of device [ 67.968668][ T5189] loop0: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 67.982128][ T5189] Buffer I/O error on dev loop0, logical block 133, lost async page write [ 67.994539][ T5189] syz.0.523: attempt to access beyond end of device [ 67.994539][ T5189] loop0: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 68.007930][ T5189] Buffer I/O error on dev loop0, logical block 150, lost async page write [ 68.027414][ T5189] Buffer I/O error on dev loop0, logical block 151, lost async page write [ 68.047569][ T5081] chnl_net:caif_netlink_parms(): no params data found [ 68.123837][ T5202] loop3: detected capacity change from 0 to 512 [ 68.131911][ T5202] EXT4-fs: Ignoring removed orlov option [ 68.148607][ T5202] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 68.173148][ T5202] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 68.183552][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.190809][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.195785][ T5202] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.524: corrupted in-inode xattr: e_value size too large [ 68.202916][ T5081] bridge_slave_0: entered allmulticast mode [ 68.216876][ T5202] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.524: couldn't read orphan inode 15 (err -117) [ 68.263997][ T5081] bridge_slave_0: entered promiscuous mode [ 68.295944][ T5217] tipc: New replicast peer: 255.255.255.255 [ 68.302082][ T5217] tipc: Enabled bearer , priority 10 [ 68.315367][ T5223] loop2: detected capacity change from 0 to 512 [ 68.324059][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.331265][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.363550][ T5223] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.373623][ T5223] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 68.383756][ T5081] bridge_slave_1: entered allmulticast mode [ 68.390240][ T5081] bridge_slave_1: entered promiscuous mode [ 68.444282][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.516991][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.574860][ T5081] team0: Port device team_slave_0 added [ 68.585072][ T5081] team0: Port device team_slave_1 added [ 68.599434][ T5248] loop2: detected capacity change from 0 to 512 [ 68.622665][ T5248] EXT4-fs: Ignoring removed nobh option [ 68.634595][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.641645][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.667661][ T5081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.689961][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.697021][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.723161][ T5081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.754200][ T5248] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.535: corrupted inode contents [ 68.774754][ T5248] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.535: mark_inode_dirty error [ 68.774879][ T5081] hsr_slave_0: entered promiscuous mode [ 68.791410][ T5248] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.535: corrupted inode contents [ 68.804003][ T5081] hsr_slave_1: entered promiscuous mode [ 68.814297][ T5081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.828253][ T5081] Cannot create hsr debugfs directory [ 68.843938][ T5248] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.535: mark_inode_dirty error [ 68.903910][ T5248] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.535: Failed to acquire dquot type 0 [ 68.946213][ T5248] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.535: corrupted inode contents [ 69.008084][ T5248] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.535: mark_inode_dirty error [ 69.031971][ T5081] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 69.046727][ T5081] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 69.055709][ T5248] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.535: corrupted inode contents [ 69.077861][ T5081] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 69.081208][ T5248] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.535: mark_inode_dirty error [ 69.098311][ T5081] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 69.101512][ T5248] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.535: corrupted inode contents [ 69.122112][ T5248] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 69.168193][ T5248] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.535: corrupted inode contents [ 69.191213][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.198501][ T5248] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.535: mark_inode_dirty error [ 69.214555][ T5081] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.225447][ T2165] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.232618][ T2165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.236685][ T5311] netlink: zone id is out of range [ 69.245608][ T5311] netlink: get zone limit has 8 unknown bytes [ 69.252271][ T5248] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 69.263415][ T2165] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.270647][ T2165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.290013][ T5081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.300468][ T5081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.311238][ T5248] EXT4-fs (loop2): 1 truncate cleaned up [ 69.320709][ T5248] EXT4-fs mount: 74 callbacks suppressed [ 69.320727][ T5248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.367991][ T5320] batadv_slave_1: entered promiscuous mode [ 69.382830][ T5320] batadv_slave_1: left promiscuous mode [ 69.423837][ T5248] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.472998][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 69.473012][ T29] audit: type=1326 audit(1749232357.113:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.2.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fdb3fe929 code=0x7ffc0000 [ 69.482194][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.514494][ T29] audit: type=1326 audit(1749232357.163:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.2.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f2fdb3fe929 code=0x7ffc0000 [ 69.538030][ T29] audit: type=1326 audit(1749232357.163:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.2.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fdb3fe929 code=0x7ffc0000 [ 69.561455][ T29] audit: type=1326 audit(1749232357.163:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.2.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fdb3fe929 code=0x7ffc0000 [ 69.642720][ T29] audit: type=1326 audit(1749232357.193:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.2.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fdb3fe929 code=0x7ffc0000 [ 69.666131][ T29] audit: type=1326 audit(1749232357.193:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.2.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fdb3fe929 code=0x7ffc0000 [ 69.689573][ T29] audit: type=1326 audit(1749232357.193:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.2.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fdb3fe929 code=0x7ffc0000 [ 69.712943][ T29] audit: type=1326 audit(1749232357.193:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.2.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fdb3fe929 code=0x7ffc0000 [ 69.713009][ T29] audit: type=1326 audit(1749232357.193:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.2.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fdb3fe929 code=0x7ffc0000 [ 69.713037][ T29] audit: type=1326 audit(1749232357.193:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.2.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fdb3fe929 code=0x7ffc0000 [ 69.820615][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 69.820637][ T5356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.551'. [ 69.824322][ T5356] wireguard0: entered promiscuous mode [ 69.824374][ T5356] wireguard0: entered allmulticast mode [ 69.841450][ T5081] veth0_vlan: entered promiscuous mode [ 69.843956][ T5081] veth1_vlan: entered promiscuous mode [ 69.859603][ T5081] veth0_macvtap: entered promiscuous mode [ 69.864685][ T5081] veth1_macvtap: entered promiscuous mode [ 69.875857][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.877268][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.881080][ T5081] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.881149][ T5081] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.881175][ T5081] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.881202][ T5081] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.194513][ T5386] tipc: Enabling of bearer rejected, failed to enable media [ 70.341532][ T5409] netlink: zone id is out of range [ 70.347191][ T5409] netlink: get zone limit has 8 unknown bytes [ 70.439678][ T3350] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.453212][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.521813][ T3350] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.562934][ T5425] wg2: entered promiscuous mode [ 70.567968][ T5425] wg2: entered allmulticast mode [ 70.587775][ T3350] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.622496][ T5437] loop6: detected capacity change from 0 to 512 [ 70.642990][ T3350] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.666244][ T3613] udevd[3613]: symlink '../../loop6' '/dev/disk/by-diskseq/195.tmp-b7:6' failed: Read-only file system [ 70.688413][ T5437] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.697862][ T3613] udevd[3613]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 70.716165][ T5437] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.803778][ T3350] bridge_slave_1: left allmulticast mode [ 70.809537][ T3350] bridge_slave_1: left promiscuous mode [ 70.815307][ T3350] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.824638][ T5437] loop6: detected capacity change from 512 to 258 [ 70.842561][ T5457] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #18: comm syz.6.566: corrupted xattr block 20: invalid header [ 70.866481][ T3613] udevd[3613]: symlink '../../loop6' '/dev/disk/by-diskseq/195.tmp-b7:6' failed: Read-only file system [ 70.880449][ T5457] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.566: bg 0: block 16352: padding at end of block bitmap is not set [ 70.897516][ T3613] udevd[3613]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 70.910724][ T3350] bridge_slave_0: left allmulticast mode [ 70.916434][ T3350] bridge_slave_0: left promiscuous mode [ 70.922143][ T3350] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.938930][ T3613] udevd[3613]: symlink '../../loop6' '/dev/disk/by-diskseq/195.tmp-b7:6' failed: Read-only file system [ 70.971528][ T3613] udevd[3613]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 70.992352][ T5081] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /6/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=2048 fake=0 [ 71.062175][ T5081] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.078012][ T3350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.089587][ T3350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.103071][ T3350] bond0 (unregistering): Released all slaves [ 71.158923][ T3350] hsr_slave_0: left promiscuous mode [ 71.164877][ T3350] hsr_slave_1: left promiscuous mode [ 71.184127][ T3350] veth1_macvtap: left promiscuous mode [ 71.189687][ T3350] veth0_macvtap: left promiscuous mode [ 71.202738][ T3350] veth1_vlan: left promiscuous mode [ 71.208982][ T3350] veth0_vlan: left promiscuous mode [ 71.303204][ T3350] team0 (unregistering): Port device team_slave_1 removed [ 71.316058][ T3350] team0 (unregistering): Port device team_slave_0 removed [ 71.586300][ T5444] chnl_net:caif_netlink_parms(): no params data found [ 72.003570][ T5444] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.010955][ T5444] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.023059][ T5444] bridge_slave_0: entered allmulticast mode [ 72.029699][ T5444] bridge_slave_0: entered promiscuous mode [ 72.036712][ T5444] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.043864][ T5444] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.056030][ T5444] bridge_slave_1: entered allmulticast mode [ 72.066786][ T5444] bridge_slave_1: entered promiscuous mode [ 72.110404][ T5444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.136471][ T5444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.169147][ T5444] team0: Port device team_slave_0 added [ 72.176087][ T5444] team0: Port device team_slave_1 added [ 72.274960][ T5444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.281965][ T5444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.308108][ T5444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.322223][ T5444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.329249][ T5444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.355340][ T5444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.370087][ T5545] netlink: 'syz.0.584': attribute type 1 has an invalid length. [ 72.422505][ T5555] loop3: detected capacity change from 0 to 512 [ 72.432273][ T5545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.446680][ T3613] udevd[3613]: symlink '../../loop3' '/dev/disk/by-diskseq/196.tmp-b7:3' failed: Read-only file system [ 72.466308][ T3613] udevd[3613]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 72.491645][ T5555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.523141][ T5444] hsr_slave_0: entered promiscuous mode [ 72.530569][ T5444] hsr_slave_1: entered promiscuous mode [ 72.534997][ T5555] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.544946][ T3613] udevd[3613]: symlink '../../loop3' '/dev/disk/by-diskseq/196.tmp-b7:3' failed: Read-only file system [ 72.561567][ T3613] udevd[3613]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 72.564074][ T5538] bond1: (slave geneve2): making interface the new active one [ 72.583651][ T5538] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 72.601397][ T5557] bond2: entered promiscuous mode [ 72.603749][ T5555] loop3: detected capacity change from 512 to 258 [ 72.606489][ T5557] bond2: entered allmulticast mode [ 72.618894][ T5557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.625432][ T5575] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #18: comm syz.3.587: corrupted xattr block 20: invalid header [ 72.640451][ T5575] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.587: bg 0: block 16352: padding at end of block bitmap is not set [ 72.640476][ T5557] bond2 (unregistering): Released all slaves [ 72.685845][ T3318] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /131/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=2048 fake=0 [ 72.736261][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.790157][ T5581] loop0: detected capacity change from 0 to 1024 [ 72.846244][ T5581] EXT4-fs: Ignoring removed bh option [ 72.867409][ T5581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.996784][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.016532][ T5444] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 73.043204][ T5444] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 73.067319][ T5444] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 73.086176][ T5444] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 73.137572][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.194651][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.257652][ T5444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.283983][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.323136][ T5444] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.349309][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.384444][ T3350] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.391583][ T3350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.429531][ T2165] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.436665][ T2165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.621850][ T31] bridge_slave_1: left allmulticast mode [ 73.627678][ T31] bridge_slave_1: left promiscuous mode [ 73.633448][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.648262][ T31] bridge_slave_0: left allmulticast mode [ 73.654013][ T31] bridge_slave_0: left promiscuous mode [ 73.659770][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.756421][ T31] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.765264][ T31] bond_slave_0: left promiscuous mode [ 73.771806][ T31] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.780977][ T31] bond_slave_1: left promiscuous mode [ 73.787456][ T31] $Hÿ (unregistering): Released all slaves [ 73.796198][ T31] bond1 (unregistering): Released all slaves [ 73.851946][ T5605] chnl_net:caif_netlink_parms(): no params data found [ 73.880212][ T5444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.899591][ T31] hsr_slave_0: left promiscuous mode [ 73.909727][ T31] hsr_slave_1: left promiscuous mode [ 73.920153][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.927657][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.956393][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.963906][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.973008][ T5689] netlink: 196 bytes leftover after parsing attributes in process `syz.1.604'. [ 73.984946][ T31] veth1_macvtap: left promiscuous mode [ 73.990566][ T31] veth0_macvtap: left promiscuous mode [ 73.996256][ T31] veth1_vlan: left promiscuous mode [ 74.001584][ T31] veth0_vlan: left promiscuous mode [ 74.072258][ T31] team0 (unregistering): Port device team_slave_1 removed [ 74.081958][ T31] team0 (unregistering): Port device team_slave_0 removed [ 74.224185][ T5712] loop0: detected capacity change from 0 to 512 [ 74.232179][ T5712] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.296888][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.304219][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.322771][ T5605] bridge_slave_0: entered allmulticast mode [ 74.330729][ T5605] bridge_slave_0: entered promiscuous mode [ 74.351638][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.358924][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.368467][ T5712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.381887][ T5605] bridge_slave_1: entered allmulticast mode [ 74.389825][ T5712] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.403880][ T5605] bridge_slave_1: entered promiscuous mode [ 74.458259][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.477670][ T5444] veth0_vlan: entered promiscuous mode [ 74.506613][ T5712] netlink: '+}[@': attribute type 39 has an invalid length. [ 74.517078][ T5444] veth1_vlan: entered promiscuous mode [ 74.529351][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.555310][ T5444] veth0_macvtap: entered promiscuous mode [ 74.567187][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 74.567200][ T29] audit: type=1400 audit(1749232362.213:1411): avc: denied { write } for pid=5735 comm="syz.1.607" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 74.619252][ T5444] veth1_macvtap: entered promiscuous mode [ 74.638243][ T31] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.666461][ T5605] team0: Port device team_slave_0 added [ 74.674797][ T5657] chnl_net:caif_netlink_parms(): no params data found [ 74.686817][ T5605] team0: Port device team_slave_1 added [ 74.714721][ T5444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.728917][ T31] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.774015][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.781042][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.807100][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.827363][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.834454][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.860520][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.879871][ T5444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.900337][ T31] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.939963][ T29] audit: type=1326 audit(1749232362.583:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.1.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f389e929 code=0x7ffc0000 [ 74.964765][ T5444] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.973782][ T5444] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.982740][ T5444] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.991514][ T5444] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.034160][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.043204][ T29] audit: type=1326 audit(1749232362.653:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.1.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85f389e929 code=0x7ffc0000 [ 75.066634][ T29] audit: type=1326 audit(1749232362.653:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.1.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f389e929 code=0x7ffc0000 [ 75.090161][ T29] audit: type=1326 audit(1749232362.653:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.1.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f85f389e929 code=0x7ffc0000 [ 75.113694][ T29] audit: type=1326 audit(1749232362.663:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.1.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f389e929 code=0x7ffc0000 [ 75.137192][ T29] audit: type=1326 audit(1749232362.673:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.1.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f389e929 code=0x7ffc0000 [ 75.169524][ T5657] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.176655][ T5657] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.183894][ T5657] bridge_slave_0: entered allmulticast mode [ 75.190479][ T5657] bridge_slave_0: entered promiscuous mode [ 75.211310][ T31] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.238236][ T5605] hsr_slave_0: entered promiscuous mode [ 75.244458][ T5605] hsr_slave_1: entered promiscuous mode [ 75.250446][ T5605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.258082][ T5605] Cannot create hsr debugfs directory [ 75.264188][ T5657] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.271369][ T5657] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.279111][ T5657] bridge_slave_1: entered allmulticast mode [ 75.285807][ T5657] bridge_slave_1: entered promiscuous mode [ 75.313895][ T29] audit: type=1326 audit(1749232362.953:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f389e929 code=0x7ffc0000 [ 75.337419][ T29] audit: type=1326 audit(1749232362.953:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f85f389e929 code=0x7ffc0000 [ 75.360981][ T29] audit: type=1326 audit(1749232362.953:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.1.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f389e929 code=0x7ff00000 [ 75.406753][ T5657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.434635][ T5657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.515175][ T5657] team0: Port device team_slave_0 added [ 75.521888][ T5657] team0: Port device team_slave_1 added [ 75.624479][ T31] bridge_slave_1: left allmulticast mode [ 75.630176][ T31] bridge_slave_1: left promiscuous mode [ 75.636004][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.661165][ T31] bridge_slave_0: left allmulticast mode [ 75.666937][ T31] bridge_slave_0: left promiscuous mode [ 75.672620][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.692838][ T3613] udevd[3613]: symlink '../../loop0' '/dev/disk/by-diskseq/200.tmp-b7:0' failed: Read-only file system [ 75.847335][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.859185][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.869105][ T31] bond0 (unregistering): Released all slaves [ 75.912251][ T5657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.919273][ T5657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.945269][ T5657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.009857][ T5657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.016967][ T5657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.043225][ T5657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.070981][ T31] hsr_slave_0: left promiscuous mode [ 76.079846][ T31] hsr_slave_1: left promiscuous mode [ 76.092085][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.099771][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.107599][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.115092][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.126097][ T31] veth1_macvtap: left promiscuous mode [ 76.131643][ T31] veth0_macvtap: left promiscuous mode [ 76.137224][ T31] veth1_vlan: left promiscuous mode [ 76.142550][ T31] veth0_vlan: left promiscuous mode [ 76.227797][ T31] team0 (unregistering): Port device team_slave_1 removed [ 76.247909][ T31] team0 (unregistering): Port device team_slave_0 removed [ 76.335740][ T5657] hsr_slave_0: entered promiscuous mode [ 76.349650][ T3613] udevd[3613]: symlink '../../loop0' '/dev/disk/by-diskseq/200.tmp-b7:0' failed: Read-only file system [ 76.354468][ T5657] hsr_slave_1: entered promiscuous mode [ 76.386756][ T5657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.394181][ T3613] udevd[3613]: symlink '../../loop0' '/dev/disk/by-diskseq/200.tmp-b7:0' failed: Read-only file system [ 76.411283][ T5657] Cannot create hsr debugfs directory [ 76.437739][ T5814] loop0: detected capacity change from 0 to 1024 [ 76.478360][ T3613] udevd[3613]: symlink '../../loop0' '/dev/disk/by-diskseq/201.tmp-b7:0' failed: Read-only file system [ 76.482745][ T5814] EXT4-fs: Ignoring removed bh option [ 76.505056][ T5605] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 76.526471][ T3613] udevd[3613]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 76.549118][ T5605] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 76.559337][ T5605] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 76.561999][ T3613] udevd[3613]: symlink '../../loop0' '/dev/disk/by-diskseq/201.tmp-b7:0' failed: Read-only file system [ 76.582093][ T3613] udevd[3613]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 76.586230][ T5605] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 76.596724][ T5814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.687495][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.739317][ T3613] udevd[3613]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 76.765834][ T3613] udevd[3613]: symlink '../../loop0' '/dev/disk/by-diskseq/201.tmp-b7:0' failed: Read-only file system [ 76.803298][ T3613] udevd[3613]: symlink '../../loop0' '/dev/disk/by-diskseq/201.tmp-b7:0' failed: Read-only file system [ 76.821106][ T5657] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 76.849451][ T5657] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 76.872061][ T5657] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 76.915612][ T5657] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 76.978050][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.984459][ T5863] loop0: detected capacity change from 0 to 512 [ 77.029067][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.039148][ T5863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.096471][ T2165] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.103563][ T2165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.112235][ T5863] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.124894][ T2165] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.131955][ T2165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.171316][ T5605] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.181724][ T5605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.203809][ T5863] loop0: detected capacity change from 512 to 258 [ 77.212599][ T5863] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #18: comm syz.0.625: corrupted xattr block 20: invalid header [ 77.227507][ T5863] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.625: bg 0: block 16352: padding at end of block bitmap is not set [ 77.247413][ T5657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.282721][ T3320] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /128/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=2048 fake=0 [ 77.287513][ T5657] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.320322][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.327427][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.377953][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.388250][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.400111][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.407221][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.435692][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.462171][ T5657] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.472588][ T5657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.515591][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.587732][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.633582][ T5657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.667525][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.721516][ T5605] veth0_vlan: entered promiscuous mode [ 77.788404][ T5605] veth1_vlan: entered promiscuous mode [ 77.816290][ T12] bridge_slave_1: left allmulticast mode [ 77.821975][ T12] bridge_slave_1: left promiscuous mode [ 77.827684][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.854628][ T12] bridge_slave_0: left allmulticast mode [ 77.860331][ T12] bridge_slave_0: left promiscuous mode [ 77.866123][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.988006][ T12] bond1 (unregistering): (slave geneve2): Releasing active interface [ 78.037153][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.047098][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.061934][ T12] bond0 (unregistering): Released all slaves [ 78.075836][ T12] bond1 (unregistering): Released all slaves [ 78.117190][ T5605] veth0_macvtap: entered promiscuous mode [ 78.145940][ T12] hsr_slave_0: left promiscuous mode [ 78.151834][ T12] hsr_slave_1: left promiscuous mode [ 78.159097][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.166824][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.183619][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.191130][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.203304][ T12] veth1_macvtap: left promiscuous mode [ 78.209918][ T12] veth0_macvtap: left promiscuous mode [ 78.219059][ T12] veth1_vlan: left promiscuous mode [ 78.224565][ T12] veth0_vlan: left promiscuous mode [ 78.295381][ T12] team0 (unregistering): Port device team_slave_1 removed [ 78.305182][ T12] team0 (unregistering): Port device team_slave_0 removed [ 78.339668][ T5605] veth1_macvtap: entered promiscuous mode [ 78.375525][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.416773][ T5657] veth0_vlan: entered promiscuous mode [ 78.430599][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.447361][ T5657] veth1_vlan: entered promiscuous mode [ 78.461414][ T5605] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.470283][ T5605] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.479032][ T5605] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.487914][ T5605] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.522931][ T5657] veth0_macvtap: entered promiscuous mode [ 78.559611][ T5657] veth1_macvtap: entered promiscuous mode [ 78.637291][ T5657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.672031][ T5657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.690693][ T5657] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.699643][ T5657] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.708586][ T5657] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.717443][ T5657] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.765307][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 78.908824][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.916187][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.927791][ T5928] bridge_slave_0: entered allmulticast mode [ 78.934413][ T5928] bridge_slave_0: entered promiscuous mode [ 78.942022][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.949199][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.957019][ T5928] bridge_slave_1: entered allmulticast mode [ 78.963975][ T5928] bridge_slave_1: entered promiscuous mode [ 79.001407][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.021212][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.115005][ T5928] team0: Port device team_slave_0 added [ 79.122532][ T5928] team0: Port device team_slave_1 added [ 79.185686][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.192693][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.218805][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.268646][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.275681][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.301776][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.495654][ T5928] hsr_slave_0: entered promiscuous mode [ 79.505356][ T5928] hsr_slave_1: entered promiscuous mode [ 79.512112][ T5928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.519988][ T5928] Cannot create hsr debugfs directory [ 79.639802][ T6055] loop8: detected capacity change from 0 to 1024 [ 79.653467][ T6055] EXT4-fs: Ignoring removed bh option [ 79.668666][ T6055] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.776076][ T5605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.793355][ T6066] loop7: detected capacity change from 0 to 1024 [ 79.831885][ T6066] EXT4-fs: Ignoring removed nobh option [ 79.837653][ T6066] EXT4-fs: Ignoring removed bh option [ 79.878953][ T6066] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.902819][ T29] kauditd_printk_skb: 9440 callbacks suppressed [ 79.902836][ T29] audit: type=1400 audit(1749232367.543:10861): avc: denied { setattr } for pid=6065 comm="syz.7.645" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.064945][ T29] audit: type=1400 audit(1749232367.703:10862): avc: denied { write } for pid=6065 comm="syz.7.645" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 80.088047][ T29] audit: type=1107 audit(1749232367.703:10863): pid=6065 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 80.101564][ T29] audit: type=1326 audit(1749232367.703:10864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.7.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f081ce929 code=0x7ffc0000 [ 80.124988][ T29] audit: type=1326 audit(1749232367.703:10865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.7.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f081ce929 code=0x7ffc0000 [ 80.148880][ T29] audit: type=1326 audit(1749232367.703:10866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.7.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f081ce929 code=0x7ffc0000 [ 80.172320][ T29] audit: type=1326 audit(1749232367.703:10867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.7.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f081ce929 code=0x7ffc0000 [ 80.233901][ T29] audit: type=1326 audit(1749232367.713:10868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.7.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f081ce929 code=0x7ffc0000 [ 80.257515][ T29] audit: type=1326 audit(1749232367.713:10869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.7.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f081ce929 code=0x7ffc0000 [ 80.281121][ T29] audit: type=1326 audit(1749232367.713:10870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.7.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f081ce929 code=0x7ffc0000 [ 80.362577][ T5928] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.375694][ T5928] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.385998][ T5928] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.406415][ T5928] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.447424][ T5444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.471465][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.483517][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.493564][ T6109] loop8: detected capacity change from 0 to 1024 [ 80.528948][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.536068][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.554754][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.561766][ T6109] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.574331][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.600509][ T5605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.733907][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.792120][ T3613] udevd[3613]: symlink '../../loop8' '/dev/disk/by-diskseq/209.tmp-b7:8' failed: Read-only file system [ 80.860828][ T3613] udevd[3613]: symlink '../../loop8' '/dev/disk/by-diskseq/209.tmp-b7:8' failed: Read-only file system [ 80.953152][ T3613] udevd[3613]: symlink '../../loop8' '/dev/disk/by-diskseq/209.tmp-b7:8' failed: Read-only file system [ 81.009070][ T3613] udevd[3613]: symlink '../../loop8' '/dev/disk/by-diskseq/209.tmp-b7:8' failed: Read-only file system [ 81.022393][ T6173] FAULT_INJECTION: forcing a failure. [ 81.022393][ T6173] name failslab, interval 1, probability 0, space 0, times 0 [ 81.035392][ T6173] CPU: 0 UID: 0 PID: 6173 Comm: syz.8.668 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 81.035440][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.035454][ T6173] Call Trace: [ 81.035460][ T6173] [ 81.035466][ T6173] __dump_stack+0x1d/0x30 [ 81.035498][ T6173] dump_stack_lvl+0xe8/0x140 [ 81.035521][ T6173] dump_stack+0x15/0x1b [ 81.035550][ T6173] should_fail_ex+0x265/0x280 [ 81.035575][ T6173] ? sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 81.035617][ T6173] should_failslab+0x8c/0xb0 [ 81.035664][ T6173] __kmalloc_cache_noprof+0x4c/0x320 [ 81.035704][ T6173] sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 81.035746][ T6173] sctp_association_new+0xde5/0x1200 [ 81.035783][ T6173] sctp_connect_new_asoc+0x1a8/0x3a0 [ 81.035832][ T6173] sctp_sendmsg+0xf10/0x18d0 [ 81.035856][ T6173] ? selinux_socket_sendmsg+0x91/0x1b0 [ 81.035887][ T6173] ? __pfx_sctp_sendmsg+0x10/0x10 [ 81.035916][ T6173] inet_sendmsg+0xc2/0xd0 [ 81.036022][ T6173] __sock_sendmsg+0x102/0x180 [ 81.036049][ T6173] __sys_sendto+0x268/0x330 [ 81.036119][ T6173] __x64_sys_sendto+0x76/0x90 [ 81.036215][ T6173] x64_sys_call+0x2eb6/0x2fb0 [ 81.036235][ T6173] do_syscall_64+0xd2/0x200 [ 81.036262][ T6173] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.036290][ T6173] ? clear_bhb_loop+0x40/0x90 [ 81.036317][ T6173] ? clear_bhb_loop+0x40/0x90 [ 81.036414][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.036435][ T6173] RIP: 0033:0x7f27c96fe929 [ 81.036450][ T6173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.036478][ T6173] RSP: 002b:00007f27c7d67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 81.036542][ T6173] RAX: ffffffffffffffda RBX: 00007f27c9925fa0 RCX: 00007f27c96fe929 [ 81.036558][ T6173] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 81.036573][ T6173] RBP: 00007f27c7d67090 R08: 0000200000000140 R09: 000000000000001c [ 81.036585][ T6173] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 81.036669][ T6173] R13: 0000000000000000 R14: 00007f27c9925fa0 R15: 00007ffe66c71018 [ 81.036693][ T6173] [ 81.041885][ T5928] veth0_vlan: entered promiscuous mode [ 81.275484][ T6179] loop8: detected capacity change from 0 to 1024 [ 81.291230][ T3613] udevd[3613]: symlink '../../loop8' '/dev/disk/by-diskseq/210.tmp-b7:8' failed: Read-only file system [ 81.303314][ T6179] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 81.309895][ T5928] veth1_vlan: entered promiscuous mode [ 81.314403][ T6179] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 81.335447][ T6179] JBD2: no valid journal superblock found [ 81.337317][ T3613] udevd[3613]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 81.341211][ T6179] EXT4-fs (loop8): Could not load journal inode [ 81.367066][ T3613] udevd[3613]: symlink '../../loop8' '/dev/disk/by-diskseq/210.tmp-b7:8' failed: Read-only file system [ 81.374746][ T5928] veth0_macvtap: entered promiscuous mode [ 81.395064][ T5928] veth1_macvtap: entered promiscuous mode [ 81.422707][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.432302][ T3613] udevd[3613]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 81.442493][ T6187] loop7: detected capacity change from 0 to 1024 [ 81.445312][ T3309] udevd[3309]: symlink '../../loop7' '/dev/disk/by-diskseq/208.tmp-b7:7' failed: Read-only file system [ 81.454468][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.473419][ T6187] EXT4-fs: Ignoring removed bh option [ 81.496995][ T5928] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.505919][ T5928] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.514661][ T5928] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.523367][ T5928] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.528312][ T3613] udevd[3613]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 81.555989][ T6187] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.636579][ T6202] loop8: detected capacity change from 0 to 512 [ 81.652821][ T6202] EXT4-fs: Ignoring removed orlov option [ 81.704019][ T6202] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 81.706384][ T5444] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.736758][ T6202] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 81.756875][ T6202] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #15: comm syz.8.678: corrupted in-inode xattr: e_value size too large [ 81.771840][ T6202] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.678: couldn't read orphan inode 15 (err -117) [ 81.792535][ T6217] loop4: detected capacity change from 0 to 1024 [ 81.800505][ T6202] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.808153][ T6217] EXT4-fs: Ignoring removed bh option [ 81.849653][ T6217] EXT4-fs: inline encryption not supported [ 81.870578][ T6217] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.885449][ T6217] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 81.897231][ T6217] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.682: lblock 2 mapped to illegal pblock 2 (length 1) [ 81.924546][ T6217] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.682: lblock 0 mapped to illegal pblock 48 (length 1) [ 81.956228][ T6217] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.682: Failed to acquire dquot type 0 [ 81.975631][ T6217] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 81.989873][ T6217] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.682: mark_inode_dirty error [ 82.002792][ T6217] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 82.013392][ T6217] EXT4-fs (loop4): 1 orphan inode deleted [ 82.020849][ T6217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.034080][ T37] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 82.078392][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 82.101131][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.124242][ T5928] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 82.173867][ T5928] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 82.213847][ T5928] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 82.382400][ T5605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.496077][ T6286] netlink: 24 bytes leftover after parsing attributes in process `syz.8.691'. [ 82.596170][ T6298] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 82.604628][ T6298] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 82.632246][ T6298] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 82.775875][ T6320] loop8: detected capacity change from 0 to 512 [ 82.792724][ T6320] EXT4-fs: Ignoring removed orlov option [ 82.804753][ T6320] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 82.815617][ T6320] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 82.837952][ T6320] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #15: comm syz.8.701: corrupted in-inode xattr: e_value size too large [ 82.885704][ T6329] netlink: 24 bytes leftover after parsing attributes in process `syz.9.704'. [ 82.898394][ T6320] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.701: couldn't read orphan inode 15 (err -117) [ 82.919921][ T6320] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.215400][ T6370] netlink: 76 bytes leftover after parsing attributes in process `syz.7.713'. [ 83.308184][ T6384] loop7: detected capacity change from 0 to 512 [ 83.336395][ T6384] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.360081][ T5605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.394028][ T6384] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.472006][ T5444] EXT4-fs error (device loop7): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 83.517436][ T5444] EXT4-fs error (device loop7): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 83.551584][ T6398] ref_ctr increment failed for inode: 0x8f offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888103f01140 [ 83.626026][ T6034] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.820151][ T6411] loop4: detected capacity change from 0 to 1024 [ 83.850808][ T6411] EXT4-fs: Ignoring removed bh option [ 83.875409][ T6411] EXT4-fs: inline encryption not supported [ 83.897122][ T6411] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.955882][ T6411] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 83.982060][ T6411] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.720: lblock 2 mapped to illegal pblock 2 (length 1) [ 84.041475][ T6411] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.720: lblock 0 mapped to illegal pblock 48 (length 1) [ 84.056881][ T6411] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.720: Failed to acquire dquot type 0 [ 84.069738][ T6411] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 84.082656][ T6411] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.720: mark_inode_dirty error [ 84.096095][ T6411] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 84.106888][ T6411] EXT4-fs (loop4): 1 orphan inode deleted [ 84.113526][ T6411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.126437][ T37] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 84.154633][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 84.166577][ T6428] loop9: detected capacity change from 0 to 1024 [ 84.173733][ T6428] EXT4-fs: Ignoring removed bh option [ 84.182518][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.200815][ T6428] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.241180][ T5928] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 84.285115][ T5657] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.314067][ T5928] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 84.328951][ T5928] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 84.425173][ T6447] loop4: detected capacity change from 0 to 1024 [ 84.452758][ T6447] EXT4-fs: Ignoring removed nobh option [ 84.458414][ T6447] EXT4-fs: Ignoring removed bh option [ 84.512628][ T6447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.555685][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.576383][ T6465] loop8: detected capacity change from 0 to 512 [ 84.599848][ T6465] futex_wake_op: syz.8.731 tries to shift op by -1; fix this program [ 84.615248][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.626139][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.676712][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.763407][ T6488] loop4: detected capacity change from 0 to 512 [ 84.778418][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.830956][ T6488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.878180][ T6488] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.943874][ T6488] loop4: detected capacity change from 512 to 258 [ 84.954748][ T12] bridge_slave_1: left allmulticast mode [ 84.960440][ T12] bridge_slave_1: left promiscuous mode [ 84.966387][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.982833][ T6488] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #18: comm syz.4.737: corrupted xattr block 20: invalid header [ 85.016571][ T12] bridge_slave_0: left allmulticast mode [ 85.022274][ T12] bridge_slave_0: left promiscuous mode [ 85.028066][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.049939][ T6488] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.737: bg 0: block 16352: padding at end of block bitmap is not set [ 85.092422][ T6520] FAULT_INJECTION: forcing a failure. [ 85.092422][ T6520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.105562][ T6520] CPU: 0 UID: 0 PID: 6520 Comm: syz.9.742 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 85.105735][ T6520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.105751][ T6520] Call Trace: [ 85.105759][ T6520] [ 85.105768][ T6520] __dump_stack+0x1d/0x30 [ 85.105794][ T6520] dump_stack_lvl+0xe8/0x140 [ 85.105818][ T6520] dump_stack+0x15/0x1b [ 85.105839][ T6520] should_fail_ex+0x265/0x280 [ 85.105888][ T6520] should_fail+0xb/0x20 [ 85.105951][ T6520] should_fail_usercopy+0x1a/0x20 [ 85.105977][ T6520] _copy_to_user+0x20/0xa0 [ 85.106008][ T6520] __x64_sys_rt_sigpending+0x114/0x180 [ 85.106038][ T6520] x64_sys_call+0x2705/0x2fb0 [ 85.106079][ T6520] do_syscall_64+0xd2/0x200 [ 85.106137][ T6520] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 85.106249][ T6520] ? clear_bhb_loop+0x40/0x90 [ 85.106276][ T6520] ? clear_bhb_loop+0x40/0x90 [ 85.106304][ T6520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.106331][ T6520] RIP: 0033:0x7fac6a75e929 [ 85.106426][ T6520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.106450][ T6520] RSP: 002b:00007fac68dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000007f [ 85.106516][ T6520] RAX: ffffffffffffffda RBX: 00007fac6a985fa0 RCX: 00007fac6a75e929 [ 85.106532][ T6520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.106548][ T6520] RBP: 00007fac68dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.106563][ T6520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.106594][ T6520] R13: 0000000000000000 R14: 00007fac6a985fa0 R15: 00007fff6ad90528 [ 85.106652][ T6520] [ 85.291292][ T5928] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /12/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=2048 fake=0 [ 85.372838][ T5928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.411029][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.427231][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.439148][ T12] bond0 (unregistering): Released all slaves [ 85.502458][ T12] hsr_slave_0: left promiscuous mode [ 85.508327][ T12] hsr_slave_1: left promiscuous mode [ 85.509444][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 85.509461][ T29] audit: type=1326 audit(1749232373.163:11073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.9.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a75e929 code=0x7ffc0000 [ 85.524029][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.550903][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.555175][ T29] audit: type=1326 audit(1749232373.193:11074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.9.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6a75e929 code=0x7ffc0000 [ 85.581637][ T29] audit: type=1326 audit(1749232373.193:11075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.9.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a75e929 code=0x7ffc0000 [ 85.605143][ T29] audit: type=1326 audit(1749232373.193:11076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.9.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6a75e929 code=0x7ffc0000 [ 85.628835][ T29] audit: type=1326 audit(1749232373.193:11077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.9.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a75e929 code=0x7ffc0000 [ 85.652298][ T29] audit: type=1326 audit(1749232373.193:11078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.9.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a75e929 code=0x7ffc0000 [ 85.675724][ T29] audit: type=1326 audit(1749232373.193:11079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.9.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6a75e929 code=0x7ffc0000 [ 85.699242][ T29] audit: type=1326 audit(1749232373.193:11080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.9.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a75e929 code=0x7ffc0000 [ 85.722736][ T29] audit: type=1326 audit(1749232373.193:11081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.9.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a75e929 code=0x7ffc0000 [ 85.746209][ T29] audit: type=1326 audit(1749232373.193:11082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.9.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6a75e929 code=0x7ffc0000 [ 85.770097][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.777670][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.793141][ T6551] loop8: detected capacity change from 0 to 1024 [ 85.793184][ T12] veth1_macvtap: left promiscuous mode [ 85.800161][ T6551] EXT4-fs: Ignoring removed bh option [ 85.811432][ T12] veth0_macvtap: left promiscuous mode [ 85.817258][ T12] veth1_vlan: left promiscuous mode [ 85.822624][ T12] veth0_vlan: left promiscuous mode [ 85.829457][ T6551] EXT4-fs: inline encryption not supported [ 85.836331][ T6551] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.868603][ T6551] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 85.880453][ T3309] udevd[3309]: symlink '../../loop9' '/dev/disk/by-diskseq/224.tmp-b7:9' failed: Read-only file system [ 85.897640][ T6551] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 2: comm syz.8.747: lblock 2 mapped to illegal pblock 2 (length 1) [ 85.919850][ T6551] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 48: comm syz.8.747: lblock 0 mapped to illegal pblock 48 (length 1) [ 85.920464][ T3613] udevd[3613]: symlink '../../loop8' '/dev/disk/by-diskseq/231.tmp-b7:8' failed: Read-only file system [ 85.947027][ T6551] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.747: Failed to acquire dquot type 0 [ 85.965263][ T6551] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 85.986174][ T3613] udevd[3613]: symlink '../../loop8' '/dev/disk/by-diskseq/231.tmp-b7:8' failed: Read-only file system [ 85.986831][ T6551] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.747: mark_inode_dirty error [ 86.011519][ T6551] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 86.021859][ T6551] EXT4-fs (loop8): 1 orphan inode deleted [ 86.028440][ T6551] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.041484][ T51] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 86.056158][ T51] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 86.067942][ T12] team0 (unregistering): Port device team_slave_1 removed [ 86.079166][ T12] team0 (unregistering): Port device team_slave_0 removed [ 86.101226][ T5605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.111865][ T5605] EXT4-fs error (device loop8): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 86.116976][ T3613] udevd[3613]: symlink '../../loop9' '/dev/disk/by-diskseq/224.tmp-b7:9' failed: Read-only file system [ 86.143009][ T5605] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 86.153969][ T5605] EXT4-fs error (device loop8): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 86.297823][ T3613] udevd[3613]: symlink '../../loop8' '/dev/disk/by-diskseq/231.tmp-b7:8' failed: Read-only file system [ 86.318498][ T6466] chnl_net:caif_netlink_parms(): no params data found [ 86.360375][ T3613] udevd[3613]: symlink '../../loop8' '/dev/disk/by-diskseq/231.tmp-b7:8' failed: Read-only file system [ 86.407827][ T6584] loop8: detected capacity change from 0 to 1024 [ 86.415147][ T6584] EXT4-fs: Ignoring removed bh option [ 86.432691][ T3613] udevd[3613]: symlink '../../loop8' '/dev/disk/by-diskseq/232.tmp-b7:8' failed: Read-only file system [ 86.470158][ T3613] udevd[3613]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 86.531394][ T3613] udevd[3613]: symlink '../../loop8' '/dev/disk/by-diskseq/233.tmp-b7:8' failed: Read-only file system [ 86.557486][ T3613] udevd[3613]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 86.578931][ T6584] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.621420][ T6466] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.628608][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.636533][ T6466] bridge_slave_0: entered allmulticast mode [ 86.651569][ T5605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.662951][ T6466] bridge_slave_0: entered promiscuous mode [ 86.681453][ T6466] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.688579][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.719640][ T6466] bridge_slave_1: entered allmulticast mode [ 86.736365][ T6466] bridge_slave_1: entered promiscuous mode [ 87.034381][ T6466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.089472][ T6466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.138149][ T6556] chnl_net:caif_netlink_parms(): no params data found [ 87.151346][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.166380][ T6616] lo speed is unknown, defaulting to 1000 [ 87.189264][ T6466] team0: Port device team_slave_0 added [ 87.212917][ T6616] lo speed is unknown, defaulting to 1000 [ 87.221356][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.239521][ T6466] team0: Port device team_slave_1 added [ 87.353524][ T6616] lo speed is unknown, defaulting to 1000 [ 87.362877][ T6616] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 87.373282][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.389526][ T6616] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 87.412101][ T6466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.419146][ T6466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.445206][ T6466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.464042][ T6645] FAULT_INJECTION: forcing a failure. [ 87.464042][ T6645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.477198][ T6645] CPU: 0 UID: 0 PID: 6645 Comm: syz.8.760 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 87.477279][ T6645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.477295][ T6645] Call Trace: [ 87.477303][ T6645] [ 87.477312][ T6645] __dump_stack+0x1d/0x30 [ 87.477393][ T6645] dump_stack_lvl+0xe8/0x140 [ 87.477413][ T6645] dump_stack+0x15/0x1b [ 87.477435][ T6645] should_fail_ex+0x265/0x280 [ 87.477490][ T6645] should_fail+0xb/0x20 [ 87.477506][ T6645] should_fail_usercopy+0x1a/0x20 [ 87.477555][ T6645] _copy_from_user+0x1c/0xb0 [ 87.477584][ T6645] ___sys_sendmsg+0xc1/0x1d0 [ 87.477638][ T6645] __x64_sys_sendmsg+0xd4/0x160 [ 87.477709][ T6645] x64_sys_call+0x2999/0x2fb0 [ 87.477730][ T6645] do_syscall_64+0xd2/0x200 [ 87.477785][ T6645] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 87.477896][ T6645] ? clear_bhb_loop+0x40/0x90 [ 87.477934][ T6645] ? clear_bhb_loop+0x40/0x90 [ 87.477988][ T6645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.478014][ T6645] RIP: 0033:0x7f27c96fe929 [ 87.478034][ T6645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.478087][ T6645] RSP: 002b:00007f27c7d46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.478105][ T6645] RAX: ffffffffffffffda RBX: 00007f27c9926080 RCX: 00007f27c96fe929 [ 87.478120][ T6645] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 87.478136][ T6645] RBP: 00007f27c7d46090 R08: 0000000000000000 R09: 0000000000000000 [ 87.478182][ T6645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.478198][ T6645] R13: 0000000000000000 R14: 00007f27c9926080 R15: 00007ffe66c71018 [ 87.478222][ T6645] [ 87.547817][ T6616] lo speed is unknown, defaulting to 1000 [ 87.668965][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.680844][ T6466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.687866][ T6466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.713973][ T6466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.737340][ T6616] lo speed is unknown, defaulting to 1000 [ 87.757807][ T6616] lo speed is unknown, defaulting to 1000 [ 87.763727][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.770819][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.783232][ T6556] bridge_slave_0: entered allmulticast mode [ 87.794416][ T6556] bridge_slave_0: entered promiscuous mode [ 87.819893][ T6616] lo speed is unknown, defaulting to 1000 [ 87.820478][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.832794][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.844916][ T6556] bridge_slave_1: entered allmulticast mode [ 87.851469][ T6556] bridge_slave_1: entered promiscuous mode [ 87.860191][ T6466] hsr_slave_0: entered promiscuous mode [ 87.866509][ T6466] hsr_slave_1: entered promiscuous mode [ 87.872623][ T6642] lo speed is unknown, defaulting to 1000 [ 87.903036][ T6616] lo speed is unknown, defaulting to 1000 [ 87.912859][ T6556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.939897][ T6616] lo speed is unknown, defaulting to 1000 [ 87.947229][ T6556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.977777][ T6616] lo speed is unknown, defaulting to 1000 [ 87.978846][ T6556] team0: Port device team_slave_0 added [ 88.010992][ T6556] team0: Port device team_slave_1 added [ 88.046854][ T12] bridge_slave_1: left allmulticast mode [ 88.052617][ T12] bridge_slave_1: left promiscuous mode [ 88.058370][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.107417][ T12] bridge_slave_0: left allmulticast mode [ 88.113131][ T12] bridge_slave_0: left promiscuous mode [ 88.118954][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.139616][ T6699] loop9: detected capacity change from 0 to 128 [ 88.206908][ T6699] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 88.279857][ T6699] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.327406][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.354117][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.354637][ T5657] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.375117][ T12] bond0 (unregistering): Released all slaves [ 88.426020][ T6705] loop9: detected capacity change from 0 to 2048 [ 88.435346][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.442393][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.468493][ T6556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.507930][ T6705] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.534110][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.541260][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.567787][ T6556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.580308][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.8.768'. [ 88.593943][ T12] hsr_slave_0: left promiscuous mode [ 88.599793][ T12] hsr_slave_1: left promiscuous mode [ 88.605710][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.613128][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.620897][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.621326][ T5657] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.628347][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.649473][ T12] veth1_macvtap: left promiscuous mode [ 88.655043][ T12] veth0_macvtap: left promiscuous mode [ 88.660677][ T12] veth1_vlan: left promiscuous mode [ 88.666062][ T12] veth0_vlan: left promiscuous mode [ 88.678819][ T6715] loop9: detected capacity change from 0 to 512 [ 88.706636][ T6715] EXT4-fs: Ignoring removed orlov option [ 88.716472][ T6715] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 88.728955][ T6715] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 88.737436][ T6715] EXT4-fs error (device loop9): ext4_iget_extra_inode:5035: inode #15: comm syz.9.769: corrupted in-inode xattr: e_value size too large [ 88.751715][ T6715] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.769: couldn't read orphan inode 15 (err -117) [ 88.764983][ T6715] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.777410][ T12] team0 (unregistering): Port device team_slave_1 removed [ 88.788508][ T12] team0 (unregistering): Port device team_slave_0 removed [ 88.798007][ T5657] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.870586][ T6722] loop9: detected capacity change from 0 to 256 [ 88.890467][ T6556] hsr_slave_0: entered promiscuous mode [ 88.897846][ T6556] hsr_slave_1: entered promiscuous mode [ 88.903934][ T6556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.911537][ T6556] Cannot create hsr debugfs directory [ 89.044276][ T6746] netlink: 24 bytes leftover after parsing attributes in process `syz.8.775'. [ 89.097650][ T6750] loop9: detected capacity change from 0 to 1024 [ 89.105010][ T6746] geneve0: entered allmulticast mode [ 89.107382][ T6750] EXT4-fs: Ignoring removed bh option [ 89.115261][ T6746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6746 comm=syz.8.775 [ 89.140746][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.8.775'. [ 89.149782][ T6746] netlink: 28 bytes leftover after parsing attributes in process `syz.8.775'. [ 89.158917][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.8.775'. [ 89.168368][ T6746] netlink: 28 bytes leftover after parsing attributes in process `syz.8.775'. [ 89.177307][ T6746] netlink: 'syz.8.775': attribute type 6 has an invalid length. [ 89.188232][ T6750] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.308323][ T5657] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.315513][ T6466] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.333385][ T6466] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.345289][ T6466] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.389301][ T6466] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.744823][ T6466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.857305][ T6466] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.944945][ T6556] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.962474][ T6556] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.975548][ T6794] netlink: 24 bytes leftover after parsing attributes in process `syz.9.780'. [ 89.975907][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.991561][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.000979][ T6556] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.018297][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.025443][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.043062][ T6556] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.186062][ T6556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.207754][ T6556] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.224081][ T2165] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.231313][ T2165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.249246][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.253871][ T6815] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 90.256349][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.262804][ T6815] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 90.277630][ T6815] vhci_hcd vhci_hcd.0: Device attached [ 90.288428][ T6556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.298860][ T6556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.340613][ T6466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.358138][ T6824] dvmrp1: entered allmulticast mode [ 90.404885][ T6816] vhci_hcd: connection closed [ 90.405051][ T12] vhci_hcd: stop threads [ 90.414206][ T12] vhci_hcd: release socket [ 90.418643][ T12] vhci_hcd: disconnect device [ 90.438463][ T6828] loop8: detected capacity change from 0 to 2048 [ 90.447337][ T6556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.464854][ T1041] vhci_hcd: vhci_device speed not set [ 90.496439][ T6828] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.558274][ T5605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.608647][ T6556] veth0_vlan: entered promiscuous mode [ 90.619993][ T6556] veth1_vlan: entered promiscuous mode [ 90.640345][ T6556] veth0_macvtap: entered promiscuous mode [ 90.672875][ T6556] veth1_macvtap: entered promiscuous mode [ 90.696950][ T6466] veth0_vlan: entered promiscuous mode [ 90.707807][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.719541][ T6466] veth1_vlan: entered promiscuous mode [ 90.736810][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.746916][ T6466] veth0_macvtap: entered promiscuous mode [ 90.765211][ T6556] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.774192][ T6556] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.783006][ T6556] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.791868][ T6556] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.816273][ T6466] veth1_macvtap: entered promiscuous mode [ 90.854709][ T6466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.867037][ T6868] FAULT_INJECTION: forcing a failure. [ 90.867037][ T6868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.880329][ T6868] CPU: 0 UID: 0 PID: 6868 Comm: syz.8.790 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 90.880366][ T6868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.880382][ T6868] Call Trace: [ 90.880389][ T6868] [ 90.880397][ T6868] __dump_stack+0x1d/0x30 [ 90.880423][ T6868] dump_stack_lvl+0xe8/0x140 [ 90.880454][ T6868] dump_stack+0x15/0x1b [ 90.880474][ T6868] should_fail_ex+0x265/0x280 [ 90.880500][ T6868] should_fail+0xb/0x20 [ 90.880521][ T6868] should_fail_usercopy+0x1a/0x20 [ 90.880548][ T6868] _copy_to_user+0x20/0xa0 [ 90.880587][ T6868] simple_read_from_buffer+0xb5/0x130 [ 90.880620][ T6868] proc_fail_nth_read+0x100/0x140 [ 90.880642][ T6868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.880667][ T6868] vfs_read+0x19d/0x6f0 [ 90.880747][ T6868] ? __rcu_read_unlock+0x4f/0x70 [ 90.880770][ T6868] ? __rcu_read_unlock+0x4f/0x70 [ 90.880875][ T6868] ? __fget_files+0x184/0x1c0 [ 90.880907][ T6868] ksys_read+0xda/0x1a0 [ 90.880931][ T6868] __x64_sys_read+0x40/0x50 [ 90.880950][ T6868] x64_sys_call+0x2d77/0x2fb0 [ 90.881029][ T6868] do_syscall_64+0xd2/0x200 [ 90.881090][ T6868] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 90.881120][ T6868] ? clear_bhb_loop+0x40/0x90 [ 90.881146][ T6868] ? clear_bhb_loop+0x40/0x90 [ 90.881237][ T6868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.881263][ T6868] RIP: 0033:0x7f27c96fd33c [ 90.881282][ T6868] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 90.881303][ T6868] RSP: 002b:00007f27c7d67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.881326][ T6868] RAX: ffffffffffffffda RBX: 00007f27c9925fa0 RCX: 00007f27c96fd33c [ 90.881342][ T6868] RDX: 000000000000000f RSI: 00007f27c7d670a0 RDI: 0000000000000004 [ 90.881357][ T6868] RBP: 00007f27c7d67090 R08: 0000000000000000 R09: 0000000000000000 [ 90.881393][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.881409][ T6868] R13: 0000000000000000 R14: 00007f27c9925fa0 R15: 00007ffe66c71018 [ 90.881439][ T6868] [ 91.100688][ T6466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.116110][ T6466] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.125050][ T6466] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.133855][ T6466] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.142640][ T6466] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.177365][ T3613] udevd[3613]: symlink '../../loop8' '/dev/disk/by-diskseq/246.tmp-b7:8' failed: Read-only file system [ 91.236529][ T3309] udevd[3309]: symlink '../../loop9' '/dev/disk/by-diskseq/244.tmp-b7:9' failed: Read-only file system [ 91.266162][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 91.266179][ T29] audit: type=1400 audit(1749232378.913:11297): avc: denied { read } for pid=6897 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.267381][ T6898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6898 comm=syz.2.750 [ 91.337856][ T3613] udevd[3613]: symlink '../../loop8' '/dev/disk/by-diskseq/246.tmp-b7:8' failed: Read-only file system [ 91.355322][ T3307] udevd[3307]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 91.381631][ T3309] udevd[3309]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 91.399798][ T29] audit: type=1400 audit(1749232379.043:11298): avc: denied { mount } for pid=6897 comm="syz.2.750" name="/" dev="configfs" ino=1889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 91.411855][ T3613] udevd[3613]: symlink '../../loop2' '/dev/disk/by-diskseq/247.tmp-b7:2' failed: Read-only file system [ 91.422752][ T29] audit: type=1400 audit(1749232379.043:11299): avc: denied { search } for pid=6897 comm="syz.2.750" name="/" dev="configfs" ino=1889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.456206][ T29] audit: type=1400 audit(1749232379.043:11300): avc: denied { search } for pid=6897 comm="syz.2.750" name="/" dev="configfs" ino=1889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.478450][ T29] audit: type=1400 audit(1749232379.043:11301): avc: denied { read open } for pid=6897 comm="syz.2.750" path="/" dev="configfs" ino=1889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.523457][ T3309] udevd[3309]: symlink '../../loop5' '/dev/disk/by-diskseq/248.tmp-b7:5' failed: Read-only file system [ 91.569915][ T6910] bridge0: port 3(bond0) entered blocking state [ 91.576410][ T6910] FAULT_INJECTION: forcing a failure. [ 91.576410][ T6910] name failslab, interval 1, probability 0, space 0, times 0 [ 91.589259][ T6910] CPU: 0 UID: 0 PID: 6910 Comm: syz.8.796 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 91.589339][ T6910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.589354][ T6910] Call Trace: [ 91.589361][ T6910] [ 91.589370][ T6910] __dump_stack+0x1d/0x30 [ 91.589391][ T6910] dump_stack_lvl+0xe8/0x140 [ 91.589409][ T6910] dump_stack+0x15/0x1b [ 91.589446][ T6910] should_fail_ex+0x265/0x280 [ 91.589470][ T6910] should_failslab+0x8c/0xb0 [ 91.589500][ T6910] __kmalloc_noprof+0xa5/0x3e0 [ 91.589527][ T6910] ? switchdev_deferred_enqueue+0x2d/0x1c0 [ 91.589551][ T6910] ? _printk+0x79/0xa0 [ 91.589623][ T6910] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 91.589658][ T6910] switchdev_deferred_enqueue+0x2d/0x1c0 [ 91.589691][ T6910] switchdev_port_attr_set+0x6c/0xe0 [ 91.589715][ T6910] __set_ageing_time+0x7c/0xe0 [ 91.589824][ T6910] br_init_port+0xac/0xf0 [ 91.589863][ T6910] new_nbp+0x22b/0x300 [ 91.589955][ T6910] br_add_if+0x1e7/0xa60 [ 91.589986][ T6910] ? security_capable+0x83/0x90 [ 91.590046][ T6910] br_ioctl_stub+0x521/0x860 [ 91.590073][ T6910] ? ioctl_has_perm+0x257/0x2a0 [ 91.590113][ T6910] ? __pfx_br_ioctl_stub+0x10/0x10 [ 91.590157][ T6910] sock_ioctl+0x39c/0x610 [ 91.590180][ T6910] ? __pfx_sock_ioctl+0x10/0x10 [ 91.590201][ T6910] __se_sys_ioctl+0xcb/0x140 [ 91.590281][ T6910] __x64_sys_ioctl+0x43/0x50 [ 91.590319][ T6910] x64_sys_call+0x19a8/0x2fb0 [ 91.590344][ T6910] do_syscall_64+0xd2/0x200 [ 91.590379][ T6910] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 91.590481][ T6910] ? clear_bhb_loop+0x40/0x90 [ 91.590507][ T6910] ? clear_bhb_loop+0x40/0x90 [ 91.590535][ T6910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.590561][ T6910] RIP: 0033:0x7f27c96fe929 [ 91.590580][ T6910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.590616][ T6910] RSP: 002b:00007f27c7d67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.590633][ T6910] RAX: ffffffffffffffda RBX: 00007f27c9925fa0 RCX: 00007f27c96fe929 [ 91.590649][ T6910] RDX: 0000200000000080 RSI: 00000000000089a2 RDI: 0000000000000008 [ 91.590665][ T6910] RBP: 00007f27c7d67090 R08: 0000000000000000 R09: 0000000000000000 [ 91.590744][ T6910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.590769][ T6910] R13: 0000000000000000 R14: 00007f27c9925fa0 R15: 00007ffe66c71018 [ 91.590788][ T6910] [ 91.590859][ T6910] bond0: failed to offload ageing time [ 91.812157][ T29] audit: type=1326 audit(1749232379.183:11302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.5.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38c3ee929 code=0x7ffc0000 [ 91.817849][ T6910] bridge0: port 3(bond0) entered disabled state [ 91.818878][ T6910] bond0: entered allmulticast mode [ 91.825904][ T29] audit: type=1326 audit(1749232379.183:11303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.5.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd38c3ee929 code=0x7ffc0000 [ 91.833865][ T6910] bond_slave_0: entered allmulticast mode [ 91.836910][ T29] audit: type=1326 audit(1749232379.183:11304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.5.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38c3ee929 code=0x7ffc0000 [ 91.842344][ T6910] bond_slave_1: entered allmulticast mode [ 91.865740][ T29] audit: type=1326 audit(1749232379.183:11305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.5.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd38c3ee929 code=0x7ffc0000 [ 91.960283][ T29] audit: type=1326 audit(1749232379.183:11306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.5.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38c3ee929 code=0x7ffc0000 [ 91.986072][ T6910] bond0: entered promiscuous mode [ 91.986131][ T6910] bond_slave_0: entered promiscuous mode [ 91.986338][ T6910] bond_slave_1: entered promiscuous mode [ 91.986609][ T6910] bridge0: port 3(bond0) entered blocking state [ 91.986636][ T6910] bridge0: port 3(bond0) entered forwarding state [ 92.100385][ T3613] udevd[3613]: symlink '../../loop5' '/dev/disk/by-diskseq/248.tmp-b7:5' failed: Read-only file system [ 92.109687][ T3309] udevd[3309]: symlink '../../loop8' '/dev/disk/by-diskseq/246.tmp-b7:8' failed: Read-only file system [ 92.128617][ T3618] udevd[3618]: symlink '../../loop2' '/dev/disk/by-diskseq/247.tmp-b7:2' failed: Read-only file system [ 92.197042][ T6936] loop2: detected capacity change from 0 to 1024 [ 92.253284][ T6936] EXT4-fs: Ignoring removed bh option [ 92.279471][ T6936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.409095][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.611528][ T6969] loop5: detected capacity change from 0 to 512 [ 92.618495][ T6969] ext4: Unknown parameter 'smackfstransmute' [ 93.040155][ T6989] lo speed is unknown, defaulting to 1000 [ 93.410723][ T7009] loop8: detected capacity change from 0 to 512 [ 93.492432][ T7009] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 93.590496][ T7009] EXT4-fs (loop8): mount failed [ 93.610946][ T7029] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 93.965141][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.987631][ T3399] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.252635][ T7069] loop8: detected capacity change from 0 to 512 [ 94.422377][ T7087] lo speed is unknown, defaulting to 1000 [ 94.590687][ T7087] loop5: detected capacity change from 0 to 512 [ 94.629716][ T7087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.642401][ T7087] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.799754][ T7069] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 94.842974][ T7069] EXT4-fs (loop8): mount failed [ 94.851836][ T7098] loop2: detected capacity change from 0 to 512 [ 94.860379][ T7098] EXT4-fs: Ignoring removed orlov option [ 94.886171][ T7098] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 94.935979][ T7098] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 94.960864][ T7103] lo speed is unknown, defaulting to 1000 [ 94.968379][ T7098] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.829: corrupted in-inode xattr: e_value size too large [ 95.060910][ T7098] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.829: couldn't read orphan inode 15 (err -117) [ 95.073485][ T7098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.091777][ T6466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.134687][ T7119] FAULT_INJECTION: forcing a failure. [ 95.134687][ T7119] name failslab, interval 1, probability 0, space 0, times 0 [ 95.147364][ T7119] CPU: 0 UID: 0 PID: 7119 Comm: syz.8.835 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 95.147399][ T7119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.147416][ T7119] Call Trace: [ 95.147437][ T7119] [ 95.147446][ T7119] __dump_stack+0x1d/0x30 [ 95.147479][ T7119] dump_stack_lvl+0xe8/0x140 [ 95.147502][ T7119] dump_stack+0x15/0x1b [ 95.147526][ T7119] should_fail_ex+0x265/0x280 [ 95.147548][ T7119] should_failslab+0x8c/0xb0 [ 95.147579][ T7119] kmem_cache_alloc_node_noprof+0x57/0x320 [ 95.147616][ T7119] ? __alloc_skb+0x101/0x320 [ 95.147725][ T7119] __alloc_skb+0x101/0x320 [ 95.147759][ T7119] netlink_alloc_large_skb+0xba/0xf0 [ 95.147825][ T7119] netlink_sendmsg+0x3cf/0x6b0 [ 95.147958][ T7119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.147997][ T7119] __sock_sendmsg+0x145/0x180 [ 95.148025][ T7119] ____sys_sendmsg+0x31e/0x4e0 [ 95.148081][ T7119] ___sys_sendmsg+0x17b/0x1d0 [ 95.148136][ T7119] __x64_sys_sendmsg+0xd4/0x160 [ 95.148179][ T7119] x64_sys_call+0x2999/0x2fb0 [ 95.148243][ T7119] do_syscall_64+0xd2/0x200 [ 95.148280][ T7119] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 95.148315][ T7119] ? clear_bhb_loop+0x40/0x90 [ 95.148342][ T7119] ? clear_bhb_loop+0x40/0x90 [ 95.148414][ T7119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.148438][ T7119] RIP: 0033:0x7f27c96fe929 [ 95.148454][ T7119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.148471][ T7119] RSP: 002b:00007f27c7d67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.148558][ T7119] RAX: ffffffffffffffda RBX: 00007f27c9925fa0 RCX: 00007f27c96fe929 [ 95.148574][ T7119] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 95.148615][ T7119] RBP: 00007f27c7d67090 R08: 0000000000000000 R09: 0000000000000000 [ 95.148628][ T7119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.148639][ T7119] R13: 0000000000000000 R14: 00007f27c9925fa0 R15: 00007ffe66c71018 [ 95.148658][ T7119] [ 95.368776][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.432365][ T7128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.836'. [ 95.448114][ T7131] FAULT_INJECTION: forcing a failure. [ 95.448114][ T7131] name failslab, interval 1, probability 0, space 0, times 0 [ 95.460957][ T7131] CPU: 1 UID: 0 PID: 7131 Comm: syz.8.837 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 95.461055][ T7131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.461071][ T7131] Call Trace: [ 95.461078][ T7131] [ 95.461087][ T7131] __dump_stack+0x1d/0x30 [ 95.461114][ T7131] dump_stack_lvl+0xe8/0x140 [ 95.461139][ T7131] dump_stack+0x15/0x1b [ 95.461247][ T7131] should_fail_ex+0x265/0x280 [ 95.461274][ T7131] should_failslab+0x8c/0xb0 [ 95.461306][ T7131] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 95.461424][ T7131] ? sidtab_sid2str_get+0xa0/0x130 [ 95.461517][ T7131] kmemdup_noprof+0x2b/0x70 [ 95.461549][ T7131] sidtab_sid2str_get+0xa0/0x130 [ 95.461582][ T7131] security_sid_to_context_core+0x1eb/0x2e0 [ 95.461657][ T7131] security_sid_to_context+0x27/0x40 [ 95.461824][ T7131] selinux_lsmprop_to_secctx+0x67/0xf0 [ 95.461859][ T7131] security_lsmprop_to_secctx+0x43/0x80 [ 95.461897][ T7131] audit_log_task_context+0x77/0x190 [ 95.461932][ T7131] audit_log_task+0xf4/0x250 [ 95.462018][ T7131] audit_seccomp+0x61/0x100 [ 95.462043][ T7131] ? __seccomp_filter+0x68c/0x10d0 [ 95.462066][ T7131] __seccomp_filter+0x69d/0x10d0 [ 95.462093][ T7131] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 95.462121][ T7131] ? vfs_write+0x75e/0x8e0 [ 95.462146][ T7131] ? __rcu_read_unlock+0x4f/0x70 [ 95.462168][ T7131] ? __fget_files+0x184/0x1c0 [ 95.462218][ T7131] __secure_computing+0x82/0x150 [ 95.462280][ T7131] syscall_trace_enter+0xcf/0x1e0 [ 95.462313][ T7131] do_syscall_64+0xac/0x200 [ 95.462350][ T7131] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 95.462443][ T7131] ? clear_bhb_loop+0x40/0x90 [ 95.462464][ T7131] ? clear_bhb_loop+0x40/0x90 [ 95.462487][ T7131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.462506][ T7131] RIP: 0033:0x7f27c96fe929 [ 95.462524][ T7131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.462587][ T7131] RSP: 002b:00007f27c7d67038 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 95.462612][ T7131] RAX: ffffffffffffffda RBX: 00007f27c9925fa0 RCX: 00007f27c96fe929 [ 95.462628][ T7131] RDX: 0000000000000000 RSI: 000000000000007e RDI: 00002000000000c0 [ 95.462640][ T7131] RBP: 00007f27c7d67090 R08: 0000000000000000 R09: 0000000000000000 [ 95.462651][ T7131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.462671][ T7131] R13: 0000000000000000 R14: 00007f27c9925fa0 R15: 00007ffe66c71018 [ 95.462694][ T7131] [ 95.787788][ T7139] loop2: detected capacity change from 0 to 1024 [ 95.816308][ T7139] EXT4-fs: Ignoring removed bh option [ 95.865774][ T7139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.907835][ T7151] loop8: detected capacity change from 0 to 1024 [ 95.914879][ T7151] EXT4-fs: Ignoring removed bh option [ 95.962065][ T7151] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.018417][ T7115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.833'. [ 96.053569][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.152771][ T7162] loop2: detected capacity change from 0 to 512 [ 96.159619][ T7162] EXT4-fs: Ignoring removed orlov option [ 96.188202][ T5605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.201207][ T7162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.203861][ T7115] bond1: left promiscuous mode [ 96.216143][ T3613] udevd[3613]: symlink '../../loop2' '/dev/disk/by-diskseq/264.tmp-b7:2' failed: Read-only file system [ 96.230207][ T7162] EXT4-fs (loop2): orphan cleanup on readonly fs [ 96.263138][ T7162] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.842: bg 0: block 248: padding at end of block bitmap is not set [ 96.282591][ T3309] udevd[3309]: symlink '../../loop8' '/dev/disk/by-diskseq/262.tmp-b7:8' failed: Read-only file system [ 96.320294][ T7162] __quota_error: 193 callbacks suppressed [ 96.320308][ T7162] Quota error (device loop2): write_blk: dquota write failed [ 96.333805][ T7162] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 96.343816][ T7162] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.842: Failed to acquire dquot type 1 [ 96.358142][ T3309] udevd[3309]: symlink '../../loop5' '/dev/disk/by-diskseq/259.tmp-b7:5' failed: Read-only file system [ 96.358147][ T3613] udevd[3613]: symlink '../../loop8' '/dev/disk/by-diskseq/262.tmp-b7:8' failed: Read-only file system [ 96.387019][ T7162] EXT4-fs (loop2): 1 truncate cleaned up [ 96.403610][ T7162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.407827][ T3613] udevd[3613]: symlink '../../loop8' '/dev/disk/by-diskseq/265.tmp-b7:8' failed: Read-only file system [ 96.477882][ T3613] udevd[3613]: symlink '../../loop5' '/dev/disk/by-diskseq/259.tmp-b7:5' failed: Read-only file system [ 96.506562][ T7162] FAULT_INJECTION: forcing a failure. [ 96.506562][ T7162] name failslab, interval 1, probability 0, space 0, times 0 [ 96.519340][ T7162] CPU: 1 UID: 0 PID: 7162 Comm: syz.2.842 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 96.519378][ T7162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.519394][ T7162] Call Trace: [ 96.519401][ T7162] [ 96.519410][ T7162] __dump_stack+0x1d/0x30 [ 96.519435][ T7162] dump_stack_lvl+0xe8/0x140 [ 96.519458][ T7162] dump_stack+0x15/0x1b [ 96.519511][ T7162] should_fail_ex+0x265/0x280 [ 96.519536][ T7162] should_failslab+0x8c/0xb0 [ 96.519565][ T7162] kmem_cache_alloc_noprof+0x50/0x310 [ 96.519613][ T7162] ? alloc_empty_file+0x76/0x200 [ 96.519647][ T7162] ? strncpy_from_kernel_nofault+0x78/0x130 [ 96.519674][ T7162] alloc_empty_file+0x76/0x200 [ 96.519708][ T7162] path_openat+0x68/0x2170 [ 96.519825][ T7162] ? spurious_kernel_fault+0xf4/0x4a0 [ 96.519867][ T7162] ? exc_page_fault+0x7b/0xa0 [ 96.519897][ T7162] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 96.519984][ T7162] do_filp_open+0x109/0x230 [ 96.520032][ T7162] do_sys_openat2+0xa6/0x110 [ 96.520069][ T7162] __x64_sys_openat+0xf2/0x120 [ 96.520168][ T7162] x64_sys_call+0x1af/0x2fb0 [ 96.520194][ T7162] do_syscall_64+0xd2/0x200 [ 96.520228][ T7162] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 96.520259][ T7162] ? clear_bhb_loop+0x40/0x90 [ 96.520327][ T7162] ? clear_bhb_loop+0x40/0x90 [ 96.520352][ T7162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.520380][ T7162] RIP: 0033:0x7fe953bed290 [ 96.520398][ T7162] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 96.520420][ T7162] RSP: 002b:00007fe952256b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 96.520443][ T7162] RAX: ffffffffffffffda RBX: 0000000000127081 RCX: 00007fe953bed290 [ 96.520459][ T7162] RDX: 0000000000127081 RSI: 00007fe952256c10 RDI: 00000000ffffff9c [ 96.520473][ T7162] RBP: 00007fe952256c10 R08: 0000000000000000 R09: 002367732f766564 [ 96.520489][ T7162] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 96.520520][ T7162] R13: 0000000000000000 R14: 00007fe953e15fa0 R15: 00007fffaf0a2438 [ 96.520542][ T7162] [ 96.523194][ T3309] udevd[3309]: symlink '../../loop9' '/dev/disk/by-diskseq/244.tmp-b7:9' failed: Read-only file system [ 96.584520][ T29] audit: type=1326 audit(1749232384.213:11498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.9.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a75e929 code=0x7ffc0000 [ 96.704837][ T3613] udevd[3613]: symlink '../../loop8' '/dev/disk/by-diskseq/265.tmp-b7:8' failed: Read-only file system [ 96.709159][ T29] audit: type=1326 audit(1749232384.213:11499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.9.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a75e929 code=0x7ffc0000 [ 96.805704][ T29] audit: type=1326 audit(1749232384.213:11500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.9.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fac6a75e929 code=0x7ffc0000 [ 96.829264][ T29] audit: type=1326 audit(1749232384.213:11501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a75e929 code=0x7ffc0000 [ 96.852507][ T29] audit: type=1326 audit(1749232384.213:11502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6a75e929 code=0x7ffc0000 [ 96.875626][ T29] audit: type=1326 audit(1749232384.213:11503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a75e929 code=0x7ffc0000 [ 96.898676][ T29] audit: type=1326 audit(1749232384.213:11504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a75e929 code=0x7ffc0000 [ 96.921764][ T29] audit: type=1326 audit(1749232384.213:11505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6a75e929 code=0x7ffc0000 [ 96.945578][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.995180][ T3309] udevd[3309]: symlink '../../loop8' '/dev/disk/by-diskseq/265.tmp-b7:8' failed: Read-only file system [ 97.014012][ T3613] udevd[3613]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 97.228985][ T7223] loop2: detected capacity change from 0 to 128 [ 97.270767][ T7223] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 97.516455][ T7246] dvmrp1: entered allmulticast mode [ 97.541670][ T7251] loop9: detected capacity change from 0 to 128 [ 97.549194][ T7251] FAT-fs (loop9): Directory bread(block 162) failed [ 97.561112][ T7251] FAT-fs (loop9): Directory bread(block 163) failed [ 97.568125][ T7252] FAULT_INJECTION: forcing a failure. [ 97.568125][ T7252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.581354][ T7252] CPU: 0 UID: 0 PID: 7252 Comm: syz.5.858 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 97.581387][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.581415][ T7252] Call Trace: [ 97.581421][ T7252] [ 97.581430][ T7252] __dump_stack+0x1d/0x30 [ 97.581457][ T7252] dump_stack_lvl+0xe8/0x140 [ 97.581483][ T7252] dump_stack+0x15/0x1b [ 97.581576][ T7252] should_fail_ex+0x265/0x280 [ 97.581603][ T7252] should_fail+0xb/0x20 [ 97.581624][ T7252] should_fail_usercopy+0x1a/0x20 [ 97.581652][ T7252] _copy_to_user+0x20/0xa0 [ 97.581684][ T7252] simple_read_from_buffer+0xb5/0x130 [ 97.581810][ T7252] proc_fail_nth_read+0x100/0x140 [ 97.581841][ T7252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.581910][ T7252] vfs_read+0x19d/0x6f0 [ 97.581964][ T7252] ? __rcu_read_unlock+0x4f/0x70 [ 97.581992][ T7252] ? __rcu_read_unlock+0x4f/0x70 [ 97.582066][ T7252] ? __fget_files+0x184/0x1c0 [ 97.582096][ T7252] ksys_read+0xda/0x1a0 [ 97.582117][ T7252] __x64_sys_read+0x40/0x50 [ 97.582136][ T7252] x64_sys_call+0x2d77/0x2fb0 [ 97.582157][ T7252] do_syscall_64+0xd2/0x200 [ 97.582221][ T7252] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 97.582254][ T7252] ? clear_bhb_loop+0x40/0x90 [ 97.582311][ T7252] ? clear_bhb_loop+0x40/0x90 [ 97.582339][ T7252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.582372][ T7252] RIP: 0033:0x7fd38c3ed33c [ 97.582391][ T7252] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 97.582415][ T7252] RSP: 002b:00007fd38aa57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.582439][ T7252] RAX: ffffffffffffffda RBX: 00007fd38c615fa0 RCX: 00007fd38c3ed33c [ 97.582457][ T7252] RDX: 000000000000000f RSI: 00007fd38aa570a0 RDI: 0000000000000005 [ 97.582472][ T7252] RBP: 00007fd38aa57090 R08: 0000000000000000 R09: 0000000000000000 [ 97.582517][ T7252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.582599][ T7252] R13: 0000000000000000 R14: 00007fd38c615fa0 R15: 00007ffefbc280a8 [ 97.582625][ T7252] [ 97.792809][ T7251] FAT-fs (loop9): Directory bread(block 164) failed [ 97.803709][ T7251] FAT-fs (loop9): Directory bread(block 165) failed [ 97.810381][ T7251] FAT-fs (loop9): Directory bread(block 166) failed [ 97.817224][ T7251] FAT-fs (loop9): Directory bread(block 167) failed [ 97.823905][ T7251] FAT-fs (loop9): Directory bread(block 168) failed [ 97.830666][ T7251] FAT-fs (loop9): Directory bread(block 169) failed [ 97.849360][ T7251] FAT-fs (loop9): Directory bread(block 162) failed [ 97.856909][ T7251] FAT-fs (loop9): Directory bread(block 163) failed [ 97.864112][ T7251] bio_check_eod: 9 callbacks suppressed [ 97.864128][ T7251] syz.9.857: attempt to access beyond end of device [ 97.864128][ T7251] loop9: rw=3, sector=226, nr_sectors = 6 limit=128 [ 97.883455][ T7251] syz.9.857: attempt to access beyond end of device [ 97.883455][ T7251] loop9: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 97.944605][ T7280] loop5: detected capacity change from 0 to 1024 [ 98.041159][ T7283] netlink: 40 bytes leftover after parsing attributes in process `syz.9.861'. [ 98.080972][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz.9.861'. [ 98.091462][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz.9.861'. [ 98.118684][ T7297] loop8: detected capacity change from 0 to 128 [ 98.161763][ T7302] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.860: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 98.187822][ T7304] loop2: detected capacity change from 0 to 1024 [ 98.196469][ T7300] xt_hashlimit: max too large, truncated to 1048576 [ 98.206805][ T7297] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.232408][ T7283] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 98.261715][ T7283] bridge0: entered promiscuous mode [ 98.620880][ T7328] loop2: detected capacity change from 0 to 512 [ 98.656143][ T7328] EXT4-fs: Ignoring removed orlov option [ 98.688293][ T7328] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 98.723235][ T7328] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 98.733265][ T7328] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.867: corrupted in-inode xattr: e_value size too large [ 98.739188][ T7330] FAULT_INJECTION: forcing a failure. [ 98.739188][ T7330] name failslab, interval 1, probability 0, space 0, times 0 [ 98.759876][ T7330] CPU: 0 UID: 0 PID: 7330 Comm: syz.8.868 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 98.759904][ T7330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.759946][ T7330] Call Trace: [ 98.759952][ T7330] [ 98.759959][ T7330] __dump_stack+0x1d/0x30 [ 98.759979][ T7330] dump_stack_lvl+0xe8/0x140 [ 98.759997][ T7330] dump_stack+0x15/0x1b [ 98.760015][ T7330] should_fail_ex+0x265/0x280 [ 98.760037][ T7330] should_failslab+0x8c/0xb0 [ 98.760061][ T7330] kmem_cache_alloc_node_noprof+0x57/0x320 [ 98.760095][ T7330] ? __alloc_skb+0x101/0x320 [ 98.760121][ T7330] ? xas_load+0x413/0x430 [ 98.760147][ T7330] __alloc_skb+0x101/0x320 [ 98.760228][ T7330] alloc_skb_with_frags+0x7d/0x470 [ 98.760254][ T7330] ? kernel_text_address+0x94/0xb0 [ 98.760280][ T7330] ? __kernel_text_address+0xd/0x40 [ 98.760310][ T7330] ? unwind_get_return_address+0x16/0x40 [ 98.760372][ T7330] sock_alloc_send_pskb+0x43a/0x4f0 [ 98.760416][ T7330] unix_dgram_sendmsg+0x394/0xfa0 [ 98.760483][ T7330] ? selinux_socket_sendmsg+0x175/0x1b0 [ 98.760507][ T7330] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 98.760535][ T7330] __sock_sendmsg+0x145/0x180 [ 98.760561][ T7330] ____sys_sendmsg+0x31e/0x4e0 [ 98.760642][ T7330] __sys_sendmsg_sock+0x28/0x40 [ 98.760670][ T7330] io_sendmsg+0x163/0x4b0 [ 98.760700][ T7330] __io_issue_sqe+0xfe/0x2e0 [ 98.760757][ T7330] ? io_assign_file+0xf9/0x200 [ 98.760852][ T7330] io_issue_sqe+0x53/0x970 [ 98.760903][ T7330] io_submit_sqes+0x667/0xfd0 [ 98.760963][ T7330] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 98.761020][ T7330] ? strncpy_from_kernel_nofault+0x68/0x130 [ 98.761078][ T7330] ? bpf_probe_read_compat_str+0x126/0x130 [ 98.761115][ T7330] ? __rcu_read_unlock+0x4f/0x70 [ 98.761135][ T7330] ? bpf_trace_run2+0x124/0x1c0 [ 98.761162][ T7330] ? __bpf_trace_sys_enter+0x10/0x30 [ 98.761197][ T7330] __x64_sys_io_uring_enter+0x78/0x90 [ 98.761249][ T7330] x64_sys_call+0x28c8/0x2fb0 [ 98.761275][ T7330] do_syscall_64+0xd2/0x200 [ 98.761310][ T7330] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 98.761349][ T7330] ? clear_bhb_loop+0x40/0x90 [ 98.761370][ T7330] ? clear_bhb_loop+0x40/0x90 [ 98.761391][ T7330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.761438][ T7330] RIP: 0033:0x7f27c96fe929 [ 98.761456][ T7330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.761532][ T7330] RSP: 002b:00007f27c7d67038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 98.761549][ T7330] RAX: ffffffffffffffda RBX: 00007f27c9925fa0 RCX: 00007f27c96fe929 [ 98.761562][ T7330] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000009 [ 98.761578][ T7330] RBP: 00007f27c7d67090 R08: 0000000000000000 R09: 0000000000000000 [ 98.761593][ T7330] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 98.761606][ T7330] R13: 0000000000000000 R14: 00007f27c9925fa0 R15: 00007ffe66c71018 [ 98.761624][ T7330] [ 98.779559][ T7328] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.867: couldn't read orphan inode 15 (err -117) [ 99.672971][ T7380] lo speed is unknown, defaulting to 1000 [ 99.844168][ T7380] loop8: detected capacity change from 0 to 512 [ 100.014411][ T7384] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 100.083627][ T7380] EXT4-fs mount: 7 callbacks suppressed [ 100.089350][ T7380] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.101979][ T7380] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.222615][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.880'. [ 100.367973][ T5605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.412390][ T7398] netlink: 80 bytes leftover after parsing attributes in process `syz.1.880'. [ 100.548279][ T6556] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.595736][ T7421] ip6gre1: entered allmulticast mode [ 100.789570][ T7431] loop2: detected capacity change from 0 to 2048 [ 100.851289][ T7426] IPv6: Can't replace route, no match found [ 100.858590][ T7426] FAULT_INJECTION: forcing a failure. [ 100.858590][ T7426] name failslab, interval 1, probability 0, space 0, times 0 [ 100.871414][ T7426] CPU: 0 UID: 0 PID: 7426 Comm: syz.2.885 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 100.871449][ T7426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.871465][ T7426] Call Trace: [ 100.871472][ T7426] [ 100.871481][ T7426] __dump_stack+0x1d/0x30 [ 100.871507][ T7426] dump_stack_lvl+0xe8/0x140 [ 100.871610][ T7426] dump_stack+0x15/0x1b [ 100.871633][ T7426] should_fail_ex+0x265/0x280 [ 100.871658][ T7426] should_failslab+0x8c/0xb0 [ 100.871690][ T7426] kmem_cache_alloc_noprof+0x50/0x310 [ 100.871759][ T7426] ? xfrm_state_alloc+0x2c/0x190 [ 100.871789][ T7426] xfrm_state_alloc+0x2c/0x190 [ 100.871821][ T7426] xfrm_add_sa+0xf4e/0x2410 [ 100.871893][ T7426] xfrm_user_rcv_msg+0x566/0x660 [ 100.871923][ T7426] ? __kfree_skb+0x109/0x150 [ 100.871956][ T7426] ? nlmon_xmit+0x4f/0x60 [ 100.872041][ T7426] ? consume_skb+0x49/0x150 [ 100.872097][ T7426] netlink_rcv_skb+0x123/0x220 [ 100.872132][ T7426] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 100.872262][ T7426] xfrm_netlink_rcv+0x48/0x60 [ 100.872330][ T7426] netlink_unicast+0x59e/0x670 [ 100.872364][ T7426] netlink_sendmsg+0x58b/0x6b0 [ 100.872407][ T7426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.872444][ T7426] __sock_sendmsg+0x145/0x180 [ 100.872538][ T7426] ____sys_sendmsg+0x31e/0x4e0 [ 100.872580][ T7426] ___sys_sendmsg+0x17b/0x1d0 [ 100.872634][ T7426] __x64_sys_sendmsg+0xd4/0x160 [ 100.872750][ T7426] x64_sys_call+0x2999/0x2fb0 [ 100.872793][ T7426] do_syscall_64+0xd2/0x200 [ 100.872829][ T7426] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 100.872857][ T7426] ? clear_bhb_loop+0x40/0x90 [ 100.872876][ T7426] ? clear_bhb_loop+0x40/0x90 [ 100.872998][ T7426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.873019][ T7426] RIP: 0033:0x7fe953bee929 [ 100.873033][ T7426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.873063][ T7426] RSP: 002b:00007fe952257038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.873087][ T7426] RAX: ffffffffffffffda RBX: 00007fe953e15fa0 RCX: 00007fe953bee929 [ 100.873103][ T7426] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000009 [ 100.873142][ T7426] RBP: 00007fe952257090 R08: 0000000000000000 R09: 0000000000000000 [ 100.873157][ T7426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.873172][ T7426] R13: 0000000000000000 R14: 00007fe953e15fa0 R15: 00007fffaf0a2438 [ 100.873196][ T7426] [ 101.256476][ T3613] udevd[3613]: symlink '../../loop2' '/dev/disk/by-diskseq/281.tmp-b7:2' failed: Read-only file system [ 101.286234][ T3307] udevd[3307]: symlink '../../loop8' '/dev/disk/by-diskseq/279.tmp-b7:8' failed: Read-only file system [ 101.303107][ T4634] udevd[4634]: symlink '../../loop5' '/dev/disk/by-diskseq/277.tmp-b7:5' failed: Read-only file system [ 101.336259][ T3613] udevd[3613]: symlink '../../loop2' '/dev/disk/by-diskseq/281.tmp-b7:2' failed: Read-only file system [ 101.353050][ T7457] netlink: 'syz.8.894': attribute type 21 has an invalid length. [ 101.414211][ T7457] ================================================================== [ 101.422331][ T7457] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 101.430085][ T7457] [ 101.432413][ T7457] write to 0xffff888237d25e68 of 1 bytes by task 7455 on cpu 1: [ 101.440060][ T7457] folios_put_refs+0x285/0x2d0 [ 101.444847][ T7457] folio_batch_move_lru+0x1fd/0x230 [ 101.450070][ T7457] folio_add_lru+0x14a/0x1f0 [ 101.454701][ T7457] shmem_get_folio_gfp+0x7ab/0xd60 [ 101.459838][ T7457] shmem_fault+0xf6/0x250 [ 101.464175][ T7457] __do_fault+0xbc/0x200 [ 101.468442][ T7457] handle_mm_fault+0xf78/0x2be0 [ 101.473300][ T7457] __get_user_pages+0x1036/0x1fb0 [ 101.478331][ T7457] __mm_populate+0x243/0x3a0 [ 101.482929][ T7457] vm_mmap_pgoff+0x232/0x2e0 [ 101.487534][ T7457] ksys_mmap_pgoff+0xc2/0x310 [ 101.492219][ T7457] x64_sys_call+0x1602/0x2fb0 [ 101.496912][ T7457] do_syscall_64+0xd2/0x200 [ 101.501440][ T7457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.507340][ T7457] [ 101.509666][ T7457] read to 0xffff888237d25e68 of 1 bytes by task 7457 on cpu 0: [ 101.517215][ T7457] __lru_add_drain_all+0x12b/0x3f0 [ 101.522333][ T7457] lru_cache_disable+0x1f/0x30 [ 101.527133][ T7457] __se_sys_mbind+0x496/0xac0 [ 101.531828][ T7457] __x64_sys_mbind+0x78/0x90 [ 101.536435][ T7457] x64_sys_call+0x14af/0x2fb0 [ 101.541121][ T7457] do_syscall_64+0xd2/0x200 [ 101.545640][ T7457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.551541][ T7457] [ 101.553867][ T7457] value changed: 0x01 -> 0x00 [ 101.558542][ T7457] [ 101.560863][ T7457] Reported by Kernel Concurrency Sanitizer on: [ 101.567016][ T7457] CPU: 0 UID: 0 PID: 7457 Comm: syz.8.894 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 101.579002][ T7457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.589153][ T7457] ================================================================== [ 101.616515][ T7460] vhci_hcd: default hub control req: 1f30 v0005 i0006 l0 [ 101.630661][ T3309] udevd[3309]: symlink '../../loop9' '/dev/disk/by-diskseq/269.tmp-b7:9' failed: Read-only file system [ 101.652104][ T3613] udevd[3613]: symlink '../../loop2' '/dev/disk/by-diskseq/282.tmp-b7:2' failed: Read-only file system [ 101.738094][ T7465] lo speed is unknown, defaulting to 1000 [ 101.822008][ T7465] loop5: detected capacity change from 0 to 512 [ 101.876552][ T3613] udevd[3613]: symlink '../../loop5' '/dev/disk/by-diskseq/283.tmp-b7:5' failed: Read-only file system [ 101.909724][ T7465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.922329][ T7465] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.952632][ T7464] netlink: 20 bytes leftover after parsing attributes in process `syz.8.894'. [ 101.995620][ T3613] udevd[3613]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 102.107501][ T3309] udevd[3309]: symlink '../../loop2' '/dev/disk/by-diskseq/282.tmp-b7:2' failed: Read-only file system [ 102.129919][ T3613] udevd[3613]: symlink '../../loop5' '/dev/disk/by-diskseq/283.tmp-b7:5' failed: Read-only file system [ 102.221646][ T6466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.