last executing test programs: 5m46.509871769s ago: executing program 4 (id=650): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000004c0)='system.posix_acl_access\x00', 0x0, 0xfffffec4, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x2f, 0x6d, 0xe0, 0x9, 0x83ce8018d3466958, @dev={0xfe, 0x80, '\x00', 0xc}, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff41, 0x20, 0x2, 0x5}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x5, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x14, &(0x7f0000000940)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="000000e5ffffff00b7080000000000007b8af8ff00000000bfa200000000000007020000f80cffffb703000008000000b704fd43e2f3000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x58, '\x00', r0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000032000000c000000009c04007b644a725d868576c5ab307daefef6723176ed0d5111de5a06f016f62cebf224da7393a10e0e150bf75e894bb6b4fd07612c45628a926a929861bebb0bc5dde5e8819107ed397b3d536867c31b2cdee01f7a398cf711c987bc1960b8edad74cad772933b435f8fac5408475a0000000000000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0103000000000000000001"], 0x28}}, 0x0) getpid() ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f00000002c0)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r7, &(0x7f0000000340), &(0x7f0000000500), 0x2}, 0x20) lchown(0x0, 0xee01, 0x0) listen(0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) socket$kcm(0x10, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[@ANYBLOB='@\a\x00\x00', @ANYRES16=r10, @ANYBLOB="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"], 0x740}}, 0x0) 5m46.467966489s ago: executing program 4 (id=652): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='f2fs\x00', 0x84880, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x410201, 0x0) 5m46.446421969s ago: executing program 4 (id=653): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000100000000000000000001811000003c92fbe6dfec2a1d538a73efcabe397dfacfd3dd028a3da14890dd55b0b533ba2709472c528028a19e396", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), 0x0}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000002c0), &(0x7f00000004c0)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="080026bd7000fddbdf25030000000c00018008000300010000002800018008000100", @ANYRES32=0x0, @ANYBLOB="14000200627269656765300000000000000000000800030003000000050002000d00000005000500740000000c0201800810030002000000"], 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x14) sync() sync() r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8200, &(0x7f0000000040)={[{@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpid}, {@dioread_lock}, {@noquota}, {@lazytime}, {@minixdf}, {@noauto_da_alloc}]}, 0x83, 0x5fe, &(0x7f0000001040)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={0xffffffffffffffff, 0x0, &(0x7f0000000b80)=""/190}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="81976236762566b31effd8106f136abe1566da3588af7f9c1fcc20383870fc39f04eab54dd212b54"], 0x18}, 0x1, 0x0, 0x0, 0x4040801}, 0x200000c0) 5m45.976572473s ago: executing program 4 (id=663): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3ff, 0x22a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000001000)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000027c0)={0x2, 0x3, 0x0, 0x2, 0xd, 0x0, 0x70bd2b, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x68}, 0x1, 0x7}, 0x40) 5m45.464925756s ago: executing program 4 (id=675): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5m45.386770347s ago: executing program 4 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x14b) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',obj_user=GPL\x00,subj_role=sched_switch\x00,\x00']) 5m30.126259687s ago: executing program 32 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x14b) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',obj_user=GPL\x00,subj_role=sched_switch\x00,\x00']) 3m10.186898171s ago: executing program 3 (id=4502): openat$ppp(0xffffffffffffff9c, 0x0, 0x600, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000540)=ANY=[], 0x129) read(r1, &(0x7f0000005480)=""/213, 0xd5) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) sendto$l2tp6(r2, &(0x7f0000000280)="c2ff614153f004693b5b7a82b972c1c3f10ade156289117ad121adeaec275b20912da22e80f5c0f0348a3679b9bf703076d7937cfbb06a6608137b886942c2f3a5b4493ec888905d", 0x48, 0x4001, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioperm(0x0, 0x8, 0x400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) 3m9.340753788s ago: executing program 3 (id=4525): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000100)=0x2c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) timer_create(0x2, &(0x7f0000000000)={0x0, 0x21, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) recvmmsg(r2, &(0x7f0000006480)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x12002, 0x0) 3m9.316628268s ago: executing program 3 (id=4526): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfd7c, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80000000000}, 0x18) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)={0x14, 0x6a, 0x705, 0x0, 0x0, "", [@nested={0x4, 0x9}]}, 0x14}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001880)=@newtaction={0x14, 0x12, 0xbf68af9d17701201, 0x0, 0x25dfdbfd, {0x7}}, 0x14}}, 0x0) 3m9.315615978s ago: executing program 3 (id=4527): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7ffb, 0x2, 0x1, 0x9, 0x36}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='rxrpc_transmit\x00', r3}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000010100000000000000000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="f4a5e19407e495f3cee048e96339214ae4db0cbf886736ef0588129d340d14c06a48c8ddae68946effbe5ed7995253ec76495970ca2b01e8025e61a4d3f80eecc9a5f877e504c0ad835d11c842a857abf5e9831a050215a81468a0de"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="180097073fbcbac3770d0000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000240)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000102000080000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="02000000030000000200"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) 3m9.233903309s ago: executing program 3 (id=4528): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000004860d081d7ca3e645e29baff6869db78eb1f4d90a0d35d479f3855b49b05d26d357d0f5b2ae774f3b9c1f9f6336079814e9b05a515cf64b90f1625e7559cccb06ffd"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) unshare(0x2040400) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 3m9.189210149s ago: executing program 3 (id=4529): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000000), 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, 0x4}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) 2m54.113051788s ago: executing program 33 (id=4529): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000000), 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, 0x4}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) 1m24.801289976s ago: executing program 1 (id=6871): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x0, 0x3a, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4e22, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "4d69da731167d7d966ee21faaa03eed2fcd184b06096ac72a35bd79f33085cff", "8ab5c889a4e6354fcc0c08cefbf99d664efd3c8a05826e25c21d7545a95d84b968216436f9dfd65c9419725422b56d4f", "62c6fb8b65969e02ca79afa485fa585694f18c7cdd24aa7d1706404e", {"52a05c5cfcff2c9350623b5806dc725f", "951b0c4d673e28b18bcf08ed0b7e3a12"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40200000000000063110a000000000005000000000100009500740000000000"], &(0x7f0000000740)='syzkaller\x00', 0x4, 0xfd90, &(0x7f0000000e40)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffa1, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@link_local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}}}, 0x0) 1m24.734695826s ago: executing program 1 (id=6874): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x9752333b9a87418, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="00a0000000000000b70400000800000085000000950000009500000004000000"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x200000000200}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0xb8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xf, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x88, 0x2, {{0x0, 0x100, 0x0, 0x0, 0x40000}, [@TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x10001, 0x4, 0xa, 0xb1, 0x10}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x94d91ee0025fd348}]}}}]}, 0xb8}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x7ff, 0x7, 0x0, 0x7f, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0, @void, @value}, 0x94) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r8, 0x0) 1m24.652134016s ago: executing program 1 (id=6880): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c000000"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1f, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x1a}, @generic={0x7, 0x7, 0xd, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x4, 0x0, 0x7, 0x3, 0x1, 0x10, 0xfffffffffffffffc}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x32, &(0x7f0000000040)=""/50, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x8, 0xbd8, 0xa48}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[{0x3, 0x1, 0x7, 0x8}, {0x0, 0x5, 0x1, 0xa}], 0x10, 0x1ff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d00)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) 1m24.487097808s ago: executing program 1 (id=6886): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xc404, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,discard,fmask=00000000000000000000006,umask=00000000000000000002003,time_offset=0x00000000000002db,nodots,dots,nodots,dots,quiet,`ots,nodots,nodots,dots,nodots,umask=00000000000000000000001,dots,nodots,nfs=nostale_ro,nodots,check=relaxed,dots,\x00'], 0xfd, 0x207, &(0x7f0000000780)="$eJzs3b2OElEUAOADsjAYi+1MTEzGWGi1UZ9gjVkTI4nJGgrtTLSSamlgm93H8BV8JSsLKyuzFY25Bmf4EVlcSWB09/sKODPnXu69MzDQcCZF4cvND5Fltajvx36MarEb9Zg4DQDgMhmlFN9SYbrzc6VTAgA2bOn3/1Q2fvhewbQAgA16+er188edzsFhnmcRZ6eD7qBbPBf5p886Bw/yn3Znvc4Gg+61af5hvvjbYZzfietl/lHRP5+mmxHRbcb9u0V+nHvyopP/2r8Vbze8dgAAAAAAAAAAAAAAAAAAAAAAqMrtyCeW1vfZ21vMt8t8sTVXH2ihfk8jbjXKzVl5oHSyjUUBAAAAAAAAAAAAAAAAAADAf6Y/PH7/ptd7dzQLWhExv6expM35Qa184Qs1rj6of/pazPcvu7fLZa4xaK08RJtdYHv5yb1IEI1/5eysG+RbGKu98vCmNA7mPwVp+m6ZlMU4t3szIlaPfu9w3cmPUkq9j3eO+sNIKxvPrhGt7V2OAAAAAAAAAAAAAAAAAADgSusPa5N/ff8mq2JCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCB/vC4vP//GsFJRNyIPzaejLUTWbWLBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NL6EQAA//+0XiJG") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') sendmmsg$unix(r1, &(0x7f000000ba00)=[{{&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000007cb017d8bd954f94292739b69a0b3ddeece098fa223ab039937dfa5a89d949164d3d1a467b93512e603229001c03b701c561c3eafba2923865e32d6df2a0deefc79e9ed8cdde0afefad327432ebae3377dbab06d5f4056260996ddc9df7c46e046173fb3e0e9e8defaccae"], 0x18, 0x800}}], 0x1, 0x4008000) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x7, 0x4, 0xb2, 0x5, 0x0, 0x5, 0x80000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x1001, 0x81, 0xe, 0x9, 0x9, 0x9, 0x3, 0x0, 0x5, 0x0, 0x80}, r0, 0xf, 0xffffffffffffffff, 0x2) r3 = syz_io_uring_setup(0x10c3, &(0x7f0000000100)={0x0, 0x33c9, 0x10, 0x2, 0xad}, &(0x7f0000000000), &(0x7f0000000180)) r4 = io_uring_setup(0x1752, &(0x7f0000000080)={0x0, 0xad40, 0x4000, 0x4000003, 0x2a0, 0x0, r3}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2, &(0x7f0000000080), 0x1, 0x580, &(0x7f0000000180)="$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") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000700)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef000000079367afc58c4513ece127e044ce8561acf82e0800aa7314fd786a"], 0x20}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) 1m24.23010325s ago: executing program 1 (id=6892): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) capget(&(0x7f00000001c0)={0x3553128e}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @local}]}, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000640)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)='~!', 0x2}], 0x1}}], 0x1, 0x1005) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x76, &(0x7f0000000140)=@assoc_value={r4}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r4, @ANYBLOB="00006c7700000000b7f9ffffffffffff7a8af8ff00020000bfa200000000000007020000f8ffffffb703000008000000b704000086000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r10}, 0x4) r12 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r12, 0x84, 0x0, &(0x7f00000003c0)={r4, 0x2, 0x5, 0x4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000c600010020000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) vmsplice(r8, &(0x7f0000000540), 0x41, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r13], &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r14 = fsmount(r1, 0x1000000000000000, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r14, &(0x7f0000000040)='./file0\x00') openat(r14, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 1m24.18102158s ago: executing program 1 (id=6894): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000f8000000f8000000040000001000000000000009010000000300000008000006040000000100cf0007000000070000000500000007000000f9ffffff030000000500000006000000080000000e000000e00f0000050000007f0000000d000000480000001000000000000002000000000a0000000000000e02000000020000000200000005000013080000000d0000000b000000000400000300000081000000f103000007000000ff7f14ea65c7f0aef6af38c5231024d9ff0000090000000100004008000000010000000600000008000000030000000000000002000085070000001000000005000000060000000b00000005000000fdffffff0700000000000008050000000f000000000000090000000000300000"], &(0x7f0000000040)=""/76, 0x114, 0x4c, 0x0, 0xff, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x40401, 0x0) ppoll(&(0x7f0000000540)=[{r3, 0x80}], 0x1, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000d80)={[{0x2b, 'perf_event'}]}, 0xc) 1m9.175514519s ago: executing program 34 (id=6894): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000f8000000f8000000040000001000000000000009010000000300000008000006040000000100cf0007000000070000000500000007000000f9ffffff030000000500000006000000080000000e000000e00f0000050000007f0000000d000000480000001000000000000002000000000a0000000000000e02000000020000000200000005000013080000000d0000000b000000000400000300000081000000f103000007000000ff7f14ea65c7f0aef6af38c5231024d9ff0000090000000100004008000000010000000600000008000000030000000000000002000085070000001000000005000000060000000b00000005000000fdffffff0700000000000008050000000f000000000000090000000000300000"], &(0x7f0000000040)=""/76, 0x114, 0x4c, 0x0, 0xff, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x40401, 0x0) ppoll(&(0x7f0000000540)=[{r3, 0x80}], 0x1, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000d80)={[{0x2b, 'perf_event'}]}, 0xc) 11.622512606s ago: executing program 5 (id=8709): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00@\x00\x00\x00\x00\b\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) link(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x12, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x800000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) 11.194450889s ago: executing program 5 (id=8717): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_setup(0x5, &(0x7f00000002c0)=0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000440)='/sys/power/pm_wakeup_irq', 0x109480, 0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8, r3, &(0x7f0000000000)='k', 0x1, 0xa, 0x0, 0x0, r3}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000040000000400010000000000", @ANYRES32, @ANYBLOB='\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000002000500000000000000e5ccb1877589945566ae89c38f83db1c00"/44], 0x48) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r4 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19) mlockall(0x7) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 10.971241911s ago: executing program 5 (id=8720): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b33e0f32f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3cd3cedd01fdc59589ea6bacde1e40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7a7216f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe00000000000000000000000000fdba1133066c4a21a7149f32"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x8000000) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x1400, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 10.734679052s ago: executing program 5 (id=8726): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="3e97f964"]) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000480)={[{@acl}]}, 0x1, 0x787, &(0x7f0000001000)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==") r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() ptrace(0x10, r3) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r3, 0x200, &(0x7f0000000080)={0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000f00)={[{@block_validity}, {@nombcache}, {@dioread_lock}, {@norecovery}, {@abort}, {@auto_da_alloc}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfb, 0x54c, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec+9Nzz0593t6Tk5CAhhaE9mPQsSrEfFtEnG47dho5Acn1s5bfXh9NtuSaDQ++yuJJN/XOj/Jfx/MM69ExG9fR5wsbCy3tryyUCqX08U8P1mvXJmsLa+culQpzafz6eXpmZkz78xMv//eu32r65vn//nh07sfnfnm+Or3v9w/cjuJs3EoP9Zejx240Z6ZiIn8ORmLs0+cONWHwgZJstsXwLaM5HE+FlkfcDhG8qgH/v++iogGMKQS8Q9DqjUOaM3t+zQPfmE8+HBtArSx/qNrr43Evubc6MBq8tjMKJvvjveh/KyMX/+8czvbon+vQwBs6cbNiDg9Orqx/0vy/m/7TvdwzpNl6P/g+bmbjX/e6jT+KayPf6LD+Odgh9jdjq3jv3C/D8V0lY3/Pug4/l1ftBofyXMvNcd8Y8nFS+U069tejogTMbY3y2+2nnNm9V6j27H28V+2ZeW3xoL5ddwf3fv4Y+ZK9dJO6tzuwc2I1zqOf5P19k86tH/2fJzvsYxj6Z3Xux3buv7PVuPniDc6tv+jFa1k8/XJyeb9MNm6Kzb6+9ax37uVv9v1z9r/wOb1H0/a12trT1/GT/v+Tbsd2+79vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr/Kz+J45v3v91uv/3R8QXPdb/1tFbXU8dhPafe6r2f/rEvY+//LFb+b21/9vN1Il8Ty/9X68XuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G5XHgAAAAAAAAAAAAAAAAAAAAbEwS6f/8/8MbLbVwc8c77yG4bXlvHfj296AgaS//8wvMQ/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/AMAAAAAAAAAAAAAAAAAAAAAAAAAAEBfnT93Ltsaqw+vz2b5uavLSwvVq6fm0tpCsbI0W5ytLl4pzler8+W0OFutbPX3ytXqlanpWLo2WU9r9cna8sqFSnXpcv3CpUppPr2Qjj2XWgEAAAAAAAAAAAAAAAAAAMCLpba8slAql9NFCYltJUYH4zIk+pzY7Z4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB75LwAA///MUDi3") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)={{}, {}, [], {}, [], {0x10, 0x6}}, 0x24, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r4, 0xee01, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xa00) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delsa={0x38, 0x11, 0x1, 0x70bd2c, 0x25dfdbfe, {@in6=@remote, 0x4d2, 0xa, 0x33}, [@tfcpad={0x8, 0x16, 0x8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfffeffff, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7d, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x7, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0xa, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x1, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x7, 0x3, 0xd7c5, 0x2, 0x10000, 0x4, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x6ee1847d, 0x100, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x8, 0x7, 0x65fe, 0x5, 0x6, 0x4, 0x80000000, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_dccp(0x2, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x25, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4be}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x9, 0x1, 0x0, r8}, @generic={0x2, 0x8, 0x2, 0x7ff, 0x8}, @generic={0xe4, 0x2, 0x3, 0x4, 0x2c015404}, @alu={0x7, 0x1, 0x9, 0x3, 0xb, 0xfffffffffffffffc, 0xfffffffffffffffc}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, r8}, @map_val={0x18, 0x3, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x6, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000240)=[{0x2, 0x2, 0x6, 0x2}, {0x0, 0x2, 0x0, 0x5}], 0x10, 0x3ff, @void, @value}, 0x94) 10.491195794s ago: executing program 5 (id=8731): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x90) 9.921015278s ago: executing program 5 (id=8742): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (fail_nth: 6) 9.818858769s ago: executing program 35 (id=8742): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (fail_nth: 6) 2.187966444s ago: executing program 0 (id=8906): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, 0x625a, 0x0, 0x0, 0x0, 0xc3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r4, 0x1}, 0x14}}, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) tee(0xffffffffffffffff, r6, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000ffffff1811000013e0806c83b22924abb2cc22724faa082b56d2611f47fd23cb90ce655094cf9c72ccccb0644e48c9b343cdc6a65ee90cbd8d5e114c0fc3b41396f75429cc60cb15786c376e4c35c9b2dde9554abac83ddc144c61fa5f94b3296a9c537ffd94f26aafb52132", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newqdisc={0x264, 0x24, 0x22, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0x5, 0xffe0}, {0x10, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x260f}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x9c, 0x8, 0x6, 0x2, 0x3, 0x3, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}, {{0x1c, 0x1, {0xc7, 0x4, 0x5, 0x0, 0x2, 0x3f20, 0x9, 0x1}}, {0x6, 0x2, [0xcc78]}}, {{0x1c, 0x1, {0x80, 0x0, 0x1, 0xfff, 0x1, 0x3, 0xee23, 0x1}}, {0x6, 0x2, [0x7fff]}}, {{0x1c, 0x1, {0x3, 0x6, 0x9, 0x7df5, 0x0, 0x6f, 0x3, 0x6}}, {0x10, 0x2, [0x7, 0x6, 0xfff7, 0x5, 0xe0c4, 0xb6]}}, {{0x1c, 0x1, {0x0, 0x3, 0xf, 0x10001, 0x4b76ceb049394fdc, 0xc1e, 0x9, 0x3}}, {0xa, 0x2, [0x2, 0x8, 0x1000]}}, {{0x1c, 0x1, {0xf, 0xfb, 0x5, 0x8, 0x2, 0x0, 0x9a, 0x2}}, {0x8, 0x2, [0x6, 0xff]}}, {{0x1c, 0x1, {0x6, 0x4, 0x1, 0x80, 0x1, 0x4, 0x1, 0x2}}, {0x8, 0x2, [0x7, 0x1]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x3, 0x200, 0xbe96, 0x2, 0x794d, 0x1, 0x4}}, {0xc, 0x2, [0x9, 0x7fff, 0x7, 0x12]}}, {{0x1c, 0x1, {0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x200000, 0x3}}, {0xa, 0x2, [0x4, 0xf, 0x200]}}, {{0x1c, 0x1, {0xf, 0x9, 0x7fff, 0xfffffffe, 0x0, 0x3, 0x4c0}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x10, 0x8000, 0x0, 0x2, 0xc, 0xfff, 0x1}}, {0x6, 0x2, [0xd3]}}, {{0x1c, 0x1, {0x5, 0x7, 0x88, 0xffffffc3, 0x1, 0x1, 0x6, 0x4}}, {0xc, 0x2, [0x7fff, 0x2, 0x1ff, 0x0]}}, {{0x1c, 0x1, {0x8, 0x1, 0xc, 0x7, 0x0, 0x7, 0x40, 0x4}}, {0xc, 0x2, [0x4, 0x81, 0x3, 0x8]}}, {{0x1c, 0x1, {0x6, 0xa, 0x8, 0xd323, 0x2, 0x1, 0x5, 0x2}}, {0x8, 0x2, [0xa11d, 0x8]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x91b00}]}, 0x264}, 0x1, 0x0, 0x0, 0x4004000}, 0x30000000) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r9 = socket(0x10, 0x3, 0x4) r10 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1, 0x0, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6gre0\x00', r11, 0x29, 0xd5, 0x2, 0x5, 0x4, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}, 0x20, 0x8000, 0x7, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @loopback={0x30000000000}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x6}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x1ff) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYBLOB="f51ab87fb8d6b084af0a76d928db1a920ab0363f58bbf5731f06fa76157294b2183f921c3f1b38c20cff76c721ca913d1d24a50b0f7553687a0b59608d25136fbd449101ab206189e9d9924bd40c03cb204a600d00a45c3950e62b966d9335241e0cff30d479af966cb1504788a1c40a44ff780bf3cf61c4bcf6df45df0765dd46d19ed8a5525c132698308093a9d1aef4d2b636edee1207e4021b0859588e23b60bab4e895014f095f4bbbfa9711029972777ad64a32e8d820f68bb6f9a2125afc1", @ANYRES64=r8], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x3, '\x00', r12, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94) 2.002975556s ago: executing program 2 (id=8913): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_setup(0x5, &(0x7f00000002c0)=0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000440)='/sys/power/pm_wakeup_irq', 0x109480, 0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8, r3, &(0x7f0000000000)='k', 0x1, 0xa, 0x0, 0x0, r3}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000040000000400010000000000", @ANYRES32, @ANYBLOB='\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000002000500000000000000e5ccb1877589945566ae89c38f83db1c00"/44], 0x48) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 1.613823948s ago: executing program 6 (id=8917): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (fail_nth: 1) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPSET_CMD_GET_BYNAME(r0, 0x0, 0x4894) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000002e00000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x79, &(0x7f0000000000)=""/121, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.612534109s ago: executing program 2 (id=8918): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x40000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="1938fd79af71c2c7b035430b6589fc84afc816d967ff5efb6ed0ff577e48dc397ffc4e623aa17f34a44e7e199ab54bc6f679187d0820c04e141a64ac48e8af2894d749a6143c68c71675a1997c62675dd11f5b4b1bb2aeb8845973c10d66a90fdb2781e2edd3308059af4c8bd13608095da14263", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x14000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) io_uring_enter(r2, 0x5b46, 0x5a5b, 0x0, &(0x7f0000000340)={[0xfffffffffffffffa]}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000500000000000000000800000000000000000000000000000091c7996f1f580e0bd0774fe7c781a4df196957c1012f10312edd5599f5623521355e497027e33869fe893436cca957bdaa330a2814b05e95e27168bb206a24da146c67b785b8249056394de5d45f6eec5759123a62c8c0a55ee495f2433a63ecd0dae11cc015a6e14c8b10a1897d11f6287b4bfad5179f18a86f35"], 0x50) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x7, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000160001000000180095000000000000000500feff"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000001bc0)='4', &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000140), &(0x7f00000002c0)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f0000000340), &(0x7f0000000400)=r4}, 0x20) timer_settime(0x0, 0x1, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e5ff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="800000000000bf000000b70500000800000085000000b60000"], &(0x7f00000007c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000280)={0xfffffff8, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) 1.43663291s ago: executing program 6 (id=8919): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_setup(0x5, &(0x7f00000002c0)=0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000440)='/sys/power/pm_wakeup_irq', 0x109480, 0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8, r3, &(0x7f0000000000)='k', 0x1, 0xa, 0x0, 0x0, r3}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000040000000400010000000000", @ANYRES32, @ANYBLOB='\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000002000500000000000000e5ccb1877589945566ae89c38f83db1c00"/44], 0x48) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r4 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 1.274835321s ago: executing program 2 (id=8921): syz_usbip_server_init(0x2) 1.274000311s ago: executing program 0 (id=8922): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) pipe(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00@\x00\x00\x00\x00\b\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) link(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x12, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x800000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) 1.196071692s ago: executing program 6 (id=8923): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000) 1.154742402s ago: executing program 6 (id=8924): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r1, r1, 0x0, 0xfffe80) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.090335743s ago: executing program 0 (id=8926): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000100000000000000000001811000003c92fbe6dfec2a1d538a73efcabe397dfacfd3dd028a3da14890dd55b0b533ba2709472c528028a19e396", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000002c0), &(0x7f00000004c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080026bd7000fddbdf25030000000c00018008000300010000002800018008000100", @ANYRES32=0x0, @ANYBLOB="14000200627269656765300000000000000000000800030003000000050002000d00000005000500740000000c02018008"], 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x14) sync() sync() 981.527033ms ago: executing program 0 (id=8929): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x19, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x1a}, @generic={0x7, 0x7, 0xd, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x32, &(0x7f0000000040)=""/50, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0x8, 0xbd8, 0xa48}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[{0x0, 0x5, 0x1, 0xa}], 0x10, 0x1ff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d00)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) 934.537214ms ago: executing program 0 (id=8931): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r1, 0x0, 0x0, 0x0) 876.741194ms ago: executing program 8 (id=8932): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x800000000000005, 0xc201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x61e, 0xa}, 0x100000, 0x1, 0x0, 0x6, 0x40, 0x40000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000780)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000c80000000000000000000000000a40000000060a0b0400000000000000000200000014000480100001800a00010071756575650000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x68}}, 0x80) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f00000001c0)={0x0, 0xe, 0xcf, 0xa09, 0xe0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='kfree\x00', r5}, 0x18) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) 871.325604ms ago: executing program 7 (id=8933): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x7ff, 0x7, 0x0, 0x7f, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r2, 0x0) 859.882604ms ago: executing program 7 (id=8935): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_setup(0x5, &(0x7f00000002c0)=0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000440)='/sys/power/pm_wakeup_irq', 0x109480, 0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8, r3, &(0x7f0000000000)='k', 0x1, 0xa, 0x0, 0x0, r3}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000040000000400010000000000", @ANYRES32, @ANYBLOB='\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000002000500000000000000e5ccb1877589945566ae89c38f83db1c00"/44], 0x48) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r4 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 798.642354ms ago: executing program 8 (id=8936): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c200000050a245d5cde008060001000006040003000000000000000000"], 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x7c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0xd, 0x4}, {0xffff}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_EMATCHES={0x48, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x1}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x9, 0x8, 0x378}, {0x4, 0x6, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0x8}, {0x8, 0x4, 0x1ff, 0x4, 0xb, 0x3f669e7f6e797bf1}}}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x44082) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) socket(0x2a, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000f3ffa69f8848307c000000000000000081"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="64000000af6a861892d8dc1c5eef6f3b660d3b46c72f1cc72be3991c03dd526d53918dedcdbe7b087cbbd6a6090cdae3af20d755db76f19f23f793dc2deb7e4af130a85dbd9487a491a4f0aabac625db76b92364d39a65cedcb35df9dd55faaedc6ae49a5b62", @ANYRES16=r5, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b757000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) pipe2$9p(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400110005000000020000000410369d8483e83ebd81c789ec24bb654a35fe2139f8786afaf795ab03d5f865dce446f24e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) 694.417405ms ago: executing program 2 (id=8937): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) pipe(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00@\x00\x00\x00\x00\b\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) link(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x12, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x800000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) 574.360716ms ago: executing program 7 (id=8938): r0 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x4004, &(0x7f0000000140)={0xa, 0x4e23, 0x10, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xfffffffb}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfdcc, @mcast2, 0xc}, 0x1c) 395.663097ms ago: executing program 8 (id=8939): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x800000000000005, 0xc201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x61e, 0xa}, 0x100000, 0x1, 0x0, 0x6, 0x40, 0x40000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000780)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000c80000000000000000000000000a40000000060a0b0400000000000000000200000014000480100001800a00010071756575650000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x68}}, 0x80) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f00000001c0)={0x0, 0xe, 0xcf, 0xa09, 0xe0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='kfree\x00', r5}, 0x18) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) gettid() ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {0x0, 0x20be}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xc42e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xc0000000}, {}, {}, {0x80000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) faccessat(r4, &(0x7f0000000180)='./file0\x00', 0xc) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000040000000400010000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x48) 395.028877ms ago: executing program 7 (id=8940): mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r0, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_setup(0x4cc1, &(0x7f0000000140)={0x0, 0xd0f9, 0x2000, 0x3, 0x96}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r0, @ANYBLOB="b9b9073524a570c5b795e1686a0ad543ff21c558bea1d6a95de1c545e1a0e3b66782412ee8bc1823fbf99ca08a20abc4889e479ec650db239fd437aa2a0deb64c7fe8b581e8eb29193a2", @ANYRES16=r1, @ANYRES8=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) r7 = syz_open_pts(0xffffffffffffffff, 0x102) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8100) poll(&(0x7f0000000000)=[{r5, 0x421d}, {r2, 0x2040}, {r2, 0x6640}, {r7, 0x8444}, {r5, 0x4018}], 0x5, 0xec) 393.943588ms ago: executing program 8 (id=8941): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000007c0)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000e80)={0x0, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000040, 0x480, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x7, 0x13fd, 0xffffffff, 0x627a, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000ac0)=ANY=[@ANYRES16=0x0], 0x1, 0x27a, &(0x7f0000000540)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0900000004000000e27f00000100000012000000", @ANYRES32, @ANYBLOB="00000000000000000000001a0000000000000000a356cb7a746688d144f140e8b8b29e18af0065541aba1afeb762da5debd4e557c808219d7bde8b9e731430473fcc0300e383f8", @ANYRES32=0x0, @ANYBLOB="0100"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000d40)='./file1\x00', 0x3200010, &(0x7f0000000200)=ANY=[], 0x1, 0x7c7, &(0x7f0000001540)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') stat(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa46041, 0x0, 0x1, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000500)={0xdcdd, 0x0, [0x7fffffffffffffff, 0x2, 0x69, 0x7fff], 0x0}) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xc, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1818510000", @ANYRES32=r0, @ANYRES16=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/208) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@nogrpid}, {@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x200}}]}, 0xfe, 0x452, &(0x7f0000000800)="$eJzs3MtvG0UYAPBvnTh9URJKefQFgYKoeCRN+qAHLkUgcQAJCQ5FnEyaVqVug5og0aqCwiEcUSXuiCMSfwEXygUBJySucEdIEcqFwslo7d3UOLYTJ05c4t9PWnXGO+7Mt7sTj2d2HUDfGo2IAxFxT0T8GhHDEZE0Fhit/XN78frU34vXp5KoVN74M6mW+2vx+lReNH/frlqmMtCm3vm3I0rl8vSVLD8+d+m98dmr1567cKl0fvr89OXJU6eOHzs0dHLyRFfi3J22df+HMwf3vfLWzdemztx858evkyzuaIijW0arR625J7tdWY/trksngz1sCB1J+2h6uorV/j8cA7Fjad9wvPxJTxsHbKhKpVDZ1nr3jQqwhaWjeaAf5R/06ffffNukocddYeF0LM1j3M622p7BKGRlihtY/2hEnLnxzxfpFhs0DwEAUO/W6Yh4ttn4rxAP1pW7N1sbGomI+yJiT0TcHxF7I+KBiGrZhyLi4Q7rb1whWT7+qQyvKbBVSsd/L2RrW/8d/+WjvxgZyHK7q/EXk3MXytNHs2NyJIrb0vxEmzq+e+mXz1rtqx//pVtafz4WzNrxx2DDBN3ZUrG0npjrLXxcWwBYHn8S+TJOOj7eFxH7O/y/8+8YF57+6mCrMivH30YX1pkqX0Y8VTv/N6Ih/lzScn1y4vmTkyfGt0d5+uh4flUs99PP86+3qn9d8XfBwq1K7Gx6/S/FP5Jsj5i9eu1idb12tvM65n/7tOV3mrVd/3OloeTNanooe+2D0tzclYmIoeTV5a9P3nlvns/Lp9f/kcPN+/+euHMkDkREehEfiohHIuLRrO2PRcTjEXG4Tfw/vPjEu53H32ZWvovS+M+udP6j/vx3nhi4+P03ncefS8//8WrqSPZKev5Ximu1DVzPsQMAAID/i0L1HvikMLaULhTGxmr38O+NnYXyzOzcM+dm3r98tnav/EgUC/lM13DdfOhENjec5ycb8seyeePPB3ZU82NTM+VO5xOB7trVov+nfm/3AA+wNXheC/qX/g/9S/+H/qX/Q//S/6F/Nev/H/WgHcDmW+Hzf8dmtQPYfMb/0L/0f+hf+j/0pZbPxhfW9ci/RI8S3w6t77caVp+Iwl0S8pZJFKPprsFV/5jFGhJJRGxruqvXf5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6498AAAD//9di55E=") socket$nl_route(0x10, 0x3, 0x0) socket(0x26, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x0, 0xc, &(0x7f0000001000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) 393.080667ms ago: executing program 2 (id=8942): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020400) r4 = socket(0x10, 0x3, 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000340)={0xff02, 0x0, 0x0, 0xffff, 0x0, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0x5f) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10) close(0xffffffffffffffff) 392.024228ms ago: executing program 2 (id=8943): statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) r0 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000140)={[{@init_itable}]}, 0x1, 0x786, &(0x7f0000001900)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x10927e, 0x114) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000030303030133130303030a799c45f1556beaebc0f59"]) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)='o', 0x1}], 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108) lchown(0x0, 0x0, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x20) r3 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x6, 0x80, 0xf7, 0x9, 0x0, 0x4, 0x40020, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0x138a02, 0xb, 0x80, 0x7, 0xdc, 0x2ad, 0x99ff, 0x0, 0x3ff, 0x0, 0x1}, 0x0, 0xd, r2, 0xa) fallocate(r3, 0x0, 0x7, 0xdfa) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x6, &(0x7f0000656000/0x2000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xb3d22000) 373.732467ms ago: executing program 8 (id=8944): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) (fail_nth: 1) dup2(r2, r1) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r1, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) 147.481839ms ago: executing program 6 (id=8945): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x7ff, 0x7, 0x0, 0x7f, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r2, 0x0) 72.91942ms ago: executing program 8 (id=8946): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYRES16, @ANYRESDEC=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) setpriority(0x1, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000240)=@req3={0x2, 0x3, 0x2, 0x7ea, 0x5, 0x6}, 0x1c) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="45f7000000000000000032000000040006"], 0x1c}}, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997e1a42e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a960002000000000000ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r11) sendmsg$NL80211_CMD_GET_WIPHY(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="59bb22bd70000000200011000000"], 0x28}}, 0x0) dup2(r2, r1) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r1, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) 71.98378ms ago: executing program 0 (id=8947): syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000080), 0x0, 0x79a, &(0x7f0000001780)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sync() (async) sync() set_mempolicy(0x6005, 0x0, 0x4) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x5000) (async) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x21) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000005c0)=[{0x94a5, 0x9, 0x7, 0x100004}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x18) (async) nanosleep(&(0x7f0000000040), 0x0) (async) syz_io_uring_setup(0xec1, &(0x7f0000000440)={0x0, 0x2119, 0x4000, 0x2, 0x40000}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x118, &(0x7f0000000580)=0xffbffffc, 0x0, 0x4) (async) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x8806, 0x3, 0x634e, 0xf, 0x0, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x1000}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xdc) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000180)="1a00000002000000", 0x8) (async) sendto$inet6(r5, &(0x7f0000000600)="b8af4eb8c80779b30bf26e32eb8676f814ccadd488dd93da82555d00abac289aad88d0ddaae3081861f1cf5af69d8a42e9b3b5ed5d68f01a18e261feeddeee7e611eba7390db4cc957ba5c3373ce0fc00f5078417d86f98cd45b7f8817f924bd4ea49a1e5213d91a697b8075b82b4fe09fb423a4fe649f98060741759a79a400000000009f13c64295d70f4a", 0x8c, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) 66.38022ms ago: executing program 7 (id=8948): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x4c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x4c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES8=r0], 0x48) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)="5e993c9d0939fcbaa1e7968ee755062b608b5b2ea6f9955dce0d7c83e75bcd5c1a10e69637c7b47e29c86d4f4e0d25ed2fc04dcb0bb82954076a7bece21688fdbcd7289297936da71e1f97fcde129fe3159b37e688c398186db4006fcad92c677068bc9e009ab44ef3677592d64df77a1e3233b59421ffe8a3f48fe47c1e7a41ca235e45668689e2d950aced4739148bbbe18e2e", 0x94}, {&(0x7f0000000340)="fc", 0x1}, {&(0x7f00000003c0)="e01d97cb566a685fd08b5b996bc025e9574983d367cf4b2af8c81fcacb9bd829e4ec261ed1dacc73295fa44617ba1791b79a19c04df6847c5668afac7e1ca72b35c0992fe17004a47892910ce4688114a653dab0de80be38737c16108736b192d0ca34c27ca1236b2c8b12d96ec39e2918f4afe768273f35623fe9a08f996309fb5bd5941e0b8072572ba373dd763e33b8bdec892dd053093b2cc4872dc115c7fe58bd9b5f4b318a99a9b11f6fc782d1d61ba6d5ba89409fbf58082741", 0xbd}, {&(0x7f0000000480)="349478e0e78046db655a2e1f1c12ef5d491b21e0b759c9e541b55d6b01fe6c442ae2798072b8a7d2849eb71de8e2038922d17c81169db7c134e1fc1f1b1b9f565b5d4f4e6ac535779c8a5f", 0x4b}, {&(0x7f0000000500)="96b57639e6e7877da7f31f5a5ea03868402b0383", 0x14}, {&(0x7f0000000540)="9fd23a981ead57cecc6bf5fac33a00450b7802384dc80701ece092584870b6319334ce853cf2c41d5c400a7f82f6fcc417cdf33c8cb5c8385dc245ab9d4e1c3e806bfe7882124899abc6164114e036b0cee5ba11c0dcc8889b2d8acec0f6b29a766a2f9d98bd0cd075ff4cc49e9914c5127ae83ff4641a5eed", 0x79}], 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r3) 15.11808ms ago: executing program 6 (id=8949): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getdents64(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 7 (id=8950): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff00004485"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fedbdf250800000018000280140003801000018004000300080001000f0000000c00018008000100", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) kernel console output (not intermixed with test programs): '. [ 383.379920][T26163] bridge0: port 1(batadv1) entered blocking state [ 383.386643][T26163] bridge0: port 1(batadv1) entered disabled state [ 383.393297][T26163] batadv1: entered allmulticast mode [ 383.400231][T26163] batadv1: entered promiscuous mode [ 383.405589][T26167] loop6: detected capacity change from 0 to 128 [ 383.447245][T26170] FAULT_INJECTION: forcing a failure. [ 383.447245][T26170] name failslab, interval 1, probability 0, space 0, times 0 [ 383.459919][T26170] CPU: 1 UID: 0 PID: 26170 Comm: syz.0.8494 Tainted: G W 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 383.459945][T26170] Tainted: [W]=WARN [ 383.459950][T26170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 383.459960][T26170] Call Trace: [ 383.459967][T26170] [ 383.459973][T26170] dump_stack_lvl+0xf2/0x150 [ 383.460000][T26170] dump_stack+0x15/0x1a [ 383.460048][T26170] should_fail_ex+0x24a/0x260 [ 383.460074][T26170] should_failslab+0x8f/0xb0 [ 383.460099][T26170] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 383.460119][T26170] ? shmem_alloc_inode+0x34/0x50 [ 383.460140][T26170] shmem_alloc_inode+0x34/0x50 [ 383.460186][T26170] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 383.460205][T26170] alloc_inode+0x3c/0x160 [ 383.460231][T26170] new_inode+0x1e/0x100 [ 383.460265][T26170] shmem_get_inode+0x24e/0x730 [ 383.460292][T26170] shmem_mknod+0x44/0x180 [ 383.460312][T26170] ? __pfx_shmem_create+0x10/0x10 [ 383.460334][T26170] shmem_create+0x34/0x40 [ 383.460358][T26170] path_openat+0xea3/0x1fc0 [ 383.460411][T26170] do_filp_open+0x107/0x230 [ 383.460437][T26170] do_sys_openat2+0xab/0x120 [ 383.460454][T26170] __x64_sys_creat+0x66/0x90 [ 383.460471][T26170] x64_sys_call+0x1084/0x2dc0 [ 383.460564][T26170] do_syscall_64+0xc9/0x1c0 [ 383.460593][T26170] ? clear_bhb_loop+0x55/0xb0 [ 383.460615][T26170] ? clear_bhb_loop+0x55/0xb0 [ 383.460635][T26170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.460722][T26170] RIP: 0033:0x7ff407fbd169 [ 383.460737][T26170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.460752][T26170] RSP: 002b:00007ff406627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 383.460767][T26170] RAX: ffffffffffffffda RBX: 00007ff4081d5fa0 RCX: 00007ff407fbd169 [ 383.460778][T26170] RDX: 0000000000000000 RSI: 000000000000014d RDI: 0000400000000040 [ 383.460788][T26170] RBP: 00007ff406627090 R08: 0000000000000000 R09: 0000000000000000 [ 383.460876][T26170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.460886][T26170] R13: 0000000000000000 R14: 00007ff4081d5fa0 R15: 00007ffc7d1d40d8 [ 383.460900][T26170] [ 383.729284][T26184] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.741373][T26186] loop6: detected capacity change from 0 to 128 [ 383.748039][T26186] vfat: Unknown parameter '' [ 383.775073][T26184] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.787869][T26187] netlink: 'syz.7.8501': attribute type 10 has an invalid length. [ 383.797972][T26187] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 383.807014][T26187] team0: Failed to send options change via netlink (err -105) [ 383.814589][T26187] team0: Port device geneve1 added [ 383.827018][T26184] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.885326][T26184] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.896900][T20628] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 383.906186][T20628] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 383.971013][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 383.971027][ T29] audit: type=1400 audit(1741276965.498:35298): avc: denied { create } for pid=26189 comm="syz.0.8503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 383.971902][T26184] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.021654][T26184] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.034074][T26197] loop5: detected capacity change from 0 to 128 [ 384.038021][T26184] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.057843][T26195] xt_hashlimit: max too large, truncated to 1048576 [ 384.075990][ T29] audit: type=1400 audit(1741276965.608:35299): avc: denied { unmount } for pid=25468 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 384.077066][T26184] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.114750][ T29] audit: type=1326 audit(1741276965.638:35300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26200 comm="syz.0.8508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff407fbd169 code=0x7ffc0000 [ 384.138495][ T29] audit: type=1326 audit(1741276965.638:35301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26200 comm="syz.0.8508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff407fbd169 code=0x7ffc0000 [ 384.162070][ T29] audit: type=1326 audit(1741276965.638:35302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26200 comm="syz.0.8508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7ff407fbd169 code=0x7ffc0000 [ 384.185691][ T29] audit: type=1326 audit(1741276965.638:35303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26200 comm="syz.0.8508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff407fbd169 code=0x7ffc0000 [ 384.209359][ T29] audit: type=1326 audit(1741276965.638:35304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26200 comm="syz.0.8508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff407fbd169 code=0x7ffc0000 [ 384.232938][ T29] audit: type=1326 audit(1741276965.638:35305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26200 comm="syz.0.8508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff407fbd1a3 code=0x7ffc0000 [ 384.256454][ T29] audit: type=1326 audit(1741276965.638:35306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26200 comm="syz.0.8508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff407fbbc1f code=0x7ffc0000 [ 384.279874][ T29] audit: type=1326 audit(1741276965.648:35307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26200 comm="syz.0.8508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff407fbd1f7 code=0x7ffc0000 [ 384.470592][T26223] netlink: 'syz.5.8517': attribute type 1 has an invalid length. [ 384.528956][T26227] loop6: detected capacity change from 0 to 128 [ 384.598975][T26233] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.659114][T26236] netlink: 'syz.6.8520': attribute type 10 has an invalid length. [ 384.681998][T26237] netlink: 'syz.0.8521': attribute type 14 has an invalid length. [ 384.720160][T26236] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 384.762468][T26236] team0: Failed to send options change via netlink (err -105) [ 384.770032][T26236] team0: Port device geneve1 added [ 384.825240][T26233] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.956053][T26233] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.995245][T26233] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.060005][T26233] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.070952][T26233] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.082370][T26233] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.093254][T26233] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.289166][T26266] xt_hashlimit: max too large, truncated to 1048576 [ 385.882563][T26283] validate_nla: 1 callbacks suppressed [ 385.882579][T26283] netlink: 'syz.5.8539': attribute type 1 has an invalid length. [ 386.108430][T26063] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.137261][T26063] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.157733][T26063] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.180735][T26063] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.395366][T26305] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.418779][T26303] xt_hashlimit: max too large, truncated to 1048576 [ 386.466207][T26305] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.499289][T26307] loop5: detected capacity change from 0 to 1024 [ 386.508358][T26307] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 386.520340][T26307] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 386.530038][T26307] EXT4-fs (loop5): orphan cleanup on readonly fs [ 386.530900][T26318] netlink: 'syz.6.8551': attribute type 1 has an invalid length. [ 386.538847][T26307] EXT4-fs error (device loop5): __ext4_get_inode_loc:4435: comm syz.5.8547: Invalid inode table block 0 in block_group 0 [ 386.560064][T26305] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.564757][T26307] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 386.579697][T26307] EXT4-fs error (device loop5): ext4_quota_write:7299: inode #3: comm syz.5.8547: mark_inode_dirty error [ 386.591163][T26307] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.8547: Failed to acquire dquot type 0 [ 386.604242][T26307] EXT4-fs error (device loop5): __ext4_get_inode_loc:4435: comm syz.5.8547: Invalid inode table block 0 in block_group 0 [ 386.617258][T26307] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 386.627726][T26307] EXT4-fs error (device loop5): ext4_ext_truncate:4457: inode #15: comm syz.5.8547: mark_inode_dirty error [ 386.628045][T26305] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.644134][T26307] EXT4-fs error (device loop5): __ext4_get_inode_loc:4435: comm syz.5.8547: Invalid inode table block 0 in block_group 0 [ 386.663283][T26307] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 386.665802][T26320] loop6: detected capacity change from 0 to 128 [ 386.674884][T26307] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 386.688521][T26307] EXT4-fs error (device loop5): __ext4_get_inode_loc:4435: comm syz.5.8547: Invalid inode table block 0 in block_group 0 [ 386.702600][T26307] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 386.712416][T26307] EXT4-fs error (device loop5): ext4_truncate:4240: inode #15: comm syz.5.8547: mark_inode_dirty error [ 386.723784][T26307] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 386.732808][T26307] EXT4-fs (loop5): 1 truncate cleaned up [ 386.800035][T26329] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.846417][T26329] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.855447][T26338] loop5: detected capacity change from 0 to 128 [ 386.863770][T26336] netlink: 'syz.6.8557': attribute type 10 has an invalid length. [ 386.871611][T26336] __nla_validate_parse: 9 callbacks suppressed [ 386.871653][T26336] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8557'. [ 386.888157][T26338] bio_check_eod: 56062 callbacks suppressed [ 386.888173][T26338] syz.5.8561: attempt to access beyond end of device [ 386.888173][T26338] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 386.909878][T26336] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 386.915201][T26337] syz.5.8561: attempt to access beyond end of device [ 386.915201][T26337] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 386.935564][T26338] syz.5.8561: attempt to access beyond end of device [ 386.935564][T26338] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 386.948866][T26338] syz.5.8561: attempt to access beyond end of device [ 386.948866][T26338] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 386.962099][T26338] syz.5.8561: attempt to access beyond end of device [ 386.962099][T26338] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 386.963312][T26329] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.975385][T26338] syz.5.8561: attempt to access beyond end of device [ 386.975385][T26338] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 386.995438][T26344] loop2: detected capacity change from 0 to 128 [ 387.014167][T26338] syz.5.8561: attempt to access beyond end of device [ 387.014167][T26338] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 387.041560][T26338] syz.5.8561: attempt to access beyond end of device [ 387.041560][T26338] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 387.056493][T26338] syz.5.8561: attempt to access beyond end of device [ 387.056493][T26338] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 387.070552][T26338] syz.5.8561: attempt to access beyond end of device [ 387.070552][T26338] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 387.084758][T26329] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.100306][T26350] loop2: detected capacity change from 0 to 128 [ 387.502292][T26368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8573'. [ 387.827582][T26383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8579'. [ 388.173466][T26405] loop2: detected capacity change from 0 to 1024 [ 388.198039][T26405] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.8588: Allocating blocks 385-513 which overlap fs metadata [ 388.213421][T26404] EXT4-fs (loop2): pa ffff88810650ce00: logic 16, phys. 129, len 24 [ 388.221565][T26404] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 388.252301][T26412] loop2: detected capacity change from 0 to 128 [ 388.299494][T26415] loop2: detected capacity change from 0 to 128 [ 388.356887][T26416] FAULT_INJECTION: forcing a failure. [ 388.356887][T26416] name failslab, interval 1, probability 0, space 0, times 0 [ 388.369593][T26416] CPU: 0 UID: 0 PID: 26416 Comm: syz.5.8589 Tainted: G W 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 388.369618][T26416] Tainted: [W]=WARN [ 388.369639][T26416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 388.369648][T26416] Call Trace: [ 388.369654][T26416] [ 388.369662][T26416] dump_stack_lvl+0xf2/0x150 [ 388.369740][T26416] dump_stack+0x15/0x1a [ 388.369757][T26416] should_fail_ex+0x24a/0x260 [ 388.369786][T26416] ? alloc_fdtable+0x74/0x1b0 [ 388.369872][T26416] should_failslab+0x8f/0xb0 [ 388.369901][T26416] __kmalloc_cache_noprof+0x4e/0x320 [ 388.369975][T26416] alloc_fdtable+0x74/0x1b0 [ 388.370001][T26416] dup_fd+0x504/0x580 [ 388.370027][T26416] copy_files+0x98/0xe0 [ 388.370055][T26416] copy_process+0xc6a/0x1f50 [ 388.370158][T26416] kernel_clone+0x167/0x5e0 [ 388.370186][T26416] ? vfs_write+0x644/0x920 [ 388.370213][T26416] __x64_sys_clone+0xe7/0x120 [ 388.370262][T26416] x64_sys_call+0x2d7e/0x2dc0 [ 388.370283][T26416] do_syscall_64+0xc9/0x1c0 [ 388.370311][T26416] ? clear_bhb_loop+0x55/0xb0 [ 388.370333][T26416] ? clear_bhb_loop+0x55/0xb0 [ 388.370359][T26416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.370385][T26416] RIP: 0033:0x7f77003fd169 [ 388.370409][T26416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.370451][T26416] RSP: 002b:00007f76fea45fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 388.370516][T26416] RAX: ffffffffffffffda RBX: 00007f7700616080 RCX: 00007f77003fd169 [ 388.370526][T26416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 388.370538][T26416] RBP: 00007f76fea46090 R08: 0000000000000000 R09: 0000000000000000 [ 388.370550][T26416] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 388.370562][T26416] R13: 0000000000000000 R14: 00007f7700616080 R15: 00007ffca008dbf8 [ 388.370579][T26416] [ 388.842409][T26419] netlink: 'syz.0.8592': attribute type 1 has an invalid length. [ 388.871045][T26305] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.885008][T26305] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.900215][T26305] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.918928][T26305] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.086374][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 389.086390][ T29] audit: type=1400 audit(1741276970.618:35608): avc: denied { ioctl } for pid=26434 comm="syz.0.8600" path="socket:[95003]" dev="sockfs" ino=95003 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 389.239600][T26449] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.295126][T26449] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.319408][T26450] lo speed is unknown, defaulting to 1000 [ 389.366673][T26449] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.415748][T26449] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.609255][ T29] audit: type=1326 audit(1741276971.138:35609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26458 comm="syz.0.8609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff407fbd169 code=0x7ffc0000 [ 389.633053][ T29] audit: type=1326 audit(1741276971.138:35610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26458 comm="syz.0.8609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff407fbd169 code=0x7ffc0000 [ 389.656678][ T29] audit: type=1326 audit(1741276971.138:35611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26458 comm="syz.0.8609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff407fbd169 code=0x7ffc0000 [ 389.812743][T26329] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.826711][T26329] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.838376][T26329] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.852076][T26329] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.904005][ T29] audit: type=1326 audit(1741276971.438:35612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26463 comm="syz.6.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702fe3d169 code=0x7ffc0000 [ 389.932999][ T29] audit: type=1326 audit(1741276971.458:35613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26463 comm="syz.6.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f702fe3d169 code=0x7ffc0000 [ 389.956742][ T29] audit: type=1326 audit(1741276971.458:35614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26463 comm="syz.6.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702fe3d169 code=0x7ffc0000 [ 389.980372][ T29] audit: type=1326 audit(1741276971.458:35615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26463 comm="syz.6.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f702fe3bad0 code=0x7ffc0000 [ 390.004019][ T29] audit: type=1326 audit(1741276971.458:35616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26463 comm="syz.6.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f702fe3e997 code=0x7ffc0000 [ 390.027652][ T29] audit: type=1326 audit(1741276971.458:35617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26463 comm="syz.6.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f702fe3d169 code=0x7ffc0000 [ 390.131486][T26469] loop5: detected capacity change from 0 to 164 [ 390.143474][T26469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8613'. [ 390.381659][T26479] FAULT_INJECTION: forcing a failure. [ 390.381659][T26479] name failslab, interval 1, probability 0, space 0, times 0 [ 390.394357][T26479] CPU: 0 UID: 0 PID: 26479 Comm: syz.7.8616 Tainted: G W 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 390.394384][T26479] Tainted: [W]=WARN [ 390.394390][T26479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 390.394400][T26479] Call Trace: [ 390.394407][T26479] [ 390.394416][T26479] dump_stack_lvl+0xf2/0x150 [ 390.394444][T26479] dump_stack+0x15/0x1a [ 390.394464][T26479] should_fail_ex+0x24a/0x260 [ 390.394572][T26479] should_failslab+0x8f/0xb0 [ 390.394602][T26479] __kmalloc_node_noprof+0xad/0x410 [ 390.394635][T26479] ? __kvmalloc_node_noprof+0x72/0x170 [ 390.394659][T26479] __kvmalloc_node_noprof+0x72/0x170 [ 390.394685][T26479] io_sqe_buffers_register+0xc6/0x4e0 [ 390.394714][T26479] ? __fget_files+0x17c/0x1c0 [ 390.394767][T26479] __se_sys_io_uring_register+0x908/0x1ef0 [ 390.394793][T26479] ? kstrtouint_from_user+0xb0/0xe0 [ 390.394816][T26479] ? 0xffffffff81000000 [ 390.394853][T26479] ? selinux_file_permission+0x22a/0x360 [ 390.394880][T26479] ? get_pid_task+0x8e/0xc0 [ 390.394904][T26479] ? proc_fail_nth_write+0x12a/0x150 [ 390.394962][T26479] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 390.395059][T26479] ? vfs_write+0x644/0x920 [ 390.395083][T26479] ? putname+0xcf/0xf0 [ 390.395097][T26479] ? __fget_files+0x17c/0x1c0 [ 390.395233][T26479] ? fput+0x1c4/0x200 [ 390.395252][T26479] ? ksys_write+0x176/0x1b0 [ 390.395279][T26479] __x64_sys_io_uring_register+0x55/0x70 [ 390.395360][T26479] x64_sys_call+0x2c52/0x2dc0 [ 390.395385][T26479] do_syscall_64+0xc9/0x1c0 [ 390.395473][T26479] ? clear_bhb_loop+0x55/0xb0 [ 390.395496][T26479] ? clear_bhb_loop+0x55/0xb0 [ 390.395521][T26479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.395548][T26479] RIP: 0033:0x7f13fad1d169 [ 390.395628][T26479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.395698][T26479] RSP: 002b:00007f13f9381038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 390.395712][T26479] RAX: ffffffffffffffda RBX: 00007f13faf35fa0 RCX: 00007f13fad1d169 [ 390.395721][T26479] RDX: 00004000000002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 390.395730][T26479] RBP: 00007f13f9381090 R08: 0000000000000000 R09: 0000000000000000 [ 390.395738][T26479] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 390.395747][T26479] R13: 0000000000000000 R14: 00007f13faf35fa0 R15: 00007fff7ad1d048 [ 390.395760][T26479] [ 390.772375][T26486] loop6: detected capacity change from 0 to 1024 [ 390.799996][T26486] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4115: comm syz.6.8619: Allocating blocks 385-513 which overlap fs metadata [ 390.818320][T26486] EXT4-fs (loop6): pa ffff88810061ee70: logic 16, phys. 129, len 24 [ 390.826423][T26486] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 390.839108][T26486] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 390.851505][T26486] EXT4-fs (loop6): This should not happen!! Data will be lost [ 390.851505][T26486] [ 390.861191][T26486] EXT4-fs (loop6): Total free blocks count 0 [ 390.867202][T26486] EXT4-fs (loop6): Free/Dirty block details [ 390.873098][T26486] EXT4-fs (loop6): free_blocks=128 [ 390.878230][T26486] EXT4-fs (loop6): dirty_blocks=0 [ 390.883250][T26486] EXT4-fs (loop6): Block reservation details [ 390.889281][T26486] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 390.907075][T26492] netlink: 'syz.7.8620': attribute type 1 has an invalid length. [ 390.937823][T26494] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.992681][T26499] netlink: 'syz.6.8621': attribute type 10 has an invalid length. [ 391.000689][T26499] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8621'. [ 391.012497][T26494] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.049669][T26501] loop5: detected capacity change from 0 to 512 [ 391.069734][T26498] team0: Port device geneve1 removed [ 391.077653][T26498] batadv1: left allmulticast mode [ 391.082713][T26498] batadv1: left promiscuous mode [ 391.087815][T26498] bridge0: port 1(batadv1) entered disabled state [ 391.099583][T26501] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.8624: corrupted in-inode xattr: invalid ea_ino [ 391.131375][T26494] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.151277][T26501] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.8624: couldn't read orphan inode 15 (err -117) [ 391.207021][T26494] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.252083][T26514] loop2: detected capacity change from 0 to 128 [ 391.292326][T26516] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8630'. [ 391.340281][T26521] loop2: detected capacity change from 0 to 4096 [ 391.366957][T26523] netlink: 'syz.7.8633': attribute type 1 has an invalid length. [ 391.379979][T26521] dccp_xmit_packet: Payload too large (65472) for featneg. [ 391.426532][T26527] loop5: detected capacity change from 0 to 128 [ 391.508816][T26536] loop7: detected capacity change from 0 to 512 [ 391.527962][T26536] EXT4-fs: inline encryption not supported [ 391.546720][T26536] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.562840][T26536] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.8636: corrupted inode contents [ 391.577754][T26536] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #2: comm syz.7.8636: mark_inode_dirty error [ 391.589725][T26536] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.8636: corrupted inode contents [ 391.618125][T26537] loop2: detected capacity change from 0 to 1024 [ 391.640200][T26537] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 391.654448][T26537] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 391.672761][T26537] EXT4-fs (loop2): orphan cleanup on readonly fs [ 391.689056][T26549] loop7: detected capacity change from 0 to 128 [ 391.696141][T26537] EXT4-fs error (device loop2): __ext4_get_inode_loc:4435: comm syz.2.8639: Invalid inode table block 0 in block_group 0 [ 391.711405][T26537] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 391.721505][T26537] EXT4-fs error (device loop2): ext4_quota_write:7299: inode #3: comm syz.2.8639: mark_inode_dirty error [ 391.733018][T26537] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.8639: Failed to acquire dquot type 0 [ 391.745483][T26537] EXT4-fs error (device loop2): __ext4_get_inode_loc:4435: comm syz.2.8639: Invalid inode table block 0 in block_group 0 [ 391.797507][T26554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8644'. [ 391.814140][T26537] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 391.840154][T26537] EXT4-fs error (device loop2): ext4_ext_truncate:4457: inode #15: comm syz.2.8639: mark_inode_dirty error [ 391.870766][T26537] EXT4-fs error (device loop2): __ext4_get_inode_loc:4435: comm syz.2.8639: Invalid inode table block 0 in block_group 0 [ 391.886135][T26537] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 391.896174][T26537] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 391.921076][T26537] EXT4-fs error (device loop2): __ext4_get_inode_loc:4435: comm syz.2.8639: Invalid inode table block 0 in block_group 0 [ 391.935615][T26537] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 391.945197][T26537] EXT4-fs error (device loop2): ext4_truncate:4240: inode #15: comm syz.2.8639: mark_inode_dirty error [ 391.960974][T26558] netlink: 'syz.7.8646': attribute type 1 has an invalid length. [ 391.974404][T26556] loop5: detected capacity change from 0 to 4096 [ 391.982468][T26537] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 391.992471][T26537] EXT4-fs (loop2): 1 truncate cleaned up [ 392.004091][T26556] dccp_xmit_packet: Payload too large (65472) for featneg. [ 392.043564][T26561] loop7: detected capacity change from 0 to 128 [ 392.129730][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 392.149537][T26572] netlink: 'syz.2.8651': attribute type 1 has an invalid length. [ 392.256633][T26579] loop2: detected capacity change from 0 to 128 [ 392.355367][T26582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8656'. [ 392.408177][T26584] netlink: 'syz.2.8657': attribute type 1 has an invalid length. [ 392.433956][T26586] loop2: detected capacity change from 0 to 1024 [ 392.450296][T26586] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.8658: Allocating blocks 385-513 which overlap fs metadata [ 392.485756][T26592] loop7: detected capacity change from 0 to 1024 [ 392.486767][T26586] EXT4-fs (loop2): pa ffff88810061eee0: logic 16, phys. 129, len 24 [ 392.500251][T26586] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 392.512813][T26586] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 392.525303][T26586] EXT4-fs (loop2): This should not happen!! Data will be lost [ 392.525303][T26586] [ 392.535063][T26586] EXT4-fs (loop2): Total free blocks count 0 [ 392.541113][T26586] EXT4-fs (loop2): Free/Dirty block details [ 392.541366][T26594] FAULT_INJECTION: forcing a failure. [ 392.541366][T26594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.547023][T26586] EXT4-fs (loop2): free_blocks=128 [ 392.560068][T26594] CPU: 0 UID: 0 PID: 26594 Comm: syz.0.8660 Tainted: G W 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 392.560097][T26594] Tainted: [W]=WARN [ 392.560104][T26594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 392.560127][T26594] Call Trace: [ 392.560134][T26594] [ 392.560142][T26594] dump_stack_lvl+0xf2/0x150 [ 392.560170][T26594] dump_stack+0x15/0x1a [ 392.560189][T26594] should_fail_ex+0x24a/0x260 [ 392.560219][T26594] should_fail+0xb/0x10 [ 392.560242][T26594] should_fail_usercopy+0x1a/0x20 [ 392.560271][T26594] _copy_from_user+0x1c/0xa0 [ 392.560289][T26594] copy_msghdr_from_user+0x54/0x2a0 [ 392.560318][T26594] ? __fget_files+0x17c/0x1c0 [ 392.560398][T26594] __sys_sendmsg+0x13e/0x230 [ 392.560509][T26594] __x64_sys_sendmsg+0x46/0x50 [ 392.560532][T26594] x64_sys_call+0x2734/0x2dc0 [ 392.560584][T26594] do_syscall_64+0xc9/0x1c0 [ 392.560612][T26594] ? clear_bhb_loop+0x55/0xb0 [ 392.560637][T26594] ? clear_bhb_loop+0x55/0xb0 [ 392.560719][T26594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.560744][T26594] RIP: 0033:0x7ff407fbd169 [ 392.560758][T26594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.560831][T26594] RSP: 002b:00007ff406627038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.560849][T26594] RAX: ffffffffffffffda RBX: 00007ff4081d5fa0 RCX: 00007ff407fbd169 [ 392.560861][T26594] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000006 [ 392.560872][T26594] RBP: 00007ff406627090 R08: 0000000000000000 R09: 0000000000000000 [ 392.560883][T26594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.560894][T26594] R13: 0000000000000000 R14: 00007ff4081d5fa0 R15: 00007ffc7d1d40d8 [ 392.560911][T26594] [ 392.606540][T26592] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4115: comm syz.7.8659: Allocating blocks 385-513 which overlap fs metadata [ 392.607008][T26586] EXT4-fs (loop2): dirty_blocks=0 [ 392.616071][T26592] EXT4-fs (loop7): pa ffff88810061ee70: logic 16, phys. 129, len 24 [ 392.620811][T26586] EXT4-fs (loop2): Block reservation details [ 392.620824][T26586] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 392.625517][T26592] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 392.794133][T26592] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 392.800484][T26603] netlink: 'syz.0.8664': attribute type 1 has an invalid length. [ 392.806663][T26592] EXT4-fs (loop7): This should not happen!! Data will be lost [ 392.806663][T26592] [ 392.824008][T26592] EXT4-fs (loop7): Total free blocks count 0 [ 392.829990][T26592] EXT4-fs (loop7): Free/Dirty block details [ 392.835911][T26592] EXT4-fs (loop7): free_blocks=128 [ 392.841024][T26592] EXT4-fs (loop7): dirty_blocks=0 [ 392.846111][T26592] EXT4-fs (loop7): Block reservation details [ 392.852098][T26592] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 392.911869][T26611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8667'. [ 392.932117][T26605] loop2: detected capacity change from 0 to 1024 [ 392.939370][T26605] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 392.951954][T26605] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 392.963858][T26605] EXT4-fs (loop2): orphan cleanup on readonly fs [ 392.977683][T26605] EXT4-fs error (device loop2): __ext4_get_inode_loc:4435: comm syz.2.8663: Invalid inode table block 0 in block_group 0 [ 392.990784][T26605] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 393.002292][T26605] EXT4-fs error (device loop2): ext4_quota_write:7299: inode #3: comm syz.2.8663: mark_inode_dirty error [ 393.015282][T26605] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.8663: Failed to acquire dquot type 0 [ 393.017727][T26619] loop7: detected capacity change from 0 to 128 [ 393.028581][T26605] EXT4-fs error (device loop2): __ext4_get_inode_loc:4435: comm syz.2.8663: Invalid inode table block 0 in block_group 0 [ 393.047788][T26605] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 393.057370][T26605] EXT4-fs error (device loop2): ext4_ext_truncate:4457: inode #15: comm syz.2.8663: mark_inode_dirty error [ 393.072090][T26621] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8668'. [ 393.072744][T26605] EXT4-fs error (device loop2): __ext4_get_inode_loc:4435: comm syz.2.8663: Invalid inode table block 0 in block_group 0 [ 393.099255][T26605] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 393.106682][T20606] bio_check_eod: 81796 callbacks suppressed [ 393.106696][T20606] kworker/u8:25: attempt to access beyond end of device [ 393.106696][T20606] loop7: rw=1, sector=145, nr_sectors = 528 limit=128 [ 393.114984][T26605] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 393.136931][T26605] EXT4-fs error (device loop2): __ext4_get_inode_loc:4435: comm syz.2.8663: Invalid inode table block 0 in block_group 0 [ 393.149925][T26605] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 393.154639][T26619] syz.7.8669: attempt to access beyond end of device [ 393.154639][T26619] loop7: rw=2049, sector=673, nr_sectors = 368 limit=128 [ 393.160098][T26605] EXT4-fs error (device loop2): ext4_truncate:4240: inode #15: comm syz.2.8663: mark_inode_dirty error [ 393.184460][T26605] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 393.188928][T26618] syz.7.8669: attempt to access beyond end of device [ 393.188928][T26618] loop7: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 393.193545][T26605] EXT4-fs (loop2): 1 truncate cleaned up [ 393.209017][T26619] syz.7.8669: attempt to access beyond end of device [ 393.209017][T26619] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 393.226117][T26619] syz.7.8669: attempt to access beyond end of device [ 393.226117][T26619] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 393.239702][T26619] syz.7.8669: attempt to access beyond end of device [ 393.239702][T26619] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 393.253440][T26619] syz.7.8669: attempt to access beyond end of device [ 393.253440][T26619] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 393.268923][T26619] syz.7.8669: attempt to access beyond end of device [ 393.268923][T26619] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 393.269310][T26626] program syz.2.8671 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 393.282473][T26619] syz.7.8669: attempt to access beyond end of device [ 393.282473][T26619] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 393.304628][T26619] syz.7.8669: attempt to access beyond end of device [ 393.304628][T26619] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 393.333401][T26626] loop2: detected capacity change from 0 to 2048 [ 393.343242][T26629] loop5: detected capacity change from 0 to 128 [ 393.366214][T26626] loop2: detected capacity change from 0 to 512 [ 393.412839][T26626] loop2: detected capacity change from 0 to 1024 [ 393.419959][T26633] loop5: detected capacity change from 0 to 1024 [ 393.459082][T26633] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4115: comm syz.5.8673: Allocating blocks 385-513 which overlap fs metadata [ 393.492730][T26633] EXT4-fs (loop5): pa ffff88810061ee70: logic 16, phys. 129, len 24 [ 393.500818][T26633] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 393.513076][T26633] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 393.525599][T26633] EXT4-fs (loop5): This should not happen!! Data will be lost [ 393.525599][T26633] [ 393.535343][T26633] EXT4-fs (loop5): Total free blocks count 0 [ 393.541340][T26633] EXT4-fs (loop5): Free/Dirty block details [ 393.547296][T26633] EXT4-fs (loop5): free_blocks=128 [ 393.552403][T26633] EXT4-fs (loop5): dirty_blocks=0 [ 393.557448][T26633] EXT4-fs (loop5): Block reservation details [ 393.563487][T26633] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 393.596243][T26642] netlink: 'syz.5.8676': attribute type 1 has an invalid length. [ 393.666032][T26645] loop5: detected capacity change from 0 to 512 [ 393.687309][T26647] FAULT_INJECTION: forcing a failure. [ 393.687309][T26647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.700546][T26647] CPU: 0 UID: 0 PID: 26647 Comm: syz.2.8678 Tainted: G W 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 393.700576][T26647] Tainted: [W]=WARN [ 393.700582][T26647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 393.700645][T26647] Call Trace: [ 393.700651][T26647] [ 393.700659][T26647] dump_stack_lvl+0xf2/0x150 [ 393.700685][T26647] dump_stack+0x15/0x1a [ 393.700702][T26647] should_fail_ex+0x24a/0x260 [ 393.700803][T26647] should_fail+0xb/0x10 [ 393.700824][T26647] should_fail_usercopy+0x1a/0x20 [ 393.700850][T26647] _copy_from_iter+0xd5/0xd00 [ 393.700881][T26647] ? kmalloc_reserve+0x16e/0x190 [ 393.700902][T26647] ? __build_skb_around+0x196/0x1f0 [ 393.700956][T26647] ? __alloc_skb+0x21f/0x310 [ 393.700975][T26647] ? __virt_addr_valid+0x1ed/0x250 [ 393.701036][T26647] ? __check_object_size+0x364/0x520 [ 393.701061][T26647] netlink_sendmsg+0x460/0x6e0 [ 393.701120][T26647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.701145][T26647] __sock_sendmsg+0x140/0x180 [ 393.701171][T26647] ____sys_sendmsg+0x326/0x4b0 [ 393.701219][T26647] __sys_sendmsg+0x19d/0x230 [ 393.701252][T26647] __x64_sys_sendmsg+0x46/0x50 [ 393.701276][T26647] x64_sys_call+0x2734/0x2dc0 [ 393.701302][T26647] do_syscall_64+0xc9/0x1c0 [ 393.701335][T26647] ? clear_bhb_loop+0x55/0xb0 [ 393.701419][T26647] ? clear_bhb_loop+0x55/0xb0 [ 393.701444][T26647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.701481][T26647] RIP: 0033:0x7faba1c8d169 [ 393.701495][T26647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.701509][T26647] RSP: 002b:00007faba02f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.701579][T26647] RAX: ffffffffffffffda RBX: 00007faba1ea5fa0 RCX: 00007faba1c8d169 [ 393.701590][T26647] RDX: 0000000000000000 RSI: 0000400000000640 RDI: 0000000000000003 [ 393.701600][T26647] RBP: 00007faba02f7090 R08: 0000000000000000 R09: 0000000000000000 [ 393.701609][T26647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.701619][T26647] R13: 0000000000000000 R14: 00007faba1ea5fa0 R15: 00007fff666e4bd8 [ 393.701635][T26647] [ 393.920856][T26645] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8677: bg 0: block 35: padding at end of block bitmap is not set [ 393.955671][T26645] EXT4-fs (loop5): Remounting filesystem read-only [ 393.968125][T26645] EXT4-fs (loop5): 1 truncate cleaned up [ 393.974825][T26652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8680'. [ 393.988089][T26645] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 393.996867][T26650] netlink: 'syz.2.8679': attribute type 1 has an invalid length. [ 394.012362][T26494] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.029407][T26494] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.040408][T26494] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.051803][T26494] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.094681][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 394.101417][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 394.117296][T26663] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.144881][T26665] loop2: detected capacity change from 0 to 1024 [ 394.161254][T26670] netlink: 'syz.0.8687': attribute type 1 has an invalid length. [ 394.177065][T26665] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.8685: Allocating blocks 385-513 which overlap fs metadata [ 394.180426][T26675] loop6: detected capacity change from 0 to 1024 [ 394.191855][T26663] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.212444][T26665] EXT4-fs (loop2): pa ffff88810061ef50: logic 16, phys. 129, len 24 [ 394.220656][T26665] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 394.231146][T26665] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 394.243567][T26665] EXT4-fs (loop2): This should not happen!! Data will be lost [ 394.243567][T26665] [ 394.253278][T26665] EXT4-fs (loop2): Total free blocks count 0 [ 394.256898][T26675] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4115: comm syz.6.8688: Allocating blocks 385-513 which overlap fs metadata [ 394.259285][T26665] EXT4-fs (loop2): Free/Dirty block details [ 394.279038][T26665] EXT4-fs (loop2): free_blocks=128 [ 394.282718][T26675] EXT4-fs (loop6): pa ffff88810650cf50: logic 16, phys. 129, len 24 [ 394.284156][T26665] EXT4-fs (loop2): dirty_blocks=0 [ 394.284170][T26665] EXT4-fs (loop2): Block reservation details [ 394.284189][T26665] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 394.292168][T26675] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 394.319546][T26675] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 394.331911][T26675] EXT4-fs (loop6): This should not happen!! Data will be lost [ 394.331911][T26675] [ 394.341648][T26675] EXT4-fs (loop6): Total free blocks count 0 [ 394.347706][T26675] EXT4-fs (loop6): Free/Dirty block details [ 394.353656][T26675] EXT4-fs (loop6): free_blocks=128 [ 394.358843][T26675] EXT4-fs (loop6): dirty_blocks=0 [ 394.363894][T26675] EXT4-fs (loop6): Block reservation details [ 394.370072][T26675] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 394.377094][T26663] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.425482][T26663] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.439504][T26685] FAULT_INJECTION: forcing a failure. [ 394.439504][T26685] name failslab, interval 1, probability 0, space 0, times 0 [ 394.439582][T26685] CPU: 1 UID: 0 PID: 26685 Comm: syz.6.8692 Tainted: G W 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 394.439610][T26685] Tainted: [W]=WARN [ 394.439617][T26685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 394.439629][T26685] Call Trace: [ 394.439635][T26685] [ 394.439641][T26685] dump_stack_lvl+0xf2/0x150 [ 394.439732][T26685] dump_stack+0x15/0x1a [ 394.439797][T26685] should_fail_ex+0x24a/0x260 [ 394.439837][T26685] should_failslab+0x8f/0xb0 [ 394.439907][T26685] kmem_cache_alloc_noprof+0x52/0x320 [ 394.439968][T26685] ? alloc_empty_file+0xd0/0x200 [ 394.439987][T26685] ? _raw_spin_unlock+0x26/0x50 [ 394.440006][T26685] alloc_empty_file+0xd0/0x200 [ 394.440025][T26685] alloc_file_pseudo+0xc9/0x160 [ 394.440045][T26685] __shmem_file_setup+0x1bb/0x1f0 [ 394.440117][T26685] shmem_file_setup+0x3b/0x50 [ 394.440186][T26685] __se_sys_memfd_create+0x2e1/0x5a0 [ 394.440210][T26685] __x64_sys_memfd_create+0x31/0x40 [ 394.440233][T26685] x64_sys_call+0x2d4c/0x2dc0 [ 394.440276][T26685] do_syscall_64+0xc9/0x1c0 [ 394.440383][T26685] ? clear_bhb_loop+0x55/0xb0 [ 394.440487][T26685] ? clear_bhb_loop+0x55/0xb0 [ 394.440512][T26685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.440536][T26685] RIP: 0033:0x7f702fe3d169 [ 394.440549][T26685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.440566][T26685] RSP: 002b:00007f702e4a6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 394.440660][T26685] RAX: ffffffffffffffda RBX: 00000000000006b1 RCX: 00007f702fe3d169 [ 394.440671][T26685] RDX: 00007f702e4a6ef0 RSI: 0000000000000000 RDI: 00007f702febec3c [ 394.440683][T26685] RBP: 0000400000001f80 R08: 00007f702e4a6bb7 R09: 00007f702e4a6e40 [ 394.440694][T26685] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000100 [ 394.440705][T26685] R13: 00007f702e4a6ef0 R14: 00007f702e4a6eb0 R15: 0000400000000b40 [ 394.440721][T26685] [ 394.469412][T26687] /dev/sr0: Can't lookup blockdev [ 394.505608][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 394.505622][ T29] audit: type=1326 audit(1741276976.028:35782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26688 comm="syz.2.8695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba1c8d169 code=0x7ffc0000 [ 394.523518][T26687] netlink: 244 bytes leftover after parsing attributes in process `syz.6.8693'. [ 394.694888][ T29] audit: type=1326 audit(1741276976.038:35783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26688 comm="syz.2.8695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7faba1c8d169 code=0x7ffc0000 [ 394.718562][ T29] audit: type=1326 audit(1741276976.038:35784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26688 comm="syz.2.8695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba1c8d169 code=0x7ffc0000 [ 394.742167][ T29] audit: type=1326 audit(1741276976.038:35785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26688 comm="syz.2.8695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba1c8d169 code=0x7ffc0000 [ 394.788315][T26702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8701'. [ 394.806590][T26700] team0: Port device geneve1 removed [ 394.830054][T26663] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.841688][T26663] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.855262][T26663] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.866892][T26663] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.910853][T26709] loop7: detected capacity change from 0 to 128 [ 394.970677][ T29] audit: type=1326 audit(1741276976.498:35786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26713 comm="syz.5.8706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77003fd169 code=0x7ffc0000 [ 394.994324][ T29] audit: type=1326 audit(1741276976.498:35787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26713 comm="syz.5.8706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f77003fd169 code=0x7ffc0000 [ 395.018007][ T29] audit: type=1326 audit(1741276976.498:35788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26713 comm="syz.5.8706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77003fd169 code=0x7ffc0000 [ 395.041614][ T29] audit: type=1326 audit(1741276976.498:35789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26713 comm="syz.5.8706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77003fd169 code=0x7ffc0000 [ 395.076873][ T9] IPVS: starting estimator thread 0... [ 395.084862][ T29] audit: type=1326 audit(1741276976.618:35790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26721 comm="syz.5.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77003fd169 code=0x7ffc0000 [ 395.111982][ T29] audit: type=1326 audit(1741276976.638:35791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26721 comm="syz.5.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f77003fd169 code=0x7ffc0000 [ 395.123727][T26712] dvmrp0: entered allmulticast mode [ 395.173831][T26720] IPVS: using max 2736 ests per chain, 136800 per kthread [ 395.193355][T26729] FAULT_INJECTION: forcing a failure. [ 395.193355][T26729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.206555][T26729] CPU: 0 UID: 0 PID: 26729 Comm: syz.0.8712 Tainted: G W 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 395.206585][T26729] Tainted: [W]=WARN [ 395.206592][T26729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 395.206669][T26729] Call Trace: [ 395.206676][T26729] [ 395.206684][T26729] dump_stack_lvl+0xf2/0x150 [ 395.206711][T26729] dump_stack+0x15/0x1a [ 395.206762][T26729] should_fail_ex+0x24a/0x260 [ 395.206786][T26729] should_fail+0xb/0x10 [ 395.206809][T26729] should_fail_usercopy+0x1a/0x20 [ 395.206913][T26729] _copy_to_user+0x20/0xa0 [ 395.206929][T26729] simple_read_from_buffer+0xa0/0x110 [ 395.206999][T26729] proc_fail_nth_read+0xf9/0x140 [ 395.207064][T26729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 395.207088][T26729] vfs_read+0x19b/0x6f0 [ 395.207110][T26729] ? mnt_drop_write+0xd9/0x130 [ 395.207130][T26729] ? __rcu_read_unlock+0x4e/0x70 [ 395.207153][T26729] ? __fget_files+0x17c/0x1c0 [ 395.207236][T26729] ksys_read+0xe8/0x1b0 [ 395.207259][T26729] __x64_sys_read+0x42/0x50 [ 395.207283][T26729] x64_sys_call+0x2874/0x2dc0 [ 395.207376][T26729] do_syscall_64+0xc9/0x1c0 [ 395.207404][T26729] ? clear_bhb_loop+0x55/0xb0 [ 395.207429][T26729] ? clear_bhb_loop+0x55/0xb0 [ 395.207503][T26729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.207525][T26729] RIP: 0033:0x7ff407fbbb7c [ 395.207618][T26729] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 395.207695][T26729] RSP: 002b:00007ff406627030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 395.207710][T26729] RAX: ffffffffffffffda RBX: 00007ff4081d5fa0 RCX: 00007ff407fbbb7c [ 395.207720][T26729] RDX: 000000000000000f RSI: 00007ff4066270a0 RDI: 0000000000000007 [ 395.207730][T26729] RBP: 00007ff406627090 R08: 0000000000000000 R09: 0000000000000000 [ 395.207740][T26729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.207752][T26729] R13: 0000000000000000 R14: 00007ff4081d5fa0 R15: 00007ffc7d1d40d8 [ 395.207770][T26729] [ 395.432783][T26733] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8713'. [ 395.472100][T26735] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.525951][T26739] loop5: detected capacity change from 0 to 2048 [ 395.538408][T26735] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.610154][T26735] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.650714][T26747] loop7: detected capacity change from 0 to 512 [ 395.662309][T26735] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.665399][T26749] loop2: detected capacity change from 0 to 128 [ 395.690647][T26747] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.705038][T26747] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 395.711327][T26735] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.725691][T26747] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.8718: corrupted xattr block 33: e_value out of bounds [ 395.730376][T26735] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.752496][T26735] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.764115][T26735] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.773736][T26747] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 395.792152][T26747] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.8718: corrupted xattr block 33: e_value out of bounds [ 395.806097][T26754] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.8718: corrupted xattr block 33: e_value out of bounds [ 395.822036][T26754] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 395.822036][T26747] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 395.852667][T26761] FAULT_INJECTION: forcing a failure. [ 395.852667][T26761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.852695][T26761] CPU: 1 UID: 0 PID: 26761 Comm: syz.6.8722 Tainted: G W 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 395.852723][T26761] Tainted: [W]=WARN [ 395.852729][T26761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 395.852795][T26761] Call Trace: [ 395.852801][T26761] [ 395.852806][T26761] dump_stack_lvl+0xf2/0x150 [ 395.852867][T26761] dump_stack+0x15/0x1a [ 395.852886][T26761] should_fail_ex+0x24a/0x260 [ 395.852962][T26761] should_fail+0xb/0x10 [ 395.852986][T26761] should_fail_usercopy+0x1a/0x20 [ 395.853015][T26761] _copy_from_iter+0xd5/0xd00 [ 395.853043][T26761] ? kmalloc_reserve+0x16e/0x190 [ 395.853060][T26761] ? __build_skb_around+0x196/0x1f0 [ 395.853077][T26761] ? __alloc_skb+0x21f/0x310 [ 395.853096][T26761] ? __virt_addr_valid+0x1ed/0x250 [ 395.853120][T26761] ? __check_object_size+0x364/0x520 [ 395.853177][T26761] netlink_sendmsg+0x460/0x6e0 [ 395.853209][T26761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.853234][T26761] __sock_sendmsg+0x140/0x180 [ 395.853338][T26761] ____sys_sendmsg+0x326/0x4b0 [ 395.853392][T26761] __sys_sendmsg+0x19d/0x230 [ 395.853424][T26761] __x64_sys_sendmsg+0x46/0x50 [ 395.853454][T26761] x64_sys_call+0x2734/0x2dc0 [ 395.853480][T26761] do_syscall_64+0xc9/0x1c0 [ 395.853509][T26761] ? clear_bhb_loop+0x55/0xb0 [ 395.853609][T26761] ? clear_bhb_loop+0x55/0xb0 [ 395.853635][T26761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.853656][T26761] RIP: 0033:0x7f702fe3d169 [ 395.853669][T26761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.853722][T26761] RSP: 002b:00007f702e4a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.853741][T26761] RAX: ffffffffffffffda RBX: 00007f7030055fa0 RCX: 00007f702fe3d169 [ 395.853752][T26761] RDX: 0000000000000000 RSI: 0000400000000940 RDI: 0000000000000003 [ 395.853762][T26761] RBP: 00007f702e4a7090 R08: 0000000000000000 R09: 0000000000000000 [ 395.853771][T26761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.853781][T26761] R13: 0000000000000000 R14: 00007f7030055fa0 R15: 00007ffeadb14328 [ 395.853797][T26761] [ 395.893278][T26755] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8720'. [ 395.916672][T26763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8724'. [ 395.933176][T26768] program syz.5.8726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.039002][T26773] loop5: detected capacity change from 0 to 2048 [ 396.052032][T26772] team0: Port device geneve1 removed [ 396.089491][T26776] loop7: detected capacity change from 0 to 1024 [ 396.172710][T26776] EXT4-fs: Ignoring removed nobh option [ 396.172732][T26776] EXT4-fs: Ignoring removed bh option [ 396.184098][T26780] validate_nla: 3 callbacks suppressed [ 396.184111][T26780] netlink: 'syz.6.8730': attribute type 1 has an invalid length. [ 396.203117][T19737] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 396.243115][T26776] FAULT_INJECTION: forcing a failure. [ 396.243115][T26776] name failslab, interval 1, probability 0, space 0, times 0 [ 396.243140][T26776] CPU: 0 UID: 0 PID: 26776 Comm: syz.7.8727 Tainted: G W 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 396.243173][T26776] Tainted: [W]=WARN [ 396.243178][T26776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 396.243188][T26776] Call Trace: [ 396.243240][T26776] [ 396.243248][T26776] dump_stack_lvl+0xf2/0x150 [ 396.243273][T26776] dump_stack+0x15/0x1a [ 396.243313][T26776] should_fail_ex+0x24a/0x260 [ 396.243343][T26776] should_failslab+0x8f/0xb0 [ 396.243393][T26776] __kmalloc_noprof+0xab/0x3f0 [ 396.243410][T26776] ? ext4_find_extent+0x172/0x7c0 [ 396.243429][T26776] ext4_find_extent+0x172/0x7c0 [ 396.243500][T26776] ? blk_mq_request_issue_directly+0x2f0/0x370 [ 396.243578][T26776] ext4_ext_map_blocks+0x11f/0x35c0 [ 396.243600][T26776] ? folio_mark_accessed+0x272/0x3d0 [ 396.243620][T26776] ? __find_get_block+0x667/0x890 [ 396.243678][T26776] ? down_read+0x171/0x4b0 [ 396.243704][T26776] ext4_map_query_blocks+0x71/0x180 [ 396.243729][T26776] ext4_map_blocks+0x23c/0xd20 [ 396.243772][T26776] ? memcg_list_lru_alloc+0xce/0x4e0 [ 396.243793][T26776] ? mod_objcg_state+0x2ea/0x4f0 [ 396.243817][T26776] ext4_iomap_begin+0x165/0x5d0 [ 396.243902][T26776] ? __rcu_read_unlock+0x4e/0x70 [ 396.243922][T26776] ? cgroup_rstat_updated+0x9f/0x570 [ 396.243956][T26776] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 396.243982][T26776] iomap_iter+0x402/0x840 [ 396.244066][T26776] ? kiocb_write_and_wait+0x73/0x100 [ 396.244088][T26776] __iomap_dio_rw+0x6e9/0x1110 [ 396.244194][T26776] iomap_dio_rw+0x40/0x90 [ 396.244216][T26776] ext4_file_read_iter+0x214/0x290 [ 396.244242][T26776] copy_splice_read+0x383/0x5b0 [ 396.244322][T26776] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 396.244351][T26776] splice_direct_to_actor+0x28b/0x670 [ 396.244508][T26776] ? __pfx_direct_splice_actor+0x10/0x10 [ 396.244536][T26776] do_splice_direct+0xd7/0x150 [ 396.244587][T26776] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 396.244612][T26776] do_sendfile+0x398/0x660 [ 396.244635][T26776] __x64_sys_sendfile64+0x110/0x150 [ 396.244670][T26776] x64_sys_call+0xfbd/0x2dc0 [ 396.244714][T26776] do_syscall_64+0xc9/0x1c0 [ 396.244739][T26776] ? clear_bhb_loop+0x55/0xb0 [ 396.244760][T26776] ? clear_bhb_loop+0x55/0xb0 [ 396.244809][T26776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.244836][T26776] RIP: 0033:0x7f13fad1d169 [ 396.244879][T26776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.244963][T26776] RSP: 002b:00007f13f9381038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 396.244982][T26776] RAX: ffffffffffffffda RBX: 00007f13faf35fa0 RCX: 00007f13fad1d169 [ 396.244993][T26776] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 396.245003][T26776] RBP: 00007f13f9381090 R08: 0000000000000000 R09: 0000000000000000 [ 396.245012][T26776] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 396.245025][T26776] R13: 0000000000000000 R14: 00007f13faf35fa0 R15: 00007fff7ad1d048 [ 396.245042][T26776] [ 396.281669][T26785] loop2: detected capacity change from 0 to 128 [ 396.344671][T26792] loop7: detected capacity change from 0 to 128 [ 396.408582][T26799] FAULT_INJECTION: forcing a failure. [ 396.408582][T26799] name failslab, interval 1, probability 0, space 0, times 0 [ 396.659404][T26799] CPU: 1 UID: 0 PID: 26799 Comm: syz.7.8738 Tainted: G W 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 396.659440][T26799] Tainted: [W]=WARN [ 396.659447][T26799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 396.659458][T26799] Call Trace: [ 396.659465][T26799] [ 396.659473][T26799] dump_stack_lvl+0xf2/0x150 [ 396.659499][T26799] dump_stack+0x15/0x1a [ 396.659551][T26799] should_fail_ex+0x24a/0x260 [ 396.659616][T26799] should_failslab+0x8f/0xb0 [ 396.659643][T26799] kmem_cache_alloc_noprof+0x52/0x320 [ 396.659664][T26799] ? audit_log_start+0x34c/0x6b0 [ 396.659753][T26799] audit_log_start+0x34c/0x6b0 [ 396.659782][T26799] ? kmem_cache_free+0xdc/0x2d0 [ 396.659803][T26799] audit_seccomp+0x4b/0x130 [ 396.659892][T26799] __seccomp_filter+0x6fa/0x1180 [ 396.659985][T26799] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 396.660110][T26799] ? vfs_write+0x644/0x920 [ 396.660132][T26799] ? putname+0xcf/0xf0 [ 396.660150][T26799] __secure_computing+0x9f/0x1c0 [ 396.660172][T26799] syscall_trace_enter+0xd1/0x1f0 [ 396.660251][T26799] ? fpregs_assert_state_consistent+0x83/0xa0 [ 396.660273][T26799] do_syscall_64+0xaa/0x1c0 [ 396.660300][T26799] ? clear_bhb_loop+0x55/0xb0 [ 396.660340][T26799] ? clear_bhb_loop+0x55/0xb0 [ 396.660364][T26799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.660389][T26799] RIP: 0033:0x7f13fad1bb7c [ 396.660403][T26799] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 396.660457][T26799] RSP: 002b:00007f13f9381030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 396.660501][T26799] RAX: ffffffffffffffda RBX: 00007f13faf35fa0 RCX: 00007f13fad1bb7c [ 396.660513][T26799] RDX: 000000000000000f RSI: 00007f13f93810a0 RDI: 0000000000000004 [ 396.660525][T26799] RBP: 00007f13f9381090 R08: 0000000000000000 R09: 0000000000000000 [ 396.660536][T26799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.660547][T26799] R13: 0000000000000000 R14: 00007f13faf35fa0 R15: 00007fff7ad1d048 [ 396.660562][T26799] [ 396.786235][T26805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8741'. [ 396.914003][T26813] netlink: 'syz.0.8746': attribute type 1 has an invalid length. [ 396.932737][T26817] loop2: detected capacity change from 0 to 128 [ 396.951095][T26820] loop6: detected capacity change from 0 to 1024 [ 396.973304][T26820] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 396.985813][T26820] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 396.993874][T26820] EXT4-fs (loop6): orphan cleanup on readonly fs [ 397.001060][T26820] EXT4-fs error (device loop6): __ext4_get_inode_loc:4435: comm syz.6.8743: Invalid inode table block 0 in block_group 0 [ 397.014538][T26820] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 397.038409][T26814] lo speed is unknown, defaulting to 1000 [ 397.044086][T26820] EXT4-fs error (device loop6): ext4_quota_write:7299: inode #3: comm syz.6.8743: mark_inode_dirty error [ 397.069054][T26820] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.8743: Failed to acquire dquot type 0 [ 397.098163][T26820] EXT4-fs error (device loop6): __ext4_get_inode_loc:4435: comm syz.6.8743: Invalid inode table block 0 in block_group 0 [ 397.122643][T26814] chnl_net:caif_netlink_parms(): no params data found [ 397.133148][T26820] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 397.144958][T26820] EXT4-fs error (device loop6): ext4_ext_truncate:4457: inode #15: comm syz.6.8743: mark_inode_dirty error [ 397.156635][T26841] loop2: detected capacity change from 0 to 128 [ 397.157077][T26820] EXT4-fs error (device loop6): __ext4_get_inode_loc:4435: comm syz.6.8743: Invalid inode table block 0 in block_group 0 [ 397.182164][T20645] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.182412][T26820] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 397.201651][T26820] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 397.215347][T26820] EXT4-fs error (device loop6): __ext4_get_inode_loc:4435: comm syz.6.8743: Invalid inode table block 0 in block_group 0 [ 397.228874][T26820] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 397.239800][T26820] EXT4-fs error (device loop6): ext4_truncate:4240: inode #15: comm syz.6.8743: mark_inode_dirty error [ 397.251346][T26820] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 397.260558][T26820] EXT4-fs (loop6): 1 truncate cleaned up [ 397.267302][T20645] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.301732][T26814] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.308913][T26814] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.318944][T26814] bridge_slave_0: entered allmulticast mode [ 397.325644][T26814] bridge_slave_0: entered promiscuous mode [ 397.333276][T26814] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.340668][T26814] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.361182][T26814] bridge_slave_1: entered allmulticast mode [ 397.369968][T26814] bridge_slave_1: entered promiscuous mode [ 397.370195][T26852] loop6: detected capacity change from 0 to 128 [ 397.382979][T20645] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.409490][T26854] __nla_validate_parse: 1 callbacks suppressed [ 397.409527][T26854] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8755'. [ 397.428776][T26814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.451937][T20645] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.469511][T26814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.479621][T26857] loop7: detected capacity change from 0 to 1024 [ 397.494164][T26859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8756'. [ 397.507187][T26857] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4115: comm syz.7.8757: Allocating blocks 385-513 which overlap fs metadata [ 397.523384][T26814] team0: Port device team_slave_0 added [ 397.530547][T26857] EXT4-fs (loop7): pa ffff88810061ee70: logic 16, phys. 129, len 24 [ 397.538680][T26857] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 397.539472][T26814] team0: Port device team_slave_1 added [ 397.554395][T26857] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 397.566831][T26857] EXT4-fs (loop7): This should not happen!! Data will be lost [ 397.566831][T26857] [ 397.576567][T26857] EXT4-fs (loop7): Total free blocks count 0 [ 397.582548][T26857] EXT4-fs (loop7): Free/Dirty block details [ 397.588476][T26857] EXT4-fs (loop7): free_blocks=128 [ 397.593577][T26857] EXT4-fs (loop7): dirty_blocks=0 [ 397.598634][T26857] EXT4-fs (loop7): Block reservation details [ 397.604723][T26857] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 397.638093][T26814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.645094][T26814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.671072][T26814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.697985][T26865] netlink: 'syz.6.8759': attribute type 1 has an invalid length. [ 397.724605][T26868] loop7: detected capacity change from 0 to 512 [ 397.739781][T26868] EXT4-fs: inline encryption not supported [ 397.777966][T26868] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.795308][T20645] bond0 (unregistering): Released all slaves [ 397.803521][T26814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.808044][T26868] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.8760: corrupted inode contents [ 397.810531][T26814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.848131][T26814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.852611][T26868] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #2: comm syz.7.8760: mark_inode_dirty error [ 397.884260][T26868] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.8760: corrupted inode contents [ 397.910247][T26873] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.8760: corrupted inode contents [ 397.926192][T26814] hsr_slave_0: entered promiscuous mode [ 397.932298][T26814] hsr_slave_1: entered promiscuous mode [ 397.938391][T26814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.939279][T26873] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #2: comm syz.7.8760: mark_inode_dirty error [ 397.946178][T26814] Cannot create hsr debugfs directory [ 397.962765][T20645] tipc: Left network mode [ 397.973769][T26873] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.8760: corrupted inode contents [ 398.015508][T26873] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.8760: mark_inode_dirty error [ 398.038147][T26875] loop6: detected capacity change from 0 to 256 [ 398.043928][T26873] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.8760: corrupted inode contents [ 398.061063][T26873] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #2: comm syz.7.8760: mark_inode_dirty error [ 398.091860][T22872] EXT4-fs unmount: 77 callbacks suppressed [ 398.091876][T22872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.109417][T20645] hsr_slave_0: left promiscuous mode [ 398.118761][T26881] loop2: detected capacity change from 0 to 128 [ 398.127392][T20645] hsr_slave_1: left promiscuous mode [ 398.139567][T20645] veth1_vlan: left promiscuous mode [ 398.178338][T20645] pimreg (unregistering): left allmulticast mode [ 398.180150][T26890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8767'. [ 398.227715][T26889] loop2: detected capacity change from 0 to 2048 [ 398.237068][T26884] loop7: detected capacity change from 0 to 1024 [ 398.244173][T26884] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 398.265725][T20649] smc: removing ib device sz1 [ 398.272524][T26889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.300257][T26884] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 398.300319][T26884] EXT4-fs (loop7): orphan cleanup on readonly fs [ 398.300651][T26884] EXT4-fs error (device loop7): __ext4_get_inode_loc:4435: comm syz.7.8764: Invalid inode table block 0 in block_group 0 [ 398.300791][T26884] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 398.300942][T26884] EXT4-fs error (device loop7): ext4_quota_write:7299: inode #3: comm syz.7.8764: mark_inode_dirty error [ 398.301045][T26884] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.8764: Failed to acquire dquot type 0 [ 398.301167][T26884] EXT4-fs error (device loop7): __ext4_get_inode_loc:4435: comm syz.7.8764: Invalid inode table block 0 in block_group 0 [ 398.301271][T26884] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 398.301436][T26884] EXT4-fs error (device loop7): ext4_ext_truncate:4457: inode #15: comm syz.7.8764: mark_inode_dirty error [ 398.301549][T26884] EXT4-fs error (device loop7): __ext4_get_inode_loc:4435: comm syz.7.8764: Invalid inode table block 0 in block_group 0 [ 398.301644][T26884] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 398.301750][T26884] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 398.301836][T26884] EXT4-fs error (device loop7): __ext4_get_inode_loc:4435: comm syz.7.8764: Invalid inode table block 0 in block_group 0 [ 398.301922][T26884] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 398.302038][T26884] EXT4-fs error (device loop7): ext4_truncate:4240: inode #15: comm syz.7.8764: mark_inode_dirty error [ 398.302122][T26884] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 398.302247][T26884] EXT4-fs (loop7): 1 truncate cleaned up [ 398.302662][T26884] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 398.319861][ T9] lo speed is unknown, defaulting to 1000 [ 398.484280][T26814] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 398.495652][T26814] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 398.524543][T26814] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 398.565838][T22872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.606884][T26814] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 398.616939][T21776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.673173][T26814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.688638][T26814] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.707422][T26909] netlink: 'syz.6.8774': attribute type 1 has an invalid length. [ 398.716049][T20649] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.723120][T20649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.734749][T20649] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.741818][T20649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.795131][T26925] netlink: 'syz.2.8778': attribute type 1 has an invalid length. [ 398.857149][T26930] loop2: detected capacity change from 0 to 4096 [ 398.868569][T26814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.886849][T26930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.958174][T26946] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8782'. [ 398.986242][T26942] loop6: detected capacity change from 0 to 1024 [ 398.995233][T26942] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 399.006183][T26946] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 399.026206][T21776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.037237][T26942] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 399.046577][T26942] EXT4-fs (loop6): orphan cleanup on readonly fs [ 399.055096][T26955] loop7: detected capacity change from 0 to 128 [ 399.058363][T26814] veth0_vlan: entered promiscuous mode [ 399.067725][T26942] EXT4-fs error (device loop6): __ext4_get_inode_loc:4435: comm syz.6.8781: Invalid inode table block 0 in block_group 0 [ 399.087572][T26814] veth1_vlan: entered promiscuous mode [ 399.103197][T26814] veth0_macvtap: entered promiscuous mode [ 399.114704][T26942] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 399.131388][T26814] veth1_macvtap: entered promiscuous mode [ 399.145052][T26942] EXT4-fs error (device loop6): ext4_quota_write:7299: inode #3: comm syz.6.8781: mark_inode_dirty error [ 399.158517][T26814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.169098][T26814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.191565][T26942] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.8781: Failed to acquire dquot type 0 [ 399.218255][T26942] EXT4-fs error (device loop6): __ext4_get_inode_loc:4435: comm syz.6.8781: Invalid inode table block 0 in block_group 0 [ 399.231526][T26814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.261634][T26942] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 399.274557][T26814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.285084][T26814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.297154][T26942] EXT4-fs error (device loop6): ext4_ext_truncate:4457: inode #15: comm syz.6.8781: mark_inode_dirty error [ 399.310010][T26814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.320915][T26942] EXT4-fs error (device loop6): __ext4_get_inode_loc:4435: comm syz.6.8781: Invalid inode table block 0 in block_group 0 [ 399.335936][T26942] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 399.346133][T26942] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 399.357787][T26814] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.366529][T26814] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.375249][T26814] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.384041][T26814] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.396751][T26942] EXT4-fs error (device loop6): __ext4_get_inode_loc:4435: comm syz.6.8781: Invalid inode table block 0 in block_group 0 [ 399.410434][T26942] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 399.446797][T26942] EXT4-fs error (device loop6): ext4_truncate:4240: inode #15: comm syz.6.8781: mark_inode_dirty error [ 399.461471][T26942] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 399.471740][T26942] EXT4-fs (loop6): 1 truncate cleaned up [ 399.478905][T26942] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 399.547684][T26975] netlink: 'syz.7.8789': attribute type 1 has an invalid length. [ 399.578400][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 399.578415][ T29] audit: type=1400 audit(1741276981.108:36106): avc: denied { create } for pid=26971 comm="syz.8.8744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 399.606859][ T29] audit: type=1400 audit(1741276981.118:36107): avc: denied { setopt } for pid=26971 comm="syz.8.8744" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 399.629807][ T29] audit: type=1400 audit(1741276981.138:36108): avc: denied { create } for pid=26971 comm="syz.8.8744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 399.649814][ T29] audit: type=1400 audit(1741276981.138:36109): avc: denied { sys_admin } for pid=26971 comm="syz.8.8744" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 399.649835][ T29] audit: type=1400 audit(1741276981.138:36110): avc: denied { checkpoint_restore } for pid=26971 comm="syz.8.8744" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 399.714172][T23887] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.787215][ T29] audit: type=1400 audit(1741276981.318:36111): avc: denied { unlink } for pid=25468 comm="syz-executor" name="file0" dev="tmpfs" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 399.814573][T26988] loop6: detected capacity change from 0 to 128 [ 399.829766][T26991] FAULT_INJECTION: forcing a failure. [ 399.829766][T26991] name failslab, interval 1, probability 0, space 0, times 0 [ 399.842467][T26991] CPU: 0 UID: 0 PID: 26991 Comm: syz.2.8797 Tainted: G W 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 399.842494][T26991] Tainted: [W]=WARN [ 399.842499][T26991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 399.842545][T26991] Call Trace: [ 399.842551][T26991] [ 399.842557][T26991] dump_stack_lvl+0xf2/0x150 [ 399.842597][T26987] loop7: detected capacity change from 0 to 4096 [ 399.842581][T26991] dump_stack+0x15/0x1a [ 399.842703][T26991] should_fail_ex+0x24a/0x260 [ 399.842731][T26991] should_failslab+0x8f/0xb0 [ 399.842759][T26991] __kmalloc_noprof+0xab/0x3f0 [ 399.842778][T26991] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 399.842819][T26991] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 399.842842][T26991] ? ns_capable+0x7d/0xb0 [ 399.842864][T26991] genl_rcv_msg+0x475/0x6d0 [ 399.842897][T26991] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 399.842927][T26991] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 399.842983][T26991] ? __pfx_nl80211_post_doit+0x10/0x10 [ 399.843012][T26991] ? __dev_queue_xmit+0xb6e/0x2090 [ 399.843037][T26991] ? ref_tracker_free+0x3a5/0x410 [ 399.843065][T26991] netlink_rcv_skb+0x12c/0x230 [ 399.843186][T26991] ? __pfx_genl_rcv_msg+0x10/0x10 [ 399.843211][T26991] genl_rcv+0x28/0x40 [ 399.843282][T26991] netlink_unicast+0x599/0x670 [ 399.843309][T26991] netlink_sendmsg+0x5cc/0x6e0 [ 399.843341][T26991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.843403][T26991] __sock_sendmsg+0x140/0x180 [ 399.843431][T26991] ____sys_sendmsg+0x326/0x4b0 [ 399.843456][T26991] __sys_sendmsg+0x19d/0x230 [ 399.843551][T26991] __x64_sys_sendmsg+0x46/0x50 [ 399.843573][T26991] x64_sys_call+0x2734/0x2dc0 [ 399.843606][T26991] do_syscall_64+0xc9/0x1c0 [ 399.843817][T26991] ? clear_bhb_loop+0x55/0xb0 [ 399.843880][T26991] ? clear_bhb_loop+0x55/0xb0 [ 399.843940][T26991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.843964][T26991] RIP: 0033:0x7faba1c8d169 [ 399.843978][T26991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.843995][T26991] RSP: 002b:00007faba02f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.844012][T26991] RAX: ffffffffffffffda RBX: 00007faba1ea5fa0 RCX: 00007faba1c8d169 [ 399.844023][T26991] RDX: 0000000004000054 RSI: 0000400000000480 RDI: 0000000000000003 [ 399.844035][T26991] RBP: 00007faba02f7090 R08: 0000000000000000 R09: 0000000000000000 [ 399.844065][T26991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.844077][T26991] R13: 0000000000000000 R14: 00007faba1ea5fa0 R15: 00007fff666e4bd8 [ 399.844157][T26991] [ 400.106157][T26987] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.109739][T26998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8801'. [ 400.127338][T27005] bridge0: entered allmulticast mode [ 400.133384][ T29] audit: type=1400 audit(1741276981.658:36112): avc: denied { write } for pid=27004 comm="syz.6.8799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 400.153025][ T29] audit: type=1400 audit(1741276981.658:36113): avc: denied { ioctl } for pid=27004 comm="syz.6.8799" path="socket:[98796]" dev="sockfs" ino=98796 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 400.155788][T27006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8799'. [ 400.187208][T27005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8799'. [ 400.202744][T27001] tipc: Started in network mode [ 400.207708][T27001] tipc: Node identity 4, cluster identity 4711 [ 400.213994][T27001] tipc: Node number set to 4 [ 400.240202][T22872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.264542][T27012] netlink: 'syz.6.8804': attribute type 1 has an invalid length. [ 400.286799][T27021] tipc: Enabled bearer , priority 0 [ 400.299686][T27023] loop2: detected capacity change from 0 to 128 [ 400.350957][T27033] netlink: 'syz.2.8811': attribute type 3 has an invalid length. [ 400.363476][T27035] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 400.374589][T27033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8811'. [ 400.404438][T27035] atomic_op ffff8881170c5528 conn xmit_atomic 0000000000000000 [ 400.405613][ T29] audit: type=1326 audit(1741276981.928:36114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27031 comm="syz.2.8811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba1c8d169 code=0x7ffc0000 [ 400.435722][ T29] audit: type=1326 audit(1741276981.928:36115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27031 comm="syz.2.8811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faba1c8d169 code=0x7ffc0000 [ 400.465125][T27043] FAULT_INJECTION: forcing a failure. [ 400.465125][T27043] name failslab, interval 1, probability 0, space 0, times 0 [ 400.477914][T27043] CPU: 1 UID: 0 PID: 27043 Comm: syz.8.8815 Tainted: G W 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 400.478003][T27043] Tainted: [W]=WARN [ 400.478010][T27043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 400.478022][T27043] Call Trace: [ 400.478029][T27043] [ 400.478037][T27043] dump_stack_lvl+0xf2/0x150 [ 400.478065][T27043] dump_stack+0x15/0x1a [ 400.478084][T27043] should_fail_ex+0x24a/0x260 [ 400.478155][T27043] ? __se_sys_memfd_create+0x1ea/0x5a0 [ 400.478176][T27043] should_failslab+0x8f/0xb0 [ 400.478207][T27043] __kmalloc_cache_noprof+0x4e/0x320 [ 400.478306][T27043] __se_sys_memfd_create+0x1ea/0x5a0 [ 400.478333][T27043] __x64_sys_memfd_create+0x31/0x40 [ 400.478354][T27043] x64_sys_call+0x2d4c/0x2dc0 [ 400.478415][T27043] do_syscall_64+0xc9/0x1c0 [ 400.478498][T27043] ? clear_bhb_loop+0x55/0xb0 [ 400.478521][T27043] ? clear_bhb_loop+0x55/0xb0 [ 400.478563][T27043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.478587][T27043] RIP: 0033:0x7fc6493fd169 [ 400.478602][T27043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.478619][T27043] RSP: 002b:00007fc647a66e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 400.478637][T27043] RAX: ffffffffffffffda RBX: 00000000000001fa RCX: 00007fc6493fd169 [ 400.478647][T27043] RDX: 00007fc647a66ef0 RSI: 0000000000000000 RDI: 00007fc64947ec3c [ 400.478657][T27043] RBP: 0000400000000500 R08: 00007fc647a66bb7 R09: 00007fc647a66e40 [ 400.478718][T27043] R10: 000000000000000a R11: 0000000000000202 R12: 00004000000001c0 [ 400.478730][T27043] R13: 00007fc647a66ef0 R14: 00007fc647a66eb0 R15: 0000400000000700 [ 400.478748][T27043] [ 400.703506][T27047] netlink: 'syz.2.8818': attribute type 1 has an invalid length. [ 400.757597][T27059] loop8: detected capacity change from 0 to 128 [ 400.769419][T27055] netlink: 'syz.0.8821': attribute type 1 has an invalid length. [ 400.867346][T27069] 9pnet: Could not find request transport: r€Â [ 400.878736][T27076] loop7: detected capacity change from 0 to 512 [ 400.885155][T27075] IPv6: NLM_F_CREATE should be specified when creating new route [ 400.918754][T27076] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.920260][T27084] loop2: detected capacity change from 0 to 1024 [ 400.935077][T27076] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.955244][T27084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.978737][T27084] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.8833: Allocating blocks 385-513 which overlap fs metadata [ 401.001102][T27084] EXT4-fs (loop2): pa ffff88810650cee0: logic 16, phys. 129, len 24 [ 401.007672][T27090] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8835'. [ 401.009255][T27084] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 401.045185][T27084] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 401.057602][T27084] EXT4-fs (loop2): This should not happen!! Data will be lost [ 401.057602][T27084] [ 401.067334][T27084] EXT4-fs (loop2): Total free blocks count 0 [ 401.073314][T27084] EXT4-fs (loop2): Free/Dirty block details [ 401.079282][T27084] EXT4-fs (loop2): free_blocks=128 [ 401.084457][T27084] EXT4-fs (loop2): dirty_blocks=0 [ 401.089533][T27084] EXT4-fs (loop2): Block reservation details [ 401.095536][T27084] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 401.130089][T27097] loop8: detected capacity change from 0 to 128 [ 401.187622][T27104] FAULT_INJECTION: forcing a failure. [ 401.187622][T27104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.200748][T27104] CPU: 0 UID: 0 PID: 27104 Comm: syz.0.8839 Tainted: G W 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 401.200778][T27104] Tainted: [W]=WARN [ 401.200784][T27104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 401.200794][T27104] Call Trace: [ 401.200801][T27104] [ 401.200807][T27104] dump_stack_lvl+0xf2/0x150 [ 401.200846][T27104] dump_stack+0x15/0x1a [ 401.200863][T27104] should_fail_ex+0x24a/0x260 [ 401.200889][T27104] should_fail+0xb/0x10 [ 401.200992][T27104] should_fail_usercopy+0x1a/0x20 [ 401.201057][T27104] _copy_from_user+0x1c/0xa0 [ 401.201073][T27104] kstrtouint_from_user+0x76/0xe0 [ 401.201096][T27104] ? 0xffffffff81000000 [ 401.201109][T27104] ? selinux_file_permission+0x22a/0x360 [ 401.201144][T27104] proc_fail_nth_write+0x4f/0x150 [ 401.201171][T27104] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 401.201199][T27104] vfs_write+0x27d/0x920 [ 401.201221][T27104] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 401.201264][T27104] ? __fget_files+0x17c/0x1c0 [ 401.201296][T27104] ksys_write+0xe8/0x1b0 [ 401.201322][T27104] __x64_sys_write+0x42/0x50 [ 401.201408][T27104] x64_sys_call+0x287e/0x2dc0 [ 401.201442][T27104] do_syscall_64+0xc9/0x1c0 [ 401.201472][T27104] ? clear_bhb_loop+0x55/0xb0 [ 401.201570][T27104] ? clear_bhb_loop+0x55/0xb0 [ 401.201594][T27104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.201629][T27104] RIP: 0033:0x7ff407fbbc1f [ 401.201644][T27104] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 401.201660][T27104] RSP: 002b:00007ff406627030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 401.201678][T27104] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff407fbbc1f [ 401.201761][T27104] RDX: 0000000000000001 RSI: 00007ff4066270a0 RDI: 0000000000000007 [ 401.201772][T27104] RBP: 00007ff406627090 R08: 0000000000000000 R09: 0000000000000000 [ 401.201782][T27104] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 401.201792][T27104] R13: 0000000000000000 R14: 00007ff4081d5fa0 R15: 00007ffc7d1d40d8 [ 401.201810][T27104] [ 401.416922][T27106] hugetlbfs: Bad value '%' for mount option 'size' [ 401.416922][T27106] [ 401.442179][T27106] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(13) [ 401.448806][T27106] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 401.456587][T27106] vhci_hcd vhci_hcd.0: Device attached [ 401.474722][T27108] vhci_hcd: connection closed [ 401.474980][T20634] vhci_hcd: stop threads [ 401.484007][T20634] vhci_hcd: release socket [ 401.488434][T20634] vhci_hcd: disconnect device [ 401.517239][T27114] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.554975][T27114] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.614750][T27114] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.665145][T27114] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.677317][T27127] FAULT_INJECTION: forcing a failure. [ 401.677317][T27127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.690416][T27127] CPU: 0 UID: 0 PID: 27127 Comm: syz.6.8850 Tainted: G W 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 401.690442][T27127] Tainted: [W]=WARN [ 401.690508][T27127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 401.690518][T27127] Call Trace: [ 401.690525][T27127] [ 401.690531][T27127] dump_stack_lvl+0xf2/0x150 [ 401.690582][T27127] dump_stack+0x15/0x1a [ 401.690602][T27127] should_fail_ex+0x24a/0x260 [ 401.690630][T27127] should_fail+0xb/0x10 [ 401.690679][T27127] should_fail_usercopy+0x1a/0x20 [ 401.690721][T27127] _copy_from_user+0x1c/0xa0 [ 401.690741][T27127] kstrtouint_from_user+0x76/0xe0 [ 401.690765][T27127] ? 0xffffffff81000000 [ 401.690776][T27127] ? selinux_file_permission+0x22a/0x360 [ 401.690823][T27127] proc_fail_nth_write+0x4f/0x150 [ 401.690852][T27127] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 401.690895][T27127] vfs_write+0x27d/0x920 [ 401.690924][T27127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 401.690951][T27127] ? __fget_files+0x17c/0x1c0 [ 401.690977][T27127] ksys_write+0xe8/0x1b0 [ 401.691031][T27127] __x64_sys_write+0x42/0x50 [ 401.691132][T27127] x64_sys_call+0x287e/0x2dc0 [ 401.691158][T27127] do_syscall_64+0xc9/0x1c0 [ 401.691260][T27127] ? clear_bhb_loop+0x55/0xb0 [ 401.691282][T27127] ? clear_bhb_loop+0x55/0xb0 [ 401.691349][T27127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.691371][T27127] RIP: 0033:0x7f702fe3bc1f [ 401.691424][T27127] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 401.691439][T27127] RSP: 002b:00007f702e4a7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 401.691526][T27127] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f702fe3bc1f [ 401.691591][T27127] RDX: 0000000000000001 RSI: 00007f702e4a70a0 RDI: 0000000000000004 [ 401.691603][T27127] RBP: 00007f702e4a7090 R08: 0000000000000000 R09: 0000000000000000 [ 401.691664][T27127] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 401.691675][T27127] R13: 0000000000000000 R14: 00007f7030055fa0 R15: 00007ffeadb14328 [ 401.691693][T27127] [ 401.928415][T22872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.944873][T27114] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.956227][T27114] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.967651][T27114] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.986806][T27114] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.018784][T27140] capability: warning: `syz.7.8855' uses 32-bit capabilities (legacy support in use) [ 402.193116][T27155] loop7: detected capacity change from 0 to 4096 [ 402.216459][T27155] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.298212][T27155] dccp_xmit_packet: Payload too large (65472) for featneg. [ 402.338398][T22872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.348789][T27160] xt_hashlimit: max too large, truncated to 1048576 [ 402.356309][T27160] Cannot find set identified by id 0 to match [ 402.370942][T27162] validate_nla: 2 callbacks suppressed [ 402.370955][T27162] netlink: 'syz.8.8865': attribute type 1 has an invalid length. [ 402.417193][T27168] FAULT_INJECTION: forcing a failure. [ 402.417193][T27168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.430305][T27168] CPU: 1 UID: 0 PID: 27168 Comm: syz.0.8868 Tainted: G W 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 402.430333][T27168] Tainted: [W]=WARN [ 402.430339][T27168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 402.430350][T27168] Call Trace: [ 402.430356][T27168] [ 402.430363][T27168] dump_stack_lvl+0xf2/0x150 [ 402.430390][T27168] dump_stack+0x15/0x1a [ 402.430435][T27168] should_fail_ex+0x24a/0x260 [ 402.430453][T27168] should_fail+0xb/0x10 [ 402.430466][T27168] should_fail_usercopy+0x1a/0x20 [ 402.430482][T27168] _copy_from_user+0x1c/0xa0 [ 402.430493][T27168] copy_msghdr_from_user+0x54/0x2a0 [ 402.430519][T27168] ? __fget_files+0x17c/0x1c0 [ 402.430537][T27168] __sys_sendmsg+0x13e/0x230 [ 402.430556][T27168] __x64_sys_sendmsg+0x46/0x50 [ 402.430702][T27168] x64_sys_call+0x2734/0x2dc0 [ 402.430716][T27168] do_syscall_64+0xc9/0x1c0 [ 402.430732][T27168] ? clear_bhb_loop+0x55/0xb0 [ 402.430790][T27168] ? clear_bhb_loop+0x55/0xb0 [ 402.430803][T27168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.430817][T27168] RIP: 0033:0x7ff407fbd169 [ 402.430827][T27168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.430837][T27168] RSP: 002b:00007ff406627038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.430847][T27168] RAX: ffffffffffffffda RBX: 00007ff4081d5fa0 RCX: 00007ff407fbd169 [ 402.430871][T27168] RDX: 0000000000000000 RSI: 00004000000005c0 RDI: 0000000000000003 [ 402.430884][T27168] RBP: 00007ff406627090 R08: 0000000000000000 R09: 0000000000000000 [ 402.430891][T27168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.430897][T27168] R13: 0000000000000000 R14: 00007ff4081d5fa0 R15: 00007ffc7d1d40d8 [ 402.430906][T27168] [ 402.664118][T27171] loop8: detected capacity change from 0 to 1024 [ 402.671604][T27171] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 402.683276][T27178] loop6: detected capacity change from 0 to 128 [ 402.690295][T27171] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 402.701646][T27174] __nla_validate_parse: 2 callbacks suppressed [ 402.701660][T27174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8871'. [ 402.726760][T27171] EXT4-fs (loop8): orphan cleanup on readonly fs [ 402.746643][T27171] EXT4-fs error (device loop8): __ext4_get_inode_loc:4435: comm syz.8.8870: Invalid inode table block 0 in block_group 0 [ 402.768513][T27184] FAULT_INJECTION: forcing a failure. [ 402.768513][T27184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.770590][T27171] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 402.781782][T27184] CPU: 0 UID: 0 PID: 27184 Comm: syz.7.8875 Tainted: G W 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 402.781882][T27184] Tainted: [W]=WARN [ 402.781888][T27184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 402.781899][T27184] Call Trace: [ 402.781905][T27184] [ 402.781912][T27184] dump_stack_lvl+0xf2/0x150 [ 402.781959][T27184] dump_stack+0x15/0x1a [ 402.781978][T27184] should_fail_ex+0x24a/0x260 [ 402.782005][T27184] should_fail+0xb/0x10 [ 402.782128][T27184] should_fail_usercopy+0x1a/0x20 [ 402.782156][T27184] _copy_from_user+0x1c/0xa0 [ 402.782174][T27184] blkpg_do_ioctl+0x6e/0x2d0 [ 402.782198][T27184] blkdev_ioctl+0x41b/0x450 [ 402.782217][T27184] ? __pfx_blkdev_ioctl+0x10/0x10 [ 402.782267][T27184] __se_sys_ioctl+0xc9/0x140 [ 402.782290][T27184] __x64_sys_ioctl+0x43/0x50 [ 402.782312][T27184] x64_sys_call+0x1690/0x2dc0 [ 402.782364][T27184] do_syscall_64+0xc9/0x1c0 [ 402.782392][T27184] ? clear_bhb_loop+0x55/0xb0 [ 402.782417][T27184] ? clear_bhb_loop+0x55/0xb0 [ 402.782435][T27184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.782534][T27184] RIP: 0033:0x7f13fad1d169 [ 402.782549][T27184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.782566][T27184] RSP: 002b:00007f13f9381038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.782593][T27184] RAX: ffffffffffffffda RBX: 00007f13faf35fa0 RCX: 00007f13fad1d169 [ 402.782604][T27184] RDX: 0000400000000100 RSI: 0000000000001269 RDI: 0000000000000003 [ 402.782616][T27184] RBP: 00007f13f9381090 R08: 0000000000000000 R09: 0000000000000000 [ 402.782627][T27184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.782645][T27184] R13: 0000000000000000 R14: 00007f13faf35fa0 R15: 00007fff7ad1d048 [ 402.782715][T27184] [ 402.882885][T27193] loop7: detected capacity change from 0 to 128 [ 402.885597][T27171] EXT4-fs error (device loop8): ext4_quota_write:7299: inode #3: comm syz.8.8870: mark_inode_dirty error [ 402.925724][T27194] IPVS: stopping master sync thread 27195 ... [ 402.941465][T27195] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 403.002060][T27171] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.8870: Failed to acquire dquot type 0 [ 403.047492][T27171] EXT4-fs error (device loop8): __ext4_get_inode_loc:4435: comm syz.8.8870: Invalid inode table block 0 in block_group 0 [ 403.060408][T27202] loop7: detected capacity change from 0 to 2048 [ 403.060653][T27171] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 403.077256][T27171] EXT4-fs error (device loop8): ext4_ext_truncate:4457: inode #15: comm syz.8.8870: mark_inode_dirty error [ 403.077352][T27171] EXT4-fs error (device loop8): __ext4_get_inode_loc:4435: comm syz.8.8870: Invalid inode table block 0 in block_group 0 [ 403.077687][T27171] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 403.078059][T27171] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 403.078726][T27171] EXT4-fs error (device loop8): __ext4_get_inode_loc:4435: comm syz.8.8870: Invalid inode table block 0 in block_group 0 [ 403.078910][T27171] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 403.079165][T27171] EXT4-fs error (device loop8): ext4_truncate:4240: inode #15: comm syz.8.8870: mark_inode_dirty error [ 403.079370][T27171] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 403.079479][T27171] EXT4-fs (loop8): 1 truncate cleaned up [ 403.080142][T27171] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 403.092614][T27202] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.197424][T26814] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.237635][T27209] loop8: detected capacity change from 0 to 2048 [ 403.265769][T27209] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.282006][T22872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.299153][T27216] FAULT_INJECTION: forcing a failure. [ 403.299153][T27216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.312311][T27216] CPU: 0 UID: 0 PID: 27216 Comm: syz.6.8885 Tainted: G W 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 403.312377][T27216] Tainted: [W]=WARN [ 403.312383][T27216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 403.312393][T27216] Call Trace: [ 403.312399][T27216] [ 403.312405][T27216] dump_stack_lvl+0xf2/0x150 [ 403.312428][T27216] dump_stack+0x15/0x1a [ 403.312498][T27216] should_fail_ex+0x24a/0x260 [ 403.312528][T27216] should_fail+0xb/0x10 [ 403.312549][T27216] should_fail_usercopy+0x1a/0x20 [ 403.312575][T27216] _copy_from_user+0x1c/0xa0 [ 403.312636][T27216] copy_msghdr_from_user+0x54/0x2a0 [ 403.312666][T27216] ? __fget_files+0x17c/0x1c0 [ 403.312699][T27216] __sys_sendmsg+0x13e/0x230 [ 403.312809][T27216] __x64_sys_sendmsg+0x46/0x50 [ 403.312830][T27216] x64_sys_call+0x2734/0x2dc0 [ 403.312852][T27216] do_syscall_64+0xc9/0x1c0 [ 403.312879][T27216] ? clear_bhb_loop+0x55/0xb0 [ 403.312933][T27216] ? clear_bhb_loop+0x55/0xb0 [ 403.313028][T27216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.313052][T27216] RIP: 0033:0x7f702fe3d169 [ 403.313066][T27216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.313159][T27216] RSP: 002b:00007f702e486038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.313177][T27216] RAX: ffffffffffffffda RBX: 00007f7030056080 RCX: 00007f702fe3d169 [ 403.313190][T27216] RDX: 0000000000000000 RSI: 0000400000000500 RDI: 0000000000000009 [ 403.313202][T27216] RBP: 00007f702e486090 R08: 0000000000000000 R09: 0000000000000000 [ 403.313212][T27216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.313223][T27216] R13: 0000000000000000 R14: 00007f7030056080 R15: 00007ffeadb14328 [ 403.313238][T27216] [ 403.335527][T27220] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8887'. [ 403.583103][T26814] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.601890][T27229] loop7: detected capacity change from 0 to 1024 [ 403.610174][T27229] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 403.621189][T27229] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 403.622318][T27229] JBD2: no valid journal superblock found [ 403.637043][T27229] EXT4-fs (loop7): Could not load journal inode [ 403.738752][T27233] loop8: detected capacity change from 0 to 1024 [ 403.745811][T27233] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 403.766878][T27233] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 403.775147][T27233] EXT4-fs (loop8): orphan cleanup on readonly fs [ 403.781868][T27233] EXT4-fs error (device loop8): __ext4_get_inode_loc:4435: comm syz.8.8892: Invalid inode table block 0 in block_group 0 [ 403.794696][T27233] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 403.804415][T27233] EXT4-fs error (device loop8): ext4_quota_write:7299: inode #3: comm syz.8.8892: mark_inode_dirty error [ 403.817795][T27233] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.8892: Failed to acquire dquot type 0 [ 403.829461][T27233] EXT4-fs error (device loop8): __ext4_get_inode_loc:4435: comm syz.8.8892: Invalid inode table block 0 in block_group 0 [ 403.842447][T27233] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 403.852148][T27233] EXT4-fs error (device loop8): ext4_ext_truncate:4457: inode #15: comm syz.8.8892: mark_inode_dirty error [ 403.863859][T27233] EXT4-fs error (device loop8): __ext4_get_inode_loc:4435: comm syz.8.8892: Invalid inode table block 0 in block_group 0 [ 403.876899][T27233] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 403.886459][T27233] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 403.896685][T27233] EXT4-fs error (device loop8): __ext4_get_inode_loc:4435: comm syz.8.8892: Invalid inode table block 0 in block_group 0 [ 403.897400][T27239] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 403.909553][T27233] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 403.915768][T27239] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 403.915875][T27239] vhci_hcd vhci_hcd.0: Device attached [ 403.927148][T27233] EXT4-fs error (device loop8): ext4_truncate:4240: inode #15: comm syz.8.8892: mark_inode_dirty error [ 403.939036][T27240] vhci_hcd: connection closed [ 403.949819][T27233] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 403.950151][T20606] vhci_hcd: stop threads [ 403.956538][T27233] EXT4-fs (loop8): 1 truncate cleaned up [ 403.963420][T20606] vhci_hcd: release socket [ 403.963429][T20606] vhci_hcd: disconnect device [ 403.982925][T27233] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 404.010848][T26814] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.051513][T27245] loop8: detected capacity change from 0 to 2048 [ 404.075834][T27245] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.089433][T27249] FAULT_INJECTION: forcing a failure. [ 404.089433][T27249] name failslab, interval 1, probability 0, space 0, times 0 [ 404.102247][T27249] CPU: 1 UID: 0 PID: 27249 Comm: syz.0.8897 Tainted: G W 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 404.102274][T27249] Tainted: [W]=WARN [ 404.102280][T27249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 404.102298][T27249] Call Trace: [ 404.102303][T27249] [ 404.102309][T27249] dump_stack_lvl+0xf2/0x150 [ 404.102398][T27249] dump_stack+0x15/0x1a [ 404.102414][T27249] should_fail_ex+0x24a/0x260 [ 404.102436][T27249] should_failslab+0x8f/0xb0 [ 404.102532][T27249] kmem_cache_alloc_noprof+0x52/0x320 [ 404.102550][T27249] ? getname_flags+0x81/0x3b0 [ 404.102574][T27249] getname_flags+0x81/0x3b0 [ 404.102598][T27249] __x64_sys_mkdirat+0x41/0x60 [ 404.102680][T27249] x64_sys_call+0x1b6f/0x2dc0 [ 404.102699][T27249] do_syscall_64+0xc9/0x1c0 [ 404.102721][T27249] ? clear_bhb_loop+0x55/0xb0 [ 404.102742][T27249] ? clear_bhb_loop+0x55/0xb0 [ 404.102829][T27249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.102892][T27249] RIP: 0033:0x7ff407fbb9d7 [ 404.102904][T27249] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.102967][T27249] RSP: 002b:00007ff406626e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 404.102982][T27249] RAX: ffffffffffffffda RBX: 00007ff406626ef0 RCX: 00007ff407fbb9d7 [ 404.102991][T27249] RDX: 00000000000001ff RSI: 0000400000000f00 RDI: 00000000ffffff9c [ 404.103001][T27249] RBP: 0000400000000f40 R08: 0000400000000000 R09: 0000000000000000 [ 404.103010][T27249] R10: 0000400000000f40 R11: 0000000000000246 R12: 0000400000000f00 [ 404.103019][T27249] R13: 00007ff406626eb0 R14: 0000000000000000 R15: 0000400000000100 [ 404.103032][T27249] [ 404.291635][T27253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8898'. [ 404.292757][T27254] loop6: detected capacity change from 0 to 1024 [ 404.316723][T27254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.331166][T27254] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4115: comm syz.6.8899: Allocating blocks 385-513 which overlap fs metadata [ 404.332165][T27258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8900'. [ 404.349467][T27254] EXT4-fs (loop6): pa ffff88810061ee70: logic 16, phys. 129, len 24 [ 404.362131][T27254] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 404.373117][T27254] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 404.385656][T27254] EXT4-fs (loop6): This should not happen!! Data will be lost [ 404.385656][T27254] [ 404.395552][T27254] EXT4-fs (loop6): Total free blocks count 0 [ 404.401572][T27254] EXT4-fs (loop6): Free/Dirty block details [ 404.407500][T27254] EXT4-fs (loop6): free_blocks=128 [ 404.412691][T27254] EXT4-fs (loop6): dirty_blocks=0 [ 404.417742][T27254] EXT4-fs (loop6): Block reservation details [ 404.417755][T27254] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 404.441338][T26814] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.466200][T27262] netlink: 'syz.7.8903': attribute type 1 has an invalid length. [ 404.510520][T27268] loop8: detected capacity change from 0 to 4096 [ 404.518796][T27268] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.533537][T27268] dccp_xmit_packet: Payload too large (65472) for featneg. [ 404.556746][T26814] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.571368][T27274] loop7: detected capacity change from 0 to 1024 [ 404.578157][T27274] EXT4-fs: Ignoring removed nobh option [ 404.583801][T27274] EXT4-fs: Ignoring removed bh option [ 404.595549][T27274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.681078][T27290] loop2: detected capacity change from 0 to 2048 [ 404.712847][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 404.712861][ T29] audit: type=1326 audit(1741276986.238:36233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27293 comm="syz.8.8914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6493fd169 code=0x7ffc0000 [ 404.717942][T27290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.719717][ T29] audit: type=1326 audit(1741276986.248:36234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27293 comm="syz.8.8914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6493fd169 code=0x7ffc0000 [ 404.800056][ T29] audit: type=1326 audit(1741276986.308:36235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27293 comm="syz.8.8914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fc6493fd169 code=0x7ffc0000 [ 404.808314][T27297] loop8: detected capacity change from 0 to 1024 [ 404.823704][ T29] audit: type=1326 audit(1741276986.308:36236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27293 comm="syz.8.8914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6493fd169 code=0x7ffc0000 [ 404.853627][ T29] audit: type=1326 audit(1741276986.308:36237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27293 comm="syz.8.8914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6493fd169 code=0x7ffc0000 [ 404.891685][T27297] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.910042][T27297] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4115: comm syz.8.8915: Allocating blocks 385-513 which overlap fs metadata [ 404.928302][T27297] EXT4-fs (loop8): pa ffff88810061eee0: logic 16, phys. 129, len 24 [ 404.936707][T27297] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 404.958032][T27297] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 404.970509][T27297] EXT4-fs (loop8): This should not happen!! Data will be lost [ 404.970509][T27297] [ 404.980205][T27297] EXT4-fs (loop8): Total free blocks count 0 [ 404.986203][T27297] EXT4-fs (loop8): Free/Dirty block details [ 404.992124][T27297] EXT4-fs (loop8): free_blocks=128 [ 404.997315][T27297] EXT4-fs (loop8): dirty_blocks=0 [ 405.002331][T27297] EXT4-fs (loop8): Block reservation details [ 405.008408][T27297] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 405.043819][T21776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.057218][T27304] FAULT_INJECTION: forcing a failure. [ 405.057218][T27304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.070474][T27304] CPU: 0 UID: 0 PID: 27304 Comm: syz.6.8917 Tainted: G W 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 405.070501][T27304] Tainted: [W]=WARN [ 405.070507][T27304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 405.070585][T27304] Call Trace: [ 405.070591][T27304] [ 405.070599][T27304] dump_stack_lvl+0xf2/0x150 [ 405.070657][T27304] dump_stack+0x15/0x1a [ 405.070739][T27304] should_fail_ex+0x24a/0x260 [ 405.070767][T27304] should_fail+0xb/0x10 [ 405.070792][T27304] should_fail_usercopy+0x1a/0x20 [ 405.070823][T27304] _copy_from_user+0x1c/0xa0 [ 405.070842][T27304] __sys_bpf+0x14e/0x7a0 [ 405.070953][T27304] __x64_sys_bpf+0x43/0x50 [ 405.070978][T27304] x64_sys_call+0x2914/0x2dc0 [ 405.071004][T27304] do_syscall_64+0xc9/0x1c0 [ 405.071044][T27304] ? clear_bhb_loop+0x55/0xb0 [ 405.071071][T27304] ? clear_bhb_loop+0x55/0xb0 [ 405.071097][T27304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.071123][T27304] RIP: 0033:0x7f702fe3d169 [ 405.071138][T27304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.071193][T27304] RSP: 002b:00007f702e4a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 405.071209][T27304] RAX: ffffffffffffffda RBX: 00007f7030055fa0 RCX: 00007f702fe3d169 [ 405.071219][T27304] RDX: 0000000000000048 RSI: 0000400000000b00 RDI: 2000000000000000 [ 405.071231][T27304] RBP: 00007f702e4a7090 R08: 0000000000000000 R09: 0000000000000000 [ 405.071244][T27304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.071256][T27304] R13: 0000000000000000 R14: 00007f7030055fa0 R15: 00007ffeadb14328 [ 405.071272][T27304] [ 405.272046][T27307] loop6: detected capacity change from 0 to 2048 [ 405.302757][T27307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.345674][ T29] audit: type=1326 audit(1741276986.878:36238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27269 comm="syz.0.8906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff407fbd169 code=0x7ffc0000 [ 405.369321][ T29] audit: type=1326 audit(1741276986.878:36239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27269 comm="syz.0.8906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff407fbd169 code=0x7ffc0000 [ 405.421806][T27313] xt_hashlimit: max too large, truncated to 1048576 [ 405.429356][T27313] Cannot find set identified by id 0 to match [ 405.439858][T27317] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 405.446386][T27317] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 405.454025][T27317] vhci_hcd vhci_hcd.0: Device attached [ 405.462583][T27318] vhci_hcd: connection closed [ 405.462868][T20649] vhci_hcd: stop threads [ 405.471788][T20649] vhci_hcd: release socket [ 405.476241][T20649] vhci_hcd: disconnect device [ 405.497352][T23887] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.507359][T22872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.545120][T27326] loop6: detected capacity change from 0 to 512 [ 405.565178][T27326] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.577896][T27326] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.641815][T27335] netlink: 'syz.7.8927': attribute type 1 has an invalid length. [ 405.743289][T27340] vlan2: entered promiscuous mode [ 405.783134][T27346] netlink: 'syz.8.8932': attribute type 1 has an invalid length. [ 405.860611][T27354] loop7: detected capacity change from 0 to 2048 [ 405.882785][T27352] bridge_slave_0: left allmulticast mode [ 405.888544][T27352] bridge_slave_0: left promiscuous mode [ 405.894410][T27352] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.905817][T27354] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.906801][T27352] bridge_slave_1: left allmulticast mode [ 405.923612][T27352] bridge_slave_1: left promiscuous mode [ 405.929261][T27352] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.969118][T27352] bond0: (slave bond_slave_0): Releasing backup interface [ 405.990614][T27352] bond0: (slave bond_slave_1): Releasing backup interface [ 406.013468][T27352] team0: Port device team_slave_0 removed [ 406.024040][T27352] team0: Port device team_slave_1 removed [ 406.030743][T27352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.038282][T27352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.049467][T27352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.057475][T27352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.118869][T22872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.137842][T27363] netlink: 'syz.8.8939': attribute type 1 has an invalid length. [ 406.169866][ T29] audit: type=1400 audit(1741276987.698:36240): avc: denied { write } for pid=27364 comm="syz.7.8938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 406.201322][ T29] audit: type=1400 audit(1741276987.698:36241): avc: denied { connect } for pid=27364 comm="syz.7.8938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 406.244477][T27370] loop8: detected capacity change from 0 to 128 [ 406.311957][T27376] loop2: detected capacity change from 0 to 2048 [ 406.331421][T27368] xt_hashlimit: max too large, truncated to 1048576 [ 406.339151][T27368] Cannot find set identified by id 0 to match [ 406.345496][T27378] FAULT_INJECTION: forcing a failure. [ 406.345496][T27378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.358635][T27378] CPU: 0 UID: 0 PID: 27378 Comm: syz.8.8944 Tainted: G W 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 406.358662][T27378] Tainted: [W]=WARN [ 406.358669][T27378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 406.358724][T27378] Call Trace: [ 406.358730][T27378] [ 406.358738][T27378] dump_stack_lvl+0xf2/0x150 [ 406.358764][T27378] dump_stack+0x15/0x1a [ 406.358785][T27378] should_fail_ex+0x24a/0x260 [ 406.358873][T27378] should_fail+0xb/0x10 [ 406.358897][T27378] should_fail_usercopy+0x1a/0x20 [ 406.358921][T27378] _copy_from_user+0x1c/0xa0 [ 406.358937][T27378] copy_msghdr_from_user+0x54/0x2a0 [ 406.358990][T27378] ? __fget_files+0x17c/0x1c0 [ 406.359017][T27378] __sys_sendmsg+0x13e/0x230 [ 406.359046][T27378] __x64_sys_sendmsg+0x46/0x50 [ 406.359074][T27378] x64_sys_call+0x2734/0x2dc0 [ 406.359096][T27378] do_syscall_64+0xc9/0x1c0 [ 406.359126][T27378] ? clear_bhb_loop+0x55/0xb0 [ 406.359219][T27378] ? clear_bhb_loop+0x55/0xb0 [ 406.359245][T27378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.359267][T27378] RIP: 0033:0x7fc6493fd169 [ 406.359347][T27378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.359363][T27378] RSP: 002b:00007fc647a67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.359379][T27378] RAX: ffffffffffffffda RBX: 00007fc649615fa0 RCX: 00007fc6493fd169 [ 406.359392][T27378] RDX: 0000000000000000 RSI: 00004000000003c0 RDI: 0000000000000005 [ 406.359404][T27378] RBP: 00007fc647a67090 R08: 0000000000000000 R09: 0000000000000000 [ 406.359463][T27378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.359535][T27378] R13: 0000000000000000 R14: 00007fc649615fa0 R15: 00007ffea8331bb8 [ 406.359549][T27378] [ 406.545517][T23887] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.546020][T27376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.571950][ T29] audit: type=1400 audit(1741276988.098:36242): avc: denied { map } for pid=27375 comm="syz.2.8943" path="/426/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 406.660359][T27382] 9pnet_fd: Insufficient options for proto=fd [ 406.699992][T27382] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8946'. [ 406.709788][T27394] ================================================================== [ 406.717883][T27394] BUG: KCSAN: data-race in mas_wmb_replace / mtree_range_walk [ 406.725348][T27394] [ 406.727655][T27394] write to 0xffff888104530400 of 8 bytes by task 27387 on cpu 1: [ 406.735353][T27394] mas_wmb_replace+0x222/0x14d0 [ 406.740190][T27394] mas_wr_store_entry+0x1530/0x23f0 [ 406.745380][T27394] mas_store_prealloc+0x6bf/0x960 [ 406.750393][T27394] vma_complete+0x3a7/0x760 [ 406.754889][T27394] __split_vma+0x5d6/0x6a0 [ 406.759293][T27394] vma_modify+0xd3/0x1e0 [ 406.763528][T27394] vma_modify_flags+0xf1/0x120 [ 406.768291][T27394] mprotect_fixup+0x31a/0x5e0 [ 406.772950][T27394] do_mprotect_pkey+0x6cc/0x9a0 [ 406.777787][T27394] __x64_sys_mprotect+0x48/0x60 [ 406.782624][T27394] x64_sys_call+0x2770/0x2dc0 [ 406.787296][T27394] do_syscall_64+0xc9/0x1c0 [ 406.791789][T27394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.797670][T27394] [ 406.799976][T27394] read to 0xffff888104530400 of 8 bytes by task 27394 on cpu 0: [ 406.807588][T27394] mtree_range_walk+0x33d/0x460 [ 406.812432][T27394] mas_walk+0x16e/0x320 [ 406.816575][T27394] lock_vma_under_rcu+0x95/0x270 [ 406.821497][T27394] exc_page_fault+0x150/0x650 [ 406.826163][T27394] asm_exc_page_fault+0x26/0x30 [ 406.831000][T27394] [ 406.833303][T27394] value changed: 0xffff88810b479641 -> 0xffff888104530400 [ 406.840389][T27394] [ 406.842693][T27394] Reported by Kernel Concurrency Sanitizer on: [ 406.848823][T27394] CPU: 0 UID: 0 PID: 27394 Comm: syz.0.8947 Tainted: G W 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 406.861046][T27394] Tainted: [W]=WARN [ 406.864831][T27394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 406.874868][T27394] ================================================================== [ 406.929118][T21776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.