last executing test programs: 6m5.324255771s ago: executing program 32 (id=1812): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 5m54.437392508s ago: executing program 33 (id=1880): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2d, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x912}}}}}}, 0x0) 5m48.155719264s ago: executing program 34 (id=1919): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x2000, 0x0, 0xfffffffffffffffd}) r7 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r7, 0x0, 0x5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5m27.875680545s ago: executing program 6 (id=2060): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000340)='./bus\x00', 0x64842, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x0, 0x1001f0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x6c00, 0x3, 0x3) 5m27.701864754s ago: executing program 6 (id=2065): pipe(&(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) 5m25.491998366s ago: executing program 6 (id=2074): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008a1f, &(0x7f0000000300), 0x1, 0x4c8, &(0x7f0000000a00)="$eJzs3d9rHFsdAPDvTLLX/sg1e9GH6wWvF++VpGh3k8a2wYdaQfSpoNb3GJNNCNlkQ3bTNqFoin+AIKKCTz75IvgHCNI/QYSCvouKItrqgw/akZ2drW262+TSbaYknw+c7jkzu/v9nm12ds7MYSaAU+u9iLgeEWMRcSEiJovlaVEWuo393vMePby71C1JZNnNvyeRFMv679Vtj0fE+d5L4kxEfOOrEd9Ono/b3t1bX2w2G9tFu97Z2Kq3d/curm0srjZWG5tzc7NX5q/OX56fyQov1c9qRFz78p9/9P2ff+Xarz93+w8Lf53+TjetiWL90/0YpV7XK/ln0df9jLZfRbASjBX9qZSdCAAARzJd7KN+Ot//n4yxfG8OAAAAOEmyL07Ef5KIDAAAADix0nwObJLWivm+E5GmtVpvDu/H41zabLU7n11p7Wwu9+bKVqOSrqw1GzPFXOFqVJJue7aYY9tvXzrQnouItyLih5Nn83ZtqdVcLvvgBwAAAJwS5w+M//81meZ1AAAA4ISplp0AAAAA8MoZ/wMAAMDJZ/wPAAAAJ9rXbtzolqx//+vlW7s7661bF5cb7fXaxs5Sbam1vVVbbbVW82v2bRz2fs1Wa+vzsblzp95ptDv19u7ewkZrZ7OzsPbMLbABAACAY/TWp+7/PomI/S+czUtXUnZSwOvnT2UnAIzSWNkJAKUZLzsBoDSVshMASnfYMb+hk3d+M/pcAACAV2PqE8+f/3+jWOfYAJxsadkJAADHzvl/OL0qZgDCqffRQ9a//Pn/LPtQCQEAACM3kZckrRXnAiciTWu1iDfz2wJUkpW1ZmOmGB/8brLykW57Nn9l4joBAAAAAAAAAAAAAAAAAAAAAAAAAHBEWZZEBgAAAJxoEelfkvxq/hFTkx9MHDw+8Eby78n8MSJu//Tmj+8sdjrbs93l/3iyvPOTYvmlMo5gAAAAAAf1x+n9cTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjNKjh3eX+uU44/7tSxFRHRR/PM7kj2eiEhHn/pnE+FOvSyJibATx9+/loQbET+JxlmXVIotB8c+OKv7bg+NX849mcPw0Is6PID6cZve725/rg75/abyXPw7+/o0X5WUN3/6lT7Z/Y0O2P28eMcY7D35ZHxr/XsQ7Q7Z//fjJkPjvHzH+t765tzdsXfaziKmBvz/JM7HqnY2tent37+LaxuJqY7WxOTc3e2X+6vzl+Zn6ylqzUfw7MMYPPvmrxy/q/7kh8auH9P+DI/b/vw/uPPxYr1oZFH/6/cG/v28PiZ8Wv32fKerd9VP9+n6v/rR3f/Hbd1/U/+Uh/T/s/3/6iP2/8PXv/fGITwUAjkF7d299sdlsbKuolFjJvtv7e3xd8ulVstcjjVIqZW+ZAACAUfv/Tn/ZmQAAAAAAAAAAAAAAAAAAAMDpdRyXEzsYc7+crgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvND/AgAA//+4at9f") 5m25.060753624s ago: executing program 6 (id=2075): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0xffffffff}, {0xffffffff, 0x0, 0x0, 0x80000000}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df19ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d90a25b258c3a4bd6c90ce0c6d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e7") ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={0x0}) 5m24.789315613s ago: executing program 6 (id=2077): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000000240)=0xa8c, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4dc, &(0x7f0000000d80)="$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") r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)=@updpolicy={0xfc, 0x19, 0x1, 0x4000000, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x0, 0x3c}, 0x0, @in6=@private1, 0x3501}]}]}, 0xfc}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0xfffe}, 0x1c) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 5m24.363940371s ago: executing program 6 (id=2079): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000040000000000000000000700"/28], 0x48) pipe2(&(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) poll(0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = epoll_create1(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x60000008}) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg$inet(r5, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0, 0x0, &(0x7f0000002d00)=ANY=[@ANYBLOB="24000000000000000000000007000000071312ac1e0101ffffffff65000001ac1e00010000000000"], 0x28}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 5m24.293909691s ago: executing program 35 (id=2079): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000040000000000000000000700"/28], 0x48) pipe2(&(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) poll(0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = epoll_create1(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x60000008}) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg$inet(r5, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0, 0x0, &(0x7f0000002d00)=ANY=[@ANYBLOB="24000000000000000000000007000000071312ac1e0101ffffffff65000001ac1e00010000000000"], 0x28}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 1m50.709678171s ago: executing program 8 (id=3958): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m50.60141466s ago: executing program 8 (id=3960): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000ead200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setresuid(0xee01, 0x0, 0xffffffffffffffff) setresuid(0xee00, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000600)={'gre0\x00', 0x0, 0x9, 0x40, 0x0, 0x5, {{0x3b, 0x4, 0x1, 0x2, 0xec, 0x68, 0x0, 0x5, 0x29, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0x23, 0x68, [@broadcast, @broadcast, @local, @broadcast, @remote, @broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0xe9, 0x0, 0xe, [0xed, 0xc]}, @rr={0x7, 0x1b, 0x2a, [@empty, @multicast2, @rand_addr=0x64010100, @rand_addr=0x64010101, @multicast1, @private=0xa010102]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x2c, 0xa9, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x4}, {@local, 0x2}, {@multicast2, 0x6}, {@empty, 0xa}, {@loopback, 0xa}]}, @timestamp_prespec={0x44, 0xc, 0xe3, 0x3, 0xb, [{@local, 0x6}]}, @generic={0x83, 0xf, "07b602905e3e3319c3940aac9e"}, @timestamp_prespec={0x44, 0x3c, 0x4e, 0x3, 0x2, [{@empty, 0x8}, {@empty, 0xa}, {@local, 0x8}, {@private=0xa014100, 0x2}, {@remote, 0x10001}, {@private=0xa010102, 0x6}, {@loopback, 0x3}]}]}}}}}) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_emit_ethernet(0x336, &(0x7f0000000800)={@empty, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x300, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x6}, @mcast2, {[@fragment={0x32, 0x0, 0xa3, 0x1, 0x0, 0x6, 0x64}, @hopopts={0x2c}, @dstopts={0x6c, 0x8, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0xfd, 0x3, [0x81, 0x9, 0x5]}}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x8}]}, @hopopts={0x3a, 0xf, '\x00', [@generic={0x80, 0x56, "aa96752b11bd5d8086c8812c80568cd165cd7ae08405ba48de16674a8b0c038b283901aabc83d4c235a10c56102c83d4608ebd0f5a1262e8b891970ef85ef3842b63e70711a604eaa28b9a4504901889235871506f68"}, @jumbo={0xc2, 0x4, 0x7ff}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x9}, @pad1]}, @dstopts={0x3c, 0x3e, '\x00', [@generic={0x5, 0x88, "cacb2fe3a835b7b10f43e08beb3d7f92b85ddf0b4d2a5a8a7ccfad0af408a58e6d86aa785babc38b330ae594d508c0b6d3c09e366309f445b7d131483632e804641ada94ffd4b90bd2af0edc47d83b5caab6b4d1131386b80fc8d064aaf9b6e25eae988855e9cf5ba3a7e8170c1fd7c7a2c650f9cb633cc98843f26275878bb203cd46502f17f4a5"}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @generic={0x0, 0xed, "0bc622d7f7b1def349e494098aacb2d916290aae157b20ca3ef6d15a019a8d121ebdbf9708cde846239c1cc54489e5a5b9bf34a8f0d2c609363f179ef8b25805fe464a47a7ff7928e35921c2c5e873a2e1abbf0bd976c848f1825869681a2b9a1097d8b89a303802b6baa263bc678917e54e79a283d0ec3b07c07b7b97c3f3872ba879890dca81b1a97488914778bfdb0eafd608ca08d7f56b2b8423724fca393529b056dc10df3a1cdbb14f406739345b6f23a31437b6dc2f59bb020032c4e9d610195e01b537f8107718c5deb369f5b5a26198b746fa5ab6373be2f25220306fc4cac4eccebbfc43935658cd"}, @calipso={0x7, 0x50, {0x0, 0x12, 0x1, 0x1, [0x7240, 0xfffffffffffffff7, 0x50, 0x7ff, 0x4, 0xfffffffffffffffb, 0x0, 0x7, 0x9e6]}}, @hao={0xc9, 0x10, @private0}]}], {{0x400, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x8, 0x2}]}}}}}}}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) io_uring_enter(r0, 0x93c, 0x80ac, 0xb, &(0x7f0000000500)={[0x101]}, 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r6}, 0x8) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='block_bio_complete\x00', r5, 0x0, 0x80}, 0x18) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x3, 0xd, 0x5, 0x9b}]}) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) kexec_load(0xdb, 0x1, &(0x7f0000000380)=[{&(0x7f00000001c0)="d525dd6a959604954335a68759116fd4793a53a0", 0x14, 0x0, 0xc}], 0x340002) r7 = dup3(r4, r3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2c) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r9, r11, 0x25, 0x0, @val=@perf_event}, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x700}}}}}}, 0x0) recvmmsg(r7, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=r0, @ANYBLOB="01000000000040000000000000001fe1d67c", @ANYRES32=r2, @ANYRES32=r7, @ANYBLOB="05000000040000000400"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x175}, 0x18) 1m49.723171427s ago: executing program 8 (id=3972): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x4c, &(0x7f0000000000)=0xb, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x100100, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00009f000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kfree\x00', r7, 0x0, 0x10000}, 0x18) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x55, 0x1, 0x0, 0x4, 0x0, 0x7fef, 0x908a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b33, 0x4, @perf_config_ext={0x4000000000407fff, 0xffffc00000000000}, 0x14b3c, 0x80000000033, 0xfffffbff, 0x3, 0x2, 0x9, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) connect$can_bcm(r5, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 1m49.541087596s ago: executing program 8 (id=3973): r0 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x82, &(0x7f0000000740), 0x5, 0x50b, &(0x7f0000001580)="$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") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000680)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='kmem_cache_free\x00', r3}, 0x18) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) sendfile(r5, r0, 0x0, 0x6) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0xff, 0x5, 0x9, 0x10, 0x0, 0x2, 0x2200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000440), 0xa}, 0x115120, 0x6, 0x8, 0x9, 0x3, 0x0, 0xa35d, 0x0, 0x7ff, 0x0, 0x5}, r1, 0x0, r2, 0x7) inotify_add_watch(0xffffffffffffffff, 0x0, 0x40) open(0x0, 0x60840, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f00000002c0)={0x80, 0x5, 0x4}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x10000006, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x24, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='qdisc_create\x00', r13, 0x0, 0x4}, 0xfffffffffffffd5f) setxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000fc0)=ANY=[@ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="02000100c82edfbb60834163610227ca", @ANYRES32=0x0, @ANYBLOB="02050000", @ANYRES32=0x0, @ANYRES16=r11, @ANYRES32=0x0, @ANYRES32=r4, @ANYRES8=r10, @ANYRESHEX=r14, @ANYRES64, @ANYRES32=r12, @ANYRES32=0xee00, @ANYBLOB="10000300000000002000060000000000"], 0x5c, 0x3) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r15}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r16, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000007c0)={0x3, &(0x7f0000000800)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}, {0x3, 0x9b, 0x2, 0x8}, {0x80, 0x13, 0x7, 0x51}]}) 1m48.672282472s ago: executing program 8 (id=3975): socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f0000000000), 0x45, 0x775, &(0x7f0000001cc0)="$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") syz_io_uring_setup(0x24f5, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(r0, &(0x7f0000000300)='./file1\x00', 0x24101, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="16000000000000000400000401000000d9e27fb712e51849b9d77172325958e7e34182d69a5065c2bc3cf93d2f164140cb87b7ce78879d0a037d7904fcdfb03915d9e5e37f00b81b3c6b5a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32=r1, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) utimes(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)={{0x77359400}}) 1m48.11649619s ago: executing program 8 (id=3983): pipe(&(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) 1m48.11613742s ago: executing program 36 (id=3983): pipe(&(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) 1m21.461775347s ago: executing program 4 (id=4367): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) clock_adjtime(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x60809, &(0x7f0000000380)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@data_err_ignore}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}]}, 0x2, 0x470, &(0x7f0000000e40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, 0x170, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000000) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) 1m20.468553432s ago: executing program 4 (id=4381): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x105, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="7f000001ac1e01010000000007000000ac1414bbac14141dac1414aae0000001ffffffffac1414aa00000000df1909a5106b537e08c26d436bc6bcae4d733d44c581e3f5fd03d52f0eab68708d22f09eb34472f78036fa53f38ebcde0830679e50541c2a87c6766c328d5b"], 0x2c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) 1m19.991316601s ago: executing program 4 (id=4388): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000d80)="bc14", 0x2}], 0x1, 0x0, 0x0, 0x4000010}, 0x20004011) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) 1m18.991342487s ago: executing program 4 (id=4395): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000410, &(0x7f0000000040)={[{@nouid32}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@abort}, {@orlov}]}, 0x4, 0x4fe, &(0x7f0000000a40)="$eJzs3U9vVF8ZAOD3Tju0vzJQUBZqVBBRNITpH6AhuBAWagghMRJXLqC2Q9N0hmk6LdDKoizdGyVxpR/BnQsTVi7cudOdG1yYoBINNXEx5t4Z2qHt0FHajp15nuTOvefcYd5zZjjnzD2X4QTQt85FxHpEHIuBLD3azE+aW9xsbOnz3r55NrPx5tlMEvX6vb8l2fk0L1r+TOp48zWHI+J734n4YbIzbm11bWG6XC4tNdNjy5XFsdrq2uX5XDNncmpiavz6lWuT+1bXs5Vfvf72/J3v/+bXX3j1+/Wv/ygtVuHHJ7JzrfXYT42q56PQkjcYEXcOIliXDGZ/fziK0tb2qYg4HxEPYjQGsk8TAOhl9fpo1Edb0wBAr0uv/wuR5IrNuYBC5HLFYmMO70yM5MrV2vKl0erKo9nI5rBORT73cL5cGm/OFZ6KfJKmJ7LjrfTktvSViDgdET8Z+iRLF2eq5dlufvEBgD52fNv4/8+hxvgPAPS44W4XAAA4dMZ/AOg/xn8A6D//xfjv14EA0CNc/wNA/zH+A0D/2XP8f94m390AADiKvnv3brrVN5r///Xs49WVbxQeX54t1RaKlZWZ4kx1abE4V63OlUvFmXp9r9crV6uLE1c3k7XVtfuV6sqj5fvzlem50v1S/oDrAwDs7fTZl39MImL9xifZFi1rORirobflul0AoGsGul0AoGvcwYP+1cE1vmkA6HG7LNH7nrb/ROiFxV/hqLr4WfP/0K/M/0P/+t/m/7+57+UADp/5f+hf9XpizX8A6DPm+IGPuv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfaqQbUmumK0Fvp4+5orFiBMRcSryycP5cmk8Ik5GxB+G8kNpeqLbhQYAPlLuL0lz/a+LoxcK288eS/41lO0j4snP7/3s6fTy8tJEmv/3zfzlF838yWPdqAAA0OrmzqzGON3ct1zIv33zbObddphFfH2rsbhoGnejuTXODMZgth+OfESM/CNpphvS7ysD+xB//XlEfGar/k9bIhSyOZDGyqfb46exTxxA/K33f3v83Hvxc9m5dJ/P3otPdxRtaB9KDL3j5a1GP9lse2kTa7a/XJzL9ru3/+Gsh/p47/q/jR39X26z/xvYET/J2vy5zfSHS/L66m9v78isjzbOPY/43OBu8ZPN+Emb/vdCh3X80+e/eL7dufovIi7G7vEbKlk3O7ZcWRyrra5dnq9Mz5XmSo8mJ6cmpsavX7k2OZbNUTcef7dbjL/euHSyXfy0/iNt4g/vUf+vdFj/X/77wQ++9IH4X/vy7p//mQ/ET8fEr3YYf3rkZtvlu9P4s23qv9fnf6nD+K/+vDbb4VMBgENQW11bmC6XS0t7HKTfNfd6joOjeRDr2W2cbhej84Nv3f7pk/+DYhzswbsW2q1idLdfAg7eVqPvdkkAAAAAAAAAAAAAAIB2aqtrC0NxsD8n6nYdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6F3/CQAA//9rHMmx") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x40000000) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb971dc9c2431495f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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") 1m18.815408006s ago: executing program 4 (id=4398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setgid(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x11, 0x800000003, 0x5) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x8, 0xffff, 0x0, 0x0, 0x1, 0x6, 0xa040, 0x16a, 0x0, 0x0, 0x0, 0x9a]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 1m17.18477331s ago: executing program 4 (id=4415): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1, 0x0, 0x0, 0xf000000}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 1m17.18429475s ago: executing program 37 (id=4415): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1, 0x0, 0x0, 0xf000000}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 1m7.304565132s ago: executing program 9 (id=4491): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) sendto$packet(r2, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 1m6.76195806s ago: executing program 9 (id=4498): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$eJzs3MGLG1UYAPDPbNvdbmmzBxEUxIde9BLa9S8I0oK4oKyNqAdh6mY17JgsmbgSEdubV/+O4tGboP4De/HmXbwsguClBzHSJONm10BbaZzV/H4Q5su8+fLeTGbCNwN5R29/+dHebtHYzQZRW0tRi7gT9yI27kdTT0yXtXF8IWbdiZcu/fbjs2++8+5rza2t69sp3WjefHkzpXTluW8/+eyr578fXHrr6yvfrMbhxntHv27+dPjU4dNHf9wsP703SFm61esNslt5O+10ir1GSm/k7axop063aPdPtO/mvf39Ycq6O5fX9/vtokhZd5j22sM06KVBf5iyD7JONzUajXR5PZbNyiNntO5ub2fNhQyGKlyct7Lfb2Yrcxtbd/+NQQEAZ0tV9f+HnSJ1itR9UP1fC/X/4qj/l8H9+n99ev2epP4HAAAAAAAAAAAAAID/gnujUX00GtXLZflajYi1iCjfVz1OFsP3v9xm/ri3FpF/cdA6aE2Wk/bmbnQij3ZcPR/x+/h8mJrEN17dun41jW3Ed/ntaf7tg9ZKrJb5pY35+dcm+elk/vlYn+1/M+rx5Pz8zbn5F+LFF2byG1GPH96PXuSxMz6vj/M/v5bSK69vncq/ON4OAAAA/g8a6S9/u38ftzdSOW3IqfbJyuPnA1F/wPOBU/fX5+KZc9XtNwAAACyTYvjpXpbn7b7g0QKHbuFBLSIq6v2XiDgbB+GxBj9/PLnqH2bjqn+ZAACAx+246K96JAAAAAAAAAAAAAAAAAAAALC8HnbysHL7fzL32Ex3K9XsJQAAAAAAAAAAAAAAAAAAAAAAAJwNfwYAAP//xsMhSw==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3, 0x1}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) renameat2(r0, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./bus\x00', 0x0) 1m6.618982049s ago: executing program 9 (id=4501): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000fc0f00000a00000000000000", @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0/file0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000007c0)={[{@mblk_io_submit}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_path={'journal_path', 0x3d, './file0/file0'}}, {@sb={'sb', 0x3d, 0x4}}, {@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}]}, 0x0, 0x47a, &(0x7f0000000b00)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010101}}, 0x0, 0x0, 0x37, 0x0, "c3218d82c5896754d7cdb23c72887c897926a8856263b50c578ef1f9f362f16f21f5c872b1737718103bbde1a9d99011d25bbdff9c1351ba69e297337d6a5e4a948c1cbf827d6e95ad5bbfb5b3bd1929"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x3, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r7, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x4, &(0x7f0000000240), 0x2f, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m6.292149668s ago: executing program 9 (id=4505): symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', r1, 0x2f, 0x9, 0xd, 0x7aec0071, 0x24, @loopback, @mcast1, 0x8000, 0x0, 0x9, 0xf}}) lstat(&(0x7f0000000180)='.\x02\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000100000000000000000002000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], 0x1, 0x26d, &(0x7f0000000800)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) socket$inet(0x2, 0x3, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) open(0x0, 0x143c62, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r7 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) ftruncate(r7, 0x8002007ffb) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x1, 0xfffffffd}]}, 0x10) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r9}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 1m5.860597596s ago: executing program 9 (id=4511): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f000001a7c0)={0x0, &(0x7f000001a6c0)=""/221, 0x0, 0xdd, 0x0, 0x1, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 1m5.700881385s ago: executing program 3 (id=4515): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000900)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0) 1m5.584806685s ago: executing program 3 (id=4517): syz_emit_ethernet(0x0, 0x0, 0x0) 1m5.487296604s ago: executing program 9 (id=4518): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r2}, 0x38) brk(0xfff) 1m5.486873444s ago: executing program 3 (id=4519): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0201000004000000080000e5c9fe987bac84051382d7e92424e04ea218d4b78db90d7ee20eeb0355828bd67e6f575cbb9fa9edd170ad2d5f01c5f4b1dbe4ef413882dfbe7461723d8a2283a8205fc2bdd5e549faf6261348f4f2b5b2c966d7597cbda55e14c521ef7961ddf6fd8265529f7eeb1008ed046d728e5157e372297c9491bf609ca60965dd180ce15897ee9d602521be85b84abbff583c1f715da84151eee8132a4bb1ab1b8150fd3c3fd0168e1b05f02c09ced78afcebd416d0a95ec1fca08d608b2b3d20d4732896059a075c70cf48208b204232d7c6b8da2663e75284c3a40e85e1509d18845c05875ba580d0e138b67b1b3acc71ca49f008680d8fe14ee97674135df939783d3db4fba220b599ce6bf1875beef9d2b154a5e9b94da69626be00946f7a7391712cce30", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES64], 0xfd, 0x1bf, &(0x7f0000002b80)="$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") mount$nfs(&(0x7f0000000100)='.5.', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40c8, &(0x7f0000000200), 0xfb, 0x496, &(0x7f0000000f40)="$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") 1m5.451000565s ago: executing program 38 (id=4518): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r2}, 0x38) brk(0xfff) 1m5.428485374s ago: executing program 3 (id=4522): symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', r1, 0x2f, 0x9, 0xd, 0x7aec0071, 0x24, @loopback, @mcast1, 0x8000, 0x0, 0x9, 0xf}}) lstat(&(0x7f0000000180)='.\x02\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000100000000000000000002000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], 0x1, 0x26d, &(0x7f0000000800)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) socket$inet(0x2, 0x3, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) open(0x0, 0x143c62, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r7 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) ftruncate(r7, 0x8002007ffb) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x1, 0xfffffffd}]}, 0x10) 1m4.948708372s ago: executing program 3 (id=4527): fsopen(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="186800000006", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 1m4.705524602s ago: executing program 3 (id=4533): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELTABLE={0xa8, 0x2, 0xa, 0x10b, 0x0, 0x0, {}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x7b, 0x6, "3c3aab467c60e363ad709d77d2f0529f97b7c7b05b82fad18502bce60c5d0648aa8a9f211262ea3f5448132801fc27410acbff1f9a09c9297b2f24a0db6b0467db93283a2b69cec0faf2d8104fc27ad8fc0b3e20dcc0701308cd5cee433e316d7edd1e45e79143a1c09ff4f524b66961aba91fbde49417"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000200), 0xfffffecc) splice(r4, 0x0, r0, 0x0, 0x8001, 0x0) ioctl$IMGETVERSION(r4, 0x80044942, &(0x7f0000000000)) 1m4.705046231s ago: executing program 39 (id=4533): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELTABLE={0xa8, 0x2, 0xa, 0x10b, 0x0, 0x0, {}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x7b, 0x6, "3c3aab467c60e363ad709d77d2f0529f97b7c7b05b82fad18502bce60c5d0648aa8a9f211262ea3f5448132801fc27410acbff1f9a09c9297b2f24a0db6b0467db93283a2b69cec0faf2d8104fc27ad8fc0b3e20dcc0701308cd5cee433e316d7edd1e45e79143a1c09ff4f524b66961aba91fbde49417"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000200), 0xfffffecc) splice(r4, 0x0, r0, 0x0, 0x8001, 0x0) ioctl$IMGETVERSION(r4, 0x80044942, &(0x7f0000000000)) 7.001156847s ago: executing program 2 (id=5392): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80000, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6.548091625s ago: executing program 2 (id=5401): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x11d001) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000002c0)=0x1000000, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) 5.415258691s ago: executing program 2 (id=5415): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 5.336733331s ago: executing program 2 (id=5417): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000006780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e66582ced7cdc6f3d00", @ANYRESHEX=r0, @ANYBLOB=',\x00']) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000004}, 0x100000, 0x40001, 0x8000, 0x7, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$unix(0x1, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_wait(r3, &(0x7f000000affb)=[{}], 0x1, 0x7fff) mmap(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x10000004}) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='kmem_cache_free\x00', r6}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[], 0x0) 5.23330992s ago: executing program 2 (id=5421): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fsopen(&(0x7f0000000400)='exofs\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xfffffc00, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[], 0x84}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872061ce618117c56f0979bd10b97163c953ab1abda4589e9cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346d2014006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172751151b633fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13ceec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000170022626165866c156a25148972700000b515a1000000000000000eb2e9c15b6c8f6198282d0000000000c2ccf3f69cfcf1e15ea7a9e57aee78e12a2caebaada42811754e19a7e9b531636794a718b4766d2c7c61c3dba128c7fcd1f97989ccf1d55de496eae46c590c2d0225f9cd07005ac7f76d9d560a08c9fd0caafd9d095cb9db0099014cd0d4df62af52b088b01adeadc4c5225a6cd8486b03f83805dffe90dbf7ad042012b7213a2b03e3b1634ddfc9d6f570c4990fbbc7306871d9a52a157fb1a10fa2868df06faf83a8420e9ce62567043ce7e56d1ebe81"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000040)='ext4_mballoc_prealloc\x00', 0xffffffffffffffff, 0x0, 0x76}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000048, &(0x7f0000000080)={[{@acl}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==") r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x7ab, 0x80000000, 0x37, 0x770, 0xffffffff, 0x1}, 0x1c) sendfile(r4, r4, 0x0, 0x800000009) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r7 = open_tree(r6, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x5, 0xff, 0xf5, 0x0, 0xb66, 0x100, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000100), 0x6}, 0x40, 0xffff, 0xef0, 0x1, 0x4, 0x8, 0x9, 0x0, 0x80000001, 0x0, 0x5}, r2, 0x7, 0xffffffffffffffff, 0x0) 4.252365386s ago: executing program 2 (id=5437): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800110125bd70000400df250a001400fc010006"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) r5 = socket$inet(0x2, 0x3, 0x4) r6 = socket(0x11, 0x2, 0x2) unshare(0x2a020480) unshare(0x2a020400) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000100)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000000}}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000040)=0xe8) socket$kcm(0x29, 0x5, 0x0) quotactl_fd$Q_QUOTAOFF(r7, 0xffffffff80000301, r9, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private}}) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x89e0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1000000000200000", @ANYRES32, @ANYRES32, @ANYBLOB="3ac9908032e25459fabe985b09000000fab33c70101100097160fde150f6f669a5168588b26aad5ee4bd4e4972867f309e45e6a4ebd1e3f7a8c6b54c7d5aeb624b81dfab5b350083bdeab06907ba", @ANYRES64=0x0], 0x20) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x6c}}, @qdisc_kind_options=@q_pfifo_fast]}, 0xbc}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 1.649148146s ago: executing program 7 (id=5475): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.519841496s ago: executing program 0 (id=5477): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34006abfc37719275f0c53b26e16b7d09b0000", @ANYRES16=r2, @ANYBLOB="030000000000ffdbdf251200000008000600000000001800018014000200766574683000"/46], 0x34}}, 0x0) 1.441750505s ago: executing program 0 (id=5478): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="4200ffff00", 0x5, 0x0, 0x0, 0x2}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kfree\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/11], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_io_uring_setup(0x5d14, &(0x7f00000000c0)={0x0, 0x2119, 0x400}, &(0x7f0000000240), &(0x7f00000001c0)) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000180)={0x14000000000000, r3, 0x4, {0x1, 0x6}, 0x3}, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000340)={0x7, "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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r9, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) preadv(r8, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) fsmount(0xffffffffffffffff, 0x0, 0x0) 1.148415654s ago: executing program 1 (id=5483): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) setxattr$security_capability(&(0x7f0000002180)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) 1.103456794s ago: executing program 1 (id=5484): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800110125bd70000400df250a001400fc010006"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) r5 = socket$inet(0x2, 0x3, 0x4) r6 = socket(0x11, 0x2, 0x2) unshare(0x2a020480) unshare(0x2a020400) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000100)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000000}}) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000040)=0xe8) quotactl_fd$Q_QUOTAOFF(r7, 0xffffffff80000301, r10, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1000000000200000", @ANYRES32, @ANYRES32, @ANYBLOB="3ac9908032e25459fabe985b09000000fab33c70101100097160fde150f6f669a5168588b26aad5ee4bd4e4972867f309e45e6a4ebd1e3f7a8c6b54c7d5aeb624b81dfab5b350083bdeab06907ba", @ANYRES64=0x0], 0x20) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x6c}}, @qdisc_kind_options=@q_pfifo_fast]}, 0xbc}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 996.328574ms ago: executing program 1 (id=5485): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x501300, 0xc8) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000000)) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="47000000e843", 0x0, 0x1, 0x10023, 0xffffffffffffffff, 0x0}) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x3, 0x0, 0x0, 0x300}, 0x9c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f00000001c0)=""/15) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000380), 0x8000) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/19, 0x13}, {&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000580)=""/137, 0x89}], &(0x7f0000000240)=[0xffffffff, 0x9, 0x5b2, 0x8000000000000000, 0x7], 0x4}, 0x20) sendfile(r3, r3, 0x0, 0x80000000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="7ccc"]) 770.700273ms ago: executing program 7 (id=5486): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setresuid(0xee00, 0xee00, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6, 0x0, 0x0, 0x0, 0x4, 0x20c200a2}) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$can_raw(0x1d, 0x3, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x7, 0x0, &(0x7f0000000000)=[r0, r0, r1, r2]}, 0x4) 757.588583ms ago: executing program 5 (id=5487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000"], 0xd4}}, 0x0) (async) socket$inet_dccp(0x2, 0x6, 0x0) 729.058993ms ago: executing program 7 (id=5488): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001ea000/0x1000)=nil, 0x1000, 0x8003, &(0x7f0000000200)=0x5, 0x9, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000618110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 712.706463ms ago: executing program 7 (id=5489): pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="969dbd", 0x3}, {&(0x7f0000000700)='<', 0x1}], 0x2, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (fail_nth: 1) close_range(r0, 0xffffffffffffffff, 0x0) 648.509702ms ago: executing program 5 (id=5490): pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000019"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="969dbd", 0x3}, {&(0x7f0000000700)='<', 0x1}], 0x2, 0x4) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000180)=@caif=@dbg={0x25, 0xa7, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="8aa80920413327d7cf40007cc461085316ee2d50469ffb77e65731766550040cccb00324ede8a682f0a5459d9609666cca3e0fc28d6ee948766de329ea0a97eca1de4204d987f233d4d0b1cf0b2705045893d1f68a236abcf4c8e75889679adcc1c460a33090d4f0420edf0f3e91091f8cd26ae5a764dd127ca0937dc2b09adf223587c21ca8516f3d1e09293ba091d26e225d2bb7ef4bc456a4669ef9d4abf188c2973f69f48bfc0405d85acb8282889ec2ba67405b557804646c99e4202feccef2dd83e8e0ec731a65dd1c82ae96830c1322a6052edea83dd0b0428c248e356fd73dd06e", 0xe5}, {&(0x7f00000003c0)="dfc838316a7de9db43c637a28ad81fe269fbed6a67aa6c082996cb8bca8914cde03c757a5030ac01a14920a6533e4d7ffc56c3a77875d427403c7aa87453c0e662b0adb663324ff22d7d022dcf235c5588b449289c4b62c5d33fdc663006f9eba51b865d086c80890366a3adeb72720d321ac1525b3a9a2cf457040bb11c", 0x7e}], 0x2, &(0x7f00000004c0)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}], 0x48}, 0x40085) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r5, 0x0, r1, 0x0, 0x1, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) fcntl$lock(r5, 0x25, &(0x7f0000000080)={0x0, 0x4, 0x8, 0x6, r6}) close_range(r1, 0xffffffffffffffff, 0x0) 647.784192ms ago: executing program 1 (id=5491): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000fc0f00000a00000000000000", @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0/file0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000007c0)={[{@mblk_io_submit}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_path={'journal_path', 0x3d, './file0/file0'}}, {@sb={'sb', 0x3d, 0x4}}, {@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}]}, 0x0, 0x47a, &(0x7f0000000b00)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010101}}, 0x0, 0x0, 0x37, 0x0, "c3218d82c5896754d7cdb23c72887c897926a8856263b50c578ef1f9f362f16f21f5c872b1737718103bbde1a9d99011d25bbdff9c1351ba69e297337d6a5e4a948c1cbf827d6e95ad5bbfb5b3bd1929"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x3, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r7, 0x0, 0x9, 0x0, &(0x7f0000000600)="61df712bc884fef053", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x4, &(0x7f0000000240), 0x2f, 0x0, 0x0, 0x0, 0x0}, 0x40) 354.611091ms ago: executing program 5 (id=5492): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {@barrier}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 331.776661ms ago: executing program 7 (id=5493): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) 304.316621ms ago: executing program 1 (id=5494): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800110125bd70000400df250a001400fc010006"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) socket$inet(0x2, 0x3, 0x4) socket(0x11, 0x2, 0x2) unshare(0x2a020480) unshare(0x2a020400) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000100)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000000}}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) 294.775691ms ago: executing program 0 (id=5495): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) 285.576941ms ago: executing program 7 (id=5496): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000240), 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000000c0)=0x32) lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) 184.569211ms ago: executing program 0 (id=5497): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/keycreate\x00') mount$9p_fd(0x0, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x20) 183.551091ms ago: executing program 5 (id=5498): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1c, 0xa5, 0xc, 0x8, 0x64282, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x1, 0x4d5, 0x7fffffff, 0x200, r0, 0x5, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) io_uring_setup(0x410f, 0x0) ustat(0x1, &(0x7f0000001f80)) 176.562021ms ago: executing program 1 (id=5499): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYRES16=r1], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x80042, 0x4, 0x3}, 0x10) close(r5) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xb594) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000700)='btrfs_flush_space\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/bus/input/handlers\x00', 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') dup3(r9, r8, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="c40800"/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="030000000300000004000000000000000000002c0ff003d6c148795e"], 0x50) setresuid(0xee01, 0xee00, 0x0) request_key(&(0x7f0000000b80)='rxrpc_s\x00', &(0x7f0000000bc0)={'syz', 0x0}, &(0x7f0000000600)='\x02\xd2`\xa1\x17\xc4L\xd0z\x9c9\xaa\xee\x84k\xd1\x80\x92\xb3fh1\x83_7ECS\x94\x93\x94\x86\x14=\x19\xde\xa4S\x01\x1e\x1f\xf2\xb2c5/\xa9\x87\x93\xc5\xaa\xa5C=G\x8cX\xb6#q\xdf\x19(_\x9fq9\x92W\xae\xf8\xa8\xe7S\'\xcd\xfa\xc6\xdfj\xc0:\x0f', 0xfffffffffffffffe) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000540)={0x0, &(0x7f0000000540)}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r11, 0x0, 0xd8af}, 0x18) r12 = getpid() syz_pidfd_open(r12, 0x0) 156.354151ms ago: executing program 0 (id=5500): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000900)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d61", 0xba}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0) 138.09944ms ago: executing program 0 (id=5501): r0 = syz_io_uring_setup(0x7dca, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) r1 = io_uring_setup(0x2edd, &(0x7f0000000480)={0x0, 0x1, 0x2, 0x80003}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x17, 0x20000000, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESHEX=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESOCT=r3], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) listen(r6, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r8}, 0x10) r9 = accept4$unix(r6, 0x0, 0x0, 0x0) recvfrom$unix(r9, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r10, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(0xffffffffffffffff, 0x0) syslog(0x0, &(0x7f0000000200)=""/98, 0x62) 64.46062ms ago: executing program 5 (id=5502): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff}) (async) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e00000005000000633800000010000011000000", @ANYRES32=r2, @ANYBLOB="0f00"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="e6ffffff04000000040000000400000000000000000100000000000008c608f8e31ef45b27115a8783a8f0cdd4d2df84c00327ba182f9209c0a72a45a330f2beba2d31dd035028ced5154853c232a45ab60618f9845f920b8f94"], 0x50) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) connect$pppl2tp(r9, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) (async) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000000080)) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) (async) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65b5c8d9b", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00\b\x00', 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x83}, "30b00afe4e70"}}}}}}}, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) accept4(r11, &(0x7f0000000040)=@ieee802154={0x24, @short}, &(0x7f00000000c0)=0x80, 0x80000) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r13}, 0x10) close(r14) (async) sendmsg$can_bcm(r5, &(0x7f0000000180)={&(0x7f0000000240)={0x1d, r6}, 0x10, &(0x7f00000002c0)={&(0x7f0000000400)={0x1, 0x688, 0xf, {0x0, 0x2710}, {}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "03840be9b81be3a3"}}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x4010) 0s ago: executing program 5 (id=5503): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}]}}) kernel console output (not intermixed with test programs): ] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.4731: casefold flag without casefold feature [ 493.921765][T18074] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.4731: couldn't read orphan inode 15 (err -117) [ 493.934609][T18074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.966628][T18077] loop2: detected capacity change from 0 to 256 [ 494.067404][T18077] vfat: Bad value for 'shortname' [ 494.156483][T17220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.286002][T18084] netlink: 'syz.5.4734': attribute type 13 has an invalid length. [ 494.293971][T18084] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4734'. [ 494.341513][T18084] syz_tun: refused to change device tx_queue_len [ 494.347990][T18084] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 494.434183][T18092] netlink: 'syz.1.4736': attribute type 21 has an invalid length. [ 494.444824][T18092] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4736'. [ 494.511716][T18097] loop5: detected capacity change from 0 to 512 [ 494.559713][T18097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.600939][T18105] bridge0: entered promiscuous mode [ 494.621119][T18105] macvlan2: entered promiscuous mode [ 494.641288][T18105] bridge0: port 3(macvlan2) entered blocking state [ 494.647938][T18105] bridge0: port 3(macvlan2) entered disabled state [ 494.679685][T17263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.692160][T18105] macvlan2: entered allmulticast mode [ 494.697562][T18105] bridge0: entered allmulticast mode [ 494.714578][T18105] macvlan2: left allmulticast mode [ 494.719933][T18105] bridge0: left allmulticast mode [ 494.764901][T18105] bridge0: left promiscuous mode [ 494.809792][T18112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4743'. [ 494.902155][T18118] loop0: detected capacity change from 0 to 512 [ 494.919307][T18118] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 494.955138][T18118] EXT4-fs (loop0): 1 truncate cleaned up [ 494.987775][T18118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.037541][T18124] loop5: detected capacity change from 0 to 1024 [ 495.136702][T18120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 495.143969][T18120] IPv6: NLM_F_CREATE should be set when creating new route [ 495.349151][T11739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.567893][T18135] No such timeout policy "syz0" [ 495.803937][T18124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.817140][T18124] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.503703][T18160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4758'. [ 496.643308][T18164] 9pnet_fd: Insufficient options for proto=fd [ 496.673277][T18166] loop7: detected capacity change from 0 to 512 [ 496.801069][T18170] IPv6: Can't replace route, no match found [ 496.984904][T18177] loop5: detected capacity change from 0 to 128 [ 497.338146][T18184] IPv6: NLM_F_CREATE should be specified when creating new route [ 497.346427][T18184] IPv6: Can't replace route, no match found [ 497.365356][T18188] loop1: detected capacity change from 0 to 1024 [ 497.367784][T18186] loop2: detected capacity change from 0 to 512 [ 497.377494][T18188] EXT4-fs: Ignoring removed nobh option [ 497.379697][T18186] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 497.383602][T18188] EXT4-fs: Ignoring removed oldalloc option [ 497.396424][T18186] EXT4-fs (loop2): 1 truncate cleaned up [ 497.428588][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 497.434829][ T29] audit: type=1400 audit(477.081:17025): avc: denied { getopt } for pid=18183 comm="syz.0.4769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 497.438901][T18186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.550526][ T29] audit: type=1400 audit(477.174:17026): avc: denied { create } for pid=18185 comm="syz.2.4768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 497.938664][T16919] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.955703][T18198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.963039][T18198] IPv6: NLM_F_CREATE should be set when creating new route [ 497.994383][T18188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.093584][T18207] 9pnet_fd: Insufficient options for proto=fd [ 498.106838][T18188] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4115: comm syz.1.4770: Allocating blocks 497-513 which overlap fs metadata [ 498.123520][T18212] netlink: 'syz.0.4778': attribute type 21 has an invalid length. [ 498.131438][T18212] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4778'. [ 498.149909][T18188] EXT4-fs (loop1): pa ffff8881007a3620: logic 131152, phys. 225, len 18 [ 498.158345][T18188] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 498.192373][ T29] audit: type=1326 audit(477.801:17027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18206 comm="syz.7.4776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 498.206127][T18215] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 498.215940][ T29] audit: type=1326 audit(477.801:17028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18206 comm="syz.7.4776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 498.253492][ T29] audit: type=1326 audit(477.801:17029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18206 comm="syz.7.4776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 498.267305][T18210] xt_CT: No such helper "netbios-ns" [ 498.276659][ T29] audit: type=1326 audit(477.801:17030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18206 comm="syz.7.4776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 498.305154][ T29] audit: type=1326 audit(477.801:17031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18206 comm="syz.7.4776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 498.328363][ T29] audit: type=1326 audit(477.801:17032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18206 comm="syz.7.4776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 498.351825][ T29] audit: type=1326 audit(477.801:17033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18206 comm="syz.7.4776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 498.375288][ T29] audit: type=1326 audit(477.801:17034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18206 comm="syz.7.4776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 498.400630][T17220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.446197][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4783'. [ 498.460378][T18228] loop0: detected capacity change from 0 to 512 [ 498.492320][T18234] loop2: detected capacity change from 0 to 764 [ 498.545055][T18234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4786'. [ 498.555642][T18234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4786'. [ 498.635720][T18243] loop7: detected capacity change from 0 to 512 [ 498.642287][T18243] EXT4-fs: Ignoring removed mblk_io_submit option [ 498.649274][T18243] journal_path: Lookup failure for './file0/file0' [ 498.650520][T18245] loop5: detected capacity change from 0 to 1024 [ 498.655906][T18243] EXT4-fs: error: could not find journal device path [ 498.725081][T18245] EXT4-fs: Ignoring removed mblk_io_submit option [ 498.788504][T18245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.003121][T18254] loop7: detected capacity change from 0 to 1024 [ 499.010523][T17263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.022615][T18254] EXT4-fs: Ignoring removed nobh option [ 499.028214][T18254] EXT4-fs: Ignoring removed oldalloc option [ 499.075344][T18254] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.112474][T18254] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4115: comm syz.7.4792: Allocating blocks 497-513 which overlap fs metadata [ 499.144548][T18254] EXT4-fs (loop7): pa ffff8881004a1bd0: logic 131152, phys. 225, len 18 [ 499.153017][T18254] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 499.183215][T18261] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 499.220042][T17738] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.257660][T18270] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4797'. [ 499.303944][T18276] IPv6: Can't replace route, no match found [ 499.399564][T18278] loop7: detected capacity change from 0 to 2048 [ 499.406779][T18278] EXT4-fs: Ignoring removed nomblk_io_submit option [ 499.413603][T18278] EXT4-fs: Ignoring removed nobh option [ 499.432076][T18278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.475770][T18278] SELinux: Context @ is not valid (left unmapped). [ 499.491765][T18278] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4802: bg 0: block 2: invalid block bitmap [ 499.518251][T18291] lo speed is unknown, defaulting to 1000 [ 499.527025][T18293] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4807'. [ 499.536206][T18293] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4807'. [ 499.545266][T18293] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4807'. [ 499.680455][T18299] loop5: detected capacity change from 0 to 1024 [ 499.690896][T18299] EXT4-fs: Ignoring removed nobh option [ 499.696588][T18299] EXT4-fs: Ignoring removed oldalloc option [ 499.738723][T18299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.795763][T18299] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4115: comm syz.5.4808: Allocating blocks 497-513 which overlap fs metadata [ 499.820774][T18299] EXT4-fs (loop5): pa ffff8881004a1cb0: logic 131152, phys. 225, len 18 [ 499.829344][T18299] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 499.845949][T18306] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 499.880671][T17263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.946496][T18308] IPv6: Can't replace route, no match found [ 500.054865][T18314] ipt_rpfilter: unknown options [ 500.146357][T18320] 9pnet_fd: Insufficient options for proto=fd [ 500.184847][T18323] 9pnet_fd: Insufficient options for proto=fd [ 500.221661][T17738] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.278609][T18327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4821'. [ 500.286024][T18331] loop7: detected capacity change from 0 to 256 [ 500.297269][T18331] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 500.392953][T18335] loop0: detected capacity change from 0 to 1024 [ 500.414151][T18341] netlink: 'syz.2.4827': attribute type 21 has an invalid length. [ 500.436964][T18341] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4827'. [ 500.449163][ T9] IPVS: starting estimator thread 0... [ 500.471449][T18335] EXT4-fs (loop0): unsupported inode size: 143 [ 500.477824][T18335] EXT4-fs (loop0): blocksize: 1024 [ 500.519525][T18348] IPv6: NLM_F_CREATE should be specified when creating new route [ 500.547810][T18344] IPVS: using max 2496 ests per chain, 124800 per kthread [ 500.547921][T18348] IPv6: Can't replace route, no match found [ 500.622030][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x1 [ 500.629538][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.636368][ T3381] IPVS: starting estimator thread 0... [ 500.636984][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.649826][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.657323][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.664739][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.672170][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.679698][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.687256][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.694752][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.702230][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.710198][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.717673][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.725106][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.732561][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.740215][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.747849][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.755303][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.762743][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.770142][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.777812][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.785239][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.792731][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.800353][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.807779][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.815218][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.822611][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.830107][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.837553][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.845075][ T3372] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 500.852596][T18360] IPVS: using max 2208 ests per chain, 110400 per kthread [ 500.853286][ T3372] hid-generic 0000:0003:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 500.914207][T18377] netlink: 'syz.5.4840': attribute type 21 has an invalid length. [ 500.937230][T18380] lo speed is unknown, defaulting to 1000 [ 501.069296][T18383] loop2: detected capacity change from 0 to 512 [ 501.128461][T18383] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 501.144805][T18387] loop5: detected capacity change from 0 to 256 [ 501.160939][T18387] msdos: Bad value for 'time_offset' [ 501.191045][T18383] EXT4-fs (loop2): 1 truncate cleaned up [ 501.298835][T18383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.449567][T18393] loop5: detected capacity change from 0 to 256 [ 501.565361][T18393] vfat: Bad value for 'shortname' [ 502.079677][T18407] loop1: detected capacity change from 0 to 512 [ 502.099347][T18407] EXT4-fs: Ignoring removed mblk_io_submit option [ 502.106404][T16919] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.123712][T18407] journal_path: Lookup failure for './file0/file0' [ 502.130353][T18407] EXT4-fs: error: could not find journal device path [ 502.214080][T18411] netlink: 'syz.2.4853': attribute type 21 has an invalid length. [ 502.248388][ T3372] IPVS: starting estimator thread 0... [ 502.354417][T18414] IPVS: using max 2448 ests per chain, 122400 per kthread [ 502.500966][T18416] can0: slcan on ttyS3. [ 502.611002][T18416] can0 (unregistered): slcan off ttyS3. [ 502.616863][T18416] Falling back ldisc for ttyS3. [ 503.005153][T18434] 9pnet_fd: Insufficient options for proto=fd [ 503.085360][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 503.085378][ T29] audit: type=1326 audit(482.384:17338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18432 comm="syz.7.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 503.122937][ T29] audit: type=1326 audit(482.384:17339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18432 comm="syz.7.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 503.146081][ T29] audit: type=1326 audit(482.384:17340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18432 comm="syz.7.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 503.169183][ T29] audit: type=1326 audit(482.384:17341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18432 comm="syz.7.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 503.192272][ T29] audit: type=1326 audit(482.384:17342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18432 comm="syz.7.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 503.215298][ T29] audit: type=1326 audit(482.384:17343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18432 comm="syz.7.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 503.219922][T18448] loop2: detected capacity change from 0 to 1024 [ 503.238389][ T29] audit: type=1326 audit(482.384:17344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18432 comm="syz.7.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 503.265888][T18448] EXT4-fs: Ignoring removed mblk_io_submit option [ 503.267679][ T29] audit: type=1326 audit(482.384:17345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18432 comm="syz.7.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 503.271484][ T29] audit: type=1326 audit(482.412:17346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18432 comm="syz.7.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 503.320267][ T29] audit: type=1326 audit(482.440:17347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18432 comm="syz.7.4862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 503.446090][T18448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.496184][T18456] loop7: detected capacity change from 0 to 512 [ 503.503978][T16919] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.505050][T18456] EXT4-fs: Ignoring removed mblk_io_submit option [ 503.531524][T18456] journal_path: Lookup failure for './file0/file0' [ 503.538073][T18456] EXT4-fs: error: could not find journal device path [ 503.659117][T18462] __nla_validate_parse: 4 callbacks suppressed [ 503.659137][T18462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4872'. [ 503.772880][T18469] loop1: detected capacity change from 0 to 2048 [ 503.846890][T18469] loop1: p1 p2 < > p3 p4 < p5 > [ 503.851923][T18469] loop1: partition table partially beyond EOD, truncated [ 503.855570][T18466] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4874'. [ 503.859148][T18469] loop1: p1 start 2305 is beyond EOD, truncated [ 503.874345][T18469] loop1: p2 start 4294902784 is beyond EOD, truncated [ 503.881183][T18469] loop1: p3 start 4278191616 is beyond EOD, truncated [ 503.926429][T18469] loop1: p5 start 2305 is beyond EOD, truncated [ 504.019066][T17922] udevd[17922]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 504.033461][T18477] IPv6: NLM_F_CREATE should be specified when creating new route [ 504.056520][T18477] IPv6: Can't replace route, no match found [ 504.154433][T18481] netlink: 'syz.1.4879': attribute type 21 has an invalid length. [ 504.177862][T18483] 9pnet_fd: Insufficient options for proto=fd [ 504.186959][T18481] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4879'. [ 504.401127][T18492] loop1: detected capacity change from 0 to 1024 [ 504.409135][T18494] loop7: detected capacity change from 0 to 512 [ 504.415893][T18492] EXT4-fs: Ignoring removed nomblk_io_submit option [ 504.422901][T18494] EXT4-fs: Ignoring removed mblk_io_submit option [ 504.430174][T18494] journal_path: Lookup failure for './file0/file0' [ 504.436717][T18494] EXT4-fs: error: could not find journal device path [ 504.452130][T18492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.517274][T18492] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.4885: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 504.554384][T18492] EXT4-fs (loop1): Remounting filesystem read-only [ 504.566753][T18492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.576840][T18492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.733781][T18508] IPv6: Can't replace route, no match found [ 504.821223][T18514] loop7: detected capacity change from 0 to 512 [ 504.827870][T18514] EXT4-fs: Ignoring removed i_version option [ 504.834462][T18514] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 504.845609][T18514] EXT4-fs (loop7): 1 truncate cleaned up [ 504.851558][T18514] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.940995][T17738] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.974411][T18523] 9pnet_fd: Insufficient options for proto=fd [ 505.181048][T18521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.190313][T18521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.203293][T18521] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4894'. [ 505.348896][T17220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.361533][T18550] IPv6: Can't replace route, no match found [ 505.379325][T18552] IPv6: Can't replace route, no match found [ 505.410070][T18554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4906'. [ 505.471992][T18558] IPv6: Can't replace route, no match found [ 505.479406][T18562] FAULT_INJECTION: forcing a failure. [ 505.479406][T18562] name failslab, interval 1, probability 0, space 0, times 0 [ 505.492167][T18562] CPU: 1 UID: 0 PID: 18562 Comm: syz.1.4910 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 505.502954][T18562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 505.513081][T18562] Call Trace: [ 505.516451][T18562] [ 505.519408][T18562] dump_stack_lvl+0xf2/0x150 [ 505.524097][T18562] dump_stack+0x15/0x1a [ 505.528622][T18562] should_fail_ex+0x223/0x230 [ 505.533317][T18562] ? sctp_add_bind_addr+0x6f/0x1e0 [ 505.538439][T18562] should_failslab+0x8f/0xb0 [ 505.543051][T18562] __kmalloc_cache_noprof+0x4e/0x320 [ 505.548464][T18562] sctp_add_bind_addr+0x6f/0x1e0 [ 505.553416][T18562] sctp_copy_local_addr_list+0x19b/0x220 [ 505.559062][T18562] sctp_copy_one_addr+0x83/0x410 [ 505.564065][T18562] sctp_bind_addr_copy+0x81/0x2b0 [ 505.569114][T18562] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 505.575222][T18562] sctp_connect_new_asoc+0x1d0/0x3b0 [ 505.580534][T18562] __sctp_connect+0x41d/0x7a0 [ 505.585336][T18562] sctp_getsockopt_connectx3+0x26e/0x350 [ 505.590979][T18562] sctp_getsockopt+0x805/0xab0 [ 505.595788][T18562] sock_common_getsockopt+0x5b/0x70 [ 505.601011][T18562] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 505.606988][T18562] do_sock_getsockopt+0x1ca/0x260 [ 505.612038][T18562] __x64_sys_getsockopt+0x18c/0x200 [ 505.617258][T18562] x64_sys_call+0x1288/0x2dc0 [ 505.622004][T18562] do_syscall_64+0xc9/0x1c0 [ 505.626520][T18562] ? clear_bhb_loop+0x55/0xb0 [ 505.631204][T18562] ? clear_bhb_loop+0x55/0xb0 [ 505.635961][T18562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.641898][T18562] RIP: 0033:0x7f4398835d29 [ 505.646318][T18562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.665976][T18562] RSP: 002b:00007f4396ea1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 505.674402][T18562] RAX: ffffffffffffffda RBX: 00007f4398a25fa0 RCX: 00007f4398835d29 [ 505.682412][T18562] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 505.690391][T18562] RBP: 00007f4396ea1090 R08: 0000000020000180 R09: 0000000000000000 [ 505.698372][T18562] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.706431][T18562] R13: 0000000000000000 R14: 00007f4398a25fa0 R15: 00007ffeef504dd8 [ 505.714415][T18562] [ 505.791834][T18571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4914'. [ 505.801203][T18571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4914'. [ 505.825094][T18571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4914'. [ 505.856292][T18572] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4913'. [ 505.920617][T18575] can0: slcan on ttyS3. [ 505.978616][T18575] can0 (unregistered): slcan off ttyS3. [ 505.993649][T18579] 9pnet_fd: Insufficient options for proto=fd [ 506.209369][T18589] IPv6: Can't replace route, no match found [ 506.355828][T18610] 9pnet_fd: Insufficient options for proto=fd [ 506.659932][T18624] loop5: detected capacity change from 0 to 512 [ 506.668099][T18624] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.4934: iget: bad extended attribute block 1 [ 506.682187][T18624] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.4934: couldn't read orphan inode 15 (err -117) [ 506.695728][T18624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.708648][T18624] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 506.734158][T17263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.930882][T18641] 9pnet_fd: Insufficient options for proto=fd [ 507.015935][T18644] loop5: detected capacity change from 0 to 512 [ 507.022764][T18644] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 507.035065][T18644] EXT4-fs (loop5): 1 truncate cleaned up [ 507.041561][T18644] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.524465][T18659] bridge0: entered promiscuous mode [ 507.529774][T18659] macvlan2: entered promiscuous mode [ 507.531055][T18659] bridge0: port 3(macvlan2) entered blocking state [ 507.531089][T18659] bridge0: port 3(macvlan2) entered disabled state [ 507.531213][T18659] macvlan2: entered allmulticast mode [ 507.531232][T18659] bridge0: entered allmulticast mode [ 507.537277][T18659] macvlan2: left allmulticast mode [ 507.566239][T18659] bridge0: left allmulticast mode [ 507.572614][T18659] bridge0: left promiscuous mode [ 507.639879][T18664] 9pnet_fd: Insufficient options for proto=fd [ 507.726216][T18644] syz.5.4942 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 507.740449][T18644] CPU: 1 UID: 0 PID: 18644 Comm: syz.5.4942 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 507.751339][T18644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 507.761501][T18644] Call Trace: [ 507.764780][T18644] [ 507.767786][T18644] dump_stack_lvl+0xf2/0x150 [ 507.772393][T18644] dump_stack+0x15/0x1a [ 507.776617][T18644] dump_header+0x83/0x2d0 [ 507.780971][T18644] oom_kill_process+0x341/0x4c0 [ 507.785824][T18644] out_of_memory+0x9af/0xbe0 [ 507.790415][T18644] ? css_next_descendant_pre+0x11c/0x140 [ 507.796112][T18644] mem_cgroup_out_of_memory+0x13e/0x190 [ 507.801812][T18644] try_charge_memcg+0x508/0x7f0 [ 507.806704][T18644] obj_cgroup_charge_pages+0xbd/0x1a0 [ 507.812124][T18644] __memcg_kmem_charge_page+0x9d/0x170 [ 507.817711][T18644] __alloc_pages_noprof+0x1bc/0x340 [ 507.823044][T18644] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 507.828444][T18644] alloc_pages_noprof+0xe1/0x100 [ 507.833451][T18644] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 507.839435][T18644] __kvmalloc_node_noprof+0x121/0x170 [ 507.844821][T18644] ? ip_set_alloc+0x1f/0x30 [ 507.849378][T18644] ip_set_alloc+0x1f/0x30 [ 507.853803][T18644] hash_netiface_create+0x273/0x730 [ 507.859024][T18644] ? __nla_parse+0x40/0x60 [ 507.863472][T18644] ? __pfx_hash_netiface_create+0x10/0x10 [ 507.869258][T18644] ip_set_create+0x359/0x8a0 [ 507.873984][T18644] ? memchr+0x1/0x50 [ 507.877921][T18644] ? __nla_parse+0x40/0x60 [ 507.882452][T18644] nfnetlink_rcv_msg+0x4a9/0x570 [ 507.887424][T18644] netlink_rcv_skb+0x12c/0x230 [ 507.892208][T18644] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 507.897728][T18644] nfnetlink_rcv+0x16c/0x15d0 [ 507.902431][T18644] ? kmem_cache_free+0xdc/0x2d0 [ 507.907305][T18644] ? nlmon_xmit+0x51/0x60 [ 507.911742][T18644] ? __kfree_skb+0x102/0x150 [ 507.916378][T18644] ? consume_skb+0x49/0x160 [ 507.920901][T18644] ? nlmon_xmit+0x51/0x60 [ 507.925297][T18644] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 507.930735][T18644] ? __dev_queue_xmit+0xb6e/0x2090 [ 507.935853][T18644] ? ref_tracker_free+0x3a5/0x410 [ 507.940883][T18644] ? __dev_queue_xmit+0x186/0x2090 [ 507.946080][T18644] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 507.951584][T18644] netlink_unicast+0x599/0x670 [ 507.956372][T18644] netlink_sendmsg+0x5cc/0x6e0 [ 507.961164][T18644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.966477][T18644] __sock_sendmsg+0x140/0x180 [ 507.971164][T18644] ____sys_sendmsg+0x312/0x410 [ 507.975961][T18644] __sys_sendmsg+0x19d/0x230 [ 507.980607][T18644] __x64_sys_sendmsg+0x46/0x50 [ 507.985459][T18644] x64_sys_call+0x2734/0x2dc0 [ 507.990202][T18644] do_syscall_64+0xc9/0x1c0 [ 507.994717][T18644] ? clear_bhb_loop+0x55/0xb0 [ 507.999470][T18644] ? clear_bhb_loop+0x55/0xb0 [ 508.004164][T18644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.010163][T18644] RIP: 0033:0x7fa2b79e5d29 [ 508.014602][T18644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.034537][T18644] RSP: 002b:00007fa2b6057038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.042960][T18644] RAX: ffffffffffffffda RBX: 00007fa2b7bd5fa0 RCX: 00007fa2b79e5d29 [ 508.050954][T18644] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 508.058952][T18644] RBP: 00007fa2b7a61aa8 R08: 0000000000000000 R09: 0000000000000000 [ 508.066938][T18644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.074912][T18644] R13: 0000000000000000 R14: 00007fa2b7bd5fa0 R15: 00007ffe752f7c88 [ 508.082905][T18644] [ 508.086616][T18644] memory: usage 307200kB, limit 307200kB, failcnt 143 [ 508.093431][T18644] memory+swap: usage 307600kB, limit 9007199254740988kB, failcnt 0 [ 508.101609][T18644] kmem: usage 307124kB, limit 9007199254740988kB, failcnt 0 [ 508.109119][T18644] Memory cgroup stats for /syz5: [ 508.109381][T18644] cache 24576 [ 508.117704][T18644] rss 8192 [ 508.120738][T18644] shmem 0 [ 508.123680][T18644] mapped_file 0 [ 508.127240][T18644] dirty 0 [ 508.130239][T18644] writeback 0 [ 508.133529][T18644] workingset_refault_anon 46 [ 508.138154][T18644] workingset_refault_file 1 [ 508.142747][T18644] swap 409600 [ 508.146039][T18644] swapcached 53248 [ 508.149852][T18644] pgpgin 51850 [ 508.153357][T18644] pgpgout 51831 [ 508.156876][T18644] pgfault 42428 [ 508.160377][T18644] pgmajfault 8 [ 508.163754][T18644] inactive_anon 53248 [ 508.167764][T18644] active_anon 0 [ 508.171288][T18644] inactive_file 0 [ 508.174987][T18644] active_file 24576 [ 508.178804][T18644] unevictable 0 [ 508.182320][T18644] hierarchical_memory_limit 314572800 [ 508.187718][T18644] hierarchical_memsw_limit 9223372036854771712 [ 508.193947][T18644] total_cache 24576 [ 508.197769][T18644] total_rss 8192 [ 508.201332][T18644] total_shmem 0 [ 508.204870][T18644] total_mapped_file 0 [ 508.208884][T18644] total_dirty 0 [ 508.212359][T18644] total_writeback 0 [ 508.216272][T18644] total_workingset_refault_anon 46 [ 508.221574][T18644] total_workingset_refault_file 1 [ 508.226651][T18644] total_swap 409600 [ 508.230475][T18644] total_swapcached 53248 [ 508.234867][T18644] total_pgpgin 51850 [ 508.238788][T18644] total_pgpgout 51831 [ 508.242816][T18644] total_pgfault 42428 [ 508.246872][T18644] total_pgmajfault 8 [ 508.250836][T18644] total_inactive_anon 53248 [ 508.255401][T18644] total_active_anon 0 [ 508.259434][T18644] total_inactive_file 0 [ 508.263600][T18644] total_active_file 24576 [ 508.268026][T18644] total_unevictable 0 [ 508.272032][T18644] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4942,pid=18643,uid=0 [ 508.286817][T18644] Memory cgroup out of memory: Killed process 18643 (syz.5.4942) total-vm:93384kB, anon-rss:788kB, file-rss:22400kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 508.351837][T18680] loop2: detected capacity change from 0 to 512 [ 508.362055][T18680] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 508.438293][T18680] EXT4-fs (loop2): 1 truncate cleaned up [ 508.444380][T18680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.529389][T18700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18700 comm=syz.1.4956 [ 508.571538][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 508.571575][ T29] audit: type=1326 audit(487.511:17781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18705 comm="syz.1.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4398835d29 code=0x7ffc0000 [ 508.620428][ T29] audit: type=1326 audit(487.511:17782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18705 comm="syz.1.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4398835d29 code=0x7ffc0000 [ 508.643645][ T29] audit: type=1326 audit(487.511:17783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18705 comm="syz.1.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4398835d29 code=0x7ffc0000 [ 508.666778][ T29] audit: type=1326 audit(487.511:17784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18705 comm="syz.1.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4398835d29 code=0x7ffc0000 [ 508.689798][ T29] audit: type=1326 audit(487.511:17785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18705 comm="syz.1.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4398835d29 code=0x7ffc0000 [ 508.692861][T18709] loop1: detected capacity change from 0 to 512 [ 508.712892][ T29] audit: type=1326 audit(487.529:17786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18705 comm="syz.1.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4398835d29 code=0x7ffc0000 [ 508.712935][ T29] audit: type=1326 audit(487.529:17787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18705 comm="syz.1.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4398835d29 code=0x7ffc0000 [ 508.766380][ T29] audit: type=1326 audit(487.529:17788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18705 comm="syz.1.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4398835d29 code=0x7ffc0000 [ 508.789509][ T29] audit: type=1326 audit(487.529:17789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18705 comm="syz.1.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4398835d29 code=0x7ffc0000 [ 508.812519][ T29] audit: type=1326 audit(487.529:17790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18705 comm="syz.1.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4398835d29 code=0x7ffc0000 [ 508.850630][T17263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.954065][T18709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.005441][T18709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.205639][T18709] Falling back ldisc for ttyS3. [ 509.313047][T18773] loop5: detected capacity change from 0 to 128 [ 509.339910][T18779] IPv6: Can't replace route, no match found [ 509.397394][T18783] loop7: detected capacity change from 0 to 1024 [ 509.409319][T18783] EXT4-fs: Ignoring removed nobh option [ 509.415045][T18783] EXT4-fs: Ignoring removed oldalloc option [ 509.444675][T16919] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.468406][T18785] loop1: detected capacity change from 0 to 512 [ 509.480964][T18785] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 509.502688][T18783] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.529194][T18785] EXT4-fs (loop1): 1 truncate cleaned up [ 509.543618][T18793] IPv6: Can't replace route, no match found [ 509.547404][T18785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.558922][T18783] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4115: comm syz.7.4967: Allocating blocks 497-513 which overlap fs metadata [ 509.587450][T18783] EXT4-fs (loop7): pa ffff8881004a1c40: logic 131152, phys. 225, len 18 [ 509.595925][T18783] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 509.718663][T18795] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 509.782014][T18800] hub 2-0:1.0: USB hub found [ 509.789633][T18800] hub 2-0:1.0: 8 ports detected [ 509.813575][T17220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.865181][T17738] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.956448][T18800] wireguard0: entered promiscuous mode [ 509.961994][T18800] wireguard0: entered allmulticast mode [ 510.102809][T18818] loop7: detected capacity change from 0 to 512 [ 510.113294][T18818] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 510.136000][T18818] EXT4-fs (loop7): 1 truncate cleaned up [ 510.142323][T18818] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.242685][T18826] loop5: detected capacity change from 0 to 128 [ 510.317056][T18830] IPv6: NLM_F_CREATE should be specified when creating new route [ 510.328837][T18830] IPv6: Can't replace route, no match found [ 510.431224][T18832] loop2: detected capacity change from 0 to 512 [ 510.467228][T18832] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 510.492579][T18832] EXT4-fs (loop2): 1 truncate cleaned up [ 510.498779][T18832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.518448][T18836] xt_TCPMSS: Only works on TCP SYN packets [ 511.224116][T17738] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.405409][T16919] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.475500][T18864] IPv6: Can't replace route, no match found [ 511.524392][T18869] loop5: detected capacity change from 0 to 128 [ 511.676711][T18882] loop1: detected capacity change from 0 to 512 [ 511.686777][T18882] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 511.703627][T18882] EXT4-fs (loop1): 1 truncate cleaned up [ 511.710271][T18882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.777567][T18891] lo speed is unknown, defaulting to 1000 [ 512.678406][T18906] IPv6: Can't replace route, no match found [ 512.750986][T18901] Cannot find del_set index 0 as target [ 512.776782][T17220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.778771][T18908] loop5: detected capacity change from 0 to 1024 [ 512.897208][T18908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.998916][T18922] IPv6: Can't replace route, no match found [ 513.016762][T18908] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.298056][T18929] loop1: detected capacity change from 0 to 2048 [ 513.337026][T18929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.375516][T18929] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 513.414788][T18934] loop7: detected capacity change from 0 to 1024 [ 513.421658][T18934] EXT4-fs: Ignoring removed mblk_io_submit option [ 513.454858][T18934] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.580999][T17738] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.924447][T18949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5026'. [ 513.953421][T18949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5026'. [ 513.963175][T11739] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 513.969329][T18951] loop5: detected capacity change from 0 to 1024 [ 513.974162][T11739] CPU: 0 UID: 0 PID: 11739 Comm: syz-executor Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 513.988647][T18951] EXT4-fs: Ignoring removed nobh option [ 513.991356][T11739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 513.991380][T11739] Call Trace: [ 513.997002][T18951] EXT4-fs: Ignoring removed oldalloc option [ 514.006962][T11739] [ 514.006977][T11739] dump_stack_lvl+0xf2/0x150 [ 514.023749][T11739] dump_stack+0x15/0x1a [ 514.027990][T11739] dump_header+0x83/0x2d0 [ 514.032406][T11739] oom_kill_process+0x341/0x4c0 [ 514.037297][T11739] out_of_memory+0x9af/0xbe0 [ 514.038703][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 514.038719][ T29] audit: type=1400 audit(492.627:17901): avc: denied { read write } for pid=18948 comm="syz.2.5026" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 514.041914][T11739] ? css_next_descendant_pre+0x11c/0x140 [ 514.041958][T11739] mem_cgroup_out_of_memory+0x13e/0x190 [ 514.041999][T11739] try_charge_memcg+0x508/0x7f0 [ 514.052464][ T29] audit: type=1400 audit(492.646:17902): avc: denied { open } for pid=18948 comm="syz.2.5026" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 514.072186][T11739] charge_memcg+0x50/0xc0 [ 514.072249][T11739] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 514.072287][T11739] __read_swap_cache_async+0x236/0x480 [ 514.091830][T18951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.112248][T11739] swap_cluster_readahead+0x279/0x3f0 [ 514.112298][T11739] swapin_readahead+0xe4/0x6f0 [ 514.112374][T11739] ? swap_cache_get_folio+0x77/0x210 [ 514.141361][T18951] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4115: comm syz.5.5027: Allocating blocks 497-513 which overlap fs metadata [ 514.145907][T11739] do_swap_page+0x31b/0x2550 [ 514.151408][T18951] EXT4-fs (loop5): pa ffff8881004a1d90: logic 131152, phys. 225, len 18 [ 514.155939][T11739] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 514.169843][T18951] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5366: group 0, [ 514.174342][T11739] ? __rcu_read_lock+0x36/0x50 [ 514.182735][T18951] free 0, pa_free 1 [ 514.188122][T11739] ? __pfx_default_wake_function+0x10/0x10 [ 514.211243][T11739] handle_mm_fault+0x8e4/0x2ac0 [ 514.216185][T11739] exc_page_fault+0x3b9/0x650 [ 514.220994][T11739] asm_exc_page_fault+0x26/0x30 [ 514.224518][T18956] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, [ 514.225896][T11739] RIP: 0033:0x7f7ec95d85a5 [ 514.225922][T11739] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 3f 19 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 514.233548][T18956] inode 15: [ 514.237868][T11739] RSP: 002b:00007ffc54c75bc8 EFLAGS: 00010246 [ 514.257826][T18956] block 161: [ 514.260855][T11739] [ 514.260864][T11739] RAX: 0000000000000000 RBX: 00000000000004ae RCX: 00007f7ec95d85a3 [ 514.266949][T18956] freeing already freed block (bit 10); block bitmap corrupt. [ 514.270091][T11739] RDX: 00007ffc54c75be0 RSI: 0000000000000000 RDI: 0000000000000000 [ 514.295984][T11739] RBP: 00007ffc54c75c3c R08: 000000001ad801a0 R09: 7fffffffffffffff [ 514.303982][T11739] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 514.312086][T11739] R13: 0000000000077ffd R14: 00007ffc54c75c90 R15: 0000000000000bb8 [ 514.320098][T11739] [ 514.323537][T11739] memory: usage 307200kB, limit 307200kB, failcnt 1006 [ 514.330789][T11739] memory+swap: usage 307576kB, limit 9007199254740988kB, failcnt 0 [ 514.338820][T11739] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 514.346110][T11739] Memory cgroup stats for /syz0: [ 514.346951][T11739] cache 0 [ 514.347373][T17263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.352020][T11739] rss 0 [ 514.366733][T11739] shmem 0 [ 514.369681][T11739] mapped_file 0 [ 514.373292][T11739] dirty 0 [ 514.376318][T11739] writeback 0 [ 514.379642][T11739] workingset_refault_anon 2121 [ 514.384473][T11739] workingset_refault_file 8930 [ 514.389285][T11739] swap 385024 [ 514.392884][T11739] swapcached 0 [ 514.396337][T11739] pgpgin 541417 [ 514.399826][T11739] pgpgout 541417 [ 514.403526][T11739] pgfault 312799 [ 514.403537][T11739] pgmajfault 439 [ 514.403547][T11739] inactive_anon 0 [ 514.403556][T11739] active_anon 0 [ 514.403565][T11739] inactive_file 0 [ 514.403574][T11739] active_file 0 [ 514.403583][T11739] unevictable 0 [ 514.403592][T11739] hierarchical_memory_limit 314572800 [ 514.403667][T11739] hierarchical_memsw_limit 9223372036854771712 [ 514.403678][T11739] total_cache 0 [ 514.403687][T11739] total_rss 0 [ 514.403719][T11739] total_shmem 0 [ 514.403728][T11739] total_mapped_file 0 [ 514.403738][T11739] total_dirty 0 [ 514.403747][T11739] total_writeback 0 [ 514.403756][T11739] total_workingset_refault_anon 2348 [ 514.403768][T11739] total_workingset_refault_file 9453 [ 514.403779][T11739] total_swap 385024 [ 514.403788][T11739] total_swapcached 0 [ 514.403797][T11739] total_pgpgin 1014110 [ 514.403817][T11739] total_pgpgout 1014110 [ 514.403825][T11739] total_pgfault 738817 [ 514.403832][T11739] total_pgmajfault 565 [ 514.403839][T11739] total_inactive_anon 0 [ 514.403846][T11739] total_active_anon 0 [ 514.403854][T11739] total_inactive_file 0 [ 514.403861][T11739] total_active_file 0 [ 514.403869][T11739] total_unevictable 0 [ 514.403879][T11739] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.5015,pid=18914,uid=0 [ 514.404002][T11739] Memory cgroup out of memory: Killed process 18914 (syz.0.5015) total-vm:95432kB, anon-rss:788kB, file-rss:22148kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 514.553380][T17220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.673641][ T29] audit: type=1326 audit(493.217:17903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18965 comm="syz.5.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b79e5d29 code=0x7ffc0000 [ 514.696731][ T29] audit: type=1326 audit(493.217:17904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18965 comm="syz.5.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b79e5d29 code=0x7ffc0000 [ 514.719896][ T29] audit: type=1326 audit(493.217:17905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18965 comm="syz.5.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa2b79e5d29 code=0x7ffc0000 [ 514.743017][ T29] audit: type=1326 audit(493.217:17906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18965 comm="syz.5.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b79e5d29 code=0x7ffc0000 [ 514.766000][ T29] audit: type=1326 audit(493.217:17907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18965 comm="syz.5.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2b79e5d29 code=0x7ffc0000 [ 514.789046][ T29] audit: type=1326 audit(493.217:17908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18965 comm="syz.5.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b79e5d29 code=0x7ffc0000 [ 514.812307][ T29] audit: type=1326 audit(493.217:17909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18965 comm="syz.5.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2b79e5d29 code=0x7ffc0000 [ 514.812402][ T29] audit: type=1326 audit(493.217:17910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18965 comm="syz.5.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b79e5d29 code=0x7ffc0000 [ 514.833046][T18970] loop5: detected capacity change from 0 to 256 [ 514.884001][T18969] sg_write: data in/out 14238/8 bytes for SCSI command 0xbf-- guessing data in; [ 514.884001][T18969] program syz.1.5032 not setting count and/or reply_len properly [ 514.915427][T18973] syz.2.5033[18973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.915545][T18973] syz.2.5033[18973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.932643][T18973] syz.2.5033[18973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.954693][T18976] IPv6: Can't replace route, no match found [ 514.987437][T18980] 9pnet_fd: Insufficient options for proto=fd [ 515.075393][T18990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5036'. [ 515.107450][T19000] IPv6: Can't replace route, no match found [ 515.154798][T19005] 9pnet_fd: Insufficient options for proto=fd [ 515.198299][T19007] sg_write: data in/out 14238/8 bytes for SCSI command 0xd0-- guessing data in; [ 515.198299][T19007] program syz.1.5044 not setting count and/or reply_len properly [ 515.232713][T19007] FAULT_INJECTION: forcing a failure. [ 515.232713][T19007] name failslab, interval 1, probability 0, space 0, times 0 [ 515.245454][T19007] CPU: 1 UID: 0 PID: 19007 Comm: syz.1.5044 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 515.256267][T19007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 515.266343][T19007] Call Trace: [ 515.269653][T19007] [ 515.272602][T19007] dump_stack_lvl+0xf2/0x150 [ 515.277233][T19007] dump_stack+0x15/0x1a [ 515.281499][T19007] should_fail_ex+0x223/0x230 [ 515.286197][T19007] should_failslab+0x8f/0xb0 [ 515.290812][T19007] __kmalloc_noprof+0xab/0x3f0 [ 515.295599][T19007] ? blk_rq_map_user_iov+0xac8/0x1930 [ 515.301025][T19007] blk_rq_map_user_iov+0xac8/0x1930 [ 515.306327][T19007] ? prep_new_page+0x5a/0x1c0 [ 515.311088][T19007] ? get_page_from_freelist+0x1af1/0x1b30 [ 515.316895][T19007] ? __sbitmap_queue_get+0x15/0x20 [ 515.322065][T19007] ? this_cpu_in_panic+0x2d/0x40 [ 515.327076][T19007] ? should_fail_ex+0xd7/0x230 [ 515.331968][T19007] ? import_ubuf+0xec/0x130 [ 515.336493][T19007] blk_rq_map_user_io+0x193/0x260 [ 515.341605][T19007] ? alloc_pages_mpol_noprof+0xd5/0x1e0 [ 515.347184][T19007] ? alloc_pages_noprof+0xe1/0x100 [ 515.352381][T19007] ? sg_build_indirect+0x394/0x450 [ 515.357534][T19007] sg_common_write+0x812/0x8d0 [ 515.362382][T19007] sg_write+0x698/0x710 [ 515.366557][T19007] ? __pfx_sg_write+0x10/0x10 [ 515.371256][T19007] vfs_write+0x281/0x920 [ 515.375510][T19007] ? putname+0xcf/0xf0 [ 515.379586][T19007] ? __fget_files+0x17c/0x1c0 [ 515.384292][T19007] ksys_write+0xe8/0x1b0 [ 515.388552][T19007] __x64_sys_write+0x42/0x50 [ 515.393156][T19007] x64_sys_call+0x287e/0x2dc0 [ 515.397843][T19007] do_syscall_64+0xc9/0x1c0 [ 515.402350][T19007] ? clear_bhb_loop+0x55/0xb0 [ 515.407029][T19007] ? clear_bhb_loop+0x55/0xb0 [ 515.411823][T19007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.418085][T19007] RIP: 0033:0x7f4398835d29 [ 515.422509][T19007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.442124][T19007] RSP: 002b:00007f4396ea1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 515.450548][T19007] RAX: ffffffffffffffda RBX: 00007f4398a25fa0 RCX: 00007f4398835d29 [ 515.458526][T19007] RDX: 0000000000000038 RSI: 0000000020000200 RDI: 0000000000000006 [ 515.466539][T19007] RBP: 00007f4396ea1090 R08: 0000000000000000 R09: 0000000000000000 [ 515.474527][T19007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.482627][T19007] R13: 0000000000000000 R14: 00007f4398a25fa0 R15: 00007ffeef504dd8 [ 515.490648][T19007] [ 515.508322][T19011] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 515.617659][T19019] loop2: detected capacity change from 0 to 128 [ 516.560841][T19050] 9pnet_fd: Insufficient options for proto=fd [ 516.688183][T19061] loop2: detected capacity change from 0 to 512 [ 516.727499][T19061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.774528][T19067] netlink: 'syz.5.5066': attribute type 10 has an invalid length. [ 516.842592][T19075] vhci_hcd: invalid port number 157 [ 516.847973][T19075] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 516.955502][T16919] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.193169][T19089] netlink: 'syz.7.5074': attribute type 15 has an invalid length. [ 517.283439][T19095] IPv6: Can't replace route, no match found [ 517.348512][T19105] 9pnet_fd: Insufficient options for proto=fd [ 517.353960][T19106] 9pnet_fd: Insufficient options for proto=fd [ 517.397031][T19087] lo speed is unknown, defaulting to 1000 [ 517.605722][T11739] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 517.616840][T11739] CPU: 1 UID: 0 PID: 11739 Comm: syz-executor Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 517.627794][T11739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 517.637895][T11739] Call Trace: [ 517.641195][T11739] [ 517.644133][T11739] dump_stack_lvl+0xf2/0x150 [ 517.648810][T11739] dump_stack+0x15/0x1a [ 517.652986][T11739] dump_header+0x83/0x2d0 [ 517.657364][T11739] oom_kill_process+0x341/0x4c0 [ 517.662274][T11739] out_of_memory+0x9af/0xbe0 [ 517.666890][T11739] ? css_next_descendant_pre+0x11c/0x140 [ 517.672704][T11739] mem_cgroup_out_of_memory+0x13e/0x190 [ 517.678332][T11739] try_charge_memcg+0x508/0x7f0 [ 517.683215][T11739] charge_memcg+0x50/0xc0 [ 517.687557][T11739] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 517.693553][T11739] __read_swap_cache_async+0x236/0x480 [ 517.699065][T11739] swap_cluster_readahead+0x279/0x3f0 [ 517.704514][T11739] swapin_readahead+0xe4/0x6f0 [ 517.709295][T11739] ? swap_cache_get_folio+0x77/0x210 [ 517.714643][T11739] do_swap_page+0x31b/0x2550 [ 517.719263][T11739] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 517.724757][T11739] ? __rcu_read_lock+0x36/0x50 [ 517.729542][T11739] ? __pfx_default_wake_function+0x10/0x10 [ 517.735367][T11739] handle_mm_fault+0x8e4/0x2ac0 [ 517.740238][T11739] exc_page_fault+0x3b9/0x650 [ 517.745011][T11739] asm_exc_page_fault+0x26/0x30 [ 517.749956][T11739] RIP: 0033:0x7f7ec95d85a5 [ 517.754445][T11739] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 3f 19 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 517.774060][T11739] RSP: 002b:00007ffc54c75bc8 EFLAGS: 00010246 [ 517.780135][T11739] RAX: 0000000000000000 RBX: 00000000000004b6 RCX: 00007f7ec95d85a3 [ 517.788115][T11739] RDX: 00007ffc54c75be0 RSI: 0000000000000000 RDI: 0000000000000000 [ 517.796135][T11739] RBP: 00007ffc54c75c3c R08: 0000000035109a9c R09: 7fffffffffffffff [ 517.804116][T11739] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 517.812169][T11739] R13: 0000000000078df0 R14: 00007ffc54c75c90 R15: 0000000000000bb8 [ 517.820149][T11739] [ 517.823533][T11739] memory: usage 307200kB, limit 307200kB, failcnt 1365 [ 517.830457][T11739] memory+swap: usage 307656kB, limit 9007199254740988kB, failcnt 0 [ 517.838398][T11739] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 517.845805][T11739] Memory cgroup stats for /syz0: [ 517.849166][T11739] cache 0 [ 517.857271][T11739] rss 0 [ 517.860111][T11739] shmem 0 [ 517.863093][T11739] mapped_file 0 [ 517.866573][T11739] dirty 0 [ 517.869537][T11739] writeback 8192 [ 517.873136][T11739] workingset_refault_anon 2137 [ 517.877950][T11739] workingset_refault_file 9011 [ 517.882802][T11739] swap 466944 [ 517.886092][T11739] swapcached 12288 [ 517.889872][T11739] pgpgin 544708 [ 517.893428][T11739] pgpgout 544705 [ 517.897065][T11739] pgfault 316224 [ 517.900638][T11739] pgmajfault 455 [ 517.904191][T11739] inactive_anon 12288 [ 517.908201][T11739] active_anon 0 [ 517.911721][T11739] inactive_file 0 [ 517.915373][T11739] active_file 0 [ 517.918835][T11739] unevictable 0 [ 517.922342][T11739] hierarchical_memory_limit 314572800 [ 517.927720][T11739] hierarchical_memsw_limit 9223372036854771712 [ 517.933919][T11739] total_cache 0 [ 517.937605][T11739] total_rss 0 [ 517.940886][T11739] total_shmem 0 [ 517.944394][T11739] total_mapped_file 0 [ 517.948390][T11739] total_dirty 0 [ 517.951853][T11739] total_writeback 8192 [ 517.955970][T11739] total_workingset_refault_anon 2364 [ 517.961245][T11739] total_workingset_refault_file 9534 [ 517.966578][T11739] total_swap 466944 [ 517.970401][T11739] total_swapcached 12288 [ 517.974676][T11739] total_pgpgin 1017401 [ 517.978762][T11739] total_pgpgout 1017398 [ 517.982917][T11739] total_pgfault 742242 [ 517.987022][T11739] total_pgmajfault 581 [ 517.991090][T11739] total_inactive_anon 12288 [ 517.995610][T11739] total_active_anon 0 [ 517.999624][T11739] total_inactive_file 0 [ 518.003812][T11739] total_active_file 0 [ 518.007811][T11739] total_unevictable 0 [ 518.011795][T11739] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.5067,pid=19068,uid=0 [ 518.026522][T11739] Memory cgroup out of memory: Killed process 19068 (syz.0.5067) total-vm:95432kB, anon-rss:784kB, file-rss:22140kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 518.195917][T19123] loop1: detected capacity change from 0 to 1024 [ 518.204217][T19123] EXT4-fs: Ignoring removed mblk_io_submit option [ 518.264662][T19123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.293566][T17220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.340953][T19128] loop1: detected capacity change from 0 to 512 [ 518.360799][T19128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.398681][T19139] 9pnet_fd: p9_fd_create_tcp (19139): problem connecting socket to 127.0.0.1 [ 518.464900][T19145] 9pnet_fd: Insufficient options for proto=fd [ 518.516163][T19148] IPv6: Can't replace route, no match found [ 518.543042][T19151] loop2: detected capacity change from 0 to 512 [ 518.549901][T19151] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 518.562431][T19151] EXT4-fs (loop2): 1 truncate cleaned up [ 518.568569][T19151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.586383][T19154] IPv6: Can't replace route, no match found [ 518.682934][T19160] IPv6: Can't replace route, no match found [ 518.704120][T19162] IPv6: Can't replace route, no match found [ 518.803621][T19166] IPv6: Can't replace route, no match found [ 518.856216][T19172] IPv6: Can't replace route, no match found [ 518.914130][T19176] 9pnet_fd: Insufficient options for proto=fd [ 519.153427][T19192] IPv6: Can't replace route, no match found [ 519.230130][T19195] IPv6: Can't replace route, no match found [ 519.243084][T17220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.340117][T19203] IPv6: Can't replace route, no match found [ 519.399526][T19207] IPv6: Can't replace route, no match found [ 519.449680][ T29] kauditd_printk_skb: 806 callbacks suppressed [ 519.449699][ T29] audit: type=1326 audit(497.697:18717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.5.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b79e5d29 code=0x7ffc0000 [ 519.489473][ T29] audit: type=1326 audit(497.697:18718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.5.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b79e5d29 code=0x7ffc0000 [ 519.512609][ T29] audit: type=1326 audit(497.697:18719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.5.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fa2b79e5d29 code=0x7ffc0000 [ 519.556072][ T29] audit: type=1326 audit(497.791:18720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.5.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b79e5d29 code=0x7ffc0000 [ 519.579341][ T29] audit: type=1326 audit(497.791:18721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.5.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b79e5d29 code=0x7ffc0000 [ 519.785818][T19220] loop5: detected capacity change from 0 to 1024 [ 519.799267][T19220] EXT4-fs: Ignoring removed mblk_io_submit option [ 519.842187][T19220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.880328][ T29] audit: type=1400 audit(498.090:18722): avc: denied { create } for pid=19224 comm="syz.0.5126" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 519.885095][T19227] loop2: detected capacity change from 0 to 1024 [ 519.907840][T19227] EXT4-fs: Ignoring removed mblk_io_submit option [ 519.919496][ T29] audit: type=1326 audit(498.127:18723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19224 comm="syz.0.5126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec95a5d29 code=0x7ffc0000 [ 519.926556][T19225] FAULT_INJECTION: forcing a failure. [ 519.926556][T19225] name failslab, interval 1, probability 0, space 0, times 0 [ 519.942607][ T29] audit: type=1326 audit(498.127:18724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19224 comm="syz.0.5126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec95a5d29 code=0x7ffc0000 [ 519.955263][T19225] CPU: 0 UID: 0 PID: 19225 Comm: syz.0.5126 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 519.988996][T19225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 519.995053][ T29] audit: type=1326 audit(498.137:18725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19224 comm="syz.0.5126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ec95a5d29 code=0x7ffc0000 [ 519.999061][T19225] Call Trace: [ 519.999073][T19225] [ 520.022116][ T29] audit: type=1326 audit(498.137:18726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19224 comm="syz.0.5126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec95a5d29 code=0x7ffc0000 [ 520.025262][T19225] dump_stack_lvl+0xf2/0x150 [ 520.055833][T19225] dump_stack+0x15/0x1a [ 520.060041][T19225] should_fail_ex+0x223/0x230 [ 520.064933][T19225] should_failslab+0x8f/0xb0 [ 520.069590][T19225] kmem_cache_alloc_noprof+0x52/0x320 [ 520.075078][T19225] ? audit_log_start+0x34c/0x6b0 [ 520.080054][T19225] audit_log_start+0x34c/0x6b0 [ 520.084938][T19225] audit_seccomp+0x4b/0x130 [ 520.089522][T19225] __seccomp_filter+0x6fa/0x1180 [ 520.094499][T19225] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 520.100185][T19225] ? vfs_write+0x596/0x920 [ 520.104679][T19225] __secure_computing+0x9f/0x1c0 [ 520.109828][T19225] syscall_trace_enter+0xd1/0x1f0 [ 520.114877][T19225] ? fpregs_assert_state_consistent+0x83/0xa0 [ 520.121003][T19225] do_syscall_64+0xaa/0x1c0 [ 520.125540][T19225] ? clear_bhb_loop+0x55/0xb0 [ 520.130227][T19225] ? clear_bhb_loop+0x55/0xb0 [ 520.134922][T19225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.140917][T19225] RIP: 0033:0x7f7ec95a5d29 [ 520.145343][T19225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.164991][T19225] RSP: 002b:00007f7ec7c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000025 [ 520.173532][T19225] RAX: ffffffffffffffda RBX: 00007f7ec9795fa0 RCX: 00007f7ec95a5d29 [ 520.181509][T19225] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 520.189551][T19225] RBP: 00007f7ec7c17090 R08: 0000000000000000 R09: 0000000000000000 [ 520.197535][T19225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.205516][T19225] R13: 0000000000000000 R14: 00007f7ec9795fa0 R15: 00007ffc54c75878 [ 520.213506][T19225] [ 520.233477][T19233] IPv6: Can't replace route, no match found [ 520.390564][T19255] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5135'. [ 520.441448][T19248] FAULT_INJECTION: forcing a failure. [ 520.441448][T19248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.454720][T19248] CPU: 1 UID: 0 PID: 19248 Comm: syz.2.5132 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 520.465502][T19248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 520.475605][T19248] Call Trace: [ 520.478894][T19248] [ 520.481830][T19248] dump_stack_lvl+0xf2/0x150 [ 520.486470][T19248] dump_stack+0x15/0x1a [ 520.490727][T19248] should_fail_ex+0x223/0x230 [ 520.495419][T19248] should_fail+0xb/0x10 [ 520.499606][T19248] should_fail_usercopy+0x1a/0x20 [ 520.504667][T19248] _copy_to_user+0x20/0xa0 [ 520.509253][T19248] copy_siginfo_to_user+0x24/0xb0 [ 520.514311][T19248] x64_setup_rt_frame+0x2b4/0x590 [ 520.519612][T19248] arch_do_signal_or_restart+0x287/0x4b0 [ 520.525300][T19248] syscall_exit_to_user_mode+0x62/0x120 [ 520.530915][T19248] do_syscall_64+0xd6/0x1c0 [ 520.535458][T19248] ? clear_bhb_loop+0x55/0xb0 [ 520.540192][T19248] ? clear_bhb_loop+0x55/0xb0 [ 520.544963][T19248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.550902][T19248] RIP: 0033:0x7f3458b35d27 [ 520.555373][T19248] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 520.575060][T19248] RSP: 002b:00007f34571a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 520.583519][T19248] RAX: 0000000000000013 RBX: 00007f3458d25fa0 RCX: 00007f3458b35d29 [ 520.591489][T19248] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 520.599455][T19248] RBP: 00007f34571a1090 R08: 0000000000000000 R09: 0000000000000000 [ 520.607453][T19248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 520.615426][T19248] R13: 0000000000000000 R14: 00007f3458d25fa0 R15: 00007ffe3a224918 [ 520.623419][T19248] [ 520.670618][T19257] loop2: detected capacity change from 0 to 512 [ 520.681372][T19257] EXT4-fs: Ignoring removed mblk_io_submit option [ 520.690276][T19257] journal_path: Lookup failure for './file0/file0' [ 520.696824][T19257] EXT4-fs: error: could not find journal device path [ 520.827781][T19266] loop2: detected capacity change from 0 to 512 [ 520.834702][T19266] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 520.845697][T19266] EXT4-fs (loop2): 1 truncate cleaned up [ 520.915415][T19272] IPv6: Can't replace route, no match found [ 520.945657][T19276] loop2: detected capacity change from 0 to 512 [ 520.952590][T19276] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 520.974586][T19276] EXT4-fs (loop2): 1 truncate cleaned up [ 521.001811][T19279] IPv6: NLM_F_CREATE should be specified when creating new route [ 521.010011][T19279] IPv6: Can't replace route, no match found [ 521.021195][ T9] IPVS: starting estimator thread 0... [ 521.191199][T19280] IPVS: using max 2544 ests per chain, 127200 per kthread [ 521.216493][T19284] loop7: detected capacity change from 0 to 512 [ 521.223275][T19284] EXT4-fs: Ignoring removed mblk_io_submit option [ 521.231801][T19284] journal_path: Lookup failure for './file0/file0' [ 521.238499][T19284] EXT4-fs: error: could not find journal device path [ 521.317186][T19289] loop5: detected capacity change from 0 to 512 [ 521.326339][T19289] EXT4-fs: inline encryption not supported [ 521.424241][T19296] loop7: detected capacity change from 0 to 512 [ 521.431052][T19296] EXT4-fs: Ignoring removed i_version option [ 521.445903][T19298] loop1: detected capacity change from 0 to 512 [ 521.455088][T19296] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c018, mo2=0002] [ 521.464611][T19296] System zones: 0-2, 18-18, 34-35 [ 521.469971][T19298] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 521.481894][T19298] EXT4-fs (loop1): 1 truncate cleaned up [ 521.490996][T19296] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 521.566837][T19305] vhci_hcd: invalid port number 157 [ 521.572157][T19305] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 521.678621][T19310] IPv6: Can't replace route, no match found [ 521.845354][T19321] syz.1.5163[19321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 521.845420][T19321] syz.1.5163[19321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 521.889941][T19322] lo speed is unknown, defaulting to 1000 [ 521.928923][T19321] syz.1.5163[19321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 521.955119][T19327] FAULT_INJECTION: forcing a failure. [ 521.955119][T19327] name failslab, interval 1, probability 0, space 0, times 0 [ 521.979357][T19327] CPU: 0 UID: 0 PID: 19327 Comm: syz.5.5164 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 521.990161][T19327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 522.000241][T19327] Call Trace: [ 522.003530][T19327] [ 522.006477][T19327] dump_stack_lvl+0xf2/0x150 [ 522.011140][T19327] dump_stack+0x15/0x1a [ 522.015332][T19327] should_fail_ex+0x223/0x230 [ 522.020051][T19327] should_failslab+0x8f/0xb0 [ 522.024701][T19327] kmem_cache_alloc_noprof+0x52/0x320 [ 522.030087][T19327] ? radix_tree_node_alloc+0x8b/0x1e0 [ 522.035494][T19327] radix_tree_node_alloc+0x8b/0x1e0 [ 522.040766][T19327] idr_get_free+0x1f5/0x550 [ 522.045293][T19327] idr_alloc_u32+0xcb/0x180 [ 522.049902][T19327] tcf_idr_check_alloc+0x171/0x270 [ 522.055076][T19327] tcf_mpls_init+0x226/0xae0 [ 522.059829][T19327] ? __nla_parse+0x40/0x60 [ 522.064326][T19327] tcf_action_init_1+0x339/0x490 [ 522.069320][T19327] tcf_action_init+0x1cc/0x610 [ 522.074217][T19327] tc_ctl_action+0x292/0x840 [ 522.078985][T19327] ? __pfx_tc_ctl_action+0x10/0x10 [ 522.084193][T19327] rtnetlink_rcv_msg+0x6aa/0x710 [ 522.089271][T19327] ? ref_tracker_free+0x3a5/0x410 [ 522.094304][T19327] ? __dev_queue_xmit+0x186/0x2090 [ 522.099774][T19327] netlink_rcv_skb+0x12c/0x230 [ 522.104558][T19327] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 522.110036][T19327] rtnetlink_rcv+0x1c/0x30 [ 522.114509][T19327] netlink_unicast+0x599/0x670 [ 522.119299][T19327] netlink_sendmsg+0x5cc/0x6e0 [ 522.124095][T19327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.129512][T19327] __sock_sendmsg+0x140/0x180 [ 522.134231][T19327] ____sys_sendmsg+0x312/0x410 [ 522.139013][T19327] __sys_sendmsg+0x19d/0x230 [ 522.143660][T19327] __x64_sys_sendmsg+0x46/0x50 [ 522.148522][T19327] x64_sys_call+0x2734/0x2dc0 [ 522.153208][T19327] do_syscall_64+0xc9/0x1c0 [ 522.157721][T19327] ? clear_bhb_loop+0x55/0xb0 [ 522.162408][T19327] ? clear_bhb_loop+0x55/0xb0 [ 522.167107][T19327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.173040][T19327] RIP: 0033:0x7fa2b79e5d29 [ 522.177463][T19327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.197113][T19327] RSP: 002b:00007fa2b6057038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.205541][T19327] RAX: ffffffffffffffda RBX: 00007fa2b7bd5fa0 RCX: 00007fa2b79e5d29 [ 522.213603][T19327] RDX: 0000000020000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 522.221580][T19327] RBP: 00007fa2b6057090 R08: 0000000000000000 R09: 0000000000000000 [ 522.229557][T19327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.237589][T19327] R13: 0000000000000000 R14: 00007fa2b7bd5fa0 R15: 00007ffe752f7c88 [ 522.245578][T19327] [ 522.520017][T19332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5167'. [ 522.602986][T19336] 9pnet_fd: p9_fd_create_tcp (19336): problem connecting socket to 127.0.0.1 [ 522.733427][T19339] loop5: detected capacity change from 0 to 1024 [ 522.740423][T19339] EXT4-fs: Ignoring removed mblk_io_submit option [ 522.757284][T19341] loop7: detected capacity change from 0 to 16384 [ 522.837730][T19341] loop7: detected capacity change from 16384 to 16383 [ 522.871825][T19345] loop1: detected capacity change from 0 to 128 [ 523.236396][T19360] loop5: detected capacity change from 0 to 512 [ 523.243268][T19360] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 523.264783][T19360] EXT4-fs (loop5): 1 truncate cleaned up [ 523.365445][T19366] loop1: detected capacity change from 0 to 1024 [ 523.496202][T19367] loop2: detected capacity change from 0 to 1024 [ 523.757867][T19378] IPv6: Can't replace route, no match found [ 523.946235][T19388] IPv6: Can't replace route, no match found [ 524.042790][T19395] loop7: detected capacity change from 0 to 512 [ 524.075975][T19395] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 524.132912][T19395] EXT4-fs (loop7): 1 truncate cleaned up [ 524.177707][T19400] IPv6: Can't replace route, no match found [ 524.340284][T19407] IPv6: Can't replace route, no match found [ 524.544689][T19420] netlink: 'syz.0.5199': attribute type 32 has an invalid length. [ 524.590502][T19424] loop5: detected capacity change from 0 to 512 [ 524.611153][T19424] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 524.650002][T19424] EXT4-fs (loop5): 1 truncate cleaned up [ 524.670593][T19427] IPv6: Can't replace route, no match found [ 524.704285][T19429] IPv6: Can't replace route, no match found [ 524.771801][T19433] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5205'. [ 525.102758][T19458] loop1: detected capacity change from 0 to 512 [ 525.135389][T19458] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 525.156223][T19458] EXT4-fs (loop1): 1 truncate cleaned up [ 525.204944][T19461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5216'. [ 525.264922][T19463] tipc: Started in network mode [ 525.269843][T19463] tipc: Node identity 4, cluster identity 4711 [ 525.276064][T19463] tipc: Node number set to 4 [ 525.310400][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 525.310414][ T29] audit: type=1400 audit(503.179:18873): avc: denied { read write } for pid=11739 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 525.595383][T19473] lo speed is unknown, defaulting to 1000 [ 525.745797][ T29] audit: type=1400 audit(503.422:18874): avc: denied { getopt } for pid=19467 comm="syz.1.5219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 525.766048][ T29] audit: type=1400 audit(503.525:18875): avc: denied { create } for pid=19467 comm="syz.1.5219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 526.175217][ T29] audit: type=1326 audit(503.974:18876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19483 comm="syz.7.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 526.179957][T19486] 9pnet_fd: p9_fd_create_tcp (19486): problem connecting socket to 127.0.0.1 [ 526.198271][ T29] audit: type=1326 audit(503.974:18877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19483 comm="syz.7.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 526.198320][ T29] audit: type=1326 audit(503.983:18878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19483 comm="syz.7.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 526.198387][ T29] audit: type=1326 audit(503.983:18879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19483 comm="syz.7.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 526.198420][ T29] audit: type=1326 audit(503.983:18880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19483 comm="syz.7.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 526.198449][ T29] audit: type=1326 audit(503.983:18881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19483 comm="syz.7.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 526.198517][ T29] audit: type=1326 audit(503.983:18882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19483 comm="syz.7.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d23b5d29 code=0x7ffc0000 [ 526.423134][T19493] netlink: 'syz.5.5228': attribute type 1 has an invalid length. [ 526.430976][T19493] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5228'. [ 526.446887][T19493] netlink: 'syz.5.5228': attribute type 1 has an invalid length. [ 526.622303][T19499] loop5: detected capacity change from 0 to 128 [ 526.633306][T19499] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 526.642942][T19498] IPv6: Can't replace route, no match found [ 526.665739][T19501] loop2: detected capacity change from 0 to 128 [ 526.679400][T19499] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 526.695610][T19501] EXT4-fs mount: 28 callbacks suppressed [ 526.695701][T19501] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 526.830889][T19512] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 526.839249][T19512] FAT-fs (loop5): Filesystem has been set read-only [ 526.851613][T19512] syz.5.5230: attempt to access beyond end of device [ 526.851613][T19512] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 526.866881][T19512] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 526.875059][T19512] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 526.889536][T19512] syz.5.5230: attempt to access beyond end of device [ 526.889536][T19512] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 526.905957][T19512] syz.5.5230: attempt to access beyond end of device [ 526.905957][T19512] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 526.982505][T16919] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 526.995677][T19512] syz.5.5230: attempt to access beyond end of device [ 526.995677][T19512] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 527.017070][T19512] syz.5.5230: attempt to access beyond end of device [ 527.017070][T19512] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 527.373685][T19527] 9pnet_fd: p9_fd_create_tcp (19527): problem connecting socket to 127.0.0.1 [ 527.420697][T19529] IPv6: Can't replace route, no match found [ 527.426970][T19519] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 527.490510][T19536] IPv6: Can't replace route, no match found [ 527.571433][T19546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5247'. [ 527.581785][T19546] smc: net device bond0 erased user defined pnetid SYZ0 [ 527.600292][T19543] lo speed is unknown, defaulting to 1000 [ 527.627443][T19549] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5250'. [ 527.828108][T19558] Invalid ELF header magic: != ELF [ 527.916180][T19568] loop5: detected capacity change from 0 to 512 [ 527.924594][T19568] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 527.942621][T19568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.993553][T19574] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5260'. [ 528.026577][T19578] loop1: detected capacity change from 0 to 512 [ 528.054730][T19578] EXT4-fs: Ignoring removed mblk_io_submit option [ 528.061698][T19578] journal_path: Lookup failure for './file0/file0' [ 528.068292][T19578] EXT4-fs: error: could not find journal device path [ 528.106931][T19574] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5260'. [ 528.118836][T17263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.228298][T19589] netlink: 100 bytes leftover after parsing attributes in process `syz.7.5268'. [ 528.400341][T19595] loop7: detected capacity change from 0 to 1024 [ 528.416962][T19595] EXT4-fs: Ignoring removed nobh option [ 528.422890][T19595] EXT4-fs: Ignoring removed oldalloc option [ 528.454596][T19595] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.469974][T19597] loop0: detected capacity change from 0 to 1024 [ 528.502689][T19597] EXT4-fs: Ignoring removed nobh option [ 528.508550][T19597] EXT4-fs: Ignoring removed oldalloc option [ 528.587755][T19595] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4115: comm syz.7.5270: Allocating blocks 497-513 which overlap fs metadata [ 528.643457][T19597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.672874][T19595] EXT4-fs (loop7): pa ffff8881007a3850: logic 131152, phys. 225, len 18 [ 528.681581][T19595] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 528.705909][T19600] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 528.726848][T19597] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.5271: Allocating blocks 497-513 which overlap fs metadata [ 528.742470][T19597] EXT4-fs (loop0): pa ffff8881004a1d20: logic 131168, phys. 209, len 19 [ 528.751174][T19597] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 528.902363][T11739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.912372][T17738] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.169523][T19612] loop5: detected capacity change from 0 to 512 [ 529.190404][T19612] EXT4-fs: Ignoring removed mblk_io_submit option [ 529.197376][T19612] journal_path: Lookup failure for './file0/file0' [ 529.204088][T19612] EXT4-fs: error: could not find journal device path [ 529.220510][T19614] 9pnet_fd: Insufficient options for proto=fd [ 529.289575][T19617] IPv6: Can't replace route, no match found [ 529.512867][T19627] IPv6: Can't replace route, no match found [ 529.603829][T19629] loop2: detected capacity change from 0 to 512 [ 529.634438][T19632] IPv6: Can't replace route, no match found [ 529.649993][T19629] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 529.684275][T19629] EXT4-fs (loop2): 1 truncate cleaned up [ 529.698417][T19638] loop7: detected capacity change from 0 to 2048 [ 529.701371][T19629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.737775][T19644] 9pnet_fd: Insufficient options for proto=fd [ 529.746800][T19638] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.845374][T19646] loop1: detected capacity change from 0 to 256 [ 529.867297][T19642] FAULT_INJECTION: forcing a failure. [ 529.867297][T19642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.880587][T19642] CPU: 1 UID: 0 PID: 19642 Comm: syz.5.5288 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 529.891454][T19642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 529.901559][T19642] Call Trace: [ 529.904857][T19642] [ 529.907816][T19642] dump_stack_lvl+0xf2/0x150 [ 529.912434][T19642] dump_stack+0x15/0x1a [ 529.916680][T19642] should_fail_ex+0x223/0x230 [ 529.921453][T19642] should_fail+0xb/0x10 [ 529.925622][T19642] should_fail_usercopy+0x1a/0x20 [ 529.930750][T19642] _copy_from_user+0x1e/0xb0 [ 529.935360][T19642] move_addr_to_kernel+0x82/0x120 [ 529.940438][T19642] __sys_bind+0x9e/0x190 [ 529.944754][T19642] __x64_sys_bind+0x41/0x50 [ 529.949279][T19642] x64_sys_call+0x20ab/0x2dc0 [ 529.953978][T19642] do_syscall_64+0xc9/0x1c0 [ 529.958588][T19642] ? clear_bhb_loop+0x55/0xb0 [ 529.963280][T19642] ? clear_bhb_loop+0x55/0xb0 [ 529.967967][T19642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.973894][T19642] RIP: 0033:0x7fa2b79e5d29 [ 529.978329][T19642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.997992][T19642] RSP: 002b:00007fa2b6057038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 530.006420][T19642] RAX: ffffffffffffffda RBX: 00007fa2b7bd5fa0 RCX: 00007fa2b79e5d29 [ 530.014409][T19642] RDX: 000000000000000c RSI: 00000000200000c0 RDI: 000000000000000d [ 530.022459][T19642] RBP: 00007fa2b6057090 R08: 0000000000000000 R09: 0000000000000000 [ 530.030437][T19642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.038504][T19642] R13: 0000000000000000 R14: 00007fa2b7bd5fa0 R15: 00007ffe752f7c88 [ 530.046584][T19642] [ 530.074839][T19638] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5286'. [ 530.101977][T19646] FAT-fs (loop1): Directory bread(block 64) failed [ 530.109419][T19646] FAT-fs (loop1): Directory bread(block 65) failed [ 530.116447][T19646] FAT-fs (loop1): Directory bread(block 66) failed [ 530.127799][T19646] FAT-fs (loop1): Directory bread(block 67) failed [ 530.135573][T19646] FAT-fs (loop1): Directory bread(block 68) failed [ 530.142785][T19646] FAT-fs (loop1): Directory bread(block 69) failed [ 530.149780][T19646] FAT-fs (loop1): Directory bread(block 70) failed [ 530.157666][T19646] FAT-fs (loop1): Directory bread(block 71) failed [ 530.183141][T17738] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.232383][T19646] FAT-fs (loop1): Directory bread(block 72) failed [ 530.258327][T19646] FAT-fs (loop1): Directory bread(block 73) failed [ 530.575180][T19629] syz.2.5283 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 530.589358][T19629] CPU: 1 UID: 0 PID: 19629 Comm: syz.2.5283 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 530.600293][T19629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 530.610396][T19629] Call Trace: [ 530.613684][T19629] [ 530.616695][T19629] dump_stack_lvl+0xf2/0x150 [ 530.621317][T19629] dump_stack+0x15/0x1a [ 530.625515][T19629] dump_header+0x83/0x2d0 [ 530.629900][T19629] oom_kill_process+0x341/0x4c0 [ 530.634859][T19629] out_of_memory+0x9af/0xbe0 [ 530.639464][T19629] ? css_next_descendant_pre+0x11c/0x140 [ 530.645333][T19629] mem_cgroup_out_of_memory+0x13e/0x190 [ 530.650952][T19629] try_charge_memcg+0x508/0x7f0 [ 530.655827][T19629] obj_cgroup_charge_pages+0xbd/0x1a0 [ 530.661258][T19629] __memcg_kmem_charge_page+0x9d/0x170 [ 530.666794][T19629] __alloc_pages_noprof+0x1bc/0x340 [ 530.672147][T19629] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 530.677541][T19629] alloc_pages_noprof+0xe1/0x100 [ 530.682519][T19629] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 530.688366][T19629] __kvmalloc_node_noprof+0x121/0x170 [ 530.693801][T19629] ? ip_set_alloc+0x1f/0x30 [ 530.698329][T19629] ip_set_alloc+0x1f/0x30 [ 530.702701][T19629] hash_netiface_create+0x273/0x730 [ 530.707925][T19629] ? __nla_parse+0x40/0x60 [ 530.712471][T19629] ? __pfx_hash_netiface_create+0x10/0x10 [ 530.718216][T19629] ip_set_create+0x359/0x8a0 [ 530.722937][T19629] ? memchr+0x1/0x50 [ 530.726863][T19629] ? __nla_parse+0x40/0x60 [ 530.731313][T19629] nfnetlink_rcv_msg+0x4a9/0x570 [ 530.736334][T19629] netlink_rcv_skb+0x12c/0x230 [ 530.741127][T19629] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 530.746615][T19629] nfnetlink_rcv+0x16c/0x15d0 [ 530.751485][T19629] ? kmem_cache_free+0xdc/0x2d0 [ 530.756362][T19629] ? nlmon_xmit+0x51/0x60 [ 530.760764][T19629] ? __kfree_skb+0x102/0x150 [ 530.765415][T19629] ? consume_skb+0x49/0x160 [ 530.769930][T19629] ? nlmon_xmit+0x51/0x60 [ 530.774327][T19629] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 530.779644][T19629] ? __dev_queue_xmit+0xb6e/0x2090 [ 530.784826][T19629] ? ref_tracker_free+0x3a5/0x410 [ 530.789942][T19629] ? __dev_queue_xmit+0x186/0x2090 [ 530.795071][T19629] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 530.800560][T19629] netlink_unicast+0x599/0x670 [ 530.805433][T19629] netlink_sendmsg+0x5cc/0x6e0 [ 530.810250][T19629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.815605][T19629] __sock_sendmsg+0x140/0x180 [ 530.820305][T19629] ____sys_sendmsg+0x312/0x410 [ 530.825089][T19629] __sys_sendmsg+0x19d/0x230 [ 530.829777][T19629] __x64_sys_sendmsg+0x46/0x50 [ 530.834696][T19629] x64_sys_call+0x2734/0x2dc0 [ 530.839394][T19629] do_syscall_64+0xc9/0x1c0 [ 530.843941][T19629] ? clear_bhb_loop+0x55/0xb0 [ 530.848688][T19629] ? clear_bhb_loop+0x55/0xb0 [ 530.853377][T19629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.859316][T19629] RIP: 0033:0x7f3458b35d29 [ 530.863751][T19629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.883431][T19629] RSP: 002b:00007f34571a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.891859][T19629] RAX: ffffffffffffffda RBX: 00007f3458d25fa0 RCX: 00007f3458b35d29 [ 530.899910][T19629] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 530.907890][T19629] RBP: 00007f3458bb1aa8 R08: 0000000000000000 R09: 0000000000000000 [ 530.915990][T19629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.924081][T19629] R13: 0000000000000000 R14: 00007f3458d25fa0 R15: 00007ffe3a224918 [ 530.932123][T19629] [ 530.935696][T19629] memory: usage 307200kB, limit 307200kB, failcnt 327 [ 530.942582][T19629] memory+swap: usage 307828kB, limit 9007199254740988kB, failcnt 0 [ 530.950523][T19629] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 530.957862][T19629] Memory cgroup stats for /syz2: [ 531.003438][T19629] cache 4096 [ 531.011900][T19629] rss 0 [ 531.014800][T19629] shmem 0 [ 531.017875][T19629] mapped_file 0 [ 531.021436][T19629] dirty 0 [ 531.024570][T19629] writeback 0 [ 531.028019][T19629] workingset_refault_anon 362 [ 531.032852][T19629] workingset_refault_file 36 [ 531.037714][T19629] swap 643072 [ 531.041187][T19629] swapcached 0 [ 531.044662][T19629] pgpgin 261499 [ 531.048410][T19629] pgpgout 261497 [ 531.052071][T19629] pgfault 234972 [ 531.055801][T19629] pgmajfault 107 [ 531.059496][T19629] inactive_anon 0 [ 531.063468][T19629] active_anon 0 [ 531.067049][T19629] inactive_file 0 [ 531.070827][T19629] active_file 8192 [ 531.074714][T19629] unevictable 0 [ 531.078339][T19629] hierarchical_memory_limit 314572800 [ 531.084084][T19629] hierarchical_memsw_limit 9223372036854771712 [ 531.090752][T19629] total_cache 4096 [ 531.094646][T19629] total_rss 0 [ 531.098084][T19629] total_shmem 0 [ 531.101725][T19629] total_mapped_file 0 [ 531.105863][T19629] total_dirty 0 [ 531.109461][T19629] total_writeback 0 [ 531.113560][T19629] total_workingset_refault_anon 362 [ 531.118975][T19629] total_workingset_refault_file 36 [ 531.124658][T19629] total_swap 643072 [ 531.128631][T19629] total_swapcached 0 [ 531.132720][T19629] total_pgpgin 261499 [ 531.136893][T19629] total_pgpgout 261497 [ 531.141226][T19629] total_pgfault 234972 [ 531.145438][T19629] total_pgmajfault 107 [ 531.149652][T19629] total_inactive_anon 0 [ 531.153997][T19629] total_active_anon 0 [ 531.158273][T19629] total_inactive_file 0 [ 531.162703][T19629] total_active_file 8192 [ 531.167183][T19629] total_unevictable 0 [ 531.171352][T19629] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5283,pid=19628,uid=0 [ 531.186803][T19629] Memory cgroup out of memory: Killed process 19628 (syz.2.5283) total-vm:95432kB, anon-rss:788kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 531.251085][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 531.251103][ T29] audit: type=1400 audit(508.707:19110): avc: denied { setopt } for pid=19667 comm="syz.0.5298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 531.276463][ T29] audit: type=1326 audit(508.716:19111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19667 comm="syz.0.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec95a5d29 code=0x7ffc0000 [ 531.299533][ T29] audit: type=1326 audit(508.725:19112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19667 comm="syz.0.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7ec95a5d29 code=0x7ffc0000 [ 531.322527][ T29] audit: type=1326 audit(508.725:19113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19667 comm="syz.0.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec95a5d29 code=0x7ffc0000 [ 531.345532][ T29] audit: type=1326 audit(508.725:19114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19667 comm="syz.0.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7ec95a5d29 code=0x7ffc0000 [ 531.374307][T19674] 9pnet_fd: Insufficient options for proto=fd [ 531.385442][T19672] serio: Serial port ptm0 [ 531.402477][ T29] audit: type=1326 audit(508.875:19115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19667 comm="syz.0.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec95a5d29 code=0x7ffc0000 [ 531.431236][ T29] audit: type=1326 audit(508.894:19116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19667 comm="syz.0.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec95a5d29 code=0x7ffc0000 [ 531.457254][ T29] audit: type=1326 audit(508.922:19117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19667 comm="syz.0.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ec95a5d29 code=0x7ffc0000 [ 531.480509][ T29] audit: type=1326 audit(508.922:19118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19667 comm="syz.0.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec95a5d29 code=0x7ffc0000 [ 531.503583][ T29] audit: type=1326 audit(508.922:19119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19667 comm="syz.0.5298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec95a5d29 code=0x7ffc0000 [ 531.580170][T19682] loop7: detected capacity change from 0 to 128 [ 531.797343][T16919] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.129582][T19691] IPv6: Can't replace route, no match found [ 532.419549][T19697] loop5: detected capacity change from 0 to 512 [ 532.456613][T19697] EXT4-fs: Ignoring removed mblk_io_submit option [ 532.517547][T19697] journal_path: Lookup failure for './file0/file0' [ 532.524267][T19697] EXT4-fs: error: could not find journal device path [ 532.695867][T19707] 9pnet_fd: Insufficient options for proto=fd [ 532.888814][T19727] futex_wake_op: syz.5.5321 tries to shift op by 144; fix this program [ 532.936030][T19727] loop5: detected capacity change from 0 to 512 [ 532.963164][T19727] EXT4-fs: Ignoring removed oldalloc option [ 532.987870][T19727] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.5321: corrupted in-inode xattr: overlapping e_value [ 533.027020][T19727] EXT4-fs (loop5): Remounting filesystem read-only [ 533.063033][T19727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.075243][T19727] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 533.082105][T19727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.300603][T19740] netlink: 'syz.2.5324': attribute type 1 has an invalid length. [ 533.332850][T19739] bridge0: entered promiscuous mode [ 533.350016][T19742] loop0: detected capacity change from 0 to 512 [ 533.373728][T19742] EXT4-fs: Ignoring removed mblk_io_submit option [ 533.383144][T19739] macvlan2: entered promiscuous mode [ 533.384624][T19742] journal_path: Lookup failure for './file0/file0' [ 533.395474][T19742] EXT4-fs: error: could not find journal device path [ 533.398782][T19739] bridge0: port 1(macvlan2) entered blocking state [ 533.409179][T19739] bridge0: port 1(macvlan2) entered disabled state [ 533.416228][T19739] macvlan2: entered allmulticast mode [ 533.421713][T19739] bridge0: entered allmulticast mode [ 533.435080][T19739] macvlan2: left allmulticast mode [ 533.440266][T19739] bridge0: left allmulticast mode [ 533.471969][T19739] bridge0: left promiscuous mode [ 533.578737][T19744] IPv6: Can't replace route, no match found [ 533.592196][T19749] loop0: detected capacity change from 0 to 512 [ 533.703596][T19755] 9pnet_fd: Insufficient options for proto=fd [ 533.739584][T19757] IPv6: Can't replace route, no match found [ 533.850688][T19764] loop1: detected capacity change from 0 to 1024 [ 533.875455][T19764] EXT4-fs: Ignoring removed nobh option [ 533.881231][T19764] EXT4-fs: Ignoring removed oldalloc option [ 533.911126][T19764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.973416][T19764] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4115: comm syz.1.5334: Allocating blocks 497-513 which overlap fs metadata [ 534.008624][T19764] EXT4-fs (loop1): pa ffff8881007a37e0: logic 131152, phys. 225, len 18 [ 534.017449][T19764] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 534.035431][T19771] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 534.129964][T17220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.323358][T19786] loop1: detected capacity change from 0 to 512 [ 534.330524][T19786] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 534.342582][T19786] EXT4-fs (loop1): 1 truncate cleaned up [ 534.343172][T19786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.360410][T19786] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5341'. [ 534.486498][T17220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.537018][T19794] loop1: detected capacity change from 0 to 2048 [ 534.556464][T19794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.598511][T19794] xt_bpf: check failed: parse error [ 534.606930][T19794] SELinux: policydb table sizes (0,16) do not match mine (8,7) [ 534.615310][T19794] SELinux: failed to load policy [ 534.633532][T17220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.715854][T19802] loop0: detected capacity change from 0 to 512 [ 534.722583][T19802] EXT4-fs: Ignoring removed oldalloc option [ 534.728799][T19802] EXT4-fs: Ignoring removed i_version option [ 534.737101][T19802] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.0.5346: corrupted xattr block 95: invalid header [ 534.751576][T19802] EXT4-fs (loop0): Remounting filesystem read-only [ 534.758235][T19802] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 534.768863][T19802] EXT4-fs (loop0): 1 orphan inode deleted [ 534.775250][T19802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.799758][T19802] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 534.807666][T19807] IPv6: Can't replace route, no match found [ 534.816394][T19802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.844605][T19802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5346'. [ 535.064139][T19838] geneve0: entered allmulticast mode [ 535.074830][T19839] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 535.086709][T19838] netlink: 3 bytes leftover after parsing attributes in process `syz.7.5360'. [ 535.108868][T19838] 0ªX¹¦À: renamed from caif0 [ 535.116639][T19838] 0ªX¹¦À: entered allmulticast mode [ 535.122256][T19838] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 535.137030][T19843] loop0: detected capacity change from 0 to 512 [ 535.162797][T19844] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5364'. [ 535.164204][T19843] EXT4-fs: Ignoring removed mblk_io_submit option [ 535.172205][T19844] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5364'. [ 535.196587][T19843] journal_path: Lookup failure for './file0/file0' [ 535.203538][T19843] EXT4-fs: error: could not find journal device path [ 535.204625][T19844] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5364'. [ 535.234776][T19848] loop2: detected capacity change from 0 to 512 [ 535.249240][T19844] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5364'. [ 535.257668][T19850] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5365'. [ 535.258421][T19844] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5364'. [ 535.270931][T19855] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5365'. [ 535.286794][T19848] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 0 [ 535.436566][T19872] IPv6: Can't replace route, no match found [ 535.531523][T19880] xt_hashlimit: max too large, truncated to 1048576 [ 535.595580][T19880] netlink: 'syz.5.5376': attribute type 21 has an invalid length. [ 535.761236][T19897] IPv6: Can't replace route, no match found [ 535.797400][T19899] futex_wake_op: syz.1.5384 tries to shift op by -1; fix this program [ 535.842837][T19901] bridge0: entered promiscuous mode [ 535.855133][T19901] macvlan2: entered promiscuous mode [ 535.876132][T19901] bridge0: port 3(macvlan2) entered blocking state [ 535.883400][T19901] bridge0: port 3(macvlan2) entered disabled state [ 535.917873][T19901] macvlan2: entered allmulticast mode [ 535.923549][T19901] bridge0: entered allmulticast mode [ 535.957255][T19901] macvlan2: left allmulticast mode [ 535.962413][T19901] bridge0: left allmulticast mode [ 535.977855][T19901] bridge0: left promiscuous mode [ 535.995075][T19899] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.012830][T19906] ip6gre1: entered allmulticast mode [ 536.140387][T19899] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.217031][T19899] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.280780][T19899] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.344037][T19899] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.365432][T19899] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.388234][T19899] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.474225][T19899] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.664278][ T29] kauditd_printk_skb: 7956 callbacks suppressed [ 536.664296][ T29] audit: type=1326 audit(513.795:27076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19913 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec95a5d29 code=0x7ffc0000 [ 536.694982][ T29] audit: type=1326 audit(513.795:27077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19913 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec95a5d29 code=0x7ffc0000 [ 536.718882][ T29] audit: type=1326 audit(513.795:27078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19913 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7ec95a5d29 code=0x7ffc0000 [ 536.742510][ T29] audit: type=1326 audit(513.795:27079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19913 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec95a5d29 code=0x7ffc0000 [ 536.766514][ T29] audit: type=1326 audit(513.795:27080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19913 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ec95a5d29 code=0x7ffc0000 [ 536.790280][ T29] audit: type=1326 audit(513.795:27081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19913 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec95a5d29 code=0x7ffc0000 [ 536.860363][ T29] audit: type=1326 audit(513.973:27082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19916 comm="syz.5.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b79e5d29 code=0x7ffc0000 [ 536.904089][ T29] audit: type=1326 audit(514.001:27083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19916 comm="syz.5.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fa2b79e5d29 code=0x7ffc0000 [ 536.927885][ T29] audit: type=1326 audit(514.001:27084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19916 comm="syz.5.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b79e5d29 code=0x7ffc0000 [ 537.024029][ T29] audit: type=1326 audit(514.123:27085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19913 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7ec95a5d29 code=0x7ffc0000 [ 537.062833][T19914] loop0: detected capacity change from 0 to 2048 [ 537.098104][T19921] random: crng reseeded on system resumption [ 537.167733][T19914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.193554][T19932] loop5: detected capacity change from 0 to 512 [ 537.201188][T19932] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 537.213131][T19934] IPv6: Can't replace route, no match found [ 537.229726][T19932] EXT4-fs (loop5): 1 truncate cleaned up [ 537.236198][T19932] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.361855][T19951] loop7: detected capacity change from 0 to 1024 [ 537.377183][T19951] EXT4-fs: Ignoring removed mblk_io_submit option [ 537.400779][T11739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.428140][T19957] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.454799][T19951] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.541872][T17738] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.557727][T19965] 9pnet_fd: Insufficient options for proto=fd [ 537.803173][T19983] futex_wake_op: syz.0.5406 tries to shift op by -1; fix this program [ 537.858356][T19957] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.884071][T19986] IPv6: Can't replace route, no match found [ 537.902254][T19990] IPv6: Can't replace route, no match found [ 537.938079][T19957] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.022505][T19957] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.109195][T19957] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.120716][T19957] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.132777][T19957] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.148197][T19957] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.255036][T20039] loop0: detected capacity change from 0 to 128 [ 538.522054][T20070] 9pnet_fd: Insufficient options for proto=fd [ 538.587451][T17263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.643352][T20085] loop0: detected capacity change from 0 to 512 [ 538.671073][T20085] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 538.684606][T20074] loop7: detected capacity change from 0 to 128 [ 538.742327][T20085] EXT4-fs (loop0): 1 truncate cleaned up [ 538.750662][T20085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.868394][T20096] loop2: detected capacity change from 0 to 512 [ 538.930476][T20096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.987437][T20098] bridge0: port 1(bond0) entered blocking state [ 538.994006][T20098] bridge0: port 1(bond0) entered disabled state [ 539.017732][T20098] bond0: entered allmulticast mode [ 539.028183][T20098] bond0: entered promiscuous mode [ 539.059366][T20098] loop5: detected capacity change from 0 to 1024 [ 539.096962][T20098] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 539.119649][T20098] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 539.127788][T20098] EXT4-fs (loop5): orphan cleanup on readonly fs [ 539.135965][T20098] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 539.145928][T20098] EXT4-fs (loop5): Remounting filesystem read-only [ 539.153972][T20098] EXT4-fs (loop5): 1 orphan inode deleted [ 539.164019][T20098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 539.178408][T20098] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 539.185546][T20098] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.222214][T20098] loop5: detected capacity change from 0 to 1764 [ 539.270769][T20115] loop5: detected capacity change from 0 to 1024 [ 539.277941][T20115] EXT4-fs: Ignoring removed nobh option [ 539.283903][T20115] EXT4-fs: Ignoring removed oldalloc option [ 539.318829][T20115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.321373][T20120] loop7: detected capacity change from 0 to 1024 [ 539.351770][T20120] EXT4-fs: Ignoring removed nobh option [ 539.357480][T20120] EXT4-fs: Ignoring removed i_version option [ 539.363589][T20120] EXT4-fs: inline encryption not supported [ 539.364429][T17263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.370988][T20120] ext4: Unknown parameter 'subj_type' [ 539.423850][T20123] loop1: detected capacity change from 0 to 512 [ 539.438794][T20123] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 539.452822][T20120] Process accounting resumed [ 539.461297][T20123] EXT4-fs (loop1): 1 truncate cleaned up [ 539.468122][T20123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.586591][T16919] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: comm syz-executor: invalid size [ 539.607308][T20131] lo speed is unknown, defaulting to 1000 [ 539.625412][T16919] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: comm syz-executor: invalid size [ 539.654874][T16919] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: comm syz-executor: invalid size [ 539.692238][T16919] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: comm syz-executor: invalid size [ 539.703689][T11739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.718924][T16919] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: comm syz-executor: invalid size [ 539.746516][T16919] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: comm syz-executor: invalid size [ 539.765535][T20144] loop0: detected capacity change from 0 to 128 [ 539.768631][T16919] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: comm syz-executor: invalid size [ 539.793929][T16919] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: comm syz-executor: invalid size [ 539.812608][T16919] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: comm syz-executor: invalid size [ 539.833986][T16919] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: comm syz-executor: invalid size [ 540.055361][T20091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.349614][T20151] ref_ctr_offset mismatch. inode: 0x2e7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 540.919908][T20157] __nla_validate_parse: 7 callbacks suppressed [ 540.919927][T20157] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5442'. [ 540.938193][T20155] loop0: detected capacity change from 0 to 512 [ 540.944944][T20155] EXT4-fs: Ignoring removed orlov option [ 540.963351][T20155] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 540.973328][T20155] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 541.006094][T20155] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 541.017835][T20157] bond1: entered promiscuous mode [ 541.023217][T20157] bond1: entered allmulticast mode [ 541.029034][T20157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 541.055148][T17220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.119394][T20165] loop1: detected capacity change from 0 to 128 [ 541.440335][T20193] rdma_op ffff8881791ab180 conn xmit_rdma 0000000000000000 [ 541.549167][T20196] loop7: detected capacity change from 0 to 1024 [ 541.556189][T20196] EXT4-fs: Ignoring removed orlov option [ 541.625826][T20196] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.667335][T17738] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.681985][T20206] IPv6: Can't replace route, no match found [ 541.772520][T20216] loop0: detected capacity change from 0 to 1024 [ 541.780139][T20216] EXT4-fs: Ignoring removed mblk_io_submit option [ 541.854328][T20216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.909780][T11739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.078633][T20234] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5471'. [ 542.088024][T20240] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 542.098346][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 542.098369][ T29] audit: type=1326 audit(518.884:27325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20227 comm="syz.1.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4398835d29 code=0x7ffc0000 [ 542.129690][ T29] audit: type=1326 audit(518.912:27326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20227 comm="syz.1.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4398835d29 code=0x7ffc0000 [ 542.152749][ T29] audit: type=1326 audit(518.912:27327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20227 comm="syz.1.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4398835d29 code=0x7ffc0000 [ 542.176100][ T29] audit: type=1326 audit(518.912:27328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20227 comm="syz.1.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4398835d29 code=0x7ffc0000 [ 542.176888][T20228] nfs4: Bad value for 'source' [ 542.199213][ T29] audit: type=1326 audit(518.912:27329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20227 comm="syz.1.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4398835d29 code=0x7ffc0000 [ 542.199305][ T29] audit: type=1326 audit(518.931:27330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20227 comm="syz.1.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4398835d29 code=0x7ffc0000 [ 542.199371][ T29] audit: type=1326 audit(518.931:27331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20227 comm="syz.1.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4398835d29 code=0x7ffc0000 [ 542.199403][ T29] audit: type=1326 audit(518.931:27332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20227 comm="syz.1.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4398835d29 code=0x7ffc0000 [ 542.199463][ T29] audit: type=1326 audit(518.931:27333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20227 comm="syz.1.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4398835d29 code=0x7ffc0000 [ 542.199551][ T29] audit: type=1326 audit(518.931:27334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20227 comm="syz.1.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4398835d29 code=0x7ffc0000 [ 542.357618][T20248] loop5: detected capacity change from 0 to 128 [ 542.377979][T20248] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 542.410644][T20248] EXT4-fs (loop5): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. Quota mode: none. [ 542.821646][T20278] IPv6: Can't replace route, no match found [ 542.922843][T20280] loop1: detected capacity change from 0 to 4096 [ 542.946097][T20280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.095861][T20283] 9pnet_fd: Insufficient options for proto=fd [ 543.137155][T17263] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 543.219981][T20293] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5490'. [ 543.234404][T17220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.268553][T20295] loop1: detected capacity change from 0 to 512 [ 543.275819][T20295] EXT4-fs: Ignoring removed mblk_io_submit option [ 543.283268][T20295] journal_path: Lookup failure for './file0/file0' [ 543.290076][T20295] EXT4-fs: error: could not find journal device path [ 543.325618][T20296] FAULT_INJECTION: forcing a failure. [ 543.325618][T20296] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 543.338985][T20296] CPU: 1 UID: 0 PID: 20296 Comm: syz.7.5489 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 543.349784][T20296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 543.359872][T20296] Call Trace: [ 543.363281][T20296] [ 543.366226][T20296] dump_stack_lvl+0xf2/0x150 [ 543.370892][T20296] dump_stack+0x15/0x1a [ 543.375115][T20296] should_fail_ex+0x223/0x230 [ 543.379818][T20296] should_fail_alloc_page+0xfd/0x110 [ 543.385364][T20296] __alloc_pages_noprof+0x109/0x340 [ 543.390660][T20296] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 543.396061][T20296] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 543.401500][T20296] handle_mm_fault+0xdd7/0x2ac0 [ 543.406390][T20296] exc_page_fault+0x3b9/0x650 [ 543.411154][T20296] asm_exc_page_fault+0x26/0x30 [ 543.416132][T20296] RIP: 0033:0x7f50d236335b [ 543.420607][T20296] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 543.440226][T20296] RSP: 002b:00007f50d0a03e10 EFLAGS: 00010246 [ 543.446307][T20296] RAX: 00007f50d0a05f30 RBX: 00007f50d257b620 RCX: 0000000000000000 [ 543.454287][T20296] RDX: 00007f50d0a05f78 RSI: 00007f50d2415bd8 RDI: 00007f50d0a03e30 [ 543.462269][T20296] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 543.470245][T20296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.478236][T20296] R13: 0000000000000001 R14: 00007f50d25a6080 R15: 00007fff4f6e7d78 [ 543.486256][T20296] [ 543.489351][T20296] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 543.551580][T20301] loop5: detected capacity change from 0 to 1024 [ 543.570527][T20301] EXT4-fs: Ignoring removed mblk_io_submit option [ 543.613342][T20301] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.627420][T20305] IPv6: Can't replace route, no match found [ 543.657070][T20311] loop7: detected capacity change from 0 to 512 [ 543.685021][T20311] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 543.700238][ T35] kernel write not supported for file /1402/attr/keycreate (pid: 35 comm: kworker/1:1) [ 543.728835][T20311] EXT4-fs (loop7): 1 truncate cleaned up [ 543.739894][T17263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.758635][T20311] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.907696][T20332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 544.051027][T20311] ================================================================== [ 544.059160][T20311] BUG: KCSAN: data-race in __delete_from_swap_cache / folio_mapping [ 544.067172][T20311] [ 544.069532][T20311] write to 0xffffea0004a355a8 of 8 bytes by task 17652 on cpu 1: [ 544.077271][T20311] __delete_from_swap_cache+0x1f0/0x290 [ 544.082842][T20311] delete_from_swap_cache+0x72/0xe0 [ 544.088094][T20311] shmem_swapin_folio+0xb0a/0xbe0 [ 544.093158][T20311] shmem_get_folio_gfp+0x26e/0xd90 [ 544.098271][T20311] shmem_write_begin+0xa2/0x180 [ 544.103128][T20311] generic_perform_write+0x1a8/0x4a0 [ 544.108425][T20311] shmem_file_write_iter+0xc2/0xe0 [ 544.113543][T20311] do_iter_readv_writev+0x394/0x450 [ 544.118754][T20311] vfs_iter_write+0x265/0x5d0 [ 544.123450][T20311] loop_process_work+0xae1/0x1230 [ 544.128473][T20311] loop_rootcg_workfn+0x22/0x30 [ 544.133327][T20311] process_scheduled_works+0x483/0x9a0 [ 544.138836][T20311] worker_thread+0x51d/0x6f0 [ 544.143434][T20311] kthread+0x1d1/0x210 [ 544.147511][T20311] ret_from_fork+0x4b/0x60 [ 544.151953][T20311] ret_from_fork_asm+0x1a/0x30 [ 544.156719][T20311] [ 544.159063][T20311] read to 0xffffea0004a355a8 of 8 bytes by task 20311 on cpu 0: [ 544.166691][T20311] folio_mapping+0xdb/0x120 [ 544.171206][T20311] evict_folios+0x2479/0x3240 [ 544.175916][T20311] try_to_shrink_lruvec+0x5d2/0x750 [ 544.181143][T20311] shrink_lruvec+0x22d/0x1840 [ 544.185833][T20311] shrink_node+0x603/0x1d80 [ 544.190343][T20311] do_try_to_free_pages+0x3c6/0xc50 [ 544.195567][T20311] try_to_free_mem_cgroup_pages+0x1e3/0x490 [ 544.201639][T20311] try_charge_memcg+0x2bc/0x7f0 [ 544.206489][T20311] obj_cgroup_charge_pages+0xbd/0x1a0 [ 544.211894][T20311] __memcg_kmem_charge_page+0x9d/0x170 [ 544.217365][T20311] __alloc_pages_noprof+0x1bc/0x340 [ 544.222583][T20311] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 544.227960][T20311] alloc_pages_noprof+0xe1/0x100 [ 544.232898][T20311] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 544.238731][T20311] __kvmalloc_node_noprof+0x121/0x170 [ 544.244116][T20311] ip_set_alloc+0x1f/0x30 [ 544.248460][T20311] hash_netiface_create+0x273/0x730 [ 544.253688][T20311] ip_set_create+0x359/0x8a0 [ 544.258305][T20311] nfnetlink_rcv_msg+0x4a9/0x570 [ 544.263262][T20311] netlink_rcv_skb+0x12c/0x230 [ 544.268031][T20311] nfnetlink_rcv+0x16c/0x15d0 [ 544.272718][T20311] netlink_unicast+0x599/0x670 [ 544.277484][T20311] netlink_sendmsg+0x5cc/0x6e0 [ 544.282264][T20311] __sock_sendmsg+0x140/0x180 [ 544.286959][T20311] ____sys_sendmsg+0x312/0x410 [ 544.291723][T20311] __sys_sendmsg+0x19d/0x230 [ 544.296317][T20311] __x64_sys_sendmsg+0x46/0x50 [ 544.301085][T20311] x64_sys_call+0x2734/0x2dc0 [ 544.305795][T20311] do_syscall_64+0xc9/0x1c0 [ 544.310297][T20311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.316206][T20311] [ 544.318522][T20311] value changed: 0x000000000000045b -> 0x0000000000000000 [ 544.325627][T20311] [ 544.327956][T20311] Reported by Kernel Concurrency Sanitizer on: [ 544.334096][T20311] CPU: 0 UID: 0 PID: 20311 Comm: syz.7.5496 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 544.344871][T20311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 544.354944][T20311] ================================================================== [ 544.672850][T17738] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.