last executing test programs: 5m35.828197451s ago: executing program 1 (id=123): prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='kfree\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xa04, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5m35.795387962s ago: executing program 1 (id=124): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xfffffffc, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x1000003, 0x0, 0x4, 0x722}, 0x10) write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0100000007000000060000000c00000000000000", @ANYRES32, @ANYBLOB="009100000000000000800000fffffff600000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r13, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000305000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000200000000001c0012800b0001006d616373656300000c000280050003000d"], 0x3c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r7}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r8, 0x0, 0x8000000000000}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r16], 0x20}}, 0x10) 5m35.571225845s ago: executing program 1 (id=129): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000040)=r0) close(r3) 5m35.416437186s ago: executing program 1 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0203ffff0a000000fdffffffffdbdf2503000600002000000200000064e10100000000000000000002000100000000000700fb0300000000030005000000000002000000"], 0x50}, 0x1, 0x7}, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113b00000000008510000002000000850000000a00000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r7}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x1}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x10000}, 0x18) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) 5m35.345063507s ago: executing program 1 (id=140): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x4) sendto$inet(r2, &(0x7f0000001240)="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", 0xffffffffffffff95, 0x8040841, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m35.14160036s ago: executing program 1 (id=149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000180)='workqueue_activate_work\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x40000041, 0x2}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x841, 0x2}, 0x10) (async) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name, 0x10, 0x0}, 0x40) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 5m35.073596501s ago: executing program 32 (id=149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000180)='workqueue_activate_work\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x40000041, 0x2}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x841, 0x2}, 0x10) (async) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name, 0x10, 0x0}, 0x40) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 5m23.511804256s ago: executing program 2 (id=359): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xfffffffc, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x1000003, 0x0, 0x4, 0x722}, 0x10) write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd0000", 0x23) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0100000007000000060000000c00000000000000", @ANYRES32, @ANYBLOB="009100000000000000800000fffffff600000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r13, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000305000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000200000000001c0012800b0001006d616373656300000c000280050003000d"], 0x3c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r7}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r8, 0x0, 0x8000000000000}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r16], 0x20}}, 0x10) 5m23.1759441s ago: executing program 2 (id=365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x0, 0x202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x288a44}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r1], 0x74}, 0x1, 0x0, 0x0, 0x4008410}, 0x44800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000080)='./file1\x00', 0x42000773) ftruncate(r4, 0x6000000) copy_file_range(r4, 0x0, r4, &(0x7f00000004c0)=0x100, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000070000000300000001000085220b0600050000000120000000000000003030612e2e"], 0x0, 0x37, 0x0, 0x8, 0xffffffff, 0x0, @void, @value}, 0x28) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setfsuid(0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) close(r1) 5m23.056459512s ago: executing program 2 (id=368): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendto$inet(r2, &(0x7f0000001240)="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", 0xffffffffffffff95, 0x8040841, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m22.986752702s ago: executing program 2 (id=372): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000090, &(0x7f0000000000), 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) io_setup(0x8, &(0x7f0000004200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)={0x34d}) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 5m22.168239083s ago: executing program 2 (id=386): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") r0 = open(&(0x7f00000002c0)='./file2\x00', 0x189242, 0x0) fallocate(r0, 0x10, 0x2, 0x7000000) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (fail_nth: 6) 5m21.378414663s ago: executing program 2 (id=405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x0, 0x202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x288a44}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r1], 0x74}, 0x1, 0x0, 0x0, 0x4008410}, 0x44800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000080)='./file1\x00', 0x42000773) ftruncate(r4, 0x6000000) copy_file_range(r4, 0x0, r4, &(0x7f00000004c0)=0x100, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000070000000300000001000085220b0600050000000120000000000000003030612e2e"], 0x0, 0x37, 0x0, 0x8, 0xffffffff, 0x0, @void, @value}, 0x28) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setresuid(0xee01, 0x0, 0xffffffffffffffff) setfsuid(0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) close(r1) 5m21.323005384s ago: executing program 33 (id=405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x0, 0x202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x288a44}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r1], 0x74}, 0x1, 0x0, 0x0, 0x4008410}, 0x44800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000080)='./file1\x00', 0x42000773) ftruncate(r4, 0x6000000) copy_file_range(r4, 0x0, r4, &(0x7f00000004c0)=0x100, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000070000000300000001000085220b0600050000000120000000000000003030612e2e"], 0x0, 0x37, 0x0, 0x8, 0xffffffff, 0x0, @void, @value}, 0x28) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setresuid(0xee01, 0x0, 0xffffffffffffffff) setfsuid(0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) close(r1) 4m26.883959466s ago: executing program 4 (id=1137): r0 = socket(0x10, 0x80002, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = io_uring_setup(0x614e, &(0x7f0000000000)={0x0, 0x403d, 0x0, 0x0, 0x224}) io_uring_register$IORING_REGISTER_PBUF_STATUS(r4, 0x1a, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000200)=r6}, 0x20) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r7, &(0x7f0000000440), 0x0, 0x0) 4m26.788629828s ago: executing program 4 (id=1140): socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x280d, &(0x7f0000001280)={0x0, 0x160, 0x800, 0xfffffffc}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)=""/4094, 0xffe}], 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 4m26.173948626s ago: executing program 4 (id=1148): socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x280d, &(0x7f0000001280)={0x0, 0x160, 0x800, 0xfffffffc}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)=""/4094, 0xffe}], 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x13, r4, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000000340)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x80000}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 4m25.79421544s ago: executing program 4 (id=1153): r0 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='yra\\s=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c774003380b3d652a6333bec124d59721ffa74b3352de43c86a406c98bbf6c279f042b1b679075e04b560c5b97f514cea5c9b06b8a4419a449166f031f0522175dee578982812c2a8e376ba77815d262391d6c9c3564d5130377288a48902105e9f4edb5a48c8aa44", @ANYRESHEX, @ANYBLOB=',\x00']) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d40)={&(0x7f0000000d80)='rss_stat\x00', r4}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000140)={0x1, 0x0, 0xb7400000000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4m24.719089714s ago: executing program 4 (id=1160): socket(0x2, 0x80805, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000008, 0x30, r0, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000006000000181100005def57c71245968f6ecb6b6138fb7091919188c5d6510cb7b96c4bbd17b0145a7c5f39dcda373caf58b9435e5e3045b1ed1ba5dc8d3b4721004d9076e85881866f2335b94f57f222635cf795e2f9130b3da9f37d1cdd4f8faafc536d5ad392dc3e9253edcdfef20922558387be5bab92d739bee0ac1ece5d0b0dcd29da94796352390c4e6924c2c333fbb4809f6aa591d5e111f13d7a4cd0c9e41d359a212cace1f91d6b55dbd9a429c0b8f88e169f699f33bb59fc4d4438b84600000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$evdev(0x0, 0x3, 0x2000) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$RTC_AIE_OFF(r0, 0x7002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xa1, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 4m24.528046636s ago: executing program 34 (id=1160): socket(0x2, 0x80805, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000008, 0x30, r0, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000006000000181100005def57c71245968f6ecb6b6138fb7091919188c5d6510cb7b96c4bbd17b0145a7c5f39dcda373caf58b9435e5e3045b1ed1ba5dc8d3b4721004d9076e85881866f2335b94f57f222635cf795e2f9130b3da9f37d1cdd4f8faafc536d5ad392dc3e9253edcdfef20922558387be5bab92d739bee0ac1ece5d0b0dcd29da94796352390c4e6924c2c333fbb4809f6aa591d5e111f13d7a4cd0c9e41d359a212cace1f91d6b55dbd9a429c0b8f88e169f699f33bb59fc4d4438b84600000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$evdev(0x0, 0x3, 0x2000) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$RTC_AIE_OFF(r0, 0x7002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xa1, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3m18.474275305s ago: executing program 6 (id=1391): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x1, 0x1}, 0xc) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) fcntl$setstatus(r2, 0x4, 0x7c00) dup3(r3, r2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 3m18.263250048s ago: executing program 6 (id=1392): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='yra\\s=fd,rfd', @ANYRESHEX, @ANYBLOB="2c774003380b3d652a6333bec124d59721ffa74b3352de43c86a406c98bbf6c279f042b1b679075e04b560c5b97f514cea5c9b06b8a4419a449166f031f0522175dee578982812c2a8e376ba77815d262391d6c9c3564d5130377288a48902105e9f4edb5a48c8aa44b8275a4edb9dcecca4505e3faf8c", @ANYRESHEX, @ANYBLOB=',\x00']) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d40)={&(0x7f0000000d80)='rss_stat\x00', r4}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000140)={0x1, 0x0, 0xb7400000000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3m17.707793415s ago: executing program 6 (id=1397): r0 = syz_mount_image$ext4(&(0x7f0000002000)='ext4\x00', &(0x7f0000000740)='./bus\x00', 0x0, &(0x7f0000000800)={[{@resgid}, {@debug}], [{@uid_lt}, {@uid_eq}, {@uid_gt}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, '/'}}]}, 0x1, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x3, 0x3, 0x5, @mcast2, @remote, 0x20, 0x20, 0x6, 0x40}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x38, '\x00', r2, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc07, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x300, 0x1, 0x7, 0x1f, 0x100, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x4a, &(0x7f0000000040)=0xffffffff, 0x4) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000001ac0)={0x0, 0x600, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01dfffffff9a2600000021"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x130, r10, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40844}, 0x8000) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x120002}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf2501000000140002007767320000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843"], 0x4c}, 0x1, 0x0, 0x0, 0x20040844}, 0x20000000) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 3m17.602643856s ago: executing program 6 (id=1399): syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x1, 0x368, &(0x7f0000000180)="$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") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) io_setup(0x2, 0x0) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r3 = io_uring_setup(0x797f, &(0x7f00000000c0)={0x0, 0x2cbe, 0x4, 0x0, 0x56}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x0, 0x0) io_pgetevents(r5, 0x81, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040), &(0x7f0000000600)={&(0x7f00000005c0)={[0x7]}, 0x8}) io_setup(0x4, &(0x7f0000000880)=0x0) io_submit(r6, 0x60, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, r4, &(0x7f0000000840)="a6", 0x1, 0x5}]) close_range(r3, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r7, 0x1a, &(0x7f00000007c0)={0x2a, 0x0, 0xffffffc0}) getdents(r2, &(0x7f0000000500)=""/173, 0xad) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 3m16.577651289s ago: executing program 6 (id=1413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0xffffffff, {{@in=@multicast2, @in6=@local, 0x4e21, 0x0, 0x3, 0x0, 0xa, 0x0, 0xa0}, {0x0, 0xe9}, {0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x200}, [@tmpl={0x144, 0x5, [{{@in=@loopback, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3504, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x7fff, 0xfff, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x27, 0x5, 0x3, 0x200}, {{@in6=@loopback, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3502, 0x3, 0x1, 0x7, 0x5, 0x3, 0x7}, {{@in6=@remote, 0x4d3, 0x3c}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1fc}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(0xffffffffffffffff, 0x1) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) socket$tipc(0x1e, 0x2, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="000229bd7000fedbdf250a000000050029000000000008003900030000000500300001000005002f00010000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) syz_io_uring_setup(0x10a, &(0x7f0000000340)={0x0, 0xfd69, 0x80, 0x7ffff, 0x2000088}, &(0x7f00000004c0), &(0x7f0000000200)) 3m16.176062124s ago: executing program 6 (id=1417): syz_read_part_table(0x105c, &(0x7f0000001080)="$eJzsz71Rw0AQBeCnQ0gioBUSOqAHEopBKZUQ0Ae9uAaPPeuR/NeB7eD7gpt7N+9mZ8N9tWxr8V+pLsmwHHPLW6bkJW0tffRTltynxlQyX77XuD91fp6/h7RNxjV9vXe7quuY1+TpePvtz29dPv9utSYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLJDAAAA//+4SRWs") 3m16.164116964s ago: executing program 35 (id=1417): syz_read_part_table(0x105c, &(0x7f0000001080)="$eJzsz71Rw0AQBeCnQ0gioBUSOqAHEopBKZUQ0Ae9uAaPPeuR/NeB7eD7gpt7N+9mZ8N9tWxr8V+pLsmwHHPLW6bkJW0tffRTltynxlQyX77XuD91fp6/h7RNxjV9vXe7quuY1+TpePvtz29dPv9utSYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLJDAAAA//+4SRWs") 2m10.23639599s ago: executing program 5 (id=2350): r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd}, 0x10}}, 0x0) 2m10.133737491s ago: executing program 5 (id=2354): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r2) 2m10.098729551s ago: executing program 5 (id=2356): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000410, &(0x7f0000000440)={[{@oldalloc}, {@delalloc}]}, 0x4, 0x513, &(0x7f0000000f40)="$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") perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c00024000"], 0x118}}, 0x0) 2m9.44447463s ago: executing program 5 (id=2359): syz_usb_connect(0x0, 0x3c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x1218088, &(0x7f0000000440)=ANY=[], 0xa, 0x2c7, &(0x7f0000000bc0)="$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") ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000000000006, 0x200000000000000, 0x0, 0x0, 0x5, 0x8, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000800000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c678082004bdbcef549ba19700e47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326713181c208220000000b9000000000000000000fffffffffff2ff00", [0x1, 0x1000]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x301001, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80600a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x201, 0x0, 0x2, 0x7}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000280)={0x18, 0x0, {0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'vlan1\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) close(0x4) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='thread_noise\x00', r3}, 0x18) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x400) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffd, 0xffffffff, 0x8, 0x40, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x4000000000000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x5, 0x9, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7, 0x10, 0x1, 0xd}}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team0\x00'}) 2m8.126480147s ago: executing program 5 (id=2374): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x1c, r4, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) dup2(r2, r3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@var={0x5, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2m7.707838192s ago: executing program 5 (id=2377): r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd}, 0x10}}, 0x0) 2m7.707629112s ago: executing program 36 (id=2377): r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd}, 0x10}}, 0x0) 6.216366533s ago: executing program 0 (id=4177): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r3}, 0x18) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 3.144635631s ago: executing program 8 (id=4209): socket(0x10, 0x80002, 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_setup(0x614e, &(0x7f0000000000)={0x0, 0x403d, 0x0, 0x0, 0x224}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 3.091806142s ago: executing program 3 (id=4212): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1100, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/152) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 3.074168512s ago: executing program 8 (id=4213): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x2d, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="61f87d0d62ebcb7d6a4f24bf5b30ed16907047a0fd78c0904eb46b3e3d3d240f63dfa48c6c96f41e986860f50294953c2978a4bea085edfe900033404e1b6c82d44510a2485342d4171c9b956fb201beac0b2ca1871333eda48519b85309a58b2b39cdb4c200b7c57112ba5c200558edc38051b359ef2101634dcfbb4e4b757346fb98b63efad69d814474fc89e99c02"], &(0x7f0000000380)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000580), 0x8, 0x10, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x3}, 0x10, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getegid() r1 = open(&(0x7f0000000080)='./file0\x00', 0x60840, 0x2) fcntl$setlease(r1, 0x400, 0x0) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x1}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x86, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080045f000ff00004e20006490780200000000000000020000003bce5a3801516524a9b2f4989e70f5053314610000293759bba284467d6e2d4a33f90c166a38c8add632356bbf5d5b5a4ccf86a6c16522fea26fec53ae8226795acac179ec8e25addbedb764d7d7a9005ff600"/136], 0x0) unshare(0x600) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0xc00000000000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x2}, 0x2, 0x0, 0x0, 0x9, 0x0, 0xc0bc, 0xfff8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYRES16=r4, @ANYRES16=r5], 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x18840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x1}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r6}, 0x38) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xeb9e, 0x400, 0x2, 0x3, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x2187, 0x20, 0xfffffffd, 0x28b}) getrlimit(0x1, &(0x7f0000000000)) 2.075568314s ago: executing program 0 (id=4216): mount$bind(0x0, 0x0, 0x0, 0x1a5099, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2.074761124s ago: executing program 8 (id=4218): socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8cff7cf90000696e7578"], 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x4007}}, '\x00'}) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0xada7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f9ffffffffffffff0000bdeb2bf9a09abfd41290d86982ff0000d2ae1ec8e101feb49a0000"], 0x50) 2.010042975s ago: executing program 0 (id=4219): mount$bind(0x0, 0x0, 0x0, 0x1a5099, 0x0) io_setup(0x9, &(0x7f0000000080)=0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0x2000000f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000001580)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x3f}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(r0, 0x1, &(0x7f0000000e40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmsg$inet(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x18}, 0x40090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0500020000000400000000007cfb9393e107b714e8f4ff78271bd00cbdd5f115680c1646773a4f6991214184", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r10}, &(0x7f0000000180), &(0x7f0000000280)=r7}, 0x20) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r3, r6, 0x1a, 0x0, @void}, 0x10) 1.883339407s ago: executing program 0 (id=4221): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1.809784028s ago: executing program 0 (id=4223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000008000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0, 0x0, 0x3e28000}, 0x55) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x40000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB], 0xfdef) 1.111623116s ago: executing program 8 (id=4225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 1.110202386s ago: executing program 0 (id=4226): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r3}, 0x18) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 1.109469046s ago: executing program 3 (id=4228): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@block_validity}, {@block_validity}, {@quota}]}, 0x1, 0x451, &(0x7f0000000300)="$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") syz_emit_ethernet(0x42, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@rr={0x7, 0x3, 0x7f}]}}, @redirect={0x8, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0) socket(0xa, 0x2400000001, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) getpgid(0x0) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f00000004c0)=@known='trusted.overlay.origin\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r1, 0xffffffffffffffff, 0x0) 1.086762127s ago: executing program 8 (id=4229): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82680027, r5}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) flistxattr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r11}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') sendfile(r1, r6, &(0x7f00000001c0)=0x4, 0xfffffffffffffff7) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r12 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r12, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) 787.68546ms ago: executing program 8 (id=4230): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) mq_open(&(0x7f0000001100)='u+^\x00', 0x40, 0x120, &(0x7f0000001140)={0x1, 0xf1, 0x8001, 0x7fff}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 761.324701ms ago: executing program 3 (id=4231): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 700.074491ms ago: executing program 3 (id=4233): socket(0x10, 0x80002, 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_setup(0x614e, &(0x7f0000000000)={0x0, 0x403d, 0x0, 0x0, 0x224}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, 0x0}}], 0x1, 0x0) 675.839092ms ago: executing program 7 (id=4235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000008000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0, 0x0, 0x3e28000}, 0x55) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x40000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB], 0xfdef) 649.468222ms ago: executing program 3 (id=4236): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000002640)='ns/uts\x00') fremovexattr(r0, &(0x7f0000002680)=@random={'os2.', 'rxrpc_rx_ack\x00'}) (fail_nth: 2) 648.819132ms ago: executing program 7 (id=4237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r2) socket$caif_stream(0x25, 0x1, 0x1) write$P9_RVERSION(r2, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x3, 0x8, '9P2000.u'}, 0x15) (fail_nth: 2) 570.287433ms ago: executing program 3 (id=4240): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82680027, r5}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) flistxattr(r9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r11}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') sendfile(r1, r6, &(0x7f00000001c0)=0x4, 0xfffffffffffffff7) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r12 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r12, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) 396.266505ms ago: executing program 7 (id=4242): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[], 0x48) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x10) 396.114615ms ago: executing program 7 (id=4243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 367.779705ms ago: executing program 7 (id=4244): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 341.854096ms ago: executing program 7 (id=4245): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) mq_open(&(0x7f0000001100)='u+^\x00', 0x40, 0x120, &(0x7f0000001140)={0x1, 0xf1, 0x8001, 0x7fff}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 147.629488ms ago: executing program 9 (id=4250): r0 = syz_io_uring_setup(0x1e05, &(0x7f0000000200)={0x0, 0x52c3, 0x11001}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x200000, 0x0, 0x20000000, 0x94}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000027010000f8ffffffb702000008000000b7030000000050b6850000002d00000095", @ANYBLOB="13653857863ec0a2bf8f062830dd8b0ed60ccf69"], &(0x7f0000000200)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x4}}}}}}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x800, 0x0}) io_uring_enter(r0, 0x6ed2, 0x8000dae5, 0x0, 0x0, 0x0) 87.61721ms ago: executing program 9 (id=4251): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xc7f}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a183fbff00000000000005000000080003"], 0x28}}, 0x0) 60.481019ms ago: executing program 9 (id=4252): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) 44.30217ms ago: executing program 9 (id=4253): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xc7f}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a183fbff00000000000005000000080003"], 0x28}}, 0x0) 16.71516ms ago: executing program 9 (id=4254): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 0s ago: executing program 9 (id=4255): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) kernel console output (not intermixed with test programs): B hub found [ 341.338072][T14405] hub 9-0:1.0: 8 ports detected [ 341.399565][T14411] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.535798][T12147] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 341.546745][T12147] CPU: 0 UID: 0 PID: 12147 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 341.546822][T12147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 341.546834][T12147] Call Trace: [ 341.546843][T12147] [ 341.546851][T12147] __dump_stack+0x1d/0x30 [ 341.546910][T12147] dump_stack_lvl+0xe8/0x140 [ 341.546935][T12147] dump_stack+0x15/0x1b [ 341.546956][T12147] dump_header+0x81/0x220 [ 341.547007][T12147] oom_kill_process+0x334/0x3f0 [ 341.547034][T12147] out_of_memory+0x979/0xb80 [ 341.547126][T12147] mem_cgroup_out_of_memory+0x13d/0x190 [ 341.547190][T12147] try_charge_memcg+0x5e2/0x870 [ 341.547297][T12147] charge_memcg+0x51/0xc0 [ 341.547326][T12147] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 341.547360][T12147] __read_swap_cache_async+0x1df/0x350 [ 341.547480][T12147] swap_cluster_readahead+0x277/0x3e0 [ 341.547590][T12147] swapin_readahead+0xde/0x6f0 [ 341.547619][T12147] ? __filemap_get_folio+0x49f/0x650 [ 341.547656][T12147] ? swap_cache_get_folio+0x77/0x200 [ 341.547686][T12147] do_swap_page+0x301/0x2460 [ 341.547721][T12147] ? _raw_spin_unlock+0x26/0x50 [ 341.547803][T12147] ? finish_task_switch+0xad/0x2b0 [ 341.547832][T12147] ? __pfx_default_wake_function+0x10/0x10 [ 341.547859][T12147] handle_mm_fault+0xb60/0x2ae0 [ 341.547959][T12147] ? mas_walk+0xf2/0x120 [ 341.547982][T12147] do_user_addr_fault+0x636/0x1090 [ 341.548041][T12147] ? switch_fpu_return+0xe/0x20 [ 341.548076][T12147] exc_page_fault+0x54/0xc0 [ 341.548151][T12147] asm_exc_page_fault+0x26/0x30 [ 341.548174][T12147] RIP: 0033:0x7f35cd2b11e5 [ 341.548199][T12147] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e 33 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 341.548224][T12147] RSP: 002b:00007ffe9a566d98 EFLAGS: 00010246 [ 341.548268][T12147] RAX: 0000000000000000 RBX: 000000000000015f RCX: 00007f35cd2b11e3 [ 341.548281][T12147] RDX: 00007ffe9a566db0 RSI: 0000000000000000 RDI: 0000000000000000 [ 341.548292][T12147] RBP: 00007ffe9a566e1c R08: 00000000161622b5 R09: 0000000000000000 [ 341.548304][T12147] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 341.548386][T12147] R13: 00000000000927c0 R14: 000000000005343b R15: 00007ffe9a566e70 [ 341.548406][T12147] [ 341.548412][T12147] memory: usage 307200kB, limit 307200kB, failcnt 1998 [ 341.780802][T12147] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 341.788768][T12147] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 341.796070][T12147] Memory cgroup stats for /syz3: [ 341.916482][T14411] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.096755][T14411] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.409726][T14411] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.569431][T12147] cache 0 [ 342.572418][T12147] rss 4096 [ 342.575457][T12147] shmem 0 [ 342.578485][T12147] mapped_file 0 [ 342.581997][T12147] dirty 0 [ 342.584943][T12147] writeback 4096 [ 342.588555][T12147] workingset_refault_anon 394 [ 342.593367][T12147] workingset_refault_file 1545 [ 342.598129][T12147] swap 196608 [ 342.601458][T12147] swapcached 4096 [ 342.605178][T12147] pgpgin 239523 [ 342.608644][T12147] pgpgout 239522 [ 342.612210][T12147] pgfault 377529 [ 342.615820][T12147] pgmajfault 272 [ 342.619398][T12147] inactive_anon 4096 [ 342.623330][T12147] active_anon 0 [ 342.626784][T12147] inactive_file 0 [ 342.630462][T12147] active_file 0 [ 342.633920][T12147] unevictable 0 [ 342.637431][T12147] hierarchical_memory_limit 314572800 [ 342.642867][T12147] hierarchical_memsw_limit 9223372036854771712 [ 342.649176][T12147] total_cache 0 [ 342.652633][T12147] total_rss 4096 [ 342.656178][T12147] total_shmem 0 [ 342.659654][T12147] total_mapped_file 0 [ 342.663640][T12147] total_dirty 0 [ 342.667097][T12147] total_writeback 4096 [ 342.671192][T12147] total_workingset_refault_anon 394 [ 342.676411][T12147] total_workingset_refault_file 1545 [ 342.681731][T12147] total_swap 196608 [ 342.685543][T12147] total_swapcached 4096 [ 342.689793][T12147] total_pgpgin 239523 [ 342.693789][T12147] total_pgpgout 239522 [ 342.697857][T12147] total_pgfault 377529 [ 342.702119][T12147] total_pgmajfault 272 [ 342.706211][T12147] total_inactive_anon 4096 [ 342.710666][T12147] total_active_anon 0 [ 342.714652][T12147] total_inactive_file 0 [ 342.718862][T12147] total_active_file 0 [ 342.722875][T12147] total_unevictable 0 [ 342.726920][T12147] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3707,pid=14382,uid=0 [ 342.741785][T12147] Memory cgroup out of memory: Killed process 14382 (syz.3.3707) total-vm:93748kB, anon-rss:936kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 342.825537][T14411] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.842427][T14411] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.890409][T14411] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.922548][T14411] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.365913][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 343.365930][ T29] audit: type=1326 audit(2000000294.980:11357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14433 comm="syz.3.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35cd27e969 code=0x7ffc0000 [ 343.395897][ T29] audit: type=1326 audit(2000000294.980:11358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14433 comm="syz.3.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35cd27e969 code=0x7ffc0000 [ 343.419471][ T29] audit: type=1326 audit(2000000294.980:11359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14433 comm="syz.3.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f35cd27e969 code=0x7ffc0000 [ 343.443196][ T29] audit: type=1326 audit(2000000294.980:11360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14433 comm="syz.3.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35cd27e969 code=0x7ffc0000 [ 343.454051][T14434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3728'. [ 343.475842][ T29] audit: type=1326 audit(2000000295.040:11361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14433 comm="syz.3.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35cd27e969 code=0x7ffc0000 [ 343.499581][ T29] audit: type=1326 audit(2000000295.070:11362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14433 comm="syz.3.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f35cd27e969 code=0x7ffc0000 [ 343.523291][ T29] audit: type=1326 audit(2000000295.070:11363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14433 comm="syz.3.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35cd27e969 code=0x7ffc0000 [ 343.547144][ T29] audit: type=1326 audit(2000000295.070:11364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14433 comm="syz.3.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f35cd27e969 code=0x7ffc0000 [ 343.570773][ T29] audit: type=1326 audit(2000000295.070:11365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14433 comm="syz.3.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35cd27e969 code=0x7ffc0000 [ 343.594419][ T29] audit: type=1326 audit(2000000295.070:11366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14433 comm="syz.3.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35cd27e969 code=0x7ffc0000 [ 343.666542][T14448] loop7: detected capacity change from 0 to 512 [ 343.674336][T14448] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 343.687784][T14448] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.3733: invalid indirect mapped block 4294967295 (level 0) [ 343.708327][T14443] loop9: detected capacity change from 0 to 1024 [ 343.715552][T14443] EXT4-fs: Ignoring removed nomblk_io_submit option [ 343.722638][T14443] ext4: Unknown parameter 'smackfshat' [ 343.731544][T14448] EXT4-fs (loop7): Remounting filesystem read-only [ 343.738268][T14448] EXT4-fs (loop7): 1 orphan inode deleted [ 343.744113][T14448] EXT4-fs (loop7): 1 truncate cleaned up [ 343.750347][T14448] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.825025][ T7184] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.882202][T14463] loop9: detected capacity change from 0 to 273 [ 343.927875][T14463] FAT-fs (loop9): Directory bread(block 68) failed [ 343.934812][T14463] FAT-fs (loop9): Directory bread(block 69) failed [ 343.947302][T14463] FAT-fs (loop9): Directory bread(block 70) failed [ 343.954998][T14463] FAT-fs (loop9): Directory bread(block 71) failed [ 343.966418][T14355] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.981471][T14355] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.989976][T14463] FAT-fs (loop9): Directory bread(block 72) failed [ 343.996514][T14463] FAT-fs (loop9): Directory bread(block 73) failed [ 344.006398][T14355] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.011168][T14463] FAT-fs (loop9): Directory bread(block 74) failed [ 344.018614][T14355] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.031682][T14463] FAT-fs (loop9): Directory bread(block 75) failed [ 344.042920][T14463] FAT-fs (loop9): Directory bread(block 76) failed [ 344.050963][T14463] FAT-fs (loop9): Directory bread(block 77) failed [ 344.093355][T14487] IPv6: NLM_F_CREATE should be specified when creating new route [ 344.240538][T14494] loop8: detected capacity change from 0 to 128 [ 344.247231][T14494] EXT4-fs: test_dummy_encryption option not supported [ 344.271509][T14497] loop7: detected capacity change from 0 to 512 [ 344.279687][T14497] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 344.289746][T14497] EXT4-fs (loop7): orphan cleanup on readonly fs [ 344.296808][T14497] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.3752: Failed to acquire dquot type 1 [ 344.310523][T14497] EXT4-fs (loop7): 1 truncate cleaned up [ 344.320514][T14497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 344.748579][T14508] loop9: detected capacity change from 0 to 512 [ 344.828678][T14508] EXT4-fs (loop9): orphan cleanup on readonly fs [ 345.010758][T14508] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.3757: bad orphan inode 13 [ 345.031453][T14511] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.052411][T14508] ext4_test_bit(bit=12, block=18) = 1 [ 345.057856][T14508] is_bad_inode(inode)=0 [ 345.062059][T14508] NEXT_ORPHAN(inode)=2130706432 [ 345.066939][T14508] max_ino=32 [ 345.070186][T14508] i_nlink=1 [ 345.096806][T14508] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 345.160687][T14511] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.199741][T10880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.240420][T14511] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.262105][T14526] loop8: detected capacity change from 0 to 512 [ 345.276681][T14526] EXT4-fs warning (device loop8): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 345.288293][T14526] EXT4-fs warning (device loop8): dx_probe:851: Enable large directory feature to access it [ 345.298485][T14526] EXT4-fs warning (device loop8): dx_probe:936: inode #2: comm syz.8.3766: Corrupt directory, running e2fsck is recommended [ 345.318241][T14529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.326892][T14529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.429930][T14526] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 345.438311][T14526] EXT4-fs error (device loop8): ext4_iget_extra_inode:4693: inode #15: comm syz.8.3766: corrupted in-inode xattr: invalid ea_ino [ 345.454048][T14511] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.465280][T14526] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3766: couldn't read orphan inode 15 (err -117) [ 345.803445][T14526] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.920671][T14534] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 345.931276][T14534] SELinux: failed to load policy [ 345.942699][T14526] EXT4-fs warning (device loop8): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 345.954343][T14526] EXT4-fs warning (device loop8): dx_probe:851: Enable large directory feature to access it [ 345.964450][T14526] EXT4-fs warning (device loop8): dx_probe:936: inode #2: comm syz.8.3766: Corrupt directory, running e2fsck is recommended [ 345.985955][T14526] EXT4-fs warning (device loop8): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 345.997503][T14526] EXT4-fs warning (device loop8): dx_probe:851: Enable large directory feature to access it [ 346.007652][T14526] EXT4-fs warning (device loop8): dx_probe:936: inode #2: comm syz.8.3766: Corrupt directory, running e2fsck is recommended [ 346.029481][T14511] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.041274][T14511] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.050526][T14534] EXT4-fs warning (device loop8): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 346.062126][T14534] EXT4-fs warning (device loop8): dx_probe:851: Enable large directory feature to access it [ 346.072315][T14534] EXT4-fs warning (device loop8): dx_probe:936: inode #2: comm syz.8.3766: Corrupt directory, running e2fsck is recommended [ 346.089543][T14511] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.101416][T14511] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.122335][T14535] EXT4-fs warning (device loop8): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 346.196573][ T8274] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.283322][ T7184] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.465252][T14553] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3773'. [ 346.481686][T14554] loop7: detected capacity change from 0 to 512 [ 346.491449][T14554] EXT4-fs (loop7): orphan cleanup on readonly fs [ 346.498475][T14554] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.3775: bad orphan inode 13 [ 346.518011][T14554] ext4_test_bit(bit=12, block=18) = 1 [ 346.523499][T14554] is_bad_inode(inode)=0 [ 346.527682][T14554] NEXT_ORPHAN(inode)=2130706432 [ 346.532722][T14554] max_ino=32 [ 346.535944][T14554] i_nlink=1 [ 346.541092][T14554] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.607808][ T7184] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.635966][T14561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.650576][T14561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.818212][T14559] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3776'. [ 347.449847][T14567] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.510825][T14567] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.561623][T14567] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.517098][T14582] loop3: detected capacity change from 0 to 512 [ 348.587454][T14582] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 348.599795][T14582] EXT4-fs (loop3): orphan cleanup on readonly fs [ 348.607157][T14582] __quota_error: 121 callbacks suppressed [ 348.607175][T14582] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 348.622532][T14582] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 348.631980][T14582] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3783: Failed to acquire dquot type 1 [ 348.644841][T14567] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.665722][T14582] EXT4-fs (loop3): 1 truncate cleaned up [ 348.672455][T14582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 348.722319][ T29] audit: type=1326 audit(2000000300.340:11486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14590 comm="syz.0.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 348.766267][ T29] audit: type=1326 audit(2000000300.360:11487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14590 comm="syz.0.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 348.790093][ T29] audit: type=1326 audit(2000000300.360:11488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14590 comm="syz.0.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 348.813601][ T29] audit: type=1326 audit(2000000300.360:11489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14590 comm="syz.0.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 348.837290][ T29] audit: type=1326 audit(2000000300.360:11490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14590 comm="syz.0.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 348.952999][ T29] audit: type=1326 audit(2000000300.570:11491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14597 comm="syz.9.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4dcfe969 code=0x7ffc0000 [ 348.978616][T14598] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3791'. [ 349.006426][ T29] audit: type=1326 audit(2000000300.590:11492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14597 comm="syz.9.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fcb4dcfe969 code=0x7ffc0000 [ 349.030115][ T29] audit: type=1326 audit(2000000300.590:11493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14597 comm="syz.9.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4dcfe969 code=0x7ffc0000 [ 349.071094][T14601] siw: device registration error -23 [ 349.089458][T14601] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 349.089458][T14601] program syz.9.3792 not setting count and/or reply_len properly [ 349.273274][T14614] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3797'. [ 349.282365][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3797'. [ 349.630395][T14629] FAULT_INJECTION: forcing a failure. [ 349.630395][T14629] name failslab, interval 1, probability 0, space 0, times 0 [ 349.643184][T14629] CPU: 1 UID: 0 PID: 14629 Comm: syz.0.3804 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 349.643215][T14629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 349.643228][T14629] Call Trace: [ 349.643237][T14629] [ 349.643249][T14629] __dump_stack+0x1d/0x30 [ 349.643271][T14629] dump_stack_lvl+0xe8/0x140 [ 349.643293][T14629] dump_stack+0x15/0x1b [ 349.643355][T14629] should_fail_ex+0x265/0x280 [ 349.643393][T14629] ? legacy_init_fs_context+0x31/0x80 [ 349.643456][T14629] should_failslab+0x8c/0xb0 [ 349.643490][T14629] __kmalloc_cache_noprof+0x4c/0x320 [ 349.643511][T14629] legacy_init_fs_context+0x31/0x80 [ 349.643606][T14629] alloc_fs_context+0x3ec/0x4e0 [ 349.643628][T14629] fs_context_for_mount+0x22/0x30 [ 349.643650][T14629] do_new_mount+0xe9/0x680 [ 349.643679][T14629] path_mount+0x4a4/0xb20 [ 349.643733][T14629] ? user_path_at+0x109/0x130 [ 349.643761][T14629] __se_sys_mount+0x28f/0x2e0 [ 349.643788][T14629] ? fput+0x8f/0xc0 [ 349.643807][T14629] __x64_sys_mount+0x67/0x80 [ 349.643832][T14629] x64_sys_call+0xd36/0x2fb0 [ 349.643852][T14629] do_syscall_64+0xd0/0x1a0 [ 349.643876][T14629] ? clear_bhb_loop+0x25/0x80 [ 349.643959][T14629] ? clear_bhb_loop+0x25/0x80 [ 349.643987][T14629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.644027][T14629] RIP: 0033:0x7f59acd3e969 [ 349.644041][T14629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.644063][T14629] RSP: 002b:00007f59ab3a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 349.644086][T14629] RAX: ffffffffffffffda RBX: 00007f59acf65fa0 RCX: 00007f59acd3e969 [ 349.644102][T14629] RDX: 0000200000001200 RSI: 0000200000000000 RDI: 0000000000000000 [ 349.644118][T14629] RBP: 00007f59ab3a7090 R08: 0000200000000180 R09: 0000000000000000 [ 349.644166][T14629] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 349.644177][T14629] R13: 0000000000000000 R14: 00007f59acf65fa0 R15: 00007ffe510032a8 [ 349.644201][T14629] [ 349.924602][T14635] netlink: 'syz.0.3805': attribute type 1 has an invalid length. [ 350.211937][T14657] siw: device registration error -23 [ 350.237968][T14657] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 350.237968][T14657] program syz.0.3808 not setting count and/or reply_len properly [ 350.257725][T12147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.313972][T14667] loop9: detected capacity change from 0 to 273 [ 350.332617][T14667] FAT-fs (loop9): Directory bread(block 68) failed [ 350.339373][T14667] FAT-fs (loop9): Directory bread(block 69) failed [ 350.350107][T14667] FAT-fs (loop9): Directory bread(block 70) failed [ 350.356799][T14667] FAT-fs (loop9): Directory bread(block 71) failed [ 350.363480][T14667] FAT-fs (loop9): Directory bread(block 72) failed [ 350.370799][T14667] FAT-fs (loop9): Directory bread(block 73) failed [ 350.377423][T14667] FAT-fs (loop9): Directory bread(block 74) failed [ 350.384250][T14667] FAT-fs (loop9): Directory bread(block 75) failed [ 350.391043][T14667] FAT-fs (loop9): Directory bread(block 76) failed [ 350.397726][T14667] FAT-fs (loop9): Directory bread(block 77) failed [ 350.508754][T14681] loop9: detected capacity change from 0 to 512 [ 350.525150][T14681] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 350.562227][T14681] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.3818: invalid indirect mapped block 4294967295 (level 0) [ 350.577000][T14681] EXT4-fs (loop9): Remounting filesystem read-only [ 350.584029][T14681] EXT4-fs (loop9): 1 orphan inode deleted [ 350.589920][T14681] EXT4-fs (loop9): 1 truncate cleaned up [ 350.596689][T14681] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.644393][T10880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.648446][ T7184] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 350.665914][ T7184] CPU: 1 UID: 0 PID: 7184 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 350.665995][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 350.666011][ T7184] Call Trace: [ 350.666020][ T7184] [ 350.666029][ T7184] __dump_stack+0x1d/0x30 [ 350.666049][ T7184] dump_stack_lvl+0xe8/0x140 [ 350.666133][ T7184] dump_stack+0x15/0x1b [ 350.666155][ T7184] dump_header+0x81/0x220 [ 350.666197][ T7184] oom_kill_process+0x334/0x3f0 [ 350.666227][ T7184] out_of_memory+0x979/0xb80 [ 350.666329][ T7184] ? css_next_descendant_pre+0x138/0x160 [ 350.666374][ T7184] mem_cgroup_out_of_memory+0x13d/0x190 [ 350.666414][ T7184] try_charge_memcg+0x5e2/0x870 [ 350.666465][ T7184] charge_memcg+0x51/0xc0 [ 350.666488][ T7184] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 350.666513][ T7184] __read_swap_cache_async+0x1df/0x350 [ 350.666539][ T7184] swap_cluster_readahead+0x376/0x3e0 [ 350.666580][ T7184] swapin_readahead+0xde/0x6f0 [ 350.666609][ T7184] ? __filemap_get_folio+0x49f/0x650 [ 350.666685][ T7184] ? swap_cache_get_folio+0x77/0x200 [ 350.666715][ T7184] do_swap_page+0x301/0x2460 [ 350.666823][ T7184] ? _raw_spin_unlock+0x26/0x50 [ 350.666858][ T7184] ? finish_task_switch+0xad/0x2b0 [ 350.666892][ T7184] ? __pfx_default_wake_function+0x10/0x10 [ 350.666924][ T7184] handle_mm_fault+0xb60/0x2ae0 [ 350.666988][ T7184] ? mas_walk+0xf2/0x120 [ 350.667019][ T7184] do_user_addr_fault+0x636/0x1090 [ 350.667058][ T7184] ? switch_fpu_return+0xe/0x20 [ 350.667087][ T7184] exc_page_fault+0x54/0xc0 [ 350.667122][ T7184] asm_exc_page_fault+0x26/0x30 [ 350.667148][ T7184] RIP: 0033:0x7f507e5c11e5 [ 350.667168][ T7184] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e 33 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 350.667198][ T7184] RSP: 002b:00007ffcaa2e6128 EFLAGS: 00010246 [ 350.667215][ T7184] RAX: 0000000000000000 RBX: 00000000000004da RCX: 00007f507e5c11e3 [ 350.667273][ T7184] RDX: 00007ffcaa2e6140 RSI: 0000000000000000 RDI: 0000000000000000 [ 350.667284][ T7184] RBP: 00007ffcaa2e61ac R08: 0000000024626b1c R09: 0000000000000000 [ 350.667295][ T7184] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 350.667309][ T7184] R13: 00000000000927c0 R14: 000000000005587a R15: 00007ffcaa2e6200 [ 350.667332][ T7184] [ 350.667341][ T7184] memory: usage 307200kB, limit 307200kB, failcnt 582 [ 350.906875][ T7184] memory+swap: usage 191580kB, limit 9007199254740988kB, failcnt 0 [ 350.914811][ T7184] kmem: usage 180516kB, limit 9007199254740988kB, failcnt 0 [ 350.922175][ T7184] Memory cgroup stats for /syz7: [ 350.922904][ T7184] cache 0 [ 350.930949][ T7184] rss 0 [ 350.933730][ T7184] shmem 0 [ 350.936680][ T7184] mapped_file 0 [ 350.940176][ T7184] dirty 0 [ 350.943192][ T7184] writeback 0 [ 350.946506][ T7184] workingset_refault_anon 136 [ 350.951224][ T7184] workingset_refault_file 55 [ 350.955822][ T7184] swap 208896 [ 350.959185][ T7184] swapcached 0 [ 350.962565][ T7184] pgpgin 149628 [ 350.966027][ T7184] pgpgout 149627 [ 350.969604][ T7184] pgfault 219758 [ 350.973155][ T7184] pgmajfault 78 [ 350.976627][ T7184] inactive_anon 0 [ 350.980313][ T7184] active_anon 0 [ 350.983795][ T7184] inactive_file 0 [ 350.987443][ T7184] active_file 4096 [ 350.991280][ T7184] unevictable 0 [ 350.994808][ T7184] hierarchical_memory_limit 314572800 [ 351.000425][ T7184] hierarchical_memsw_limit 9223372036854771712 [ 351.006876][ T7184] total_cache 0 [ 351.010366][ T7184] total_rss 0 [ 351.013663][ T7184] total_shmem 0 [ 351.017127][ T7184] total_mapped_file 0 [ 351.021141][ T7184] total_dirty 0 [ 351.024685][ T7184] total_writeback 0 [ 351.028527][ T7184] total_workingset_refault_anon 136 [ 351.033767][ T7184] total_workingset_refault_file 55 [ 351.038897][ T7184] total_swap 208896 [ 351.042723][ T7184] total_swapcached 0 [ 351.046697][ T7184] total_pgpgin 149628 [ 351.050708][ T7184] total_pgpgout 149627 [ 351.054842][ T7184] total_pgfault 219758 [ 351.058958][ T7184] total_pgmajfault 78 [ 351.062959][ T7184] total_inactive_anon 0 [ 351.067154][ T7184] total_active_anon 0 [ 351.071175][ T7184] total_inactive_file 0 [ 351.075335][ T7184] total_active_file 4096 [ 351.079667][ T7184] total_unevictable 0 [ 351.083691][ T7184] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3810,pid=14660,uid=0 [ 351.098482][ T7184] Memory cgroup out of memory: Killed process 14660 (syz.7.3810) total-vm:93748kB, anon-rss:936kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 351.119775][T14696] siw: device registration error -23 [ 351.128014][T14696] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 351.128014][T14696] program GPL not setting count and/or reply_len properly [ 351.196890][T14702] loop7: detected capacity change from 0 to 273 [ 351.216833][T14708] loop3: detected capacity change from 0 to 512 [ 351.230375][T14708] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 351.239524][T14708] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 351.250142][T14708] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 351.260190][T14708] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 351.268286][T14708] System zones: 0-2, 18-18, 34-34 [ 351.278265][T14702] FAT-fs (loop7): Directory bread(block 68) failed [ 351.284836][T14708] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 351.284888][T14702] FAT-fs (loop7): Directory bread(block 69) failed [ 351.318711][T14708] EXT4-fs (loop3): 1 truncate cleaned up [ 351.325648][T14708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.327152][T14702] FAT-fs (loop7): Directory bread(block 70) failed [ 351.345090][T14702] FAT-fs (loop7): Directory bread(block 71) failed [ 351.351727][T14702] FAT-fs (loop7): Directory bread(block 72) failed [ 351.358262][T14702] FAT-fs (loop7): Directory bread(block 73) failed [ 351.365741][T14702] FAT-fs (loop7): Directory bread(block 74) failed [ 351.372452][T14706] loop9: detected capacity change from 0 to 512 [ 351.372539][T14702] FAT-fs (loop7): Directory bread(block 75) failed [ 351.385504][T14702] FAT-fs (loop7): Directory bread(block 76) failed [ 351.392950][T14702] FAT-fs (loop7): Directory bread(block 77) failed [ 351.402832][T14706] EXT4-fs: dax option not supported [ 351.428666][T12147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.452097][T14567] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.463941][T14567] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.484319][T14567] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.503144][T14710] FAULT_INJECTION: forcing a failure. [ 351.503144][T14710] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 351.507514][T14567] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.516667][T14710] CPU: 0 UID: 0 PID: 14710 Comm: syz.0.3831 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 351.516708][T14710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 351.516725][T14710] Call Trace: [ 351.516736][T14710] [ 351.516746][T14710] __dump_stack+0x1d/0x30 [ 351.516774][T14710] dump_stack_lvl+0xe8/0x140 [ 351.516799][T14710] dump_stack+0x15/0x1b [ 351.516858][T14710] should_fail_ex+0x265/0x280 [ 351.516986][T14710] should_fail_alloc_page+0xf2/0x100 [ 351.517092][T14710] __alloc_frozen_pages_noprof+0xff/0x360 [ 351.517130][T14710] alloc_pages_mpol+0xb3/0x250 [ 351.517160][T14710] folio_alloc_mpol_noprof+0x39/0x80 [ 351.517190][T14710] shmem_get_folio_gfp+0x3cf/0xd40 [ 351.517231][T14710] shmem_write_begin+0xa8/0x190 [ 351.517435][T14710] generic_perform_write+0x181/0x490 [ 351.517480][T14710] shmem_file_write_iter+0xc5/0xf0 [ 351.517531][T14710] do_iter_readv_writev+0x41e/0x4c0 [ 351.517637][T14710] vfs_writev+0x2c9/0x870 [ 351.517689][T14710] __se_sys_pwritev2+0xfc/0x1c0 [ 351.517728][T14710] __x64_sys_pwritev2+0x67/0x80 [ 351.517797][T14710] x64_sys_call+0x1cea/0x2fb0 [ 351.517825][T14710] do_syscall_64+0xd0/0x1a0 [ 351.517854][T14710] ? clear_bhb_loop+0x25/0x80 [ 351.517890][T14710] ? clear_bhb_loop+0x25/0x80 [ 351.517918][T14710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.517967][T14710] RIP: 0033:0x7f59acd3e969 [ 351.517988][T14710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.518012][T14710] RSP: 002b:00007f59ab3a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 351.518036][T14710] RAX: ffffffffffffffda RBX: 00007f59acf65fa0 RCX: 00007f59acd3e969 [ 351.518065][T14710] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 351.518081][T14710] RBP: 00007f59ab3a7090 R08: 0000000000000000 R09: 0000000000000003 [ 351.518099][T14710] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000001 [ 351.518115][T14710] R13: 0000000000000000 R14: 00007f59acf65fa0 R15: 00007ffe510032a8 [ 351.518141][T14710] [ 351.585540][T14718] loop7: detected capacity change from 0 to 512 [ 351.748101][T14718] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 351.760352][T14723] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.783081][T14718] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.3833: invalid indirect mapped block 4294967295 (level 0) [ 351.797410][T14718] EXT4-fs (loop7): Remounting filesystem read-only [ 351.804229][T14718] EXT4-fs (loop7): 1 orphan inode deleted [ 351.810226][T14718] EXT4-fs (loop7): 1 truncate cleaned up [ 351.816360][T14718] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.845260][ T7184] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.847741][T14723] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.907588][T14723] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.933600][T14744] loop9: detected capacity change from 0 to 512 [ 351.960439][T14744] EXT4-fs (loop9): orphan cleanup on readonly fs [ 351.968181][T14744] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.3843: bad orphan inode 13 [ 351.978653][T14744] ext4_test_bit(bit=12, block=18) = 1 [ 351.984211][T14744] is_bad_inode(inode)=0 [ 351.988684][T14744] NEXT_ORPHAN(inode)=2130706432 [ 351.993656][T14744] max_ino=32 [ 351.996878][T14744] i_nlink=1 [ 352.001182][T14744] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 352.022729][T14750] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3845'. [ 352.045456][T10880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.062251][T14723] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.086183][T14752] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.161805][T14752] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.237110][T14733] syz.3.3838 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 352.248184][T14733] CPU: 1 UID: 0 PID: 14733 Comm: syz.3.3838 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 352.248278][T14733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 352.248336][T14733] Call Trace: [ 352.248343][T14733] [ 352.248353][T14733] __dump_stack+0x1d/0x30 [ 352.248379][T14733] dump_stack_lvl+0xe8/0x140 [ 352.248401][T14733] dump_stack+0x15/0x1b [ 352.248488][T14733] dump_header+0x81/0x220 [ 352.248525][T14733] oom_kill_process+0x334/0x3f0 [ 352.248558][T14733] out_of_memory+0x979/0xb80 [ 352.248580][T14733] ? css_next_descendant_pre+0x138/0x160 [ 352.248631][T14733] mem_cgroup_out_of_memory+0x13d/0x190 [ 352.248728][T14733] try_charge_memcg+0x5e2/0x870 [ 352.248763][T14733] charge_memcg+0x51/0xc0 [ 352.248834][T14733] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 352.248869][T14733] __read_swap_cache_async+0x1df/0x350 [ 352.248901][T14733] swap_cluster_readahead+0x376/0x3e0 [ 352.248928][T14733] swapin_readahead+0xde/0x6f0 [ 352.248982][T14733] ? __filemap_get_folio+0x49f/0x650 [ 352.249015][T14733] ? __rcu_read_unlock+0x34/0x70 [ 352.249043][T14733] ? swap_cache_get_folio+0x77/0x200 [ 352.249138][T14733] do_swap_page+0x301/0x2460 [ 352.249167][T14733] ? cgroup_rstat_updated+0xa3/0x510 [ 352.249203][T14733] ? __pfx_default_wake_function+0x10/0x10 [ 352.249235][T14733] handle_mm_fault+0xb60/0x2ae0 [ 352.249278][T14733] ? mas_walk+0xf2/0x120 [ 352.249309][T14733] do_user_addr_fault+0x636/0x1090 [ 352.249408][T14733] ? restore_fpregs_from_fpstate+0x61/0x120 [ 352.249443][T14733] ? fpregs_restore_userregs+0xbb/0x190 [ 352.249530][T14733] exc_page_fault+0x54/0xc0 [ 352.249570][T14733] asm_exc_page_fault+0x26/0x30 [ 352.249620][T14733] RIP: 0033:0x7f35cd1553de [ 352.249639][T14733] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 00 e8 18 c4 ff ff 48 39 eb 75 df 0f 1f 00 8b 05 d6 27 35 00 85 c0 0f 8e a3 fd ff ff 8d 9f fe ff 49 39 c4 73 a0 48 8d 1d b1 0b 35 00 83 3d b6 27 35 [ 352.249661][T14733] RSP: 002b:00007ffe9a566bc0 EFLAGS: 00010202 [ 352.249680][T14733] RAX: 0000000000000001 RBX: 00007f35cd4a7ba0 RCX: 0000000000000000 [ 352.249743][T14733] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558ff0d808 [ 352.249756][T14733] RBP: 00007f35cd4a7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 352.249768][T14733] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000056193 [ 352.249780][T14733] R13: 00007f35cd4a6080 R14: ffffffffffffffff R15: 00007ffe9a566cd0 [ 352.249871][T14733] [ 352.487827][T14733] memory: usage 307200kB, limit 307200kB, failcnt 2290 [ 352.495005][T14733] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 352.503014][T14733] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 352.510337][T14733] Memory cgroup stats for /syz3: [ 352.540611][T14733] cache 0 [ 352.543572][T14752] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.545667][T14733] rss 0 [ 352.561263][T14733] shmem 0 [ 352.564215][T14733] mapped_file 0 [ 352.567791][T14733] dirty 0 [ 352.570765][T14733] writeback 0 [ 352.574249][T14733] workingset_refault_anon 428 [ 352.578992][T14733] workingset_refault_file 1595 [ 352.583781][T14733] swap 188416 [ 352.587107][T14733] swapcached 12288 [ 352.590865][T14733] pgpgin 247641 [ 352.594348][T14733] pgpgout 247638 [ 352.597946][T14733] pgfault 391056 [ 352.601528][T14733] pgmajfault 284 [ 352.605092][T14733] inactive_anon 12288 [ 352.609207][T14733] active_anon 0 [ 352.612723][T14733] inactive_file 0 [ 352.616589][T14733] active_file 0 [ 352.620117][T14733] unevictable 0 [ 352.623621][T14733] hierarchical_memory_limit 314572800 [ 352.629201][T14733] hierarchical_memsw_limit 9223372036854771712 [ 352.635419][T14733] total_cache 0 [ 352.638915][T14733] total_rss 0 [ 352.642370][T14733] total_shmem 0 [ 352.645846][T14733] total_mapped_file 0 [ 352.649863][T14733] total_dirty 0 [ 352.653438][T14733] total_writeback 0 [ 352.657260][T14733] total_workingset_refault_anon 428 [ 352.662656][T14733] total_workingset_refault_file 1595 [ 352.667999][T14733] total_swap 188416 [ 352.671865][T14733] total_swapcached 12288 [ 352.676209][T14733] total_pgpgin 247641 [ 352.680313][T14733] total_pgpgout 247638 [ 352.684415][T14733] total_pgfault 391056 [ 352.688517][T14733] total_pgmajfault 284 [ 352.692636][T14733] total_inactive_anon 12288 [ 352.697300][T14733] total_active_anon 0 [ 352.701380][T14733] total_inactive_file 0 [ 352.705612][T14733] total_active_file 0 [ 352.709632][T14733] total_unevictable 0 [ 352.713667][T14733] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3838,pid=14733,uid=0 [ 352.728437][T14733] Memory cgroup out of memory: Killed process 14733 (syz.3.3838) total-vm:93748kB, anon-rss:936kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 352.783714][T14752] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.845971][T14752] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.870981][T14752] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.893710][T14771] loop7: detected capacity change from 0 to 512 [ 352.901060][T14771] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 352.912034][T14752] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.930128][T14752] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.937212][T14771] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.3853: invalid indirect mapped block 4294967295 (level 0) [ 352.953469][T14771] EXT4-fs (loop7): Remounting filesystem read-only [ 352.960585][T14771] EXT4-fs (loop7): 1 orphan inode deleted [ 352.966387][T14771] EXT4-fs (loop7): 1 truncate cleaned up [ 352.973230][T14771] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.012537][ T7184] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.022123][T14781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3857'. [ 353.031284][T14781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3857'. [ 353.088711][T14791] netlink: 'syz.3.3862': attribute type 13 has an invalid length. [ 353.135979][T14791] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.143192][T14791] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.183718][T14791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.194505][T14791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.229910][T14791] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.238335][T14791] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.247029][T14791] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.255610][T14791] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.527824][T12428] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 353.538876][T12428] CPU: 0 UID: 0 PID: 12428 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 353.538911][T12428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 353.538951][T12428] Call Trace: [ 353.538959][T12428] [ 353.538969][T12428] __dump_stack+0x1d/0x30 [ 353.538996][T12428] dump_stack_lvl+0xe8/0x140 [ 353.539020][T12428] dump_stack+0x15/0x1b [ 353.539039][T12428] dump_header+0x81/0x220 [ 353.539161][T12428] oom_kill_process+0x334/0x3f0 [ 353.539194][T12428] out_of_memory+0x979/0xb80 [ 353.539223][T12428] ? css_next_descendant_pre+0x138/0x160 [ 353.539258][T12428] mem_cgroup_out_of_memory+0x13d/0x190 [ 353.539299][T12428] try_charge_memcg+0x5e2/0x870 [ 353.539376][T12428] charge_memcg+0x51/0xc0 [ 353.539402][T12428] __mem_cgroup_charge+0x28/0xb0 [ 353.539448][T12428] filemap_add_folio+0x4e/0x1b0 [ 353.539472][T12428] __filemap_get_folio+0x31e/0x650 [ 353.539506][T12428] filemap_fault+0x41d/0xb40 [ 353.539552][T12428] __do_fault+0xb9/0x200 [ 353.539617][T12428] handle_mm_fault+0x110c/0x2ae0 [ 353.539655][T12428] ? mas_walk+0xf2/0x120 [ 353.539749][T12428] do_user_addr_fault+0x636/0x1090 [ 353.539787][T12428] exc_page_fault+0x54/0xc0 [ 353.539820][T12428] asm_exc_page_fault+0x26/0x30 [ 353.539839][T12428] RIP: 0033:0x7f59acc15994 [ 353.539896][T12428] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 08 fe e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 19 fd e7 00 48 01 d1 [ 353.539914][T12428] RSP: 002b:00007ffe51003630 EFLAGS: 00010206 [ 353.539931][T12428] RAX: 0000001b2c120000 RBX: 0000000000000201 RCX: 00000000000562e8 [ 353.539947][T12428] RDX: 00000000077ba1e9 RSI: 00007ffe510036c0 RDI: 0000000000000001 [ 353.539962][T12428] RBP: 00007ffe5100366c R08: 000000001c8b8ed5 R09: 7fffffffffffffff [ 353.539978][T12428] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 353.540022][T12428] R13: 00000000000927c0 R14: 00000000000563fc R15: 00007ffe510036c0 [ 353.540044][T12428] [ 353.540052][T12428] memory: usage 307200kB, limit 307200kB, failcnt 15371 [ 353.746121][T12428] memory+swap: usage 55380kB, limit 9007199254740988kB, failcnt 0 [ 353.754016][T12428] kmem: usage 43964kB, limit 9007199254740988kB, failcnt 0 [ 353.761546][T12428] Memory cgroup stats for /syz0: [ 353.762400][T12428] cache 0 [ 353.770441][T12428] rss 32768 [ 353.773565][T12428] shmem 0 [ 353.776513][T12428] mapped_file 0 [ 353.780002][T12428] dirty 0 [ 353.782955][T12428] writeback 0 [ 353.786250][T12428] workingset_refault_anon 353 [ 353.788736][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 353.788753][ T29] audit: type=1326 audit(2000000305.400:11712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14797 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 353.791047][T12428] workingset_refault_file 2348 [ 353.791060][T12428] swap 122880 [ 353.791068][T12428] swapcached 86016 [ 353.791077][T12428] pgpgin 316843 [ 353.791085][T12428] pgpgout 316822 [ 353.797267][ T29] audit: type=1326 audit(2000000305.400:11713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14797 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 353.820856][T12428] pgfault 373443 [ 353.820868][T12428] pgmajfault 248 [ 353.820877][T12428] inactive_anon 86016 [ 353.820884][T12428] active_anon 0 [ 353.820891][T12428] inactive_file 0 [ 353.820898][T12428] active_file 0 [ 353.820904][T12428] unevictable 0 [ 353.820911][T12428] hierarchical_memory_limit 314572800 [ 353.894272][T12428] hierarchical_memsw_limit 9223372036854771712 [ 353.900484][T12428] total_cache 0 [ 353.903973][T12428] total_rss 32768 [ 353.907664][T12428] total_shmem 0 [ 353.911230][T12428] total_mapped_file 0 [ 353.915271][T12428] total_dirty 0 [ 353.918746][T12428] total_writeback 0 [ 353.922725][T12428] total_workingset_refault_anon 353 [ 353.928022][T12428] total_workingset_refault_file 2348 [ 353.933444][T12428] total_swap 122880 [ 353.937271][T12428] total_swapcached 86016 [ 353.941556][T12428] total_pgpgin 316843 [ 353.945551][T12428] total_pgpgout 316822 [ 353.949656][T12428] total_pgfault 373443 [ 353.953813][T12428] total_pgmajfault 248 [ 353.957887][T12428] total_inactive_anon 86016 [ 353.962437][T12428] total_active_anon 0 [ 353.966426][T12428] total_inactive_file 0 [ 353.970628][T12428] total_active_file 0 [ 353.974660][T12428] total_unevictable 0 [ 353.978664][T12428] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3865,pid=14797,uid=0 [ 353.993470][T12428] Memory cgroup out of memory: OOM victim 14797 (syz.0.3865) is already exiting. Skip killing the task [ 354.007251][T14812] binfmt_misc: register: failed to install interpreter file ./file2 [ 354.021151][T14814] siw: device registration error -23 [ 354.030365][T14814] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 354.030365][T14814] program GPL not setting count and/or reply_len properly [ 354.124139][T14828] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3878'. [ 354.211296][T14828] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3878'. [ 354.220420][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3878'. [ 354.229488][T14828] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3878'. [ 354.238761][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3878'. [ 354.247806][T14828] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3878'. [ 354.268011][ T29] audit: type=1326 audit(2000000305.880:11714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14838 comm="syz.0.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 354.291731][ T29] audit: type=1326 audit(2000000305.880:11715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14838 comm="syz.0.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 354.315371][ T29] audit: type=1326 audit(2000000305.880:11716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14838 comm="syz.0.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 354.339009][ T29] audit: type=1326 audit(2000000305.880:11717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14838 comm="syz.0.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 354.366860][T14841] binfmt_misc: register: failed to install interpreter file ./file2 [ 354.392285][T14843] loop7: detected capacity change from 0 to 512 [ 354.399346][T14843] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 354.410678][T14843] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.3884: invalid indirect mapped block 4294967295 (level 0) [ 354.425131][T14843] EXT4-fs (loop7): Remounting filesystem read-only [ 354.432815][T14843] EXT4-fs (loop7): 1 orphan inode deleted [ 354.438667][T14843] EXT4-fs (loop7): 1 truncate cleaned up [ 354.445093][ T29] audit: type=1400 audit(2000000306.060:11718): avc: denied { ioctl } for pid=14845 comm="syz.0.3885" path="socket:[58376]" dev="sockfs" ino=58376 ioctlcmd=0x48df scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 354.449283][T14843] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.503104][ T7184] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.535428][T14848] siw: device registration error -23 [ 354.544696][T14848] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 354.544696][T14848] program GPL not setting count and/or reply_len properly [ 354.647561][T14861] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3892'. [ 354.683035][T14867] loop7: detected capacity change from 0 to 273 [ 354.698047][T14867] FAT-fs (loop7): Directory bread(block 68) failed [ 354.705485][T14867] FAT-fs (loop7): Directory bread(block 69) failed [ 354.718904][T14867] FAT-fs (loop7): Directory bread(block 70) failed [ 354.726594][T14867] FAT-fs (loop7): Directory bread(block 71) failed [ 354.733565][T14867] FAT-fs (loop7): Directory bread(block 72) failed [ 354.740935][T14867] FAT-fs (loop7): Directory bread(block 73) failed [ 354.747748][T14867] FAT-fs (loop7): Directory bread(block 74) failed [ 354.755744][T14867] FAT-fs (loop7): Directory bread(block 75) failed [ 354.763306][T14867] FAT-fs (loop7): Directory bread(block 76) failed [ 354.770013][T14867] FAT-fs (loop7): Directory bread(block 77) failed [ 354.782407][T14873] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 354.793913][ T29] audit: type=1326 audit(2000000306.410:11719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14866 comm="syz.7.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f507e58e969 code=0x7ffc0000 [ 354.817766][ T29] audit: type=1326 audit(2000000306.410:11720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14866 comm="syz.7.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f507e58e969 code=0x7ffc0000 [ 354.841538][ T29] audit: type=1326 audit(2000000306.410:11721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14866 comm="syz.7.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f507e58e969 code=0x7ffc0000 [ 355.073302][T14907] loop7: detected capacity change from 0 to 273 [ 355.088591][T14907] FAT-fs (loop7): Directory bread(block 68) failed [ 355.095890][T14907] FAT-fs (loop7): Directory bread(block 69) failed [ 355.103617][T14907] FAT-fs (loop7): Directory bread(block 70) failed [ 355.110333][T14907] FAT-fs (loop7): Directory bread(block 71) failed [ 355.117617][T14907] FAT-fs (loop7): Directory bread(block 72) failed [ 355.126080][T14907] FAT-fs (loop7): Directory bread(block 73) failed [ 355.132859][T14907] FAT-fs (loop7): Directory bread(block 74) failed [ 355.140348][T14907] FAT-fs (loop7): Directory bread(block 75) failed [ 355.146910][T14907] FAT-fs (loop7): Directory bread(block 76) failed [ 355.156538][T14907] FAT-fs (loop7): Directory bread(block 77) failed [ 355.542063][T14940] loop7: detected capacity change from 0 to 273 [ 355.556012][T14940] FAT-fs (loop7): Directory bread(block 68) failed [ 355.562738][T14940] FAT-fs (loop7): Directory bread(block 69) failed [ 355.569494][T14940] FAT-fs (loop7): Directory bread(block 70) failed [ 355.576092][T14940] FAT-fs (loop7): Directory bread(block 71) failed [ 355.582779][T14940] FAT-fs (loop7): Directory bread(block 72) failed [ 355.589396][T14940] FAT-fs (loop7): Directory bread(block 73) failed [ 355.595944][T14940] FAT-fs (loop7): Directory bread(block 74) failed [ 355.602505][T14940] FAT-fs (loop7): Directory bread(block 75) failed [ 355.609067][T14940] FAT-fs (loop7): Directory bread(block 76) failed [ 355.615586][T14940] FAT-fs (loop7): Directory bread(block 77) failed [ 355.659462][T14942] loop7: detected capacity change from 0 to 512 [ 355.666414][T14942] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 355.677867][T14942] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.3931: invalid indirect mapped block 4294967295 (level 0) [ 355.692229][T14942] EXT4-fs (loop7): Remounting filesystem read-only [ 355.699117][T14942] EXT4-fs (loop7): 1 orphan inode deleted [ 355.704877][T14942] EXT4-fs (loop7): 1 truncate cleaned up [ 355.711051][T14942] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.737619][ T7184] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.878157][T14951] loop9: detected capacity change from 0 to 512 [ 355.886041][T14951] EXT4-fs (loop9): orphan cleanup on readonly fs [ 355.892905][T14951] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.3934: bad orphan inode 13 [ 355.903549][T14951] ext4_test_bit(bit=12, block=18) = 1 [ 355.909224][T14951] is_bad_inode(inode)=0 [ 355.913440][T14951] NEXT_ORPHAN(inode)=2130706432 [ 355.918301][T14951] max_ino=32 [ 355.921630][T14951] i_nlink=1 [ 355.925067][T14951] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 355.949199][T10880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.219648][T14968] siw: device registration error -23 [ 356.247187][T14968] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 356.247187][T14968] program GPL not setting count and/or reply_len properly [ 356.346543][T14723] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.369825][T14723] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.386226][T14723] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.413603][T14723] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.442866][T14973] SELinux: failed to load policy [ 356.449613][T14973] FAULT_INJECTION: forcing a failure. [ 356.449613][T14973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.462797][T14973] CPU: 0 UID: 0 PID: 14973 Comm: syz.0.3943 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 356.462832][T14973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 356.462917][T14973] Call Trace: [ 356.462922][T14973] [ 356.463006][T14973] __dump_stack+0x1d/0x30 [ 356.463033][T14973] dump_stack_lvl+0xe8/0x140 [ 356.463055][T14973] dump_stack+0x15/0x1b [ 356.463070][T14973] should_fail_ex+0x265/0x280 [ 356.463120][T14973] should_fail+0xb/0x20 [ 356.463163][T14973] should_fail_usercopy+0x1a/0x20 [ 356.463186][T14973] _copy_to_user+0x20/0xa0 [ 356.463211][T14973] simple_read_from_buffer+0xb5/0x130 [ 356.463240][T14973] proc_fail_nth_read+0x100/0x140 [ 356.463319][T14973] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 356.463350][T14973] vfs_read+0x19d/0x6f0 [ 356.463380][T14973] ? __rcu_read_unlock+0x4f/0x70 [ 356.463407][T14973] ? __fget_files+0x184/0x1c0 [ 356.463449][T14973] ksys_read+0xda/0x1a0 [ 356.463540][T14973] __x64_sys_read+0x40/0x50 [ 356.463570][T14973] x64_sys_call+0x2d77/0x2fb0 [ 356.463597][T14973] do_syscall_64+0xd0/0x1a0 [ 356.463623][T14973] ? clear_bhb_loop+0x25/0x80 [ 356.463684][T14973] ? clear_bhb_loop+0x25/0x80 [ 356.463712][T14973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.463736][T14973] RIP: 0033:0x7f59acd3d37c [ 356.463752][T14973] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 356.463781][T14973] RSP: 002b:00007f59ab3a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 356.463800][T14973] RAX: ffffffffffffffda RBX: 00007f59acf65fa0 RCX: 00007f59acd3d37c [ 356.463812][T14973] RDX: 000000000000000f RSI: 00007f59ab3a70a0 RDI: 0000000000000008 [ 356.463827][T14973] RBP: 00007f59ab3a7090 R08: 0000000000000000 R09: 0000000000000000 [ 356.463888][T14973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.463904][T14973] R13: 0000000000000000 R14: 00007f59acf65fa0 R15: 00007ffe510032a8 [ 356.463928][T14973] [ 356.871474][T14997] SELinux: failed to load policy [ 356.883566][T14994] netlink: 'syz.0.3953': attribute type 10 has an invalid length. [ 356.904424][T14994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.913855][T14994] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 357.056321][T15014] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.152916][T15014] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.240717][T15014] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.290541][T15014] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.644172][T15022] __nla_validate_parse: 8 callbacks suppressed [ 357.644253][T15022] netlink: 272 bytes leftover after parsing attributes in process `syz.7.3963'. [ 358.002331][T15031] siw: device registration error -23 [ 358.093576][T15034] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.171332][T15034] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.230689][T15034] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.280825][T15034] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.338383][T15034] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.356316][T15034] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.389363][T15034] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.403745][T15043] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3972'. [ 358.416562][T15034] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.485414][T15052] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3976'. [ 358.520703][T15054] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=41 sclass=netlink_tcpdiag_socket pid=15054 comm=syz.7.3977 [ 358.563509][T15060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3980'. [ 358.647323][T15077] wg2: entered promiscuous mode [ 358.652337][T15077] wg2: entered allmulticast mode [ 358.658362][T15065] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3982'. [ 358.668184][T15065] unsupported nlmsg_type 40 [ 358.674454][T15079] netlink: 260 bytes leftover after parsing attributes in process `syz.9.3989'. [ 358.721459][T15088] FAULT_INJECTION: forcing a failure. [ 358.721459][T15088] name failslab, interval 1, probability 0, space 0, times 0 [ 358.734177][T15088] CPU: 0 UID: 0 PID: 15088 Comm: syz.9.3992 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 358.734211][T15088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 358.734293][T15088] Call Trace: [ 358.734301][T15088] [ 358.734308][T15088] __dump_stack+0x1d/0x30 [ 358.734386][T15088] dump_stack_lvl+0xe8/0x140 [ 358.734406][T15088] dump_stack+0x15/0x1b [ 358.734423][T15088] should_fail_ex+0x265/0x280 [ 358.734455][T15088] should_failslab+0x8c/0xb0 [ 358.734532][T15088] kmem_cache_alloc_noprof+0x50/0x310 [ 358.734566][T15088] ? alloc_empty_file+0x76/0x200 [ 358.734600][T15088] alloc_empty_file+0x76/0x200 [ 358.734678][T15088] alloc_file_pseudo+0xc6/0x160 [ 358.734772][T15088] __shmem_file_setup+0x1b9/0x1f0 [ 358.734799][T15088] shmem_file_setup+0x3b/0x50 [ 358.734823][T15088] __se_sys_memfd_create+0x2c3/0x590 [ 358.734849][T15088] __x64_sys_memfd_create+0x31/0x40 [ 358.734873][T15088] x64_sys_call+0x122f/0x2fb0 [ 358.734967][T15088] do_syscall_64+0xd0/0x1a0 [ 358.734988][T15088] ? clear_bhb_loop+0x25/0x80 [ 358.735032][T15088] ? clear_bhb_loop+0x25/0x80 [ 358.735060][T15088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.735081][T15088] RIP: 0033:0x7fcb4dcfe969 [ 358.735118][T15088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.735136][T15088] RSP: 002b:00007fcb4c366e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 358.735154][T15088] RAX: ffffffffffffffda RBX: 00000000000009ea RCX: 00007fcb4dcfe969 [ 358.735185][T15088] RDX: 00007fcb4c366ef0 RSI: 0000000000000000 RDI: 00007fcb4dd81444 [ 358.735198][T15088] RBP: 0000200000004100 R08: 00007fcb4c366bb7 R09: 00007fcb4c366e40 [ 358.735210][T15088] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000002380 [ 358.735222][T15088] R13: 00007fcb4c366ef0 R14: 00007fcb4c366eb0 R15: 0000200000000480 [ 358.735289][T15088] [ 358.737575][T15084] siw: device registration error -23 [ 358.755851][T15090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.945059][T15090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.954953][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 358.954971][ T29] audit: type=1400 audit(2000000310.570:11761): avc: denied { ioctl } for pid=15089 comm="syz.9.3993" path="socket:[59955]" dev="sockfs" ino=59955 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 359.476237][ T29] audit: type=1400 audit(2000000311.090:11762): avc: denied { read } for pid=15092 comm="syz.9.3994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 359.650170][ T29] audit: type=1400 audit(2000000311.260:11763): avc: denied { execute } for pid=15113 comm="syz.7.4004" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=58964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 359.694358][T15121] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 359.767309][ T29] audit: type=1326 audit(2000000311.380:11764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15115 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 359.791073][ T29] audit: type=1326 audit(2000000311.380:11765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15115 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 359.814717][ T29] audit: type=1326 audit(2000000311.380:11766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15115 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 359.838412][ T29] audit: type=1326 audit(2000000311.380:11767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15115 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 359.908920][T15135] loop7: detected capacity change from 0 to 512 [ 359.930611][T15135] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 359.942824][T15135] EXT4-fs (loop7): orphan cleanup on readonly fs [ 359.968066][T15135] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 359.978948][T15135] EXT4-fs warning (device loop7): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 359.987391][T15141] siw: device registration error -23 [ 360.007177][T15135] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 360.024409][T15141] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 360.024409][T15141] program GPL not setting count and/or reply_len properly [ 360.042492][T15135] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4008: bg 0: block 40: padding at end of block bitmap is not set [ 360.061325][T15135] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 360.073014][ T29] audit: type=1326 audit(2000000311.690:11768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15146 comm="syz.0.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 360.096924][ T29] audit: type=1326 audit(2000000311.690:11769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15146 comm="syz.0.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 360.122339][T15135] EXT4-fs (loop7): 1 truncate cleaned up [ 360.128498][T15135] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 360.161305][T15135] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4008'. [ 360.173252][T15135] hsr_slave_0: left promiscuous mode [ 360.190580][T15135] hsr_slave_1: left promiscuous mode [ 360.213013][T15160] loop9: detected capacity change from 0 to 512 [ 360.231192][T15164] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 2, id = 0 [ 360.243196][T15160] EXT4-fs: Ignoring removed orlov option [ 360.261000][T15160] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.273707][T15160] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.293127][T15159] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 360.323163][T10880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.333765][T15176] FAULT_INJECTION: forcing a failure. [ 360.333765][T15176] name failslab, interval 1, probability 0, space 0, times 0 [ 360.346480][T15176] CPU: 1 UID: 0 PID: 15176 Comm: syz.3.4024 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 360.346542][T15176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 360.346559][T15176] Call Trace: [ 360.346569][T15176] [ 360.346579][T15176] __dump_stack+0x1d/0x30 [ 360.346606][T15176] dump_stack_lvl+0xe8/0x140 [ 360.346631][T15176] dump_stack+0x15/0x1b [ 360.346676][T15176] should_fail_ex+0x265/0x280 [ 360.346716][T15176] should_failslab+0x8c/0xb0 [ 360.346753][T15176] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 360.346897][T15176] ? __d_alloc+0x3d/0x350 [ 360.346945][T15176] __d_alloc+0x3d/0x350 [ 360.346984][T15176] d_alloc_parallel+0x53/0xc40 [ 360.347006][T15176] ? __rcu_read_unlock+0x4f/0x70 [ 360.347032][T15176] ? __d_lookup+0x316/0x340 [ 360.347074][T15176] ? try_to_unlazy+0x25e/0x3a0 [ 360.347184][T15176] path_openat+0x6b5/0x2170 [ 360.347223][T15176] do_filp_open+0x109/0x230 [ 360.347261][T15176] do_sys_openat2+0xa6/0x110 [ 360.347336][T15176] __x64_sys_creat+0x65/0x90 [ 360.347358][T15176] x64_sys_call+0x114d/0x2fb0 [ 360.347410][T15176] do_syscall_64+0xd0/0x1a0 [ 360.347432][T15176] ? clear_bhb_loop+0x25/0x80 [ 360.347508][T15176] ? clear_bhb_loop+0x25/0x80 [ 360.347530][T15176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.347551][T15176] RIP: 0033:0x7f35cd27e969 [ 360.347593][T15176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.347611][T15176] RSP: 002b:00007f35cb8e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 360.347637][T15176] RAX: ffffffffffffffda RBX: 00007f35cd4a5fa0 RCX: 00007f35cd27e969 [ 360.347650][T15176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 360.347663][T15176] RBP: 00007f35cb8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 360.347718][T15176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.347796][T15176] R13: 0000000000000000 R14: 00007f35cd4a5fa0 R15: 00007ffe9a566a58 [ 360.347815][T15176] [ 360.585503][T15014] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.601017][T15014] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.614029][T15014] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.633771][T15014] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.662961][T15191] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 360.662961][T15191] program GPL not setting count and/or reply_len properly [ 360.685710][T15197] loop9: detected capacity change from 0 to 273 [ 360.715797][T15201] loop3: detected capacity change from 0 to 512 [ 360.736161][T15197] FAT-fs (loop9): Directory bread(block 68) failed [ 360.742934][T15197] FAT-fs (loop9): Directory bread(block 69) failed [ 360.751341][T15197] FAT-fs (loop9): Directory bread(block 70) failed [ 360.767417][T15197] FAT-fs (loop9): Directory bread(block 71) failed [ 360.774777][T15197] FAT-fs (loop9): Directory bread(block 72) failed [ 360.789802][T15201] EXT4-fs (loop3): orphan cleanup on readonly fs [ 360.796793][T15201] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.4036: bad orphan inode 13 [ 360.808916][T15197] FAT-fs (loop9): Directory bread(block 73) failed [ 360.815575][T15197] FAT-fs (loop9): Directory bread(block 74) failed [ 360.817504][T15201] ext4_test_bit(bit=12, block=18) = 1 [ 360.827574][T15201] is_bad_inode(inode)=0 [ 360.831780][T15201] NEXT_ORPHAN(inode)=2130706432 [ 360.836781][T15201] max_ino=32 [ 360.837760][T15197] FAT-fs (loop9): Directory bread(block 75) failed [ 360.840044][T15201] i_nlink=1 [ 360.846710][T15197] FAT-fs (loop9): Directory bread(block 76) failed [ 360.856423][T15197] FAT-fs (loop9): Directory bread(block 77) failed [ 360.913271][T15201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 360.981570][T12147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.206458][T15226] FAULT_INJECTION: forcing a failure. [ 361.206458][T15226] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 361.219871][T15226] CPU: 1 UID: 0 PID: 15226 Comm: syz.3.4045 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 361.219927][T15226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 361.219941][T15226] Call Trace: [ 361.219949][T15226] [ 361.219959][T15226] __dump_stack+0x1d/0x30 [ 361.219985][T15226] dump_stack_lvl+0xe8/0x140 [ 361.220008][T15226] dump_stack+0x15/0x1b [ 361.220028][T15226] should_fail_ex+0x265/0x280 [ 361.220098][T15226] should_fail_alloc_page+0xf2/0x100 [ 361.220143][T15226] __alloc_frozen_pages_noprof+0xff/0x360 [ 361.220171][T15226] alloc_pages_mpol+0xb3/0x250 [ 361.220267][T15226] vma_alloc_folio_noprof+0x1aa/0x300 [ 361.220291][T15226] handle_mm_fault+0x1056/0x2ae0 [ 361.220395][T15226] ? __rcu_read_unlock+0x4f/0x70 [ 361.220465][T15226] do_user_addr_fault+0x3fe/0x1090 [ 361.220498][T15226] exc_page_fault+0x54/0xc0 [ 361.220588][T15226] asm_exc_page_fault+0x26/0x30 [ 361.220612][T15226] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 361.220641][T15226] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 361.220658][T15226] RSP: 0018:ffffc90003b2bd60 EFLAGS: 00050206 [ 361.220722][T15226] RAX: ffff888103389b18 RBX: 0000000000001000 RCX: 0000000000000240 [ 361.220738][T15226] RDX: 0000000000000000 RSI: ffff8881296a9dc0 RDI: 0000200000008000 [ 361.220753][T15226] RBP: ffff8881296a9000 R08: 0000000000000637 R09: 0000000000000000 [ 361.220767][T15226] R10: 00018881296a9000 R11: 00018881296a9fff R12: 0000200000008240 [ 361.220779][T15226] R13: 00007ffffffff000 R14: 0000200000007240 R15: ffff8881296a9000 [ 361.220797][T15226] _copy_to_user+0x7c/0xa0 [ 361.220818][T15226] pagemap_read+0x379/0x5e0 [ 361.220853][T15226] ? __pfx_pagemap_read+0x10/0x10 [ 361.220880][T15226] vfs_read+0x19d/0x6f0 [ 361.220903][T15226] ? __rcu_read_unlock+0x4f/0x70 [ 361.220934][T15226] ? __fget_files+0x184/0x1c0 [ 361.220965][T15226] __x64_sys_pread64+0xfd/0x150 [ 361.220995][T15226] x64_sys_call+0x296d/0x2fb0 [ 361.221015][T15226] do_syscall_64+0xd0/0x1a0 [ 361.221123][T15226] ? clear_bhb_loop+0x25/0x80 [ 361.221149][T15226] ? clear_bhb_loop+0x25/0x80 [ 361.221173][T15226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.221192][T15226] RIP: 0033:0x7f35cd27e969 [ 361.221209][T15226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.221249][T15226] RSP: 002b:00007f35cb8e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 361.221266][T15226] RAX: ffffffffffffffda RBX: 00007f35cd4a5fa0 RCX: 00007f35cd27e969 [ 361.221280][T15226] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000004 [ 361.221295][T15226] RBP: 00007f35cb8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 361.221308][T15226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 361.221445][T15226] R13: 0000000000000000 R14: 00007f35cd4a5fa0 R15: 00007ffe9a566a58 [ 361.221469][T15226] [ 361.613954][T15237] loop3: detected capacity change from 0 to 273 [ 361.637997][T15237] FAT-fs (loop3): Directory bread(block 68) failed [ 361.647439][T15237] FAT-fs (loop3): Directory bread(block 69) failed [ 361.657117][T15237] FAT-fs (loop3): Directory bread(block 70) failed [ 361.664552][T15237] FAT-fs (loop3): Directory bread(block 71) failed [ 361.671468][T15237] FAT-fs (loop3): Directory bread(block 72) failed [ 361.678747][T15237] FAT-fs (loop3): Directory bread(block 73) failed [ 361.687720][T15237] FAT-fs (loop3): Directory bread(block 74) failed [ 361.694341][T15237] FAT-fs (loop3): Directory bread(block 75) failed [ 361.718658][T15237] FAT-fs (loop3): Directory bread(block 76) failed [ 361.731273][T15239] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 361.731273][T15239] program GPL not setting count and/or reply_len properly [ 361.735552][T15237] FAT-fs (loop3): Directory bread(block 77) failed [ 361.871753][T15252] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4053'. [ 361.973756][T15263] loop3: detected capacity change from 0 to 4096 [ 361.990067][T15263] EXT4-fs: Ignoring removed orlov option [ 361.995771][T15263] EXT4-fs: Ignoring removed nobh option [ 362.003209][T15267] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4058'. [ 362.015138][T15263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.030212][T15263] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4059: Failed to acquire dquot type 1 [ 362.043846][T15263] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4059: Failed to acquire dquot type 1 [ 362.092159][T12147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.205480][T15278] loop3: detected capacity change from 0 to 273 [ 362.221295][T15278] FAT-fs (loop3): Directory bread(block 68) failed [ 362.228013][T15278] FAT-fs (loop3): Directory bread(block 69) failed [ 362.235147][T15278] FAT-fs (loop3): Directory bread(block 70) failed [ 362.242526][T15278] FAT-fs (loop3): Directory bread(block 71) failed [ 362.249423][T15278] FAT-fs (loop3): Directory bread(block 72) failed [ 362.256171][T15278] FAT-fs (loop3): Directory bread(block 73) failed [ 362.263408][T15278] FAT-fs (loop3): Directory bread(block 74) failed [ 362.270353][T15278] FAT-fs (loop3): Directory bread(block 75) failed [ 362.276984][T15278] FAT-fs (loop3): Directory bread(block 76) failed [ 362.284147][T15278] FAT-fs (loop3): Directory bread(block 77) failed [ 362.436936][T15288] loop3: detected capacity change from 0 to 512 [ 362.454913][T15288] loop3: detected capacity change from 0 to 512 [ 362.462727][T15288] EXT4-fs: Ignoring removed nobh option [ 362.482132][T15288] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.4069: corrupted inode contents [ 362.494704][T15288] EXT4-fs (loop3): Remounting filesystem read-only [ 362.501856][T15288] EXT4-fs (loop3): 1 truncate cleaned up [ 362.508154][T15288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.521665][ T38] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 362.532243][ T38] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 362.544257][T15288] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.544579][ T38] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 362.578166][T12147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.859325][T15306] loop9: detected capacity change from 0 to 273 [ 362.886230][T15306] FAT-fs (loop9): Directory bread(block 68) failed [ 362.897106][T15314] tipc: Started in network mode [ 362.902162][T15314] tipc: Node identity ac14140f, cluster identity 4711 [ 362.909521][T15306] FAT-fs (loop9): Directory bread(block 69) failed [ 362.914286][T15314] tipc: New replicast peer: 10.1.1.2 [ 362.917596][T15306] FAT-fs (loop9): Directory bread(block 70) failed [ 362.921508][T15314] tipc: Enabled bearer , priority 10 [ 362.959548][T15306] FAT-fs (loop9): Directory bread(block 71) failed [ 362.967821][T15306] FAT-fs (loop9): Directory bread(block 72) failed [ 362.980860][T15306] FAT-fs (loop9): Directory bread(block 73) failed [ 362.987704][T15306] FAT-fs (loop9): Directory bread(block 74) failed [ 362.994549][T15306] FAT-fs (loop9): Directory bread(block 75) failed [ 363.016522][T15306] FAT-fs (loop9): Directory bread(block 76) failed [ 363.023844][T15306] FAT-fs (loop9): Directory bread(block 77) failed [ 363.069391][ T7184] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.122739][T15331] dvmrp0: entered allmulticast mode [ 363.201924][T15341] netlink: 248 bytes leftover after parsing attributes in process `syz.9.4093'. [ 363.245641][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4096'. [ 363.250902][T15347] FAULT_INJECTION: forcing a failure. [ 363.250902][T15347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.267952][T15347] CPU: 1 UID: 0 PID: 15347 Comm: syz.7.4097 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 363.267982][T15347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 363.268123][T15347] Call Trace: [ 363.268132][T15347] [ 363.268142][T15347] __dump_stack+0x1d/0x30 [ 363.268168][T15347] dump_stack_lvl+0xe8/0x140 [ 363.268192][T15347] dump_stack+0x15/0x1b [ 363.268213][T15347] should_fail_ex+0x265/0x280 [ 363.268288][T15347] should_fail+0xb/0x20 [ 363.268324][T15347] should_fail_usercopy+0x1a/0x20 [ 363.268412][T15347] _copy_to_user+0x20/0xa0 [ 363.268436][T15347] simple_read_from_buffer+0xb5/0x130 [ 363.268501][T15347] proc_fail_nth_read+0x100/0x140 [ 363.268534][T15347] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 363.268561][T15347] vfs_read+0x19d/0x6f0 [ 363.268643][T15347] ? __rcu_read_unlock+0x4f/0x70 [ 363.268664][T15347] ? __fget_files+0x184/0x1c0 [ 363.268742][T15347] ? __pfx_br_ioctl_stub+0x10/0x10 [ 363.268836][T15347] ksys_read+0xda/0x1a0 [ 363.268926][T15347] __x64_sys_read+0x40/0x50 [ 363.268957][T15347] x64_sys_call+0x2d77/0x2fb0 [ 363.268979][T15347] do_syscall_64+0xd0/0x1a0 [ 363.269000][T15347] ? clear_bhb_loop+0x25/0x80 [ 363.269053][T15347] ? clear_bhb_loop+0x25/0x80 [ 363.269074][T15347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.269181][T15347] RIP: 0033:0x7f507e58d37c [ 363.269197][T15347] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 363.269255][T15347] RSP: 002b:00007f507cbf7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 363.269274][T15347] RAX: ffffffffffffffda RBX: 00007f507e7b5fa0 RCX: 00007f507e58d37c [ 363.269287][T15347] RDX: 000000000000000f RSI: 00007f507cbf70a0 RDI: 0000000000000009 [ 363.269299][T15347] RBP: 00007f507cbf7090 R08: 0000000000000000 R09: 0000000000000000 [ 363.269366][T15347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 363.269378][T15347] R13: 0000000000000000 R14: 00007f507e7b5fa0 R15: 00007ffcaa2e5de8 [ 363.269397][T15347] [ 363.536315][T15351] loop7: detected capacity change from 0 to 273 [ 363.562838][T15351] FAT-fs (loop7): Directory bread(block 68) failed [ 363.570547][T15351] FAT-fs (loop7): Directory bread(block 69) failed [ 363.577179][T15351] FAT-fs (loop7): Directory bread(block 70) failed [ 363.585467][T15351] FAT-fs (loop7): Directory bread(block 71) failed [ 363.592691][T15351] FAT-fs (loop7): Directory bread(block 72) failed [ 363.599483][T15351] FAT-fs (loop7): Directory bread(block 73) failed [ 363.606528][T15351] FAT-fs (loop7): Directory bread(block 74) failed [ 363.613638][T15351] FAT-fs (loop7): Directory bread(block 75) failed [ 363.620560][T15351] FAT-fs (loop7): Directory bread(block 76) failed [ 363.627291][T15351] FAT-fs (loop7): Directory bread(block 77) failed [ 363.688717][T15365] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4102'. [ 363.718137][T15366] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4101'. [ 363.736797][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4103'. [ 363.795962][T15376] netlink: 248 bytes leftover after parsing attributes in process `syz.7.4107'. [ 363.840357][T15378] usb usb1: usbfs: process 15378 (syz.0.4108) did not claim interface 8 before use [ 363.877482][T15380] loop7: detected capacity change from 0 to 128 [ 363.963081][T15380] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 363.999536][T15380] ext4 filesystem being mounted at /584/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 364.042175][T14238] tipc: Node number set to 2886997007 [ 364.184688][ T7184] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 364.238613][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 364.238638][ T29] audit: type=1326 audit(2000000315.850:11947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15377 comm="syz.0.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 364.270667][ T29] audit: type=1326 audit(2000000315.890:11948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15377 comm="syz.0.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 364.294513][ T29] audit: type=1326 audit(2000000315.890:11949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15377 comm="syz.0.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 364.318271][ T29] audit: type=1326 audit(2000000315.890:11950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15377 comm="syz.0.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 364.342444][ T29] audit: type=1326 audit(2000000315.960:11951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15377 comm="syz.0.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 364.366005][ T29] audit: type=1326 audit(2000000315.960:11952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15377 comm="syz.0.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 364.378559][T15395] loop7: detected capacity change from 0 to 273 [ 364.389660][ T29] audit: type=1326 audit(2000000315.960:11953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15377 comm="syz.0.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 364.392890][ T29] audit: type=1326 audit(2000000316.010:11954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15377 comm="syz.0.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 364.444185][ T29] audit: type=1326 audit(2000000316.060:11955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15377 comm="syz.0.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 364.467917][ T29] audit: type=1326 audit(2000000316.060:11956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15377 comm="syz.0.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59acd3e969 code=0x7ffc0000 [ 364.510282][T15395] FAT-fs (loop7): Directory bread(block 68) failed [ 364.536153][T15395] FAT-fs (loop7): Directory bread(block 69) failed [ 364.553381][T15400] loop8: detected capacity change from 0 to 128 [ 364.569695][T15395] FAT-fs (loop7): Directory bread(block 70) failed [ 364.577134][T15395] FAT-fs (loop7): Directory bread(block 71) failed [ 364.591249][T15395] FAT-fs (loop7): Directory bread(block 72) failed [ 364.619130][T15395] FAT-fs (loop7): Directory bread(block 73) failed [ 364.637347][T15395] FAT-fs (loop7): Directory bread(block 74) failed [ 364.649779][T15400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.675806][T15395] FAT-fs (loop7): Directory bread(block 75) failed [ 364.689882][T15395] FAT-fs (loop7): Directory bread(block 76) failed [ 364.710608][T15395] FAT-fs (loop7): Directory bread(block 77) failed [ 364.765788][T15400] netlink: 'syz.8.4115': attribute type 4 has an invalid length. [ 364.902926][T15411] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4120'. [ 364.968256][T15419] loop7: detected capacity change from 0 to 512 [ 364.977098][T15419] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 364.990089][T15423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4125'. [ 365.026232][T15419] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.4122: invalid indirect mapped block 4294967295 (level 0) [ 365.058130][T15419] EXT4-fs (loop7): Remounting filesystem read-only [ 365.069224][T15419] EXT4-fs (loop7): 1 orphan inode deleted [ 365.075137][T15419] EXT4-fs (loop7): 1 truncate cleaned up [ 365.091181][T15419] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.103914][T15439] loop8: detected capacity change from 0 to 128 [ 365.146831][ T7184] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.166369][T15439] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 365.218542][T15439] ext4 filesystem being mounted at /595/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 365.253556][T15459] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4134'. [ 365.272566][T15452] loop7: detected capacity change from 0 to 1024 [ 365.280267][T15439] FAULT_INJECTION: forcing a failure. [ 365.280267][T15439] name failslab, interval 1, probability 0, space 0, times 0 [ 365.293112][T15439] CPU: 1 UID: 0 PID: 15439 Comm: syz.8.4130 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 365.293148][T15439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 365.293232][T15439] Call Trace: [ 365.293239][T15439] [ 365.293249][T15439] __dump_stack+0x1d/0x30 [ 365.293336][T15439] dump_stack_lvl+0xe8/0x140 [ 365.293361][T15439] dump_stack+0x15/0x1b [ 365.293383][T15439] should_fail_ex+0x265/0x280 [ 365.293498][T15439] should_failslab+0x8c/0xb0 [ 365.293610][T15439] __kmalloc_noprof+0xa5/0x3e0 [ 365.293631][T15439] ? ext4_find_extent+0x16b/0x7a0 [ 365.293676][T15439] ext4_find_extent+0x16b/0x7a0 [ 365.293704][T15439] ext4_ext_map_blocks+0x115/0x3620 [ 365.293726][T15439] ? _raw_spin_unlock+0x26/0x50 [ 365.293827][T15439] ? sched_balance_rq+0x1936/0x1e80 [ 365.293936][T15439] ? put_dec_trunc8+0x119/0x140 [ 365.293988][T15439] ? put_dec+0xd3/0xe0 [ 365.294017][T15439] ? xas_load+0x413/0x430 [ 365.294052][T15439] ? xas_load+0x413/0x430 [ 365.294156][T15439] ext4_map_query_blocks+0x71/0x170 [ 365.294188][T15439] ext4_map_blocks+0x24c/0xd00 [ 365.294218][T15439] ? security_compute_sid+0xdcf/0xe30 [ 365.294253][T15439] ? security_compute_sid+0xdcf/0xe30 [ 365.294326][T15439] ? __traceiter_kfree+0x2b/0x50 [ 365.294398][T15439] ext4_getblk+0x114/0x510 [ 365.294432][T15439] ext4_bread_batch+0x5c/0x320 [ 365.294465][T15439] __ext4_find_entry+0x840/0xf40 [ 365.294493][T15439] ? __rcu_read_unlock+0x4f/0x70 [ 365.294526][T15439] ? may_create+0x2a1/0x2f0 [ 365.294624][T15439] ext4_lookup+0xbb/0x390 [ 365.294650][T15439] ? __pfx_ext4_lookup+0x10/0x10 [ 365.294734][T15439] path_openat+0xcf0/0x2170 [ 365.294776][T15439] do_filp_open+0x109/0x230 [ 365.294815][T15439] do_sys_openat2+0xa6/0x110 [ 365.294848][T15439] __x64_sys_open+0xe6/0x110 [ 365.294953][T15439] x64_sys_call+0x14d4/0x2fb0 [ 365.294980][T15439] do_syscall_64+0xd0/0x1a0 [ 365.295005][T15439] ? clear_bhb_loop+0x25/0x80 [ 365.295033][T15439] ? clear_bhb_loop+0x25/0x80 [ 365.295060][T15439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.295131][T15439] RIP: 0033:0x7f2926b5e969 [ 365.295150][T15439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.295173][T15439] RSP: 002b:00007f29251c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 365.295193][T15439] RAX: ffffffffffffffda RBX: 00007f2926d85fa0 RCX: 00007f2926b5e969 [ 365.295233][T15439] RDX: 0000000000000000 RSI: 0000000000080140 RDI: 0000200000000000 [ 365.295248][T15439] RBP: 00007f29251c7090 R08: 0000000000000000 R09: 0000000000000000 [ 365.295263][T15439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.295351][T15439] R13: 0000000000000000 R14: 00007f2926d85fa0 R15: 00007ffed3a8f778 [ 365.295373][T15439] [ 365.295814][T15452] EXT4-fs: Ignoring removed i_version option [ 365.582027][T15452] EXT4-fs: Ignoring removed orlov option [ 365.589738][ T8274] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.600912][T15452] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 365.636450][T15452] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.657357][T15463] netlink: 244 bytes leftover after parsing attributes in process `syz.8.4137'. [ 365.714228][ T7184] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.779965][T15475] FAULT_INJECTION: forcing a failure. [ 365.779965][T15475] name failslab, interval 1, probability 0, space 0, times 0 [ 365.793079][T15475] CPU: 1 UID: 0 PID: 15475 Comm: syz.8.4142 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 365.793132][T15475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 365.793149][T15475] Call Trace: [ 365.793157][T15475] [ 365.793165][T15475] __dump_stack+0x1d/0x30 [ 365.793193][T15475] dump_stack_lvl+0xe8/0x140 [ 365.793217][T15475] dump_stack+0x15/0x1b [ 365.793234][T15475] should_fail_ex+0x265/0x280 [ 365.793295][T15475] should_failslab+0x8c/0xb0 [ 365.793333][T15475] kmem_cache_alloc_noprof+0x50/0x310 [ 365.793443][T15475] ? security_inode_alloc+0x37/0x100 [ 365.793468][T15475] security_inode_alloc+0x37/0x100 [ 365.793491][T15475] inode_init_always_gfp+0x4b7/0x500 [ 365.793591][T15475] ? __pfx_sock_alloc_inode+0x10/0x10 [ 365.793616][T15475] alloc_inode+0x58/0x170 [ 365.793670][T15475] __sock_create+0x122/0x5b0 [ 365.793696][T15475] sock_create_kern+0x38/0x50 [ 365.793726][T15475] start_sync_thread+0x7ee/0x1650 [ 365.793759][T15475] ? __pfx_sync_thread_master+0x10/0x10 [ 365.793800][T15475] ? should_fail_ex+0xdb/0x280 [ 365.793837][T15475] do_ip_vs_set_ctl+0x2c6/0x8c0 [ 365.793918][T15475] ? do_ip_setsockopt+0x1af3/0x2240 [ 365.793951][T15475] nf_setsockopt+0x196/0x1b0 [ 365.793999][T15475] ip_setsockopt+0x102/0x110 [ 365.794093][T15475] tcp_setsockopt+0x95/0xb0 [ 365.794150][T15475] sock_common_setsockopt+0x66/0x80 [ 365.794256][T15475] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 365.794354][T15475] smc_setsockopt+0x180/0x750 [ 365.794433][T15475] ? __pfx_smc_setsockopt+0x10/0x10 [ 365.794463][T15475] __sys_setsockopt+0x181/0x200 [ 365.794503][T15475] __x64_sys_setsockopt+0x64/0x80 [ 365.794542][T15475] x64_sys_call+0x2bd5/0x2fb0 [ 365.794628][T15475] do_syscall_64+0xd0/0x1a0 [ 365.794654][T15475] ? clear_bhb_loop+0x25/0x80 [ 365.794743][T15475] ? clear_bhb_loop+0x25/0x80 [ 365.794763][T15475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.794784][T15475] RIP: 0033:0x7f2926b5e969 [ 365.794801][T15475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.794892][T15475] RSP: 002b:00007f29251c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 365.794983][T15475] RAX: ffffffffffffffda RBX: 00007f2926d85fa0 RCX: 00007f2926b5e969 [ 365.794999][T15475] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 365.795011][T15475] RBP: 00007f29251c7090 R08: 0000000000000018 R09: 0000000000000000 [ 365.795048][T15475] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 365.795060][T15475] R13: 0000000000000000 R14: 00007f2926d85fa0 R15: 00007ffed3a8f778 [ 365.795147][T15475] [ 365.795159][T15475] socket: no more sockets [ 365.956515][T15482] FAULT_INJECTION: forcing a failure. [ 365.956515][T15482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.959545][T15475] IPVS: Error during creation of socket; terminating [ 366.084528][T15482] CPU: 0 UID: 0 PID: 15482 Comm: syz.0.4146 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 366.084564][T15482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 366.084620][T15482] Call Trace: [ 366.084628][T15482] [ 366.084674][T15482] __dump_stack+0x1d/0x30 [ 366.084701][T15482] dump_stack_lvl+0xe8/0x140 [ 366.084726][T15482] dump_stack+0x15/0x1b [ 366.084745][T15482] should_fail_ex+0x265/0x280 [ 366.084787][T15482] should_fail+0xb/0x20 [ 366.084823][T15482] should_fail_usercopy+0x1a/0x20 [ 366.084847][T15482] copy_page_from_iter_atomic+0x21b/0xff0 [ 366.084960][T15482] ? shmem_write_begin+0xa8/0x190 [ 366.085012][T15482] ? shmem_write_begin+0xe1/0x190 [ 366.085045][T15482] generic_perform_write+0x2c2/0x490 [ 366.085117][T15482] shmem_file_write_iter+0xc5/0xf0 [ 366.085191][T15482] do_iter_readv_writev+0x41e/0x4c0 [ 366.085308][T15482] vfs_writev+0x2c9/0x870 [ 366.085494][T15482] __se_sys_pwritev2+0xfc/0x1c0 [ 366.085617][T15482] __x64_sys_pwritev2+0x67/0x80 [ 366.085654][T15482] x64_sys_call+0x1cea/0x2fb0 [ 366.085682][T15482] do_syscall_64+0xd0/0x1a0 [ 366.085710][T15482] ? clear_bhb_loop+0x25/0x80 [ 366.085737][T15482] ? clear_bhb_loop+0x25/0x80 [ 366.085792][T15482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.085845][T15482] RIP: 0033:0x7f59acd3e969 [ 366.085864][T15482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.085887][T15482] RSP: 002b:00007f59ab3a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 366.085907][T15482] RAX: ffffffffffffffda RBX: 00007f59acf65fa0 RCX: 00007f59acd3e969 [ 366.085922][T15482] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 366.085938][T15482] RBP: 00007f59ab3a7090 R08: 0000000000000000 R09: 0000000000000003 [ 366.086034][T15482] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 366.086049][T15482] R13: 0000000000000000 R14: 00007f59acf65fa0 R15: 00007ffe510032a8 [ 366.086070][T15482] [ 366.343807][T15490] loop7: detected capacity change from 0 to 512 [ 366.352186][T15490] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 366.370002][T15490] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.4149: invalid indirect mapped block 4294967295 (level 0) [ 366.403557][T15496] siw: device registration error -23 [ 366.411059][T15490] EXT4-fs (loop7): Remounting filesystem read-only [ 366.432048][T15496] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 366.432048][T15496] program GPL not setting count and/or reply_len properly [ 366.455669][T15490] EXT4-fs (loop7): 1 orphan inode deleted [ 366.461533][T15490] EXT4-fs (loop7): 1 truncate cleaned up [ 366.471121][T15490] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.488416][T15498] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.538124][ T7184] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.552618][T15498] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.610950][T15498] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.626433][T15508] FAULT_INJECTION: forcing a failure. [ 366.626433][T15508] name failslab, interval 1, probability 0, space 0, times 0 [ 366.628136][T15507] loop3: detected capacity change from 0 to 1024 [ 366.639260][T15508] CPU: 1 UID: 0 PID: 15508 Comm: syz.7.4157 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 366.639295][T15508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 366.639369][T15508] Call Trace: [ 366.639378][T15508] [ 366.639388][T15508] __dump_stack+0x1d/0x30 [ 366.639419][T15508] dump_stack_lvl+0xe8/0x140 [ 366.639501][T15508] dump_stack+0x15/0x1b [ 366.639523][T15508] should_fail_ex+0x265/0x280 [ 366.639590][T15508] ? nf_tables_newtable+0x375/0xea0 [ 366.639681][T15508] should_failslab+0x8c/0xb0 [ 366.639720][T15508] __kmalloc_cache_noprof+0x4c/0x320 [ 366.639797][T15508] ? __nla_validate_parse+0x1652/0x1d00 [ 366.639844][T15508] nf_tables_newtable+0x375/0xea0 [ 366.639888][T15508] nfnetlink_rcv+0xb96/0x1690 [ 366.639950][T15508] netlink_unicast+0x59e/0x670 [ 366.640045][T15508] netlink_sendmsg+0x58b/0x6b0 [ 366.640090][T15508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.640147][T15508] __sock_sendmsg+0x142/0x180 [ 366.640181][T15508] ____sys_sendmsg+0x31e/0x4e0 [ 366.640241][T15508] ___sys_sendmsg+0x17b/0x1d0 [ 366.640356][T15508] __x64_sys_sendmsg+0xd4/0x160 [ 366.640385][T15508] x64_sys_call+0x2999/0x2fb0 [ 366.640541][T15508] do_syscall_64+0xd0/0x1a0 [ 366.640574][T15508] ? clear_bhb_loop+0x25/0x80 [ 366.640602][T15508] ? clear_bhb_loop+0x25/0x80 [ 366.640698][T15508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.640745][T15508] RIP: 0033:0x7f507e58e969 [ 366.640767][T15508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.640792][T15508] RSP: 002b:00007f507cbf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.640817][T15508] RAX: ffffffffffffffda RBX: 00007f507e7b5fa0 RCX: 00007f507e58e969 [ 366.640915][T15508] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 366.640931][T15508] RBP: 00007f507cbf7090 R08: 0000000000000000 R09: 0000000000000000 [ 366.641019][T15508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.641035][T15508] R13: 0000000000000000 R14: 00007f507e7b5fa0 R15: 00007ffcaa2e5de8 [ 366.641120][T15508] [ 366.872287][T15507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.911496][T15498] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.924755][T15507] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 366.941387][T15521] 9pnet_fd: Insufficient options for proto=fd [ 366.955712][T15507] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 483 with error 28 [ 366.968169][T15507] EXT4-fs (loop3): This should not happen!! Data will be lost [ 366.968169][T15507] [ 366.977969][T15507] EXT4-fs (loop3): Total free blocks count 0 [ 366.984189][T15507] EXT4-fs (loop3): Free/Dirty block details [ 366.990242][T15507] EXT4-fs (loop3): free_blocks=20480 [ 366.995601][T15507] EXT4-fs (loop3): dirty_blocks=496 [ 367.000903][T15507] EXT4-fs (loop3): Block reservation details [ 367.006919][T15507] EXT4-fs (loop3): i_reserved_data_blocks=31 [ 367.024040][T15498] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.082636][T15498] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.106668][T15498] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.109461][T15532] loop8: detected capacity change from 0 to 512 [ 367.122995][T15532] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 367.139895][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 367.143153][T15498] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.172443][T15532] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.4166: invalid indirect mapped block 4294967295 (level 0) [ 367.193557][T15532] EXT4-fs (loop8): Remounting filesystem read-only [ 367.203680][T15532] EXT4-fs (loop8): 1 orphan inode deleted [ 367.209493][T15532] EXT4-fs (loop8): 1 truncate cleaned up [ 367.216287][T15532] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.315150][ T8274] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.351977][T15546] loop8: detected capacity change from 0 to 512 [ 367.422203][T15546] EXT4-fs (loop8): orphan cleanup on readonly fs [ 367.443439][T15553] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.455099][T15546] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.4169: bad orphan inode 13 [ 367.467429][T15546] ext4_test_bit(bit=12, block=18) = 1 [ 367.472993][T15546] is_bad_inode(inode)=0 [ 367.477226][T15546] NEXT_ORPHAN(inode)=2130706432 [ 367.482262][T15546] max_ino=32 [ 367.485512][T15546] i_nlink=1 [ 367.489179][T15546] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 367.522269][T15553] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.533796][ T8274] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.561549][T15525] chnl_net:caif_netlink_parms(): no params data found [ 367.613469][T15572] loop8: detected capacity change from 0 to 512 [ 367.620785][T15572] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 367.632389][ T38] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.643195][T15572] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.4178: invalid indirect mapped block 4294967295 (level 0) [ 367.659848][T15567] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.672480][T15572] EXT4-fs (loop8): Remounting filesystem read-only [ 367.679214][T15572] EXT4-fs (loop8): 1 orphan inode deleted [ 367.680189][T15553] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.684963][T15572] EXT4-fs (loop8): 1 truncate cleaned up [ 367.700889][T15572] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.729230][ T38] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.761119][ T8274] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.780498][T15553] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.795566][T15567] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.807757][T15525] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.815034][T15525] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.839135][T15525] bridge_slave_0: entered allmulticast mode [ 367.848338][T15525] bridge_slave_0: entered promiscuous mode [ 367.856180][ T38] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.871051][T15525] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.878208][T15525] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.885544][T15525] bridge_slave_1: entered allmulticast mode [ 367.892629][T15525] bridge_slave_1: entered promiscuous mode [ 367.904254][T15567] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.932597][ T38] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.951253][T15525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.964554][T15525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.976400][T15553] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.990336][T15553] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.005570][T15567] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.020951][T15553] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.036551][T15525] team0: Port device team_slave_0 added [ 368.046403][T15553] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.058091][T15525] team0: Port device team_slave_1 added [ 368.092489][T15525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.099695][T15525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.125693][T15525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.137595][T15525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.144748][T15525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.171057][T15525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.177636][T15585] loop3: detected capacity change from 0 to 764 [ 368.199206][ T38] bridge_slave_1: left allmulticast mode [ 368.204895][ T38] bridge_slave_1: left promiscuous mode [ 368.210715][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.218766][ T38] bridge_slave_0: left allmulticast mode [ 368.224555][ T38] bridge_slave_0: left promiscuous mode [ 368.230321][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.231032][T15587] loop3: detected capacity change from 0 to 512 [ 368.247918][T15587] EXT4-fs (loop3): orphan cleanup on readonly fs [ 368.269726][T15587] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.4183: bad orphan inode 13 [ 368.296612][T15587] ext4_test_bit(bit=12, block=18) = 1 [ 368.302247][T15587] is_bad_inode(inode)=0 [ 368.306596][T15587] NEXT_ORPHAN(inode)=2130706432 [ 368.311671][T15587] max_ino=32 [ 368.314956][T15587] i_nlink=1 [ 368.323027][ T38] dvmrp0 (unregistering): left allmulticast mode [ 368.335567][T15587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 368.363602][T12147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.385262][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.401650][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.412199][ T38] bond0 (unregistering): Released all slaves [ 368.441262][T15525] hsr_slave_0: entered promiscuous mode [ 368.452453][T15525] hsr_slave_1: entered promiscuous mode [ 368.486221][ T38] IPVS: stopping master sync thread 15164 ... [ 368.509362][ T38] IPVS: stopping backup sync thread 15121 ... [ 368.729100][T15610] loop8: detected capacity change from 0 to 2048 [ 368.799823][T15610] loop8: p1 < > p4 [ 368.805435][T15610] loop8: p4 size 8388608 extends beyond EOD, truncated [ 368.890518][ T38] veth1_macvtap: left promiscuous mode [ 368.927483][ T38] veth0_macvtap: left promiscuous mode [ 368.965277][ T38] veth1_vlan: left promiscuous mode [ 368.987000][T15612] loop8: detected capacity change from 0 to 512 [ 369.009505][ T38] veth0_vlan: left promiscuous mode [ 369.047534][T15612] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.135667][ T38] pimreg (unregistering): left allmulticast mode [ 369.147229][T15612] ext4 filesystem being mounted at /607/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.231484][T15612] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #2: comm syz.8.4191: corrupted inode contents [ 369.302155][ T38] team0 (unregistering): Port device team_slave_1 removed [ 369.323356][T15612] EXT4-fs error (device loop8): ext4_dirty_inode:6103: inode #2: comm syz.8.4191: mark_inode_dirty error [ 369.393267][ T38] team0 (unregistering): Port device team_slave_0 removed [ 369.401800][T15612] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #2: comm syz.8.4191: corrupted inode contents [ 369.562606][T15612] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.4191: mark_inode_dirty error [ 369.578355][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 369.578371][ T29] audit: type=1400 audit(2000000321.190:12182): avc: denied { write } for pid=15611 comm="syz.8.4191" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 369.648874][ T8274] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.664927][ T29] audit: type=1400 audit(2000000321.230:12183): avc: denied { add_name } for pid=15611 comm="syz.8.4191" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 369.897788][T15633] 9pnet: Could not find request transport: r [ 369.914758][T15633] 9pnet: Could not find request transport: t [ 369.942495][ T29] audit: type=1326 audit(2000000321.560:12184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15636 comm="syz.9.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4dcfe969 code=0x7ffc0000 [ 369.966192][ T29] audit: type=1326 audit(2000000321.560:12185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15636 comm="syz.9.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4dcfe969 code=0x7ffc0000 [ 370.033225][T15637] __nla_validate_parse: 2 callbacks suppressed [ 370.033271][T15637] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4201'. [ 370.051455][ T29] audit: type=1326 audit(2000000321.610:12186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15636 comm="syz.9.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fcb4dcfe969 code=0x7ffc0000 [ 370.075237][ T29] audit: type=1326 audit(2000000321.610:12187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15636 comm="syz.9.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4dcfe969 code=0x7ffc0000 [ 370.098922][ T29] audit: type=1326 audit(2000000321.610:12188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15636 comm="syz.9.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcb4dcfe969 code=0x7ffc0000 [ 370.122623][ T29] audit: type=1326 audit(2000000321.610:12189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15636 comm="syz.9.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4dcfe969 code=0x7ffc0000 [ 370.146339][ T29] audit: type=1326 audit(2000000321.610:12190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15636 comm="syz.9.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb4dcfe969 code=0x7ffc0000 [ 370.169966][ T29] audit: type=1326 audit(2000000321.610:12191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15636 comm="syz.9.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4dcfe969 code=0x7ffc0000 [ 370.258074][T15638] vlan0: entered allmulticast mode [ 370.266221][T15638] dummy0: entered allmulticast mode [ 370.296760][T15639] pim6reg: entered allmulticast mode [ 370.323258][T15637] pim6reg: left allmulticast mode [ 370.489633][T15641] vlan0: entered allmulticast mode [ 370.554785][T15642] IPv4: Oversized IP packet from 127.202.26.0 [ 370.607424][T15648] siw: device registration error -23 [ 370.617403][T15648] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 370.617403][T15648] program GPL not setting count and/or reply_len properly [ 371.229433][T15567] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.245205][T15567] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.282389][T15567] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.326076][T15567] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.737977][T15676] SELinux: policydb string length 1852375040 does not match expected length 8 [ 371.758823][T15676] SELinux: failed to load policy [ 371.809028][T15676] sd 0:0:1:0: device reset [ 371.835328][T15676] set match dimension is over the limit! [ 371.896219][T15525] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 371.933404][T15525] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 371.961310][T15525] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 371.999285][T15525] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 372.100751][T15525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.119326][T15525] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.163459][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.170599][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.197167][T15525] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 372.207601][T15525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 372.251699][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.258861][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.325877][T15525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.514983][T15525] veth0_vlan: entered promiscuous mode [ 372.532791][T15525] veth1_vlan: entered promiscuous mode [ 372.565371][T15525] veth0_macvtap: entered promiscuous mode [ 372.580878][T15525] veth1_macvtap: entered promiscuous mode [ 372.610388][T15525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.620939][T15525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.630808][T15525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.641249][T15525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.721862][T15712] loop3: detected capacity change from 0 to 512 [ 372.730688][T15525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.744999][T15714] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.748934][T15712] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 372.762152][T15717] loop9: detected capacity change from 0 to 512 [ 372.776169][T15525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.786810][T15525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.796787][T15525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.807396][T15525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.818374][T15717] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 372.820139][T15525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.830877][T15712] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.4228: invalid indirect mapped block 4294967295 (level 0) [ 372.850428][T15712] EXT4-fs (loop3): Remounting filesystem read-only [ 372.850624][T15714] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.857116][T15712] EXT4-fs (loop3): 1 orphan inode deleted [ 372.872680][T15712] EXT4-fs (loop3): 1 truncate cleaned up [ 372.879444][T15712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.895516][T15714] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.906602][T15717] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.4227: invalid indirect mapped block 4294967295 (level 0) [ 372.907344][T15718] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 372.907344][T15718] program GPL not setting count and/or reply_len properly [ 372.925037][T15717] EXT4-fs (loop9): Remounting filesystem read-only [ 372.943592][T15717] EXT4-fs (loop9): 1 orphan inode deleted [ 372.949456][T15717] EXT4-fs (loop9): 1 truncate cleaned up [ 372.955746][T15717] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.956296][T15525] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.977220][T15525] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.985997][T15525] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.994780][T15525] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.033254][T15714] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.046050][T12147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.058023][T10880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.087242][T15731] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.094558][T15731] IPv6: NLM_F_CREATE should be set when creating new route [ 373.147532][T15743] FAULT_INJECTION: forcing a failure. [ 373.147532][T15743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.160764][T15743] CPU: 0 UID: 0 PID: 15743 Comm: syz.3.4236 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 373.160895][T15743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 373.160910][T15743] Call Trace: [ 373.160917][T15743] [ 373.161004][T15743] __dump_stack+0x1d/0x30 [ 373.161038][T15743] dump_stack_lvl+0xe8/0x140 [ 373.161129][T15743] dump_stack+0x15/0x1b [ 373.161152][T15743] should_fail_ex+0x265/0x280 [ 373.161260][T15743] should_fail+0xb/0x20 [ 373.161294][T15743] should_fail_usercopy+0x1a/0x20 [ 373.161367][T15743] _copy_to_user+0x20/0xa0 [ 373.161394][T15743] simple_read_from_buffer+0xb5/0x130 [ 373.161425][T15743] proc_fail_nth_read+0x100/0x140 [ 373.161489][T15743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.161512][T15743] vfs_read+0x19d/0x6f0 [ 373.161534][T15743] ? __rcu_read_unlock+0x4f/0x70 [ 373.161554][T15743] ? __fget_files+0x184/0x1c0 [ 373.161587][T15743] ksys_read+0xda/0x1a0 [ 373.161695][T15743] __x64_sys_read+0x40/0x50 [ 373.161727][T15743] x64_sys_call+0x2d77/0x2fb0 [ 373.161754][T15743] do_syscall_64+0xd0/0x1a0 [ 373.161781][T15743] ? clear_bhb_loop+0x25/0x80 [ 373.161834][T15743] ? clear_bhb_loop+0x25/0x80 [ 373.161862][T15743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.161888][T15743] RIP: 0033:0x7f35cd27d37c [ 373.161906][T15743] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 373.161924][T15743] RSP: 002b:00007f35cb8e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 373.161948][T15743] RAX: ffffffffffffffda RBX: 00007f35cd4a5fa0 RCX: 00007f35cd27d37c [ 373.161988][T15743] RDX: 000000000000000f RSI: 00007f35cb8e70a0 RDI: 0000000000000004 [ 373.162003][T15743] RBP: 00007f35cb8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 373.162017][T15743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.162032][T15743] R13: 0000000000000000 R14: 00007f35cd4a5fa0 R15: 00007ffe9a566a58 [ 373.162063][T15743] [ 373.197972][T15748] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4239'. [ 373.258008][T15751] loop9: detected capacity change from 0 to 512 [ 373.301302][T15753] siw: device registration error -23 [ 373.318909][T15751] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 373.413692][T15751] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.4241: invalid indirect mapped block 4294967295 (level 0) [ 373.431757][T15751] EXT4-fs (loop9): Remounting filesystem read-only [ 373.439263][T15751] EXT4-fs (loop9): 1 orphan inode deleted [ 373.445041][T15751] EXT4-fs (loop9): 1 truncate cleaned up [ 373.451432][T15751] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.482450][T10880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.574514][T15771] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4249'. [ 373.727320][T15777] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4251'. [ 373.770534][T15781] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4253'. [ 373.818952][ C1] ================================================================== [ 373.827059][ C1] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 373.834080][ C1] [ 373.836401][ C1] read-write to 0xffff888237c299e4 of 4 bytes by task 14235 on cpu 0: [ 373.844572][ C1] wq_worker_running+0x95/0x120 [ 373.849441][ C1] schedule_timeout+0xb7/0x170 [ 373.854217][ C1] msleep+0x50/0x90 [ 373.858132][ C1] nsim_fib_event_work+0x14a2/0x21a0 [ 373.863416][ C1] process_scheduled_works+0x4cb/0x9d0 [ 373.868881][ C1] worker_thread+0x582/0x770 [ 373.873476][ C1] kthread+0x486/0x510 [ 373.877540][ C1] ret_from_fork+0x4b/0x60 [ 373.881966][ C1] ret_from_fork_asm+0x1a/0x30 [ 373.886727][ C1] [ 373.889042][ C1] read to 0xffff888237c299e4 of 4 bytes by interrupt on cpu 1: [ 373.896582][ C1] kick_pool+0x49/0x2d0 [ 373.900732][ C1] __queue_work+0x8d6/0xb60 [ 373.905234][ C1] queue_work_on+0xd1/0x160 [ 373.909748][ C1] wg_packet_send_staged_packets+0x83d/0xab0 [ 373.915732][ C1] wg_packet_send_keepalive+0xeb/0x100 [ 373.921195][ C1] wg_expired_send_persistent_keepalive+0x3c/0x50 [ 373.927616][ C1] call_timer_fn+0x38/0x2c0 [ 373.932126][ C1] __run_timer_base+0x415/0x610 [ 373.936982][ C1] run_timer_softirq+0x31/0x70 [ 373.941755][ C1] handle_softirqs+0xb7/0x290 [ 373.946454][ C1] __irq_exit_rcu+0x3a/0xc0 [ 373.950959][ C1] sysvec_apic_timer_interrupt+0x74/0x80 [ 373.956599][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 373.962666][ C1] kcsan_setup_watchpoint+0x415/0x430 [ 373.968040][ C1] __tlb_remove_folio_pages+0x89/0x220 [ 373.973504][ C1] unmap_page_range+0xec0/0x27b0 [ 373.978442][ C1] unmap_single_vma+0x138/0x1d0 [ 373.983290][ C1] unmap_vmas+0x18a/0x2b0 [ 373.987811][ C1] exit_mmap+0x1b0/0x6c0 [ 373.992056][ C1] __mmput+0x28/0x1c0 [ 373.996043][ C1] mmput+0x40/0x50 [ 373.999764][ C1] exit_mm+0xe4/0x190 [ 374.003748][ C1] do_exit+0x55f/0x17c0 [ 374.007909][ C1] do_group_exit+0xff/0x140 [ 374.012417][ C1] get_signal+0xe59/0xf70 [ 374.016753][ C1] arch_do_signal_or_restart+0x97/0x480 [ 374.022307][ C1] syscall_exit_to_user_mode+0x68/0xb0 [ 374.027798][ C1] do_syscall_64+0xdd/0x1a0 [ 374.032314][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.038215][ C1] [ 374.040533][ C1] value changed: 0x00000000 -> 0x00000001 [ 374.046245][ C1] [ 374.048560][ C1] Reported by Kernel Concurrency Sanitizer on: [ 374.054710][ C1] CPU: 1 UID: 0 PID: 15785 Comm: syz.9.4255 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 374.067297][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 374.077354][ C1] ================================================================== [ 375.294600][T15714] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.306064][T15714] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.317379][T15714] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.328708][T15714] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0