last executing test programs: 5m8.285779997s ago: executing program 32 (id=509): mkdir(&(0x7f0000000140)='./control\x00', 0x1d1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) rmdir(&(0x7f0000000100)='./control\x00') syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eexBHTNR2l3hYdDewfD6X/OD3vuQ9BgbeMG/23/jq40Gvynr5NNbOnIm1cUR6kCLFWvzt83j19R9/euHWnbs32p3O9s2Urrdvt15LKW28+P17n37z0g/Ti+9+u/Hd+djbfH//161f9i7vXdn//fZH/Sr1qzQcTVOe7o1G0/xeWaSdfjXIUnqnLPKqSP1hVUwO9HvlaDyepXy4s94YT4qqSvlwlgbFLE1HaTqZpfzDvD9MWZal9UbwX3S/flDXdURdPx7noq7r+oloxMV4MtZjI5qxGU/F0/FMXIpn43I8F8/HlfmoVc8bAAAAAAAAAAAAAAAAAAAAThfn/wEAAAAAAAAAAAAAAAAAAGD1bt25e6Pd6WzfTOlCRPnlbne3u/hd9Nu96EcZRVyLZvwW89P/C4v6+lud7WtpbjO+KO//lb+/233sYL41/5zA0nxrkU8H8+ej8Wh+K5pxaXl+a2n+Qrzy8iP5LJrx8wcxijJ24s/sw/xnrZTefLtzKH91Pg4AAABOgyz9Y+n+Pcv+rb/IH+H5wKH99dm4ena1ayeimn0yyMuymBxbcS6O/S8UCsX/XKz6zsRJeHjRVz0TAAAAAAAAAAAAjuIkXidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8xgdSv") io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000}]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 4m50.416501973s ago: executing program 33 (id=778): timer_create(0x8, 0x0, &(0x7f0000bbdffc)=0x0) timer_gettime(r0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000027df9e8b8b7aed2ad8ed4fac52d80951cb89e73e8bb257"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001f80)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x7, 0x2, 0xf, "1000a87d827bc2c95a5947380b00"}) r3 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000f80)={{0x108, 0x8, 0xe2, 0xcf, 0x2b0, 0x2, 0xc7, 0x5}, "c6f93c9aeafe58ea61c8d27bb350b1dae2025ff0cf1fe7276654fc161d6c0dbf746e103b1bc5342646cc0c4bc1dc9eff5e43787543b4f182c04609bd9434323fe14fceeb98cf0d1ffb94c8a7ee9bbd5eee6aad495399cc9e09288b8704afdc85e6ca1dc5606a33ad76df69f9ded8f55114", ['\x00', '\x00', '\x00', '\x00']}, 0x491) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0x4}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0xffffffffffffffdb, 0x3, @val=0xffffffff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 4m43.755930071s ago: executing program 34 (id=844): chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x804) removexattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=@random={'system.', '&{&\x00'}) 4m17.066413017s ago: executing program 3 (id=1287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m14.921804729s ago: executing program 35 (id=1130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0), 0x0, 0x361, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000040)="f6f4e9a100000000002a8bc686ddb7dbfc007024", 0x0, 0x4, 0x0, 0x31, 0x0, &(0x7f0000000940)="01020ef222540f58f09046dc2ff1b910745539f08dcceb13d6572de6b1135d3bcaaaf48967d4d83bce18014a392a3bc0b8", 0x0}, 0x50) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000001050400000000000000000200000004001880240001801400018008000100e000000108000200e00000010c00028005000100000000001c000f800800024000000000080001"], 0x58}}, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) unshare(0x62040200) 4m1.007880369s ago: executing program 36 (id=1287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m37.251953449s ago: executing program 37 (id=1521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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") truncate(&(0x7f0000000280)='./file0\x00', 0x34) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="91", 0x1, 0x20004044, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x103) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10400, 0x124) r9 = dup(r8) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f00000005c0)={'ipvlan0\x00', 0x80}) 3m33.687606671s ago: executing program 38 (id=1558): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095", @ANYRESOCT], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) listen(r3, 0x5) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3m23.929086116s ago: executing program 39 (id=1632): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="80"], 0x1, 0x246, &(0x7f0000000580)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xa, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1ffffffffffffd6f, 0x1}}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000001c00000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r5}}, 0x20) 3m15.964865407s ago: executing program 40 (id=1723): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003d0007010000000000000000047c000008000880040003000c0001"], 0x38}}, 0xc000) 3m6.347751734s ago: executing program 6 (id=1999): r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(r0, &(0x7f0000000180)='./bus\x00', 0x40, 0xf7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15864}]}}]}, 0x44}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x12}}, 0x98}}, 0x0) 3m6.191165363s ago: executing program 6 (id=2002): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000100)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KDGKBMODE(r0, 0x4bfa, &(0x7f0000000080)) 3m6.061154051s ago: executing program 6 (id=2003): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) setgroups(0xfffffef9, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) personality(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89fe, &(0x7f0000000300)={'ip6gre0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x7691, &(0x7f0000000140)={0x0, 0x58fb, 0x10, 0x801, 0x23f}) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r2, 0x0, 0x23e0}, 0x18) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000200080009000d000000", 0x24) 3m5.849083312s ago: executing program 6 (id=2005): ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000eeffff635a752e75a55f000e000000000000000000615f00"], 0x0, 0x2c, 0x0, 0x1, 0xcdd6, 0x0, @void, @value}, 0x28) getrusage(0x1, &(0x7f0000000600)={{}, {0x0, 0x0}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r6 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r6, &(0x7f0000000300)={'#! ', './file0'}, 0x2) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r7) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000), 0xe) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @local}) write$tun(r10, &(0x7f00000006c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="f46982a175177f396df8696eae0cdb0bcf3d2c6dbd329518439abe67b6a24f6f06f4bd66aa260d0685197d4563ecabb7b70ae575608d205ab96adfb396a541c7a79347d621c92dd6e63be1468dfa7d2aaf59a22e4e7b505c4a528b6f00fb3457967cff67d091080223d54dbdca25598238b87cc478ac66830fea", @ANYRESDEC=r3], 0xfce) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014000000001208000300430000", 0x2f}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe45) memfd_secret(0x80000) 3m5.71620618s ago: executing program 6 (id=2006): r0 = socket(0x1d, 0x2, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000004000000060000000300000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000d9ac1c7600fb5c8772ec12317877a7ddf185d7efd9626e94c4ab3b15"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0010000000000000000040000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@bridge_getneigh={0x28, 0x1e, 0xc5dc5150425829dd, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x4}]}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) modify_ldt$read_default(0x2, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32=0x0], 0x48) modify_ldt$read_default(0x2, &(0x7f0000000380)=""/52, 0x34) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/11, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) modify_ldt$read_default(0x2, &(0x7f0000000300)=""/74, 0x4a) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000004c0)={'veth1_macvtap\x00', &(0x7f0000000580)=@ethtool_drvinfo={0x3, "7e68770f24ed7ad9f6ed8e02bbe61bd90428ec688c1541a5c435cf2a1b005674", "abd2efa8b83d3bf9e18c5ed05cb8c33371ff6d1ffb54d321e7a2b07451e327a9", "d2186d0d1f4b06a0b5ace3e8cdc3c579da6f09e3810603f1e7b41d3bf4577993", "85661daa0cf4a11883e992f52a6d53f3bd58181c1bb37f4abe71914b2a0b622c", "31975fb9326486012cfd56e6660ee53ce4778f15f1239e1357f0d4bea8373374", "aec613be39ebf44cd0c39e02", 0x2, 0xffffff2c, 0x40, 0xa1, 0xd}}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000000140), 0x5, 0x504, &(0x7f0000001480)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9sCWE0KoEqJHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lAMSPyJQg8TBaMaT1E3tJtokdhR/PtJo3ps3nu97cea9+Dn2C2BoXY2I3YgYi4h7ETGdHc9lW9xqb8l5z/ceLe3vPVrKRat155+5tDw5Fh2PSVzJrlmMiB9+N+InuVfjNrZ31har1cpmlp9t1jZmG9s7N1ZriyuVlcp6ubwwvzD3yc2Py2fW1vdqY1nqq8/+sPutnyXVmsqOdLbjLLWbXjiMkxiNiO+fR7ABGMnaMzboivC55CPi7Yh4P73/p2MkfTYBgMus1ZqO1nRnHgC47PLpHFguX8rmAqYiny+V2nN478RkvlpvNK/fr2+tL7fnymaikL+/Wq3MZXOFM1HIJfn5NP0iXz6SvxkRb0XEL8Yn0nxpqV5dHuQfPgAwxK4cGf//M94e/wGAS6446AoAAH1n/AeA4WP8B4DhY/wHgOHTHv8nBl0NAKCPvP4HgOFj/AeAofKD27eTrbWfff/18oPtrbX6gxvLlcZaqba1VFqqb26UVur1lfQ7e2rHXa9ar2/MfxRbD2e+vdFozja2d+7W6lvrzbvp93rfrRTSs3b70DIAoJe33nv651wyIn86kW7RsZZDYaA1A85bftAVAAZmZNAVAAbGal8wvE7xGt/0AFwSXZbofUmx2weEWq1W6/yqBJyza18y/w/DqmP+338Bw5Ax/w/Dy/w/DK9WK3fSNf/jpCcCABebOX6gx/v/b2f732ZvDvx4+egZT7o+bjfrXs6uggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHABHaz/W8rWAp+KfL5UingjImaikLu/Wq3MRcSbEfGn8cJ4kp8fcJ0BgNPK/y2Xrf91bfrDqZeK3r1ymByLiJ/+6s4vHy42m5t/jBjL/Wv84HjzSXa83P/aAwDHOxin033HC/nne4+WDrZ+1ufv34mIYjv+/t5Y7B/GH43RdF+MQkRM/juX5dtyHXMXp7H7OCK+2K39uZhK50DaK58ejZ/EfqOv8fMvxc+nZe198rP4whnUBYbN06T/udXt/svH1XTf/f4vpj3U6WX9X3Kppf20D3wR/6D/G+nR/109aYyPfv+9dmri1bLHEV8ejTiIvd/R/xzEz/WI/+EJ4//lK+++36us9euIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m85Rz/YeDf7x6fU3e5Ul7Z/sEb94TPu/fsL2/+Z/9370tdfE/+YH3eLn453XxE/GxG+cMP7i5O+KvcqS+Ms92n/c83/9hPGf/XXnlWXDAYDBaWzvrC1Wq5VNCYmLn0h+ZS9ANbomPutXrLHoXvTzD9r39JGiVuv1F/yse1GvHuMsZt2Ai+Dwpo+I/w66MgAAAAAAAAAAAAAAQFf9+MTSoNsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5fX/AAAA//+YXdZi") r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x5, &(0x7f0000000040)=0x40, 0x4) sendmmsg$inet(r10, &(0x7f0000000b40)=[{{&(0x7f0000000100)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @broadcast}}}], 0x20}}, {{&(0x7f0000000240)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x30000000}}], 0x18}}], 0x2, 0x40) r11 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) perf_event_open(0x0, r11, 0x0, 0xffffffffffffffff, 0x0) 3m5.089293666s ago: executing program 6 (id=2010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0), 0x0, 0x361, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000040)="f6f4e9a100000000002a8bc686ddb7dbfc007024", 0x0, 0x4, 0x0, 0x31, 0x0, &(0x7f0000000940)="01020ef222540f58f09046dc2ff1b910745539f08dcceb13d6572de6b1135d3bcaaaf48967d4d83bce18014a392a3bc0b8", 0x0}, 0x50) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000001050400000000000000000200000004001880240001801400018008000100e000000108000200e00000010c00028005000100000000001c000f800800024000000000080001"], 0x58}}, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000580)={0x4, &(0x7f0000000440)=[{0x7, 0x2, 0x5, 0x4}, {0x3, 0x27, 0x4, 0x10001}, {0x1, 0xfe, 0x2, 0x6}, {0x5, 0x1, 0x0, 0x7}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) 3m4.565891255s ago: executing program 41 (id=1868): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x1e7, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) lseek(0xffffffffffffffff, 0x6, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe, 0x0, @rand_addr=' \x01\x00'}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x0) syz_usb_connect(0x3, 0x26, &(0x7f0000000880)={{0x12, 0x1, 0x110, 0x5c, 0x6d, 0xd4, 0x40, 0x4dd, 0x9032, 0xd5b5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14, 0x1, 0xa, 0x81, 0x10, 0x9a, [{{0x9, 0x4, 0x8a, 0x5, 0x0, 0x2, 0xa, 0x0, 0x3, [@generic={0x2, 0x1}]}}]}}]}}, 0x0) 3m0.669181867s ago: executing program 3 (id=2011): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0x1001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) 3m0.213007753s ago: executing program 3 (id=2028): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@init_itable}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x200003, &(0x7f0000000080)={[], [{@smackfshat}]}, 0x1, 0x647, &(0x7f0000001b80)="$eJzs3c9vE1ceAPDvTH4nyyag1e6yhyXSagXSLgkJsEKrlYDjahFif9z2FEhAlEAQSdWGIjVI9FKp6qWHSj31UHrrn9Ai9dpDrz300lOFhKqKQ6locTW2J7Ed20mc2A7J5yOZvDfPM+/ZyZc3fn5vJoB9azz7J404HBG3k4jRirLeKBeOl5739Pt7V7JHEoXCf79L4t6byUrlsZLV1Epx559HI/kyjTjUs77exeW7N2bm5+fulPOTSzdvTy4u3z1+/ebMtblrc7em/zZ95vSp02emTmzr9RWKBorpCw9eeW307Yv//+iD58nUx19fTOJcvCi3LXtdtfsObKvm7D0bL9dfeFa5PXtfz2zz2LvFD6P538mapHYDu9bV8t9jGhG/i9HoqfhtjsZb/+5q44C2KiR5H7kFeX++5R2B3SVpKYwHd74hQIfl5wH5Z/t6n4PXS9t4RgJ0ypPzpQGAUuz3RUQe/72lscEYjGzr8NOkapwniYjtjcyVZHV88fnFB9kjGozDAe2xcj8f5a7t/5NibI7FYDE3/DStiv+04pFt/0+L9Y/X5MU/dM7K/Yj4fbn/748txf94Rfxfrnv0sxvWL/4BAAAAAABg5zw6HxF/rTf/L12d/9NfZ/7PSESc24H6G3z/N7S2JX1cTiQ7UB1Q4cn5iH/Unf+7Osd3rKecO1CcD9CXXL0+P3ciIn4dEceibyDLT9Uct3KG8PF3Dr3fqP7K+X/ZI6s/nwtYPtLj3pqFuLMzSzPbfd1AxJP7EX8ozv89Ut5SPf8n6/+TOv1/Ft+3N1nHoT8/vNSobOP4B9ql8GHE0br9/9rpdtL8+hyTxfOByfysYL0/vvHup43qF//QPVn/P9w8/geSyuv1LG7t+P0RcXK5t9CovNXz//7kfz358TOv54XJhertM0tLd6a31mZ46Vz+qXpBbwN5PBR/TpXi/9ifmo//rZ7/V8ThUOkqX5vy2xcj3zQq0/9D92TxP9uk///nv0q5tf6/KpGPCdQpWktMPxz7rFH9lzbV/58q9unHyluM/0GlddfjyL8/qx+Xg62ezQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUb5z0K8iSSdW02k6MRExEhG/ieF0fmFx6S9XF169NZuVFe//n+Z3+h0t5ZP8/v9jFfnpmvzJiDgYEe/1DBXzE1cW5me7/eIBAAAAAAAAAAAAAAAAAABglxgprvkvDNSu/89829Pt1gFt11v+Kd5h/+ltec/CQOnn0M41Buio1uMfeNlVx39/k2f2tb0tQIcdaFTw7HmhqLPNATrH+T/sXy3Gv68LYA/Q/8N+tckxvcF2twPoBv0/AAAAAADsKQePPPoqiYiVvw8VH1FeAPCJyf6w56XdbgDQNebwwv7Vu9DtFgDd4jM+kKymfqy72L/x7P+kPQ0CAAAAAAAAAAAAANY5erj++v+wNgD2vObr/83th72syfr/esHvcgGwhzS+9Ye+H/Y6n/GBjXp76/8BAAAAAAAAAAAAYBcYvHtjZn5+7s7i8u5MFMrqPedslxrWt53dV2ZqtvQ12yuN7v8KNk68aNP7HBG74wV2OpFfgmNre6Wt7BUr9Yu6+H8SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQ5ZcAAAD//+azJOw=") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x4001, 0x3, 0x200, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00'}, 0x2e8, 0x70, 0xd8, 0x0, {0xff0f000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000340)={0x0, 0xfffffffd, 0x80, 0x4, 0x1, "0062ba7d82000000070000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x12) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x200000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0xfd, @tick=0xfb, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x4a136964}, {}, {}, @time=@time}], 0x38) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'wlan0\x00', 0x1432}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00') preadv(r9, &(0x7f0000002240), 0x0, 0x29d3, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 2m59.117778525s ago: executing program 3 (id=2042): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb}}, &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000003000000080000000200000010000000", @ANYRES32, @ANYBLOB="00080000000000002000000000000000000000005382a628f9bfe7c10dfb9334404bd49d42c7b88e29f48f85d6ad591cf0f8b47c97aa7a116b718c2250ef28a9da0330ce0665d38c086e8deea57e4ff220d2f07c553f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdir(0x0, 0x170) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x1695, &(0x7f0000000100)={0x0, 0x0, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r7 = semget(0x0, 0x2, 0x20) semop(r7, &(0x7f0000000040)=[{0x2, 0x9, 0x1000}, {0x3, 0x6, 0x800}, {0x1, 0x2, 0x800}, {0x3, 0xf6d6, 0x1000}, {0x3, 0xf000, 0x1000}, {0x1, 0x8, 0x400}, {0x4, 0x3}, {0x1, 0x6, 0x1800}], 0x8) ptrace$cont(0x9, 0x0, 0x5, 0xffffffff) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) 2m56.20248955s ago: executing program 3 (id=2071): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x1d, 0x2, 0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000001340)={[{@grpquota}, {@user_xattr}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 2m55.880816719s ago: executing program 3 (id=2077): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r1 = epoll_create1(0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0x10000008}) 2m51.932431833s ago: executing program 42 (id=1989): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000380)="68cae72773a7cad3ea90599c92fb12128521451669eff238d7be3f1ff493fcc9e6b30d208e5d8b85ac10a350dd9d0aaf37d1dfeb3db6bc7e8f1d19f681561374e4b5109f4392bb030dc38b78914746f666f11705da21023b1977f5557f45f402163380cde404bccfbec486f15ddc", 0x6e) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0xf, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20004804) 2m48.972636401s ago: executing program 43 (id=2010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0), 0x0, 0x361, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000040)="f6f4e9a100000000002a8bc686ddb7dbfc007024", 0x0, 0x4, 0x0, 0x31, 0x0, &(0x7f0000000940)="01020ef222540f58f09046dc2ff1b910745539f08dcceb13d6572de6b1135d3bcaaaf48967d4d83bce18014a392a3bc0b8", 0x0}, 0x50) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000001050400000000000000000200000004001880240001801400018008000100e000000108000200e00000010c00028005000100000000001c000f800800024000000000080001"], 0x58}}, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000580)={0x4, &(0x7f0000000440)=[{0x7, 0x2, 0x5, 0x4}, {0x3, 0x27, 0x4, 0x10001}, {0x1, 0xfe, 0x2, 0x6}, {0x5, 0x1, 0x0, 0x7}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) 2m45.420290233s ago: executing program 1 (id=2161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 2m45.399741654s ago: executing program 1 (id=2162): timer_create(0x8, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000027df9e8b8b7aed2ad8ed4fac52d80951cb89e73e8bb257"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000001f80)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x7, 0x2, 0xf, "1000a87d827bc2c95a5947380b00"}) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) write$binfmt_aout(r1, &(0x7f0000000f80)={{0x108, 0x8, 0xe2, 0xcf, 0x2b0, 0x2, 0xc7, 0x5}, "c6f93c9aeafe58ea61c8d27bb350b1dae2025ff0cf1fe7276654fc161d6c0dbf746e103b1bc5342646cc0c4bc1dc9eff5e43787543b4f182c04609bd9434323fe14fceeb98cf0d1ffb94c8a7ee9bbd5eee6aad495399cc9e09288b8704afdc85e6ca", ['\x00', '\x00', '\x00', '\x00']}, 0x482) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001"], 0x17d4}}, 0x4040020) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0x4}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0xffffffffffffffdb, 0x3, @val=0xffffffff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 2m42.030410806s ago: executing program 1 (id=2170): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x145) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105072, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x2904, 0x4, 0x804, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 2m42.003507707s ago: executing program 1 (id=2191): r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2, 0x0, 0x1}, 0x18) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES32=r1], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000680)={[{@stripe={'stripe', 0x3d, 0x10}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8000000000000001}}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noquota}, {@discard}, {@nogrpid}]}, 0x1, 0x408, &(0x7f0000001180)="$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") r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='host1x_cdma_push_gather\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sync() r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000040000000000000000000000d500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='signal_generate\x00', r9, 0x0, 0xfffffffffffffffe}, 0x18) open(0x0, 0x14927e, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x20010, r8, 0x43b8f000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) lsm_list_modules(&(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=0x18, 0x0) fcntl$dupfd(r3, 0x0, r3) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m41.087559369s ago: executing program 1 (id=2200): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x1d, 0x2, 0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000001340)={[{@grpquota}, {@user_xattr}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) r2 = fspick(0xffffffffffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 2m40.88929066s ago: executing program 1 (id=2202): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x52, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}}, 0x0) 2m39.718903557s ago: executing program 44 (id=2077): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r1 = epoll_create1(0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0x10000008}) 2m24.553247588s ago: executing program 45 (id=2202): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x52, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}}, 0x0) 1m49.990120522s ago: executing program 8 (id=2999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000780)={{0x3, 0x3b}, 0x100, './file0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a0b04000000000000000002000000140000001100010000000000000000000000000a1b48f9ea161b1a1652ca7d50df8a"], 0x3c}}, 0x10) 1m49.960955573s ago: executing program 8 (id=3001): socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m49.898550587s ago: executing program 8 (id=3003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1], 0x28}}, 0x4000000) 1m49.83536383s ago: executing program 8 (id=3005): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') 1m49.801493713s ago: executing program 8 (id=3006): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$inet(0x2, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000600000000000000000085000000070000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000000000202020b01af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) r4 = gettid() pause() tkill(r4, 0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) 1m49.240205615s ago: executing program 8 (id=3010): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000067000000000000b70800000000000024d87399c70f2a663b05a7221482b77b8ad8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000df0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x1f, 0x2e, 0xc8, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x4800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r1}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000000f80)={{r0}, "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"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r6}, 0x55) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000040), 0x0, 0x0, 0x0) 1m48.181945244s ago: executing program 46 (id=3010): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000067000000000000b70800000000000024d87399c70f2a663b05a7221482b77b8ad8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000df0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x1f, 0x2e, 0xc8, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x4800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r1}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000000f80)={{r0}, "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"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r6}, 0x55) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000040), 0x0, 0x0, 0x0) 1m26.495317276s ago: executing program 9 (id=3345): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000300)={[], [{@fsname={'fsname', 0x3d, 'orlov'}}, {@pcr={'pcr', 0x3d, 0xc}}]}, 0x1, 0xbac, &(0x7f0000000bc0)="$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") syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01030004000000dbdf2501"], 0x28}}, 0x4000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x40) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6002000000140600fe8000000000000000000000000000bbfe8000000000000800000000000000aa00004e22eb96b6c229298bfb673c94af0959ca14e106439637181f98ae2c02282f2588d8178b948b7a11b08308a3d09d8af56b32d03a4f23cd3c99b5420c9928d99fc99ca5302a702f78d3061ef978679bb3f79bfe", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078fffc"], 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x7}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@nogrpid}]}, 0x1, 0x408, &(0x7f0000001180)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 1m25.530175951s ago: executing program 9 (id=3352): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) io_uring_setup(0x3c92, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x800, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46f6093c0effffffffffffff7f02003e0000000000090300000000000040000000000000009201000000000000ff0f00000e003800020008000600070005000000020000000d0000000000000010000000000000007f0000000000000005000000000000000100010000000000050000000000000007000000010001000800000000000000a70500000000000000000000000000000f00000000000000c31d000000000000ff0f000000000000469dada6fff8b90fe7d75110451b8e3898001c0500e95de0aaabf36304512100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e40100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/719], 0x2cf) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0010000000000000000000000000cd0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 1m25.387035789s ago: executing program 9 (id=3354): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x205, 0x2581) fcntl$dupfd(r0, 0x0, r0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]}) socket$nl_generic(0x10, 0x3, 0x10) 1m25.223629329s ago: executing program 9 (id=3356): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21085e, &(0x7f0000000440)={[{@nodioread_nolock}, {@data_writeback}, {@acl}]}, 0x1, 0x51c, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x3920e, 0xffffffffffffffff, 0x0, 0x0, 0x2}) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000010000000000000000001700000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000000c0)={0x80, @time={0x5, 0x4}, 0x3, {0x1, 0xcc}, 0x9, 0x2, 0xf}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000040), &(0x7f0000000180), 0x1000000}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200000308060001080006040002aaaaaaaaaa98ac1414bbaaaaaaaaaabbac"], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m25.098790446s ago: executing program 9 (id=3359): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x100000000}, 0x18) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sendmmsg(r4, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="9749279d88adcb23f48967bb320cb4f69bdf360e4ebf3d56f82dde7b8c9c58762ce6bb604dca0c64156323a7a9b8003d5009830bc59f57b9706894613f05afd44f6bd9dca4e5d330f2b41e1ce24857740f9368bc1cc11684528a6ebf59848241dc5f7887aed5091bdb107ce06ae6cb", 0x6f}, {&(0x7f0000000080)="d294d661c5a11a6cd701cab2e949e57a1a0cf854813a4044c07698414400407e61982aca19450cd115201562780945a263afa39cabcfab74cb0c99f0867f6bb9fbeb8d8d9d011c2911a3ef94bc654f96c6b9d3e0b7dc7b651c2470392442e4649844b3b53c4be0f6b9b24fbee0b0eb5cf2f174391a9d5382fa119328e2fe73", 0x7f}, {&(0x7f0000000100)="df58eefc90622d403fbb95f984598687b24dce64f0acfbbe6701c75d7aa8ce12a2c44ce825c85c0405d2310e4d41adfd36163f14dee4db47494c16454e26de029476d180a3fa0c16e48a855aafc74e143db68c58b3fab09c28633c25a7ff0902f07e0ea9c2d03e84969c696f7620111982bcde18363c4519a935", 0x7a}, {&(0x7f0000000180)="fbde8de03fa9e23056cb13e7116e47", 0xf}], 0x4, &(0x7f0000000200)=[{0x98, 0x10e, 0x400, "c77dcd64dd1f09a49eea0461f795f9d1d6e973ed6896fe952b941be1823bf43597aafc287cfbe8167cec2eda1326f520033995411fe2433c0be54e3e41c64774e9df92485d0854fe5af9b1eacfc59496f477d2c3ffbd2673e930b0db5a622d805011b10ac928ed962ca7cfdc70259a231ed425754a1d50242caad24d433f95e0db9e91af4c"}, {0xa8, 0x11, 0x3, "cd135967bca797490828c152d380d0050dc59267f0f3f4c156b45794a7d2fcf71444848ce10ff87276976ace91c4e811cb819b4051871ecfe7e01899cc9fdf28d3d36fce9c92afbca103332a8c70904b92054fac2f5fd9c012d74614b7d2b602abdd3dca5c2b58eda4be4653fe74cce74ebf51d958838414871ecd116a4dffbf36d53357aa08c2f33a975309214440ec6de16a512f0a2a"}, {0x48, 0x10f, 0x1, "11f62284d7520503f18c680e44faf19aaf820b291780a7e45677bd4f09f4af905963f99f40b2898e3e9eba2782110a94d772d96aed"}, {0xf0, 0x11, 0x4, "36c5f27461ae66d4bd42a173dc7661ab1a8fd7d01003d7ba514055bc763cd8fbfa2f71644b832c59be7483364e029666d9b177f2ac6f5cd495e91f7a05233eb0b5f8228559652d0f5eaa3751a53bfadff58801d307c067e76f07f9980fd07f7d0b50db22c703d4ed33d88d145734a0a7864d7c3ee13e57fca4c6cb902e9143c15ae047fda9667519d4f0bb215c001fcc48fa031bccf0a22a6e48b95269e2fe5142fe879fed953a106c3b187dad93b13be4ddd43d599b86d19dfd68918db8e1a95ce3027b6bb2c608c5ba24fc1c846fb714440dd5b06516fbe83448"}, {0x20, 0x110, 0xb915d21, "615f86b65f6b79770e26c8"}], 0x298}}, {{&(0x7f00000004c0)=@llc={0x1a, 0x335, 0x7, 0x5, 0x1, 0x0, @broadcast}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000540)="c21bf05d967c50a9717c87026c81ae542419f0f24613c5378f94fd3c844ce4d9c2bac253d72bb3b7266d0514962c5a51833bf26995d0bec599fad46850be01c6aa2c4e8153c43c067914c2cad51efdcaad771e24118b1419d947dc4e656059a9e28a6e69e5ce0b4c011f709acb6dbadfb438e678885f2465189f10fe975087ec4738f09e27cccd2c8462f459f73311cc86e42ac56319c2d8164a1752f3cad3dd3ed8260c6421f185d5e41c8dbb840f54ac71cf095727d5d127f4021d0373afac9031da4572d9df0bcfdbced3871b94510f69010952baba2e8746cb48dea5288a", 0xe0}, {&(0x7f0000000640)="75fa6d4bd873c9d3b51ea24eaa65d0d099b285ed7c816445f1a9e9c44bcf7a696bae7047b80276d6cec91a04690346f243629a6ddd1280c082f30631315f4d3170992b6a3cf4de9ef2eb14a548d362fb74dd656952714ef0171e2b03cc2aee29bc400150780a6aec92438783f33a0bdbb5561006dd7a558b2476efaed59bbe7bf5de63cc69d54f84b44a608fcb0d2d0d9bc2a3428e8250210600a51f32d160a7424d1d4943e01dc24faf4d48a971a09e1eae8676057e2a9def38edbc12a08da592add2", 0xc3}, {&(0x7f0000000740)="261b97d0fe1aae0006dcfbf998f97e992c19bd3441d18b928daf2705fceda061568646df5d53f6a93a98505e46c99b2d2bdced9fcf15986cdc59a334c0027481f128ca9a20a3af29b8eafd8567a86456215c85f1038023e7bf6c566a5082550e0f1c269b06cdc7c73b2c3074742a6bb41f", 0x71}, {&(0x7f00000007c0)="dd5f113eb3ab093f4acfb6348f7617eb2cf72e715034179ea58dc9c2ab3e096c6323cc10aa2146cb06deac53230b6cfb00a84e2c6cef151b4200ec15d276d284b567460f2b697232a6ba77590157f7a62543d2ef8bb0c109a39a5bfdd38b08002f3a5285cf80e5c6755b69fb8864b7335bf7a26dc4c93d130be3e23eb586130eb014f2d6c0", 0x85}, {&(0x7f0000000880)="ea8df01940f5730e36b86a89beb1b71ec1ecf9034d7580f829a8fc396e6fc2c905e5fb9d0ac7e52bee2086c3780638872a62064072541d96664a9b2f99d9c01c2c724efd2185d420b19c9b7c97a2bdbdf69919be99441c946dfee28850c44f1f76ec7d4973ae180900572c94b7c8c47d3f21aa4a102d1f9a4ab25ef8a1819f09547ff94783f282611a2f6e7a3fbdfec4f97957fc00d754bc13b7c18234c52e84ea7e009296615cacbb0d889de143d4cbb88260109814b555c04b78c896d89d8562fb0262eba03fed881f6b8d026fcb0ca083cdf71a834bfed756a32020fb4aed73e0", 0xe2}, {&(0x7f0000000980)="c6771da6780db480445e4a30c8ccb7eba083e2362722909680093e6384ee4c2b47c99a91a44ffeb1767802e8c80746a4656b63bc0c532804b4901aea2bc2498701bfe187f4b52a470a31660c93684cbe11c78b4a21f2e66abb5456d06e422403c2046bdf0fbc3ccdb788469331f0799b11bdc1ddc33c2922294f8fddb20a40da31141baf1cfee8644cbee818f586aa6230e259db8beaba43dfcec06b", 0x9c}], 0x6, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1d8}}, {{&(0x7f0000000cc0)=@ethernet, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="a8701cc4cb6eafeb30e54449ca4e2487a2224d483df4488dea715cca89ea7522bc8e2ab9e8dfb5b206ca1421f4e6c100dcf9648f50f369", 0x37}, {&(0x7f0000001d80)="35cb572341d78d4d5f163c0db41569a14a09d26de97750361879ce84432f786715461c5ef7774bb38fe9d975daa2d34c5668aa77b6788ebe17c24915a36ba6", 0x3f}, {&(0x7f0000001dc0)="edc9df37f735fae09ccbee688fe7ac34196ba697f8efdf4ceabdbcbd1d0d179aff652fd84f07b569ec7e80be2e2e55e97daf4ddc827e485bc165dde833e740310b8daa758fa8225514f591289cf89811ee4867fa5c1cb2454a9ce52a75dbab5e45c7f3732793b36eebc9f441e58d79e1ed75e4c55c3be195a57515e7c30aea0e7741be0b8620690162c5fc8c9143a5ec07e3a0bd1d9fdad1efa9426a9c905f79f312f246b69c2f0a862f46e95b44130b31b050625cb1444b525e9f", 0xbb}], 0x4}}], 0x3, 0xc884) 1m24.821373541s ago: executing program 9 (id=3363): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xcb}, {}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x1, 0x6c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1m24.821016301s ago: executing program 47 (id=3363): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xcb}, {}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x1, 0x6c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3.447159354s ago: executing program 4 (id=4651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.696883277s ago: executing program 0 (id=4671): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000300)={[], [{@fsname={'fsname', 0x3d, 'orlov'}}, {@pcr={'pcr', 0x3d, 0xc}}]}, 0x1, 0xbac, &(0x7f0000000bc0)="$eJzs3M1vVOUaAPDnnE5Lob203NzceyEmNjGI0TgUSjRhBa6NmuiCJbWdkqbDh21NbMOi4F5dGOOCxPAnmLgXF65MXOBC8S8gRmKIbsDFmDMfZaAzpcBMXz5+v+Tted/zzvR5njlpz3kncyaAZ9ZE8SOP2BsRJ7OIseb+PCKG6r3hiLXG427fPD9TtCxqtXf/yCKLiFs3z8+0flfW3I40B8MRcfWNLP798ca4SyurC9PVamWxOT64fPrcwaWV1VfnT0+fqpyqnDky9fqRqdempnpY6/Vz73/53E9vvXjx8ieTb3+x+4csjsVoc669jkdVa76IEzGx/pq0K0XEdK+CJTbQrKe9zqyUMCEAADaVt13D/TfGYiDuXLyNxfc/J00OAAAA6InaQEQNAAAAeMplm6//h709AAAAAE+61ucAbt08P9NqaT+RsL1uHI+I8Ub9taxxj3NjphRr9e1wDEbErj+zaL+tNWs87ZFNFJG++bFStOjxfchbsXYhIv7f6fhn9frH63dxb6w/j4jJHsSfuGf8JNV/rAfxU9cPwLPpyvHGiWzj+S9fv/6JDue/Uodz18NIff5rXf+1vtvmdof6B7pc/72zxRj7/n75are59uu/E5/+OlvEL7aPVNQDuHEhYl+pU/3Zev1Zl/pPbjHGyMz1S93mivqLelttu+uvXY7YH53rb8k2+36ig3Pz1cpk42eXGPu/O3GgW/z241+0In5rLbAdiuO/q0v99zv+57YYY/x/v+/tNnf/+vPfhrL36r2h5p6PppeXFw9FDGVvbtx/ePNcWo9p/Y6i/pde2Pzvv1P9xf+EtebrUKwFLjS3xfjiPTFH9h/++uHr76+i/tn68S898PH/bIsxvvr20gfd5lLXDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCTIY+I0cjy8no/z8vliJGI+E/syqtnl5ZfmTv74ZnZYi5iPAbzuflqZTIixhrjrBgfqvfvjA/fM56KiD0R8fnYzvq4PHO2Opu6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaNRMRoZHk5IvKI+Gssz8vl1FkBAAAAPTeeOgEAAACg76z/AQAA4Om3pfV/3v88AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGrtef7KtSwi1o7urLfCUHNuMGlmQL/lqRMAkhlInQCQTCl1AkAy1vhA1nl3rdbsDHd95o7+JAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAY+nA3ivXsohYO7qz3gpDzbnBpJkB/ZanTgBIZiB1AkAypdQJAMlY4wPZ3cMNbwsMd33mjr7kAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDjabTesrwcEXm9n+flcsS/ImI8BrO5+WplMiJ2R8QvY4M7ivGh1EkDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQc0srqwvT1WplUWfzzvDjkYaOzvZ0Uv9nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAghaWV1YXparWyuJQ6EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC1pZXVhelqtbJ4v87agzz47k7qGgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASOefAAAA//+4VgNX") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000540)=""/167, 0xa7}], 0x2}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 2.507214497s ago: executing program 4 (id=4673): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x725e65a6, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5", 0x1b, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r6}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) recvfrom$inet6(r3, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='q', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 2.501819248s ago: executing program 0 (id=4675): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)="aa1d484e", 0x4}], 0x2) 2.4576029s ago: executing program 0 (id=4676): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d00e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) writev(r2, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r1, r2, 0x0) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x6, r1}, 0x10) 2.452843111s ago: executing program 0 (id=4679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f0000000140)="d0b4163e96457321d877d01ac22c", 0xe, 0x40000, &(0x7f00000001c0)={0x11, 0x1c, r12, 0x1, 0x70, 0x6, @local}, 0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12}}, 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r4, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xec, r7, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xa}, @ETHTOOL_A_LINKINFO_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xc}, @ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x81}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7f}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r15 = fsmount(r5, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r15}}, 0x58) 2.408681003s ago: executing program 0 (id=4681): syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x3, 0x115}, &(0x7f0000000400), &(0x7f0000000040)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = semget$private(0x0, 0x4000000009, 0x408) semop(r3, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) semtimedop(r3, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001780)={{}, &(0x7f0000001700), &(0x7f0000001740)='%pB \x00'}, 0x20) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40880, 0x0) ioctl$TCSBRK(r4, 0x5409, 0x3) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b5f5d089c30c0a8f1e5eedce31daa46fffb81d235405560a2c0f7d1b9a88a30f7e7f60d961b3554c50e2ca6404bcd0de1fb3f20e20532ba69b52af8723b3c127f0072ec579056017614d307c768a8f1f3f219b6c03559d7396641e0416c631ff50d1e03e1ce1faff17af4efdd921069c9fb3ceba9038396364babaa6a7397a9af10eec5ddd069a733a59a708b374f0"], 0x38}}, 0x40000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pause() ptrace(0x10, r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) ptrace(0x10, r6) getdents64(r2, 0xfffffffffffffffe, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='ext4_es_remove_extent\x00', r8}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e21, 0x21, @empty, 0xffff}}, 0xffffffc0, 0x1, 0x72597d2a, 0x7, 0x0, 0x6, 0x7}, &(0x7f00000002c0)=0x9c) unshare(0x6040580) 2.181819146s ago: executing program 0 (id=4684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.160447797s ago: executing program 7 (id=4685): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpquota}, {@lazytime}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000a40)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = socket(0x2b, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fsopen(&(0x7f0000000080)='efivarfs\x00', 0x1) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r2, &(0x7f0000000080)={0x2000a212}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x8, 0x2, 0x5}) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 1.537063432s ago: executing program 7 (id=4690): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 1.527899203s ago: executing program 4 (id=4691): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) 1.504418724s ago: executing program 4 (id=4692): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) listen(0xffffffffffffffff, 0x6) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x6fcf, 0xef, &(0x7f0000000340)=""/239, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xd, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[r1, r3, r1, r3], &(0x7f0000000580)=[{0x4, 0x3, 0x1, 0x8}, {0x4, 0x2, 0xf, 0xa}, {0x5, 0x4, 0x3, 0x4}, {0x3, 0x1, 0x10, 0x8}], 0x10, 0x5, @void, @value}, 0x94) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000000680)) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r5, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) ptrace(0x10, r0) 1.467473836s ago: executing program 2 (id=4693): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) setgroups(0xfffffef9, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) personality(0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fe, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x7691, &(0x7f0000000140)={0x0, 0x58fb, 0x10, 0x801, 0x23f}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r2, 0x0, 0x23e0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000200080009000d000000", 0x24) 1.40654434s ago: executing program 7 (id=4694): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x19f, &(0x7f0000000100), 0x80, 0x550, &(0x7f0000000700)="$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") r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000440)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) 1.288542127s ago: executing program 2 (id=4695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 581.032107ms ago: executing program 5 (id=4697): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a404ac, &(0x7f00000007c0)=ANY=[@ANYRES16, @ANYBLOB="7ddbf02741261ff34705529ce7bb34135983bc58624e2b790bdd5ffb463f54df508070d7eac028ee5742140663e250652aa760f51feba59b378b6e9365c6cd0f5982bf1ff47dd47aeb99446a41368af239c99a8b2e2702325b28c18ebdc3dd6c017162f85354f5d2866038a3657a467c2214dab396d22ddc93b05c92be86048e0521a4df653d222e71f046c5d558b48bfe4258", @ANYRES32, @ANYRES32, @ANYRES8, @ANYRESDEC], 0xfe, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) 580.347676ms ago: executing program 4 (id=4698): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 541.563969ms ago: executing program 7 (id=4699): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9", 0x2a}], 0x1) 473.445813ms ago: executing program 7 (id=4700): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000000000000000a0000070900010073797a31000000005800048054000180090001006d657461000000004400028008"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x20046080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 472.759053ms ago: executing program 7 (id=4701): r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2, 0x0, 0x1}, 0x18) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES32=r1], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000680)={[{@stripe={'stripe', 0x3d, 0x10}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8000000000000001}}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noquota}, {@discard}, {@nogrpid}]}, 0x1, 0x408, &(0x7f0000001180)="$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") r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='host1x_cdma_push_gather\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sync() r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000040000000000000000000000d500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='signal_generate\x00', r9, 0x0, 0xfffffffffffffffe}, 0x18) r10 = open(0x0, 0x14927e, 0x0) ftruncate(r10, 0x8012007ffb) r11 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x20010, r8, 0x43b8f000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) lsm_list_modules(&(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=0x18, 0x0) fcntl$dupfd(r3, 0x0, r3) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 458.303163ms ago: executing program 4 (id=4702): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x725e65a6, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5", 0x1b, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r6}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) recvfrom$inet6(r3, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='q', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 437.133635ms ago: executing program 5 (id=4703): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700", 0x1d}], 0x1) 407.115457ms ago: executing program 5 (id=4704): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 333.624871ms ago: executing program 5 (id=4705): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x840) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d00e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) write$binfmt_script(r2, &(0x7f0000000780)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) writev(r2, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r1, r2, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, r0, 0x6, r1}, 0x10) 321.361942ms ago: executing program 2 (id=4706): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)}], 0x1) 267.017494ms ago: executing program 2 (id=4707): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = io_uring_setup(0x2cb4, &(0x7f00000003c0)={0x0, 0x2656, 0x40, 0x1, 0xd7}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000001480)=[@ioring_restriction_register_op={0x0, 0x2e}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r4}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) socket$inet6(0xa, 0x80003, 0xff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x8000}, 0x18) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r7, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", '\x00\t\x00', "066580001e00"}, 0x38) 266.420234ms ago: executing program 5 (id=4708): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$packet(r0, 0x0, 0x0, 0x20004870, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) 220.655387ms ago: executing program 5 (id=4709): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) listen(0xffffffffffffffff, 0x6) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x6fcf, 0xef, &(0x7f0000000340)=""/239, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xd, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[r1, r3, r1, r3], &(0x7f0000000580)=[{0x4, 0x3, 0x1, 0x8}, {0x4, 0x2, 0xf, 0xa}, {0x5, 0x4, 0x3, 0x4}, {0x3, 0x1, 0x10, 0x8}], 0x10, 0x5, @void, @value}, 0x94) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000000680)) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r5, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) ptrace(0x10, r0) 192.776479ms ago: executing program 2 (id=4710): syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x3, 0x115}, &(0x7f0000000400), &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x4000000009, 0x408) semop(r1, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) semtimedop(r1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001780)={{}, &(0x7f0000001700), &(0x7f0000001740)='%pB \x00'}, 0x20) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40880, 0x0) ioctl$TCSBRK(r2, 0x5409, 0x3) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b5f5d089c30c0a8f1e5eedce31daa46fffb81d235405560a2c0f7d1b9a88a30f7e7f60d961b3554c50e2ca6404bcd0de1fb3f20e20532ba69b52af8723b3c127f0072ec579056017614d307c768a8f1f3f219b6c03559d7396641e0416c631ff50d1e03e1ce1faff17af4efdd921069c9fb3ceba9038396364babaa6a7397a9af10eec5ddd069a733a59a708b374f0"], 0x38}}, 0x40000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pause() ptrace(0x10, r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) ptrace(0x10, r4) getdents64(r0, 0xfffffffffffffffe, 0x0) 0s ago: executing program 2 (id=4711): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0xfffffffffffffffc) r1 = syz_io_uring_setup(0x1608, &(0x7f0000000000)={0x0, 0x3719, 0x1000, 0x3, 0x334}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x0) recvfrom$inet(r0, &(0x7f0000000100)=""/52, 0x34, 0x20, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x9, 0x40) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x6c800, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @mcast2, 0xe}, 0x1c) (async) getsockname$l2tp(r2, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) (async) shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0xc}}, './file0\x00'}) (rerun: 64) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000300)='vxcan0\x00', &(0x7f0000000340)='.}[*\x00', 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000003c0)={0x318, 0x2c, 0x100, 0x70bd2b, 0x25dfdbfb, {0x1d}, [@typed={0x8, 0x68, 0x0, 0x0, @u32=0x9}, @nested={0x88, 0x50, 0x0, 0x1, [@generic="01a0a23286842084f6761822c70e14fadf12e0b5d9fd9843631300f59164010191624691245a8cc74749106ab211dd2079c898ef448d76c2fae46cc194c32637704bac59cbd2cb67be0e6c704d4aaa9bd474d960ddbde79396e5baf1c0b0680878e84134d6a6735f01f54b32838f29b1303ae479a082c610613a2e2844ee400a", @typed={0x4, 0x2d}]}, @typed={0xc, 0xd1, 0x0, 0x0, @u64=0x2}, @generic="e924355d07b74351f443d3db1277c57deae11a2c2fd435e1a5720e26933116be01353242de7dca55f74247000f6d117870d224dc7b867ebc6dcb95101c1ffbdfdb964201d4ead70b4b7a101fced4d82ff9a89faf839c7a597fa5c30cd900f914e1ce736cdcdf4451f0e993f33133c30277b575c02d5274f0d52097e0d93e26fe6add4adb1d51cc02d006f1bd05", @nested={0x1d5, 0xea, 0x0, 0x1, [@generic="3ad5012a74cedc210169195e6cf53e21433d677db663eccce096ee0040ce8a42ebb5b31e55d552ff3c0aaca41c304260c73599139b56a891f6bfe726b70767c0a9a686162a6616266505131def38e4275d27fb7d9d1339e7e113644d53d964b10e06c1d4ca34fc66c90607dc7d2de0b3f53c52214136cd6d07da5cb397ba5e170991202b503600cc5eac4158eb0560c0b5bbfe3b8acfee9d27d543eb4527428aee71d61c1a87e4582d1656c74ec3af706366c968305abe3c82e36cb62e4028b99cf4d42a62b69a721fbfff14051355b2f77a599ab104cd2aaa4c170298b0f67511", @typed={0x8, 0x8b, 0x0, 0x0, @u32=0xfffffffc}, @generic="c84eb9005c465f7e9e0e0f3b4a91100caf0042f04ab75212d31368caad4ecd91b27f9de419f3df6e96e153cac28802add905efa8a502fa1fe16bf8c4b24b62b8e853f5cd6eada5ae9289f1ec9025dbe3a0b9fba9d1c54731cf00b0ed34fdd8254b82e7f9c83a546083918128f9c6e45c21a6572f5d0fe9284e3d12ebc4a9676019b65789b670e5f51521e7cce2c581432b18a08a6a8565c7f54291aa14e63bb2702ef5a39b8263c20e19e91fab27aa065debf262ef6858de6612f53d89dcffa88125650544e1b6b9730e9c70f4b28d66b7c5f4c63560f9011b3a316271bf0c7ce3ca4754", @nested={0x4, 0x148}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x4048040}, 0x800c5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000007c0)={0x7, &(0x7f0000000780)=[{0x3, 0x7e, 0x32, 0xf8}, {0x4, 0xd, 0x0, 0x3}, {0x3, 0x0, 0x1, 0xeb2c1017}, {0xe529, 0xa, 0x9, 0x400}, {0xf1a4, 0x0, 0xd, 0x6}, {0x6, 0x3, 0xc1, 0xfbe}, {0x8, 0x2, 0xa, 0x7}]}) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = openat(r2, &(0x7f0000000800)='./file0\x00', 0x80, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000840)=r4, 0x1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000880)={0x0, 0xc, "e291e02464467fc845c69268"}, &(0x7f00000008c0)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000900)={r5, 0x9, 0xd, 0x2}, &(0x7f0000000940)=0x10) (async) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000009c0), r4) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, r6, 0x100, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00'}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000ac0)=0x8, 0x4) (async, rerun: 64) socket(0x26, 0x800, 0x6) (async, rerun: 64) r8 = io_uring_setup(0x28cb, &(0x7f0000000b00)={0x0, 0xa1cf, 0x80, 0x2, 0x1b7}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000001e40)={0x7fffffff, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000b80)=""/224, 0xe0}, {&(0x7f0000000c80)=""/116, 0x74}, {&(0x7f0000000d00)=""/61, 0x3d}, {&(0x7f0000000d40)=""/12, 0xc}, {&(0x7f0000000d80)=""/4096, 0x1000}], &(0x7f0000001e00)=[0x3, 0x712d, 0x1, 0x2000000000, 0x51], 0x5}, 0x20) (async) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001ec0), 0x8100, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001e80)='fou\x00', 0x0, r9) kernel console output (not intermixed with test programs): ="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 348.663028][ T29] audit: type=1326 audit(1740033038.134:17382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.5.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 348.663081][ T29] audit: type=1326 audit(1740033038.134:17383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.5.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 348.663112][ T29] audit: type=1326 audit(1740033038.134:17384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.5.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 348.663147][ T29] audit: type=1326 audit(1740033038.134:17385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.5.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 348.663222][ T29] audit: type=1326 audit(1740033038.134:17386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.5.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 348.663257][ T29] audit: type=1326 audit(1740033038.134:17387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.5.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 348.707238][T10581] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.746495][T15689] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3900'. [ 348.972172][T15677] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3900'. [ 349.108719][T15699] loop7: detected capacity change from 0 to 764 [ 349.229066][T15705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3909'. [ 349.250348][T15705] batadv0: entered promiscuous mode [ 349.258852][T15705] macvtap1: entered promiscuous mode [ 349.264328][T15705] macvtap1: entered allmulticast mode [ 349.269780][T15705] batadv0: entered allmulticast mode [ 349.327546][T15705] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 349.359746][T15708] batadv0: left allmulticast mode [ 349.364891][T15708] batadv0: left promiscuous mode [ 349.474672][T15710] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 349.507715][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3911'. [ 349.883956][T15731] loop0: detected capacity change from 0 to 4096 [ 349.884258][T15731] ext4: Unknown parameter 'fsname' [ 349.931908][T15731] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3919'. [ 349.935858][T15731] loop0: detected capacity change from 0 to 512 [ 349.936223][T15731] EXT4-fs: Ignoring removed mblk_io_submit option [ 349.956680][T15731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.108038][T15745] loop2: detected capacity change from 0 to 764 [ 350.452872][T15748] loop5: detected capacity change from 0 to 128 [ 350.488522][T15748] netlink: 'syz.5.3924': attribute type 1 has an invalid length. [ 350.760715][T15762] FAULT_INJECTION: forcing a failure. [ 350.760715][T15762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.774021][T15762] CPU: 1 UID: 0 PID: 15762 Comm: syz.5.3930 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 350.774051][T15762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 350.774067][T15762] Call Trace: [ 350.774076][T15762] [ 350.774085][T15762] dump_stack_lvl+0xf2/0x150 [ 350.774183][T15762] dump_stack+0x15/0x1a [ 350.774205][T15762] should_fail_ex+0x24a/0x260 [ 350.774242][T15762] should_fail+0xb/0x10 [ 350.774306][T15762] should_fail_usercopy+0x1a/0x20 [ 350.774337][T15762] _copy_to_iter+0xd5/0xd00 [ 350.774441][T15762] get_random_bytes_user+0x112/0x260 [ 350.774487][T15762] ? import_ubuf+0xec/0x130 [ 350.774506][T15762] __x64_sys_getrandom+0xb5/0x190 [ 350.774604][T15762] x64_sys_call+0x118a/0x2dc0 [ 350.774633][T15762] do_syscall_64+0xc9/0x1c0 [ 350.774730][T15762] ? clear_bhb_loop+0x55/0xb0 [ 350.774765][T15762] ? clear_bhb_loop+0x55/0xb0 [ 350.774878][T15762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.774911][T15762] RIP: 0033:0x7f95f130cde9 [ 350.774930][T15762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.774988][T15762] RSP: 002b:00007f95ef971038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 350.775008][T15762] RAX: ffffffffffffffda RBX: 00007f95f1525fa0 RCX: 00007f95f130cde9 [ 350.775020][T15762] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000400000000240 [ 350.775033][T15762] RBP: 00007f95ef971090 R08: 0000000000000000 R09: 0000000000000000 [ 350.775080][T15762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.775095][T15762] R13: 0000000000000000 R14: 00007f95f1525fa0 R15: 00007ffddf9daaa8 [ 350.775117][T15762] [ 351.267824][T15774] loop5: detected capacity change from 0 to 512 [ 351.404713][T15774] EXT4-fs (loop5): orphan cleanup on readonly fs [ 351.411132][T15774] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 351.429794][T15774] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 351.451912][T15774] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.3935: attempt to clear invalid blocks 2 len 1 [ 351.575876][T15774] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3935: invalid indirect mapped block 1819239214 (level 0) [ 351.621864][T15790] loop4: detected capacity change from 0 to 4096 [ 351.628637][T15790] ext4: Unknown parameter 'fsname' [ 351.631224][T15774] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3935: invalid indirect mapped block 1819239214 (level 1) [ 351.690817][T15774] EXT4-fs (loop5): 1 truncate cleaned up [ 351.719341][T15774] EXT4-fs: Ignoring removed orlov option [ 351.740327][T15774] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 351.750167][T15774] EXT4-fs error (device loop5): __ext4_remount:6738: comm syz.5.3935: Abort forced by user [ 351.773197][T15774] EXT4-fs (loop5): Remounting filesystem read-only [ 351.779937][T15774] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 351.837761][T15799] macvtap4: entered promiscuous mode [ 351.843312][T15799] batadv0: entered promiscuous mode [ 351.848710][T15799] macvtap4: entered allmulticast mode [ 351.854149][T15799] batadv0: entered allmulticast mode [ 351.865552][T15799] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 351.940619][T15799] batadv0: left allmulticast mode [ 351.945722][T15799] batadv0: left promiscuous mode [ 352.179044][T15810] bridge0: port 3(vlan2) entered blocking state [ 352.185477][T15810] bridge0: port 3(vlan2) entered disabled state [ 352.192080][T15810] vlan2: entered allmulticast mode [ 352.197211][T15810] bridge0: entered allmulticast mode [ 352.256408][T15810] vlan2: left allmulticast mode [ 352.261448][T15810] bridge0: left allmulticast mode [ 352.519561][T15820] loop4: detected capacity change from 0 to 512 [ 352.551423][T15820] EXT4-fs (loop4): orphan cleanup on readonly fs [ 352.557900][T15820] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 352.592649][T15820] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 352.669653][T15826] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 352.677104][T15826] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 352.693381][T15820] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.3948: attempt to clear invalid blocks 2 len 1 [ 352.726920][T15815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=15815 comm=syz.0.3947 [ 352.750446][T15815] __nla_validate_parse: 5 callbacks suppressed [ 352.750468][T15815] netlink: 53 bytes leftover after parsing attributes in process `syz.0.3947'. [ 352.794387][T15820] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3948: invalid indirect mapped block 1819239214 (level 0) [ 352.897713][T15820] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3948: invalid indirect mapped block 1819239214 (level 1) [ 352.942247][T15820] EXT4-fs (loop4): 1 truncate cleaned up [ 353.191557][T15842] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 353.198933][T15842] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 353.210867][T15842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3955'. [ 353.253313][T15820] EXT4-fs: Ignoring removed orlov option [ 353.271669][T15820] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 353.314749][T15820] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.3948: Abort forced by user [ 353.328619][T15820] EXT4-fs (loop4): Remounting filesystem read-only [ 353.328640][T15820] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 353.400363][T15854] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3960'. [ 353.409407][T15854] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3960'. [ 353.431796][T15852] loop4: detected capacity change from 0 to 4096 [ 353.484521][T15863] netlink: 'syz.7.3964': attribute type 46 has an invalid length. [ 353.498711][T15852] ext4: Unknown parameter 'fsname' [ 353.524483][T15863] loop7: detected capacity change from 0 to 512 [ 353.562427][T15869] loop2: detected capacity change from 0 to 128 [ 353.572698][T15863] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.583761][T15872] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3958'. [ 353.603883][T15852] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3958'. [ 353.664663][T15878] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3970'. [ 353.673822][T15878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3970'. [ 353.766278][T15885] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 353.766278][T15885] program syz.2.3973 not setting count and/or reply_len properly [ 353.905868][T15874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=15874 comm=syz.5.3968 [ 353.947203][T15874] netlink: 53 bytes leftover after parsing attributes in process `syz.5.3968'. [ 354.085825][T15904] FAULT_INJECTION: forcing a failure. [ 354.085825][T15904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.094915][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 354.094937][ T29] audit: type=1326 audit(1740033043.213:17707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15902 comm="syz.0.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220becde9 code=0x7ffc0000 [ 354.099029][T15904] CPU: 1 UID: 0 PID: 15904 Comm: syz.2.3976 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 354.099064][T15904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 354.099081][T15904] Call Trace: [ 354.099091][T15904] [ 354.099101][T15904] dump_stack_lvl+0xf2/0x150 [ 354.099187][T15904] dump_stack+0x15/0x1a [ 354.099214][T15904] should_fail_ex+0x24a/0x260 [ 354.099251][T15904] should_fail+0xb/0x10 [ 354.099306][T15904] should_fail_usercopy+0x1a/0x20 [ 354.099345][T15904] _copy_from_user+0x1c/0xa0 [ 354.099387][T15904] seccomp_notify_ioctl+0x6ad/0xea0 [ 354.099471][T15904] ? __pfx_seccomp_notify_ioctl+0x10/0x10 [ 354.099508][T15904] __se_sys_ioctl+0xc9/0x140 [ 354.099539][T15904] __x64_sys_ioctl+0x43/0x50 [ 354.099569][T15904] x64_sys_call+0x1690/0x2dc0 [ 354.099655][T15904] do_syscall_64+0xc9/0x1c0 [ 354.099693][T15904] ? clear_bhb_loop+0x55/0xb0 [ 354.099746][T15904] ? clear_bhb_loop+0x55/0xb0 [ 354.099780][T15904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.099816][T15904] RIP: 0033:0x7f638cf8cde9 [ 354.099836][T15904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.099859][T15904] RSP: 002b:00007f638b5d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.099882][T15904] RAX: ffffffffffffffda RBX: 00007f638d1a6080 RCX: 00007f638cf8cde9 [ 354.099957][T15904] RDX: 0000000000000000 RSI: 0000000040182103 RDI: 0000000000000003 [ 354.099972][T15904] RBP: 00007f638b5d6090 R08: 0000000000000000 R09: 0000000000000000 [ 354.099987][T15904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.100003][T15904] R13: 0000000000000001 R14: 00007f638d1a6080 R15: 00007ffe9972e4f8 [ 354.100027][T15904] [ 354.304590][ T29] audit: type=1326 audit(1740033043.213:17708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15902 comm="syz.0.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220becde9 code=0x7ffc0000 [ 354.328448][ T29] audit: type=1326 audit(1740033043.260:17709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15902 comm="syz.0.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff220becde9 code=0x7ffc0000 [ 354.347337][T15912] loop4: detected capacity change from 0 to 128 [ 354.352119][ T29] audit: type=1326 audit(1740033043.260:17710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15902 comm="syz.0.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220becde9 code=0x7ffc0000 [ 354.352157][ T29] audit: type=1326 audit(1740033043.260:17711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15902 comm="syz.0.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220becde9 code=0x7ffc0000 [ 354.405696][ T29] audit: type=1326 audit(1740033043.260:17712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15902 comm="syz.0.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff220becde9 code=0x7ffc0000 [ 354.429364][ T29] audit: type=1326 audit(1740033043.260:17713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15902 comm="syz.0.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220becde9 code=0x7ffc0000 [ 354.453212][ T29] audit: type=1326 audit(1740033043.260:17714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15902 comm="syz.0.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff220becde9 code=0x7ffc0000 [ 354.476859][ T29] audit: type=1326 audit(1740033043.260:17715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15902 comm="syz.0.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220becde9 code=0x7ffc0000 [ 354.500538][ T29] audit: type=1326 audit(1740033043.260:17716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15902 comm="syz.0.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff220becde9 code=0x7ffc0000 [ 354.641576][T15920] loop0: detected capacity change from 0 to 512 [ 354.665575][T15920] EXT4-fs (loop0): orphan cleanup on readonly fs [ 354.668126][T15922] loop5: detected capacity change from 0 to 2048 [ 354.672094][T15920] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 354.706341][T15920] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 354.723938][T15922] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.3984: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 354.750822][T15922] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.3984: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 354.773689][T15920] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.3985: attempt to clear invalid blocks 2 len 1 [ 354.807119][T15920] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3985: invalid indirect mapped block 1819239214 (level 0) [ 354.839579][T15920] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3985: invalid indirect mapped block 1819239214 (level 1) [ 354.855768][T15920] EXT4-fs (loop0): 1 truncate cleaned up [ 354.861643][T15930] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3987'. [ 354.889329][T15920] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 354.906516][T15932] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 354.937319][T15920] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.3985: Abort forced by user [ 354.966919][T15920] EXT4-fs (loop0): Remounting filesystem read-only [ 354.973745][T15920] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 354.975370][T15936] loop4: detected capacity change from 0 to 4096 [ 354.992198][T15938] FAULT_INJECTION: forcing a failure. [ 354.992198][T15938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.005386][T15938] CPU: 1 UID: 0 PID: 15938 Comm: syz.2.3991 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 355.005418][T15938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 355.005431][T15938] Call Trace: [ 355.005436][T15938] [ 355.005444][T15938] dump_stack_lvl+0xf2/0x150 [ 355.005524][T15938] dump_stack+0x15/0x1a [ 355.005551][T15938] should_fail_ex+0x24a/0x260 [ 355.005586][T15938] should_fail+0xb/0x10 [ 355.005668][T15938] should_fail_usercopy+0x1a/0x20 [ 355.005820][T15938] _copy_from_user+0x1c/0xa0 [ 355.005899][T15938] usbdev_ioctl+0x1707/0x3f20 [ 355.005942][T15938] ? do_vfs_ioctl+0x98b/0x1590 [ 355.006001][T15938] ? selinux_file_ioctl+0x2f7/0x380 [ 355.006038][T15938] ? __fget_files+0x17c/0x1c0 [ 355.006078][T15938] ? __pfx_usbdev_ioctl+0x10/0x10 [ 355.006111][T15938] __se_sys_ioctl+0xc9/0x140 [ 355.006160][T15938] __x64_sys_ioctl+0x43/0x50 [ 355.006184][T15938] x64_sys_call+0x1690/0x2dc0 [ 355.006210][T15938] do_syscall_64+0xc9/0x1c0 [ 355.006239][T15938] ? clear_bhb_loop+0x55/0xb0 [ 355.006288][T15938] ? clear_bhb_loop+0x55/0xb0 [ 355.006315][T15938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.006341][T15938] RIP: 0033:0x7f638cf8cde9 [ 355.006356][T15938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.006443][T15938] RSP: 002b:00007f638b5f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.006461][T15938] RAX: ffffffffffffffda RBX: 00007f638d1a5fa0 RCX: 00007f638cf8cde9 [ 355.006474][T15938] RDX: 0000400000000080 RSI: 00000000c0105500 RDI: 0000000000000003 [ 355.006486][T15938] RBP: 00007f638b5f7090 R08: 0000000000000000 R09: 0000000000000000 [ 355.006498][T15938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.006510][T15938] R13: 0000000000000000 R14: 00007f638d1a5fa0 R15: 00007ffe9972e4f8 [ 355.006528][T15938] [ 355.007300][T15936] ext4: Unknown parameter 'fsname' [ 355.235852][T15953] loop5: detected capacity change from 0 to 2048 [ 355.253769][T15953] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.3997: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 355.272980][T15955] loop0: detected capacity change from 0 to 2048 [ 355.273798][T15953] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.3997: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 355.296134][T15959] loop2: detected capacity change from 0 to 2048 [ 355.339535][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 355.347373][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 355.359338][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 355.361191][T15965] loop5: detected capacity change from 0 to 512 [ 355.367146][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 355.375926][T15965] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 355.381089][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 355.381128][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 355.381155][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 355.381189][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 355.381216][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 355.381241][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 355.381267][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 355.381294][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 355.381391][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 355.395240][T15965] EXT4-fs (loop5): 1 truncate cleaned up [ 355.399072][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 355.474123][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 355.481819][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 355.490087][ T9] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 355.534403][T15972] loop2: detected capacity change from 0 to 512 [ 355.552956][T15972] EXT4-fs (loop2): orphan cleanup on readonly fs [ 355.559406][T15972] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 355.567921][T15972] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 355.582930][T15972] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.4004: attempt to clear invalid blocks 2 len 1 [ 355.599970][T15972] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4004: invalid indirect mapped block 1819239214 (level 0) [ 355.615277][T15977] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 355.622669][T15977] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 355.633239][T15972] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4004: invalid indirect mapped block 1819239214 (level 1) [ 355.666744][T15972] EXT4-fs (loop2): 1 truncate cleaned up [ 355.687623][T15972] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 355.697729][T15972] EXT4-fs error (device loop2): __ext4_remount:6738: comm syz.2.4004: Abort forced by user [ 355.713743][T15972] EXT4-fs (loop2): Remounting filesystem read-only [ 355.720479][T15972] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 355.749969][T15987] loop7: detected capacity change from 0 to 2048 [ 355.781375][T15987] EXT4-fs error (device loop7): ext4_find_extent:938: inode #2: comm syz.7.4010: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 355.801471][T15991] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 355.813710][T15987] EXT4-fs error (device loop7): ext4_find_extent:938: inode #2: comm syz.7.4010: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 355.893020][T15994] loop2: detected capacity change from 0 to 128 [ 355.940546][T16000] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 356.016470][T16008] loop7: detected capacity change from 0 to 2048 [ 356.045232][T16013] loop2: detected capacity change from 0 to 512 [ 356.055647][T16014] loop5: detected capacity change from 0 to 512 [ 356.075624][T16013] EXT4-fs (loop2): orphan cleanup on readonly fs [ 356.079942][T16014] EXT4-fs: Ignoring removed orlov option [ 356.081986][T16013] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 356.096367][T16014] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 356.106113][T16013] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 356.121006][T16013] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.4022: attempt to clear invalid blocks 2 len 1 [ 356.134775][T16014] EXT4-fs (loop5): orphan cleanup on readonly fs [ 356.142947][T16014] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4021: bg 0: block 248: padding at end of block bitmap is not set [ 356.144254][T16013] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4022: invalid indirect mapped block 1819239214 (level 0) [ 356.158571][T16014] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.4021: Failed to acquire dquot type 1 [ 356.174273][T16013] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4022: invalid indirect mapped block 1819239214 (level 1) [ 356.183478][T16014] EXT4-fs (loop5): 1 truncate cleaned up [ 356.198409][T16013] EXT4-fs (loop2): 1 truncate cleaned up [ 356.227995][T16014] EXT4-fs: Ignoring removed orlov option [ 356.235807][T16014] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 356.239788][T16013] EXT4-fs: Ignoring removed orlov option [ 356.250782][T16013] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 356.262408][T16013] EXT4-fs error (device loop2): __ext4_remount:6738: comm syz.2.4022: Abort forced by user [ 356.272941][T16014] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 356.283057][T16021] loop4: detected capacity change from 0 to 2048 [ 356.290810][T16013] EXT4-fs (loop2): Remounting filesystem read-only [ 356.297401][T16013] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 356.312172][T16021] EXT4-fs error (device loop4): ext4_find_extent:938: inode #2: comm syz.4.4024: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 356.336246][T16014] EXT4-fs error (device loop5): __ext4_remount:6738: comm syz.5.4021: Abort forced by user [ 356.348400][T16014] EXT4-fs (loop5): Remounting filesystem read-only [ 356.355110][T16014] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 356.357155][T16021] EXT4-fs error (device loop4): ext4_find_extent:938: inode #2: comm syz.4.4024: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 356.382867][T16014] ext4 filesystem being remounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 356.422108][T16028] loop7: detected capacity change from 0 to 128 [ 356.670621][T16058] netlink: 'syz.5.4038': attribute type 46 has an invalid length. [ 356.715796][T16060] loop7: detected capacity change from 0 to 2048 [ 356.732101][T16058] loop5: detected capacity change from 0 to 512 [ 356.766712][T16060] EXT4-fs error (device loop7): ext4_find_extent:938: inode #2: comm syz.7.4039: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 356.790313][T16058] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.803536][T16060] EXT4-fs error (device loop7): ext4_find_extent:938: inode #2: comm syz.7.4039: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 357.110832][T16080] loop7: detected capacity change from 0 to 128 [ 357.315672][T16082] FAULT_INJECTION: forcing a failure. [ 357.315672][T16082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.328860][T16082] CPU: 1 UID: 0 PID: 16082 Comm: syz.5.4047 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 357.328932][T16082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 357.328945][T16082] Call Trace: [ 357.328952][T16082] [ 357.328960][T16082] dump_stack_lvl+0xf2/0x150 [ 357.329040][T16082] dump_stack+0x15/0x1a [ 357.329067][T16082] should_fail_ex+0x24a/0x260 [ 357.329102][T16082] should_fail+0xb/0x10 [ 357.329134][T16082] should_fail_usercopy+0x1a/0x20 [ 357.329241][T16082] _copy_to_user+0x20/0xa0 [ 357.329284][T16082] simple_read_from_buffer+0xa0/0x110 [ 357.329312][T16082] proc_fail_nth_read+0xf9/0x140 [ 357.329345][T16082] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 357.329388][T16082] vfs_read+0x19b/0x6f0 [ 357.329413][T16082] ? __rcu_read_unlock+0x4e/0x70 [ 357.329436][T16082] ? __fget_files+0x17c/0x1c0 [ 357.329477][T16082] ksys_read+0xe8/0x1b0 [ 357.329590][T16082] __x64_sys_read+0x42/0x50 [ 357.329622][T16082] x64_sys_call+0x2874/0x2dc0 [ 357.329703][T16082] do_syscall_64+0xc9/0x1c0 [ 357.329762][T16082] ? clear_bhb_loop+0x55/0xb0 [ 357.329794][T16082] ? clear_bhb_loop+0x55/0xb0 [ 357.329829][T16082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.329904][T16082] RIP: 0033:0x7f95f130b7fc [ 357.329919][T16082] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 357.329938][T16082] RSP: 002b:00007f95ef971030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 357.329956][T16082] RAX: ffffffffffffffda RBX: 00007f95f1525fa0 RCX: 00007f95f130b7fc [ 357.329971][T16082] RDX: 000000000000000f RSI: 00007f95ef9710a0 RDI: 0000000000000007 [ 357.329986][T16082] RBP: 00007f95ef971090 R08: 0000000000000000 R09: 0000000000000000 [ 357.330030][T16082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.330042][T16082] R13: 0000000000000000 R14: 00007f95f1525fa0 R15: 00007ffddf9daaa8 [ 357.330060][T16082] [ 358.204208][T16142] loop4: detected capacity change from 0 to 2048 [ 358.277099][T16142] EXT4-fs error (device loop4): ext4_ext_precache:631: inode #2: comm syz.4.4068: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 358.314557][T16142] EXT4-fs (loop4): Remounting filesystem read-only [ 358.326757][T16152] loop7: detected capacity change from 0 to 512 [ 358.341943][T16152] EXT4-fs: Ignoring removed orlov option [ 358.358301][T16152] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 358.399876][T16152] EXT4-fs (loop7): orphan cleanup on readonly fs [ 358.415283][T16152] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4070: bg 0: block 248: padding at end of block bitmap is not set [ 358.436763][T16164] tipc: Enabling of bearer rejected, already enabled [ 358.459592][T16152] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.4070: Failed to acquire dquot type 1 [ 358.473050][T16152] EXT4-fs (loop7): 1 truncate cleaned up [ 358.483256][T16152] EXT4-fs: Ignoring removed orlov option [ 358.490025][T16152] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 358.501664][T16152] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 358.530061][T16152] EXT4-fs error (device loop7): __ext4_remount:6738: comm syz.7.4070: Abort forced by user [ 358.548312][T16152] EXT4-fs (loop7): Remounting filesystem read-only [ 358.557043][T16152] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 358.567808][T16152] ext4 filesystem being remounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 358.581632][T16171] loop4: detected capacity change from 0 to 512 [ 358.588473][T16171] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 358.601706][T16171] EXT4-fs (loop4): 1 truncate cleaned up [ 358.650758][T16176] netlink: 'syz.4.4079': attribute type 46 has an invalid length. [ 358.664300][T16176] loop4: detected capacity change from 0 to 512 [ 358.684258][T16176] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.077559][T16186] loop0: detected capacity change from 0 to 128 [ 359.101654][T16186] netlink: 'syz.0.4082': attribute type 1 has an invalid length. [ 359.127808][T16186] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 359.144780][T16189] loop4: detected capacity change from 0 to 512 [ 359.168283][T16189] EXT4-fs (loop4): orphan cleanup on readonly fs [ 359.174787][T16189] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 359.184735][T16189] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 359.200324][T16189] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.4083: attempt to clear invalid blocks 2 len 1 [ 359.214701][T16189] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4083: invalid indirect mapped block 1819239214 (level 0) [ 359.261592][T16189] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4083: invalid indirect mapped block 1819239214 (level 1) [ 359.299534][T16189] EXT4-fs (loop4): 1 truncate cleaned up [ 359.306246][T16193] netlink: 'syz.2.4085': attribute type 46 has an invalid length. [ 359.311598][T16189] EXT4-fs: Ignoring removed orlov option [ 359.321098][T16193] loop2: detected capacity change from 0 to 512 [ 359.327653][T16189] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 359.339827][T16189] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.4083: Abort forced by user [ 359.365643][T16193] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.378438][T16189] EXT4-fs (loop4): Remounting filesystem read-only [ 359.385129][T16189] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 359.436007][T16206] loop4: detected capacity change from 0 to 512 [ 359.444614][T16206] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 359.471770][T16206] EXT4-fs (loop4): 1 truncate cleaned up [ 359.538273][T16218] loop5: detected capacity change from 0 to 128 [ 359.929609][T16226] bridge0: port 3(vlan2) entered blocking state [ 359.936025][T16226] bridge0: port 3(vlan2) entered disabled state [ 359.942822][T16226] vlan2: entered allmulticast mode [ 359.948421][T16226] bridge0: entered allmulticast mode [ 360.127175][T16226] vlan2: left allmulticast mode [ 360.132172][T16226] bridge0: left allmulticast mode [ 360.321732][T16237] FAULT_INJECTION: forcing a failure. [ 360.321732][T16237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.334982][T16237] CPU: 0 UID: 0 PID: 16237 Comm: syz.7.4099 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 360.335019][T16237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 360.335037][T16237] Call Trace: [ 360.335047][T16237] [ 360.335059][T16237] dump_stack_lvl+0xf2/0x150 [ 360.335099][T16237] dump_stack+0x15/0x1a [ 360.335129][T16237] should_fail_ex+0x24a/0x260 [ 360.335263][T16237] should_fail+0xb/0x10 [ 360.335298][T16237] should_fail_usercopy+0x1a/0x20 [ 360.335339][T16237] _copy_from_user+0x1c/0xa0 [ 360.335448][T16237] memdup_user+0x64/0xc0 [ 360.335486][T16237] strndup_user+0x68/0xa0 [ 360.335522][T16237] __se_sys_mount+0x91/0x2d0 [ 360.335561][T16237] ? fput+0x1c4/0x200 [ 360.335641][T16237] ? ksys_write+0x176/0x1b0 [ 360.335720][T16237] __x64_sys_mount+0x67/0x80 [ 360.335759][T16237] x64_sys_call+0x2c84/0x2dc0 [ 360.335794][T16237] do_syscall_64+0xc9/0x1c0 [ 360.335831][T16237] ? clear_bhb_loop+0x55/0xb0 [ 360.335865][T16237] ? clear_bhb_loop+0x55/0xb0 [ 360.335901][T16237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.336006][T16237] RIP: 0033:0x7fe177a2cde9 [ 360.336023][T16237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.336044][T16237] RSP: 002b:00007fe176097038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 360.336065][T16237] RAX: ffffffffffffffda RBX: 00007fe177c45fa0 RCX: 00007fe177a2cde9 [ 360.336079][T16237] RDX: 0000000000000000 RSI: 0000400000000200 RDI: 0000400000000c40 [ 360.336094][T16237] RBP: 00007fe176097090 R08: 0000000000000000 R09: 0000000000000000 [ 360.336139][T16237] R10: 0000000002901090 R11: 0000000000000246 R12: 0000000000000001 [ 360.336155][T16237] R13: 0000000000000000 R14: 00007fe177c45fa0 R15: 00007ffc29a437c8 [ 360.336178][T16237] [ 360.569918][T16239] loop0: detected capacity change from 0 to 512 [ 360.615301][T16239] EXT4-fs (loop0): orphan cleanup on readonly fs [ 360.621847][T16239] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 360.664707][T16246] loop4: detected capacity change from 0 to 512 [ 360.673446][T16245] loop7: detected capacity change from 0 to 2048 [ 360.683190][T16239] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 360.696102][T16246] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 360.698200][T16239] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.4100: attempt to clear invalid blocks 2 len 1 [ 360.721242][T16239] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4100: invalid indirect mapped block 1819239214 (level 0) [ 360.738992][T16239] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4100: invalid indirect mapped block 1819239214 (level 1) [ 360.750578][T16246] EXT4-fs (loop4): 1 truncate cleaned up [ 360.767477][T16239] EXT4-fs (loop0): 1 truncate cleaned up [ 360.767698][T16246] EXT4-fs mount: 43 callbacks suppressed [ 360.767745][T16246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.773646][T16239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 360.820976][T16239] EXT4-fs: Ignoring removed orlov option [ 360.858776][T16239] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 360.871888][T12439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.907783][T16239] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.4100: Abort forced by user [ 360.930618][T16239] EXT4-fs (loop0): Remounting filesystem read-only [ 360.937314][T16239] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 360.978167][ T9967] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.133357][ T29] kauditd_printk_skb: 496 callbacks suppressed [ 361.133382][ T29] audit: type=1326 audit(1740033049.808:18209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.5.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 361.146792][T16268] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 361.196895][ T29] audit: type=1326 audit(1740033049.808:18210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.5.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 361.220883][ T29] audit: type=1326 audit(1740033049.808:18211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.5.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 361.244801][ T29] audit: type=1326 audit(1740033049.808:18212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.5.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 361.268843][ T29] audit: type=1326 audit(1740033049.808:18213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.5.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 361.292597][ T29] audit: type=1326 audit(1740033049.808:18214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.5.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 361.316492][ T29] audit: type=1326 audit(1740033049.808:18215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.5.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 361.340139][ T29] audit: type=1326 audit(1740033049.808:18216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.5.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 361.363892][ T29] audit: type=1326 audit(1740033049.808:18217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.5.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 361.387692][ T29] audit: type=1326 audit(1740033049.808:18218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16267 comm="syz.5.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 361.441804][T16278] loop0: detected capacity change from 0 to 2048 [ 361.458840][T16268] __nla_validate_parse: 10 callbacks suppressed [ 361.458856][T16268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4110'. [ 361.479667][T16268] batadv0: entered promiscuous mode [ 361.485058][T16268] macvtap2: entered promiscuous mode [ 361.490570][T16268] macvtap2: entered allmulticast mode [ 361.496125][T16268] batadv0: entered allmulticast mode [ 361.504315][T16268] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 361.527820][T16268] batadv0: left allmulticast mode [ 361.533371][T16268] batadv0: left promiscuous mode [ 361.708009][T16280] syz_tun: entered promiscuous mode [ 361.751566][T16280] batadv_slave_0: entered promiscuous mode [ 361.755585][T16284] loop7: detected capacity change from 0 to 2048 [ 361.794750][T16284] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.838079][T16284] EXT4-fs error (device loop7): ext4_ext_precache:631: inode #2: comm syz.7.4118: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 361.878674][T16284] EXT4-fs (loop7): Remounting filesystem read-only [ 361.967944][T10013] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.994421][T16295] loop5: detected capacity change from 0 to 4096 [ 362.066846][T16303] loop2: detected capacity change from 0 to 2048 [ 362.081789][T16295] ext4: Unknown parameter 'fsname' [ 362.103620][T16308] netlink: 'syz.4.4126': attribute type 46 has an invalid length. [ 362.117955][T16308] loop4: detected capacity change from 0 to 512 [ 362.118973][ T35] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 362.132087][ T35] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 362.142892][ T35] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 362.150777][ T35] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 362.158584][ T35] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 362.166647][ T35] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 362.174378][ T35] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 362.182237][ T35] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 362.189949][ T35] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 362.190051][T16295] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4120'. [ 362.197607][ T35] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 362.214393][ T35] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 362.222554][ T35] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 362.230369][ T35] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 362.238083][ T35] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 362.246257][ T35] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 362.254351][ T35] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 362.263205][ T35] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 362.267489][T16308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.286460][T16308] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.413721][T12439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.463160][T16316] loop2: detected capacity change from 0 to 4096 [ 362.476036][T16311] bridge0: port 3(vlan2) entered blocking state [ 362.481814][T16321] FAULT_INJECTION: forcing a failure. [ 362.481814][T16321] name failslab, interval 1, probability 0, space 0, times 0 [ 362.482507][T16311] bridge0: port 3(vlan2) entered disabled state [ 362.494961][T16321] CPU: 1 UID: 0 PID: 16321 Comm: syz.0.4131 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 362.494998][T16321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 362.495016][T16321] Call Trace: [ 362.495025][T16321] [ 362.495071][T16321] dump_stack_lvl+0xf2/0x150 [ 362.495107][T16321] dump_stack+0x15/0x1a [ 362.495215][T16321] should_fail_ex+0x24a/0x260 [ 362.495262][T16321] should_failslab+0x8f/0xb0 [ 362.495362][T16321] kmem_cache_alloc_noprof+0x52/0x320 [ 362.495466][T16321] ? audit_log_start+0x34c/0x6b0 [ 362.495566][T16321] audit_log_start+0x34c/0x6b0 [ 362.495612][T16321] audit_seccomp+0x4b/0x130 [ 362.495658][T16321] __seccomp_filter+0x6fa/0x1180 [ 362.495690][T16321] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 362.495750][T16321] ? vfs_write+0x644/0x920 [ 362.495792][T16321] __secure_computing+0x9f/0x1c0 [ 362.495890][T16321] syscall_trace_enter+0xd1/0x1f0 [ 362.495920][T16321] ? fpregs_assert_state_consistent+0x83/0xa0 [ 362.495950][T16321] do_syscall_64+0xaa/0x1c0 [ 362.495992][T16321] ? clear_bhb_loop+0x55/0xb0 [ 362.496061][T16321] ? clear_bhb_loop+0x55/0xb0 [ 362.496095][T16321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.496129][T16321] RIP: 0033:0x7ff220becde9 [ 362.496150][T16321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.496173][T16321] RSP: 002b:00007ff21f251038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 362.496277][T16321] RAX: ffffffffffffffda RBX: 00007ff220e05fa0 RCX: 00007ff220becde9 [ 362.496293][T16321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000d [ 362.496309][T16321] RBP: 00007ff21f251090 R08: 0000000000000000 R09: 0000000000000000 [ 362.496324][T16321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.496339][T16321] R13: 0000000000000000 R14: 00007ff220e05fa0 R15: 00007ffd60725ef8 [ 362.496364][T16321] [ 362.510534][T16316] ext4: Unknown parameter 'fsname' [ 362.512165][T16311] vlan2: entered allmulticast mode [ 362.705307][T16311] bridge0: entered allmulticast mode [ 362.711234][T16311] vlan2: left allmulticast mode [ 362.716366][T16311] bridge0: left allmulticast mode [ 362.735655][T16318] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4120'. [ 362.777761][T16316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4129'. [ 362.793030][T16329] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4129'. [ 362.808286][T16295] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4120'. [ 362.883877][T16325] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4129'. [ 362.900541][T16335] loop4: detected capacity change from 0 to 2048 [ 363.013649][T16344] hub 9-0:1.0: USB hub found [ 363.018402][T16344] hub 9-0:1.0: 8 ports detected [ 363.099469][T16335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.393964][T16352] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 363.434697][T16354] EXT4-fs error (device loop4): ext4_ext_precache:631: inode #2: comm syz.4.4135: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 363.619443][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4139'. [ 363.652872][T16354] EXT4-fs (loop4): Remounting filesystem read-only [ 363.829593][T12439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.846451][T16352] dummy0: entered promiscuous mode [ 363.865455][T16352] macvtap2: entered promiscuous mode [ 363.871215][T16352] macvtap2: entered allmulticast mode [ 363.877016][T16352] dummy0: entered allmulticast mode [ 363.960383][T16355] dummy0: left allmulticast mode [ 363.965686][T16355] dummy0: left promiscuous mode [ 364.028096][T16365] netlink: 'syz.4.4143': attribute type 46 has an invalid length. [ 364.079654][T16365] loop4: detected capacity change from 0 to 512 [ 364.166494][T16365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.229844][T16365] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.349523][T12439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.642107][T16384] loop5: detected capacity change from 0 to 2048 [ 364.671671][T16390] loop2: detected capacity change from 0 to 2048 [ 364.709546][T16390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.746716][T16384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.782121][T16384] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.4151: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 364.797592][T16400] loop4: detected capacity change from 0 to 4096 [ 364.805822][T16384] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.4151: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 364.824197][T16390] EXT4-fs error (device loop2): ext4_ext_precache:631: inode #2: comm syz.2.4153: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 364.849807][T16400] ext4: Unknown parameter 'fsname' [ 364.887145][T14015] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.898953][T16400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4156'. [ 364.908775][T16390] EXT4-fs (loop2): Remounting filesystem read-only [ 364.921652][T16400] loop4: detected capacity change from 0 to 512 [ 364.936954][T16410] loop0: detected capacity change from 0 to 128 [ 364.945894][T10581] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.955577][T16400] EXT4-fs: Ignoring removed mblk_io_submit option [ 364.975544][T16400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.993003][T16410] netlink: 'syz.0.4158': attribute type 1 has an invalid length. [ 365.031749][T16416] loop2: detected capacity change from 0 to 128 [ 365.065013][T16418] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4156'. [ 365.097308][T16422] netlink: 'syz.0.4161': attribute type 46 has an invalid length. [ 365.129724][T16424] loop5: detected capacity change from 0 to 512 [ 365.149371][T16422] loop0: detected capacity change from 0 to 512 [ 365.173206][T16424] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 365.195503][T16424] EXT4-fs (loop5): 1 truncate cleaned up [ 365.204787][T16422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.219309][T16424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.248515][T16422] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.310449][T14015] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.351205][ T9967] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.501541][T16445] loop0: detected capacity change from 0 to 2048 [ 365.502886][T16447] loop2: detected capacity change from 0 to 128 [ 365.528428][T16449] loop5: detected capacity change from 0 to 764 [ 365.537353][T16445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.553286][T16447] netlink: 'syz.2.4171': attribute type 1 has an invalid length. [ 365.614570][T16445] EXT4-fs error (device loop0): ext4_ext_precache:631: inode #2: comm syz.0.4170: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 365.651971][T12439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.661407][T16445] EXT4-fs (loop0): Remounting filesystem read-only [ 365.674398][T16457] loop2: detected capacity change from 0 to 128 [ 365.723977][ T9967] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.749498][T16463] netlink: 'syz.7.4176': attribute type 46 has an invalid length. [ 365.783208][T16463] loop7: detected capacity change from 0 to 512 [ 365.804496][T16463] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.914163][T16463] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.992745][T10013] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.138941][T16488] loop4: detected capacity change from 0 to 4096 [ 366.150998][T16488] ext4: Unknown parameter 'fsname' [ 366.171148][T16488] loop4: detected capacity change from 0 to 512 [ 366.178345][T16488] EXT4-fs: Ignoring removed mblk_io_submit option [ 366.203268][T16489] loop0: detected capacity change from 0 to 764 [ 366.253902][T16488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.767663][T16512] netlink: 'syz.2.4192': attribute type 46 has an invalid length. [ 366.796112][ T29] kauditd_printk_skb: 411 callbacks suppressed [ 366.796131][ T29] audit: type=1326 audit(1740033055.102:18628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16511 comm="syz.2.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638cf8cde9 code=0x7ffc0000 [ 366.801172][T16512] loop2: detected capacity change from 0 to 512 [ 366.802493][ T29] audit: type=1326 audit(1740033055.102:18629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16511 comm="syz.2.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638cf8cde9 code=0x7ffc0000 [ 366.856617][ T29] audit: type=1326 audit(1740033055.102:18630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16511 comm="syz.2.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f638cf8cde9 code=0x7ffc0000 [ 366.880780][ T29] audit: type=1326 audit(1740033055.102:18631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16511 comm="syz.2.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638cf8cde9 code=0x7ffc0000 [ 366.904778][ T29] audit: type=1326 audit(1740033055.102:18632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16511 comm="syz.2.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f638cf8cde9 code=0x7ffc0000 [ 366.929197][ T29] audit: type=1326 audit(1740033055.102:18633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16511 comm="syz.2.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638cf8cde9 code=0x7ffc0000 [ 366.941993][T16512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.953614][ T29] audit: type=1326 audit(1740033055.102:18634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16511 comm="syz.2.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f638cf8cde9 code=0x7ffc0000 [ 366.990301][ T29] audit: type=1326 audit(1740033055.102:18635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16511 comm="syz.2.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638cf8cde9 code=0x7ffc0000 [ 367.014000][ T29] audit: type=1326 audit(1740033055.102:18636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16511 comm="syz.2.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f638cf8cde9 code=0x7ffc0000 [ 367.028474][T16512] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.037667][ T29] audit: type=1326 audit(1740033055.102:18637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16511 comm="syz.2.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638cf8cde9 code=0x7ffc0000 [ 367.086712][T12439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.413953][T16533] loop4: detected capacity change from 0 to 764 [ 367.425503][T16534] loop5: detected capacity change from 0 to 2048 [ 367.463852][T10581] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.476031][T16536] __nla_validate_parse: 4 callbacks suppressed [ 367.476113][T16536] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4201'. [ 367.546002][T16540] loop2: detected capacity change from 0 to 2048 [ 367.611990][T16540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.671919][T16549] loop5: detected capacity change from 0 to 128 [ 367.712491][T16540] EXT4-fs error (device loop2): ext4_ext_precache:631: inode #2: comm syz.2.4200: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 367.756391][T16540] EXT4-fs (loop2): Remounting filesystem read-only [ 367.811218][T16552] loop7: detected capacity change from 0 to 4096 [ 367.817934][T16552] ext4: Unknown parameter 'fsname' [ 367.898163][T10581] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.932002][T16552] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4205'. [ 367.968007][T16559] loop7: detected capacity change from 0 to 512 [ 367.983059][T16559] EXT4-fs: Ignoring removed mblk_io_submit option [ 368.026963][T16559] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.166344][T16559] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4205'. [ 368.197402][T16552] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4205'. [ 368.216819][T16572] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 368.265009][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4210'. [ 368.314578][T16572] dummy0: entered promiscuous mode [ 368.325380][T16572] macvtap3: entered promiscuous mode [ 368.330878][T16572] macvtap3: entered allmulticast mode [ 368.336463][T16572] dummy0: entered allmulticast mode [ 368.371902][T16578] dummy0: left allmulticast mode [ 368.377059][T16578] dummy0: left promiscuous mode [ 368.489295][T16583] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4214'. [ 368.616868][T16580] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 368.625354][T16580] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 368.633742][T16580] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 368.642152][T16580] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 368.865024][T16600] bridge0: port 3(vlan2) entered blocking state [ 368.871371][T16600] bridge0: port 3(vlan2) entered disabled state [ 368.877782][T16600] vlan2: entered allmulticast mode [ 368.883955][T16600] bridge0: entered allmulticast mode [ 368.913633][T16600] vlan2: left allmulticast mode [ 368.918562][T16600] bridge0: left allmulticast mode [ 368.932080][T10013] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.197805][T16615] loop4: detected capacity change from 0 to 512 [ 369.285207][T16615] EXT4-fs (loop4): orphan cleanup on readonly fs [ 369.291887][T16615] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 369.332521][T16624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4225'. [ 369.346425][T16619] loop0: detected capacity change from 0 to 2048 [ 369.437258][T16615] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 369.540703][T16619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.559507][T16621] bridge0: port 3(vlan2) entered blocking state [ 369.566030][T16621] bridge0: port 3(vlan2) entered disabled state [ 369.572468][T16621] vlan2: entered allmulticast mode [ 369.577902][T16621] bridge0: entered allmulticast mode [ 369.584055][T16621] vlan2: left allmulticast mode [ 369.589042][T16621] bridge0: left allmulticast mode [ 369.594347][T16615] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.4222: attempt to clear invalid blocks 2 len 1 [ 369.741750][T16615] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4222: invalid indirect mapped block 1819239214 (level 0) [ 369.742160][T16619] EXT4-fs error (device loop0): ext4_ext_precache:631: inode #2: comm syz.0.4223: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 369.809223][T16615] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4222: invalid indirect mapped block 1819239214 (level 1) [ 369.845528][T16643] loop7: detected capacity change from 0 to 512 [ 369.851895][T16619] EXT4-fs (loop0): Remounting filesystem read-only [ 369.873586][T16643] EXT4-fs (loop7): orphan cleanup on readonly fs [ 369.880112][T16643] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 369.938671][T16643] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 369.984923][T16615] EXT4-fs (loop4): 1 truncate cleaned up [ 369.995132][ T9967] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.020477][T16643] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.4230: attempt to clear invalid blocks 2 len 1 [ 370.025586][T16652] loop2: detected capacity change from 0 to 2048 [ 370.040174][T16615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 370.068002][T16652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.077543][T16643] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.4230: invalid indirect mapped block 1819239214 (level 0) [ 370.138542][T16615] EXT4-fs: Ignoring removed orlov option [ 370.154271][T16643] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.4230: invalid indirect mapped block 1819239214 (level 1) [ 370.205628][T16615] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 370.218494][T16652] EXT4-fs error (device loop2): ext4_ext_precache:631: inode #2: comm syz.2.4233: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 370.247726][T16643] EXT4-fs (loop7): 1 truncate cleaned up [ 370.267109][T16643] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 370.283457][T16659] loop0: detected capacity change from 0 to 512 [ 370.303406][T16615] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.4222: Abort forced by user [ 370.336553][T16643] EXT4-fs: Ignoring removed orlov option [ 370.342385][T16659] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 370.350686][T16659] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 370.378298][T16643] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 370.378335][T16615] EXT4-fs (loop4): Remounting filesystem read-only [ 370.394389][T16615] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 370.404963][T16652] EXT4-fs (loop2): Remounting filesystem read-only [ 370.408949][T16643] EXT4-fs error (device loop7): __ext4_remount:6738: comm syz.7.4230: Abort forced by user [ 370.452864][T16643] EXT4-fs (loop7): Remounting filesystem read-only [ 370.459448][T16643] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 370.512386][T10581] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.522157][T10013] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.541295][T12439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.586777][T16661] loop7: detected capacity change from 0 to 2048 [ 370.755777][T16668] loop4: detected capacity change from 0 to 2048 [ 370.831002][T16676] netem: incorrect ge model size [ 370.836084][T16676] netem: change failed [ 370.921127][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4243'. [ 371.021980][T16686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4247'. [ 371.114519][T16689] loop4: detected capacity change from 0 to 1024 [ 371.114873][T16689] EXT4-fs: Ignoring removed nobh option [ 371.114929][T16689] EXT4-fs: Ignoring removed bh option [ 371.142287][T16689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.155232][T16689] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4115: comm syz.4.4248: Allocating blocks 497-513 which overlap fs metadata [ 371.175296][T16689] EXT4-fs (loop4): pa ffff8881065437e0: logic 256, phys. 385, len 8 [ 371.175383][T16689] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 371.269889][T16686] loop2: detected capacity change from 0 to 8192 [ 371.463266][T12439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.501621][T16700] loop4: detected capacity change from 0 to 1024 [ 371.502040][T16700] EXT4-fs: Ignoring removed nobh option [ 371.502068][T16700] EXT4-fs: Ignoring removed bh option [ 371.589368][T16700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.627139][T16700] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4115: comm syz.4.4250: Allocating blocks 497-513 which overlap fs metadata [ 371.688332][T16709] wireguard0: entered promiscuous mode [ 371.693946][T16709] wireguard0: entered allmulticast mode [ 371.704987][T16700] EXT4-fs (loop4): pa ffff8881064d8bd0: logic 256, phys. 385, len 8 [ 371.713174][T16700] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 371.863854][T12439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.015254][T16722] loop5: detected capacity change from 0 to 2048 [ 372.048942][T16726] loop4: detected capacity change from 0 to 512 [ 372.068741][T16722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.082502][T16726] EXT4-fs (loop4): orphan cleanup on readonly fs [ 372.089006][T16726] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 372.139931][T16726] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 372.171912][T16722] EXT4-fs error (device loop5): ext4_ext_precache:631: inode #2: comm syz.5.4257: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 372.199534][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 372.199549][ T29] audit: type=1400 audit(1740033060.153:18744): avc: denied { unmount } for pid=10013 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 372.238330][T16726] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.4258: attempt to clear invalid blocks 2 len 1 [ 372.253385][T16722] EXT4-fs (loop5): Remounting filesystem read-only [ 372.272505][T16726] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4258: invalid indirect mapped block 1819239214 (level 0) [ 372.308831][T14015] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.328864][T16726] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4258: invalid indirect mapped block 1819239214 (level 1) [ 372.356782][T16726] EXT4-fs (loop4): 1 truncate cleaned up [ 372.362861][T16726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 372.395047][T16741] loop5: detected capacity change from 0 to 2048 [ 372.421562][T16726] EXT4-fs: Ignoring removed orlov option [ 372.442808][T16726] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 372.453528][T16726] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.4258: Abort forced by user [ 372.470399][T16726] EXT4-fs (loop4): Remounting filesystem read-only [ 372.477084][T16726] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 372.508593][T12439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.532130][T16748] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4267'. [ 372.663259][T16756] 0猉功D: renamed from gretap0 (while UP) [ 372.670923][T16756] 0猉功D: entered allmulticast mode [ 372.677144][T16756] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 372.877800][T16764] bridge0: port 3(vlan2) entered blocking state [ 372.884127][T16764] bridge0: port 3(vlan2) entered disabled state [ 372.890641][T16764] vlan2: entered allmulticast mode [ 372.895774][T16764] bridge0: entered allmulticast mode [ 372.933815][T16764] vlan2: left allmulticast mode [ 372.938753][T16764] bridge0: left allmulticast mode [ 373.099696][T16782] loop4: detected capacity change from 0 to 512 [ 373.116946][T16782] EXT4-fs (loop4): orphan cleanup on readonly fs [ 373.123335][T16782] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 373.131945][T16782] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 373.149643][T16782] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.4277: attempt to clear invalid blocks 2 len 1 [ 373.163030][T16782] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4277: invalid indirect mapped block 1819239214 (level 0) [ 373.178572][T16782] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4277: invalid indirect mapped block 1819239214 (level 1) [ 373.193261][T16782] EXT4-fs (loop4): 1 truncate cleaned up [ 373.200579][T16782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 373.224637][T16782] EXT4-fs: Ignoring removed orlov option [ 373.231549][T16782] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 373.243425][T16782] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.4277: Abort forced by user [ 373.247740][T16794] tipc: Enabling of bearer rejected, already enabled [ 373.254131][T16782] EXT4-fs (loop4): Remounting filesystem read-only [ 373.267878][T16782] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 373.308697][T16799] __nla_validate_parse: 1 callbacks suppressed [ 373.308714][T16799] netlink: 88 bytes leftover after parsing attributes in process `syz.7.4283'. [ 373.324981][T12439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.420396][ T29] audit: type=1400 audit(1740033061.294:18745): avc: denied { write } for pid=16802 comm="syz.7.4286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 373.452739][T16810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4287'. [ 373.497720][T16805] netlink: 'syz.7.4286': attribute type 21 has an invalid length. [ 373.505833][T16805] IPv6: NLM_F_CREATE should be specified when creating new route [ 373.857608][T16821] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 373.952877][T16821] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4291'. [ 373.987751][T16829] loop5: detected capacity change from 0 to 2048 [ 373.996403][T16821] dummy0: entered promiscuous mode [ 374.002331][T16821] macvtap3: entered promiscuous mode [ 374.007871][T16821] macvtap3: entered allmulticast mode [ 374.013311][T16821] dummy0: entered allmulticast mode [ 374.020863][T16826] dummy0: left allmulticast mode [ 374.026078][T16826] dummy0: left promiscuous mode [ 374.034738][T16829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.053208][T16829] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.4294: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 374.083859][T14015] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.133850][T16838] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4298'. [ 374.160645][T16842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4299'. [ 374.614134][T16852] loop0: detected capacity change from 0 to 2048 [ 374.679060][ T29] audit: type=1400 audit(1740033062.043:18746): avc: denied { remount } for pid=16845 comm="syz.2.4300" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 374.842489][T16868] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4310'. [ 374.859948][T16870] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 374.884787][T16870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4308'. [ 374.926130][T16870] macvtap5: entered promiscuous mode [ 374.931717][T16870] dummy0: entered promiscuous mode [ 374.937246][T16870] macvtap5: entered allmulticast mode [ 374.942877][T16870] dummy0: entered allmulticast mode [ 375.016017][T16885] bridge0: port 3(vlan2) entered blocking state [ 375.022398][T16885] bridge0: port 3(vlan2) entered disabled state [ 375.028810][T16885] vlan2: entered allmulticast mode [ 375.033932][T16885] bridge0: entered allmulticast mode [ 375.039727][T16885] vlan2: left allmulticast mode [ 375.044639][T16885] bridge0: left allmulticast mode [ 375.052822][ T29] audit: type=1326 audit(1740033062.828:18747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz.4.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3245fecde9 code=0x7ffc0000 [ 375.115823][ T29] audit: type=1326 audit(1740033062.847:18748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz.4.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3245fecde9 code=0x7ffc0000 [ 375.139894][ T29] audit: type=1326 audit(1740033062.847:18749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz.4.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3245fecde9 code=0x7ffc0000 [ 375.163542][ T29] audit: type=1326 audit(1740033062.847:18750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz.4.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3245fecde9 code=0x7ffc0000 [ 375.187200][ T29] audit: type=1326 audit(1740033062.847:18751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz.4.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3245fecde9 code=0x7ffc0000 [ 375.210889][ T29] audit: type=1326 audit(1740033062.847:18752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz.4.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3245fecde9 code=0x7ffc0000 [ 375.234521][ T29] audit: type=1326 audit(1740033062.847:18753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16884 comm="syz.4.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3245fecde9 code=0x7ffc0000 [ 375.293928][T16882] dummy0: left allmulticast mode [ 375.299286][T16882] dummy0: left promiscuous mode [ 375.336647][T16896] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4314'. [ 375.473913][T16905] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4318'. [ 375.505091][T16907] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4320'. [ 375.550097][T16909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.568361][T16909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.585294][T16909] vlan2: entered promiscuous mode [ 375.779271][T16919] loop7: detected capacity change from 0 to 128 [ 375.790861][T16919] netlink: 'syz.7.4325': attribute type 1 has an invalid length. [ 376.194334][T16922] loop7: detected capacity change from 0 to 4096 [ 376.205022][T16922] ext4: Unknown parameter 'fsname' [ 376.280302][T16932] netlink: 'syz.5.4330': attribute type 10 has an invalid length. [ 376.292598][T16932] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 376.314442][T16932] loop5: detected capacity change from 0 to 256 [ 376.326493][T16932] vfat: Bad value for 'shortname' [ 376.359505][T16932] loop5: detected capacity change from 0 to 1024 [ 376.360114][T16932] EXT4-fs: Ignoring removed nobh option [ 376.360137][T16932] EXT4-fs: Ignoring removed bh option [ 376.396758][T16932] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.433385][T14015] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.659137][T16954] tipc: Enabling of bearer rejected, already enabled [ 376.981434][T16990] loop4: detected capacity change from 0 to 128 [ 377.125741][T16994] loop5: detected capacity change from 0 to 512 [ 377.132794][T16994] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 377.152485][T16994] EXT4-fs (loop5): 1 truncate cleaned up [ 377.158648][T16994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.435371][T14015] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.712783][T17012] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 377.742622][T17012] dummy0: entered promiscuous mode [ 377.747979][T17012] macvtap4: entered promiscuous mode [ 377.753523][T17012] macvtap4: entered allmulticast mode [ 377.758969][T17012] dummy0: entered allmulticast mode [ 377.769636][T17012] dummy0: left allmulticast mode [ 377.774940][T17012] dummy0: left promiscuous mode [ 377.888683][T17032] tipc: Started in network mode [ 377.893854][T17032] tipc: Node identity ac14140f, cluster identity 4711 [ 377.901182][T17032] tipc: New replicast peer: 255.255.255.255 [ 377.907465][T17032] tipc: Enabled bearer , priority 10 [ 377.988079][T17041] loop4: detected capacity change from 0 to 1024 [ 377.995570][T17041] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 378.006540][T17041] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 378.017526][T17041] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 378.050129][T17041] EXT4-fs (loop4): invalid journal inode [ 378.058614][T17041] EXT4-fs (loop4): can't get journal size [ 378.065089][T17041] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.4372: blocks 2-2 from inode overlap system zone [ 378.080334][T17044] hub 9-0:1.0: USB hub found [ 378.080982][T17041] EXT4-fs (loop4): failed to initialize system zone (-117) [ 378.092743][T17044] hub 9-0:1.0: 8 ports detected [ 378.093457][T17041] EXT4-fs (loop4): mount failed [ 378.170390][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 378.170405][ T29] audit: type=1400 audit(1740033065.737:18913): avc: denied { connect } for pid=17048 comm="syz.7.4376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 378.239528][ T29] audit: type=1400 audit(1740033065.803:18914): avc: denied { accept } for pid=17048 comm="syz.7.4376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 378.259463][ T29] audit: type=1400 audit(1740033065.803:18915): avc: denied { ioctl } for pid=17048 comm="syz.7.4376" path="socket:[58021]" dev="sockfs" ino=58021 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 378.304503][ T29] audit: type=1400 audit(1740033065.850:18916): avc: denied { unmount } for pid=10013 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 378.368945][T17065] tipc: Enabling of bearer rejected, already enabled [ 378.384332][T17063] Falling back ldisc for ttyS3. [ 378.417522][T17068] loop0: detected capacity change from 0 to 764 [ 378.749891][T17080] FAULT_INJECTION: forcing a failure. [ 378.749891][T17080] name failslab, interval 1, probability 0, space 0, times 0 [ 378.762604][T17080] CPU: 0 UID: 0 PID: 17080 Comm: syz.2.4388 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 378.762701][T17080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 378.762722][T17080] Call Trace: [ 378.762730][T17080] [ 378.762738][T17080] dump_stack_lvl+0xf2/0x150 [ 378.762766][T17080] dump_stack+0x15/0x1a [ 378.762915][T17080] should_fail_ex+0x24a/0x260 [ 378.762952][T17080] should_failslab+0x8f/0xb0 [ 378.762999][T17080] kmem_cache_alloc_node_noprof+0x59/0x320 [ 378.763039][T17080] ? __alloc_skb+0x10b/0x310 [ 378.763065][T17080] __alloc_skb+0x10b/0x310 [ 378.763091][T17080] netlink_alloc_large_skb+0xad/0xe0 [ 378.763125][T17080] netlink_sendmsg+0x3b4/0x6e0 [ 378.763162][T17080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.763244][T17080] __sock_sendmsg+0x140/0x180 [ 378.763315][T17080] ____sys_sendmsg+0x326/0x4b0 [ 378.763343][T17080] __sys_sendmsg+0x19d/0x230 [ 378.763392][T17080] __x64_sys_sendmsg+0x46/0x50 [ 378.763422][T17080] x64_sys_call+0x2734/0x2dc0 [ 378.763484][T17080] do_syscall_64+0xc9/0x1c0 [ 378.763519][T17080] ? clear_bhb_loop+0x55/0xb0 [ 378.763624][T17080] ? clear_bhb_loop+0x55/0xb0 [ 378.763653][T17080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.763725][T17080] RIP: 0033:0x7f638cf8cde9 [ 378.763743][T17080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.763766][T17080] RSP: 002b:00007f638b5f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.763789][T17080] RAX: ffffffffffffffda RBX: 00007f638d1a5fa0 RCX: 00007f638cf8cde9 [ 378.763805][T17080] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000007 [ 378.763818][T17080] RBP: 00007f638b5f7090 R08: 0000000000000000 R09: 0000000000000000 [ 378.763830][T17080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.763882][T17080] R13: 0000000000000000 R14: 00007f638d1a5fa0 R15: 00007ffe9972e4f8 [ 378.763905][T17080] [ 379.091399][T17093] loop5: detected capacity change from 0 to 128 [ 379.111128][ T3376] tipc: Node number set to 2886997007 [ 379.151813][ T29] audit: type=1400 audit(1740033066.626:18917): avc: denied { create } for pid=17094 comm="syz.2.4395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 379.171777][ T29] audit: type=1400 audit(1740033066.626:18918): avc: denied { connect } for pid=17094 comm="syz.2.4395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 379.206341][T17101] __nla_validate_parse: 6 callbacks suppressed [ 379.206363][T17101] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4397'. [ 379.227452][T17104] FAULT_INJECTION: forcing a failure. [ 379.227452][T17104] name failslab, interval 1, probability 0, space 0, times 0 [ 379.240294][T17104] CPU: 0 UID: 0 PID: 17104 Comm: syz.7.4399 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 379.240327][T17104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 379.240344][T17104] Call Trace: [ 379.240354][T17104] [ 379.240364][T17104] dump_stack_lvl+0xf2/0x150 [ 379.240399][T17104] dump_stack+0x15/0x1a [ 379.240424][T17104] should_fail_ex+0x24a/0x260 [ 379.240457][T17104] should_failslab+0x8f/0xb0 [ 379.240565][T17104] kmem_cache_alloc_node_noprof+0x59/0x320 [ 379.240592][T17104] ? __alloc_skb+0x10b/0x310 [ 379.240616][T17104] __alloc_skb+0x10b/0x310 [ 379.240704][T17104] netlink_alloc_large_skb+0xad/0xe0 [ 379.240847][T17104] netlink_sendmsg+0x3b4/0x6e0 [ 379.240887][T17104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.240989][T17104] __sock_sendmsg+0x140/0x180 [ 379.241030][T17104] ____sys_sendmsg+0x326/0x4b0 [ 379.241064][T17104] __sys_sendmmsg+0x227/0x4b0 [ 379.241122][T17104] __x64_sys_sendmmsg+0x57/0x70 [ 379.241151][T17104] x64_sys_call+0x29aa/0x2dc0 [ 379.241255][T17104] do_syscall_64+0xc9/0x1c0 [ 379.241292][T17104] ? clear_bhb_loop+0x55/0xb0 [ 379.241326][T17104] ? clear_bhb_loop+0x55/0xb0 [ 379.241361][T17104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.241444][T17104] RIP: 0033:0x7fe177a2cde9 [ 379.241463][T17104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.241487][T17104] RSP: 002b:00007fe176097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 379.241510][T17104] RAX: ffffffffffffffda RBX: 00007fe177c45fa0 RCX: 00007fe177a2cde9 [ 379.241526][T17104] RDX: 04000000000001f2 RSI: 0000400000000000 RDI: 0000000000000006 [ 379.241598][T17104] RBP: 00007fe176097090 R08: 0000000000000000 R09: 0000000000000000 [ 379.241614][T17104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.241707][T17104] R13: 0000000000000000 R14: 00007fe177c45fa0 R15: 00007ffc29a437c8 [ 379.241731][T17104] [ 379.241941][T17105] tipc: Enabling of bearer rejected, already enabled [ 379.445951][T17101] 0猉功D: renamed from gretap0 (while UP) [ 379.456661][T17101] 0猉功D: entered allmulticast mode [ 379.465951][T17101] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 379.502447][T17118] loop0: detected capacity change from 0 to 512 [ 379.542839][T17118] EXT4-fs: test_dummy_encryption option not supported [ 379.557353][T17118] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4403'. [ 379.576665][T17118] loop0: detected capacity change from 0 to 512 [ 379.587031][T17118] EXT4-fs (loop0): Invalid log block size: 524288 [ 379.637882][T17125] netlink: 'syz.5.4406': attribute type 46 has an invalid length. [ 379.656598][T17127] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 379.677435][ T29] audit: type=1326 audit(1740033067.141:18919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17124 comm="syz.5.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 379.701555][ T29] audit: type=1326 audit(1740033067.141:18920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17124 comm="syz.5.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 379.704490][T17129] loop7: detected capacity change from 0 to 128 [ 379.725824][ T29] audit: type=1326 audit(1740033067.141:18921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17124 comm="syz.5.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 379.756804][ T29] audit: type=1326 audit(1740033067.141:18922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17124 comm="syz.5.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 379.781404][T17125] loop5: detected capacity change from 0 to 512 [ 379.795281][T17127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4407'. [ 379.850005][T17125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.865160][T17127] macvtap6: entered promiscuous mode [ 379.870655][T17127] dummy0: entered promiscuous mode [ 379.875946][T17127] macvtap6: entered allmulticast mode [ 379.881580][T17127] dummy0: entered allmulticast mode [ 379.889139][T17130] dummy0: left allmulticast mode [ 379.894356][T17130] dummy0: left promiscuous mode [ 379.901204][T17125] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.928551][T14015] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.036034][T17140] loop0: detected capacity change from 0 to 512 [ 380.080410][T17140] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 380.088841][T17140] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 380.136166][T17156] loop5: detected capacity change from 0 to 2048 [ 380.234908][T17172] loop0: detected capacity change from 0 to 128 [ 380.279546][T17156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.330712][T17179] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 380.366894][T17181] loop4: detected capacity change from 0 to 512 [ 380.394648][T17171] loop7: detected capacity change from 0 to 2048 [ 380.417482][T17179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4424'. [ 380.431212][T17179] macvtap7: entered promiscuous mode [ 380.436604][T17179] dummy0: entered promiscuous mode [ 380.441884][T17179] macvtap7: entered allmulticast mode [ 380.447491][T17179] dummy0: entered allmulticast mode [ 380.457879][T17181] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 380.466106][T17181] EXT4-fs (loop4): bad geometry: first data block is 0 with a 1k block and cluster size [ 380.499351][T17171] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.536070][T17182] dummy0: left allmulticast mode [ 380.541060][T17182] dummy0: left promiscuous mode [ 380.554646][T14015] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.671781][T17171] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.923723][ T3570] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:29: bg 0: block 345: padding at end of block bitmap is not set [ 380.938483][T17206] loop5: detected capacity change from 0 to 512 [ 381.068510][T17206] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 381.074027][ T3570] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1016 with error 117 [ 381.090128][T17206] EXT4-fs (loop5): 1 truncate cleaned up [ 381.091517][ T3570] EXT4-fs (loop7): This should not happen!! Data will be lost [ 381.091517][ T3570] [ 381.097559][T17206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.161690][ T3570] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1032 with max blocks 360 with error 28 [ 381.174459][ T3570] EXT4-fs (loop7): This should not happen!! Data will be lost [ 381.174459][ T3570] [ 381.184140][ T3570] EXT4-fs (loop7): Total free blocks count 0 [ 381.190245][ T3570] EXT4-fs (loop7): Free/Dirty block details [ 381.196504][ T3570] EXT4-fs (loop7): free_blocks=0 [ 381.201489][ T3570] EXT4-fs (loop7): dirty_blocks=368 [ 381.206737][ T3570] EXT4-fs (loop7): Block reservation details [ 381.324758][T17223] loop4: detected capacity change from 0 to 128 [ 381.351186][T17223] netlink: 'syz.4.4438': attribute type 1 has an invalid length. [ 381.390776][T17225] tipc: Enabling of bearer rejected, already enabled [ 381.474324][T17230] netlink: 'syz.4.4442': attribute type 46 has an invalid length. [ 381.524165][T17230] loop4: detected capacity change from 0 to 512 [ 381.595830][T17230] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.743391][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.751178][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.758922][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.766646][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.774395][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.782211][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.790000][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.797803][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.805513][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.813225][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.821082][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.828860][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.836550][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.844276][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.851980][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.859786][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.867487][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.875187][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.883130][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.890888][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.898571][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.906281][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.914062][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.921738][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.929498][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.937211][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.945027][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.952776][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.960496][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.968476][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.976329][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 381.984148][ T3376] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 382.256540][T17258] bridge0: port 3(vlan2) entered blocking state [ 382.262941][T17258] bridge0: port 3(vlan2) entered disabled state [ 382.269489][T17258] vlan2: entered allmulticast mode [ 382.274632][T17258] bridge0: entered allmulticast mode [ 382.281394][T17258] vlan2: left allmulticast mode [ 382.286309][T17258] bridge0: left allmulticast mode [ 382.643622][ T3376] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 382.873520][T17273] tipc: Enabling of bearer rejected, already enabled [ 382.913970][T17272] xt_hashlimit: max too large, truncated to 1048576 [ 383.099783][T17295] loop0: detected capacity change from 0 to 512 [ 383.119612][T17299] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4464'. [ 383.134491][T17295] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 383.152169][T17299] 0猉功D: renamed from gretap0 (while UP) [ 383.161197][T17299] 0猉功D: entered allmulticast mode [ 383.170860][T17295] EXT4-fs (loop0): 1 truncate cleaned up [ 383.193552][T17299] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 384.020190][T17320] bridge0: port 3(vlan2) entered blocking state [ 384.026610][T17320] bridge0: port 3(vlan2) entered disabled state [ 384.033168][T17320] vlan2: entered allmulticast mode [ 384.038305][T17320] bridge0: entered allmulticast mode [ 384.044385][T17320] vlan2: left allmulticast mode [ 384.049280][T17320] bridge0: left allmulticast mode [ 384.062858][T17323] tipc: Enabling of bearer rejected, already enabled [ 384.077620][T17325] loop7: detected capacity change from 0 to 4096 [ 384.132040][T17325] ext4: Unknown parameter 'fsname' [ 384.186324][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 384.186343][ T29] audit: type=1400 audit(1740033071.359:19030): avc: denied { write } for pid=17331 comm="syz.2.4475" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 384.188699][T17332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4475'. [ 384.274635][T17335] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4471'. [ 384.308217][T17325] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4471'. [ 384.319269][T17334] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 384.332642][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4474'. [ 384.345230][T17334] dummy0: entered promiscuous mode [ 384.350707][T17334] macvtap2: entered promiscuous mode [ 384.356131][T17334] macvtap2: entered allmulticast mode [ 384.361704][T17334] dummy0: entered allmulticast mode [ 384.375418][T17336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17336 comm=syz.2.4475 [ 384.516542][T17343] dummy0: left allmulticast mode [ 384.521832][T17343] dummy0: left promiscuous mode [ 385.944742][T17353] netem: incorrect ge model size [ 385.949758][T17353] netem: change failed [ 386.184927][T17374] loop4: detected capacity change from 0 to 512 [ 386.211277][T17374] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 386.241307][T17376] loop7: detected capacity change from 0 to 4096 [ 386.257561][T17376] ext4: Unknown parameter 'fsname' [ 386.458115][T17374] EXT4-fs (loop4): 1 truncate cleaned up [ 386.496813][T17383] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4488'. [ 386.535864][T17376] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4488'. [ 386.588326][T17386] 9pnet_fd: Insufficient options for proto=fd [ 386.831416][ T29] audit: type=1326 audit(1740033073.847:19031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.5.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 386.855196][ T29] audit: type=1326 audit(1740033073.847:19032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.5.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 386.879105][ T29] audit: type=1326 audit(1740033073.847:19033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.5.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 386.902794][ T29] audit: type=1326 audit(1740033073.847:19034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.5.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 386.903083][T17395] loop5: detected capacity change from 0 to 512 [ 386.926538][ T29] audit: type=1326 audit(1740033073.847:19035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.5.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 386.956796][ T29] audit: type=1326 audit(1740033073.847:19036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.5.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 386.980756][ T29] audit: type=1326 audit(1740033073.847:19037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.5.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 387.012327][ T29] audit: type=1326 audit(1740033073.903:19038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.5.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 387.035961][ T29] audit: type=1326 audit(1740033073.903:19039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17392 comm="syz.5.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f95f130cde9 code=0x7ffc0000 [ 387.250282][T17395] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.102703][T17431] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4504'. [ 388.111798][T17431] 1猉功D: renamed from 30猉功D (while UP) [ 388.151531][T17431] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 388.173378][T17435] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 388.202625][T17435] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4507'. [ 388.227415][T17435] dummy0: entered promiscuous mode [ 388.235935][T17435] macvtap4: entered promiscuous mode [ 388.241606][T17435] macvtap4: entered allmulticast mode [ 388.247126][T17435] dummy0: entered allmulticast mode [ 388.249489][T17438] loop0: detected capacity change from 0 to 2048 [ 388.282393][T17442] dummy0: left allmulticast mode [ 388.287845][T17442] dummy0: left promiscuous mode [ 388.327561][T17438] EXT4-fs error (device loop0): ext4_ext_precache:631: inode #2: comm syz.0.4509: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 388.426002][T17438] EXT4-fs (loop0): Remounting filesystem read-only [ 388.510764][T17461] 9pnet_fd: Insufficient options for proto=fd [ 388.569545][T17466] loop0: detected capacity change from 0 to 2048 [ 388.604497][T17466] EXT4-fs error (device loop0): ext4_ext_precache:631: inode #2: comm syz.0.4517: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 388.651654][T17466] EXT4-fs (loop0): Remounting filesystem read-only [ 389.148889][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4532'. [ 389.910823][T17517] loop4: detected capacity change from 0 to 2048 [ 390.090566][T17517] EXT4-fs error (device loop4): ext4_ext_precache:631: inode #2: comm syz.4.4536: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 390.254182][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 390.254196][ T29] audit: type=1326 audit(1740033077.046:19117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17532 comm="syz.0.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220becde9 code=0x7ffc0000 [ 390.284025][ T29] audit: type=1326 audit(1740033077.046:19118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17532 comm="syz.0.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220becde9 code=0x7ffc0000 [ 390.308066][ T29] audit: type=1326 audit(1740033077.046:19119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17532 comm="syz.0.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff220becde9 code=0x7ffc0000 [ 390.331796][ T29] audit: type=1326 audit(1740033077.046:19120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17532 comm="syz.0.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220becde9 code=0x7ffc0000 [ 390.355413][ T29] audit: type=1326 audit(1740033077.046:19121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17532 comm="syz.0.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220becde9 code=0x7ffc0000 [ 390.440211][T17517] EXT4-fs (loop4): Remounting filesystem read-only [ 390.459352][T17539] 9pnet_fd: Insufficient options for proto=fd [ 390.474134][T17533] loop0: detected capacity change from 0 to 1024 [ 390.483022][T17533] EXT4-fs: Ignoring removed oldalloc option [ 390.819714][ T29] audit: type=1326 audit(1740033077.243:19122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17532 comm="syz.0.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff220becde9 code=0x7ffc0000 [ 390.843461][ T29] audit: type=1326 audit(1740033077.243:19123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17532 comm="syz.0.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220becde9 code=0x7ffc0000 [ 390.865204][T17553] loop0: detected capacity change from 0 to 512 [ 390.867264][ T29] audit: type=1326 audit(1740033077.243:19124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17532 comm="syz.0.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220becde9 code=0x7ffc0000 [ 390.888833][T17553] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 390.897092][ T29] audit: type=1326 audit(1740033077.243:19125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17532 comm="syz.0.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff220becde9 code=0x7ffc0000 [ 390.930562][ T29] audit: type=1326 audit(1740033077.243:19126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17532 comm="syz.0.4542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220becde9 code=0x7ffc0000 [ 390.932628][T17553] EXT4-fs (loop0): 1 truncate cleaned up [ 391.023031][T17556] loop4: detected capacity change from 0 to 4096 [ 391.029797][T17556] ext4: Unknown parameter 'fsname' [ 391.104795][T17568] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4549'. [ 391.131257][T17556] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4549'. [ 391.829544][T17560] Set syz1 is full, maxelem 65536 reached [ 391.846270][T17596] xt_hashlimit: max too large, truncated to 1048576 [ 392.147714][T17603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4568'. [ 392.244885][T17605] FAULT_INJECTION: forcing a failure. [ 392.244885][T17605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.258171][T17605] CPU: 0 UID: 0 PID: 17605 Comm: syz.7.4567 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 392.258248][T17605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 392.258265][T17605] Call Trace: [ 392.258272][T17605] [ 392.258281][T17605] dump_stack_lvl+0xf2/0x150 [ 392.258309][T17605] dump_stack+0x15/0x1a [ 392.258332][T17605] should_fail_ex+0x24a/0x260 [ 392.258388][T17605] should_fail+0xb/0x10 [ 392.258414][T17605] should_fail_usercopy+0x1a/0x20 [ 392.258517][T17605] _copy_to_user+0x20/0xa0 [ 392.258555][T17605] simple_read_from_buffer+0xa0/0x110 [ 392.258590][T17605] proc_fail_nth_read+0xf9/0x140 [ 392.258641][T17605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 392.258669][T17605] vfs_read+0x19b/0x6f0 [ 392.258699][T17605] ? mutex_lock+0x1d/0x40 [ 392.258802][T17605] ksys_read+0xe8/0x1b0 [ 392.258828][T17605] __x64_sys_read+0x42/0x50 [ 392.258901][T17605] x64_sys_call+0x2874/0x2dc0 [ 392.258930][T17605] do_syscall_64+0xc9/0x1c0 [ 392.258958][T17605] ? clear_bhb_loop+0x55/0xb0 [ 392.259002][T17605] ? clear_bhb_loop+0x55/0xb0 [ 392.259085][T17605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.259119][T17605] RIP: 0033:0x7fe177a2b7fc [ 392.259137][T17605] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 392.259220][T17605] RSP: 002b:00007fe176097030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 392.259262][T17605] RAX: ffffffffffffffda RBX: 00007fe177c45fa0 RCX: 00007fe177a2b7fc [ 392.259275][T17605] RDX: 000000000000000f RSI: 00007fe1760970a0 RDI: 0000000000000008 [ 392.259287][T17605] RBP: 00007fe176097090 R08: 0000000000000000 R09: 0000000000000000 [ 392.259301][T17605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.259316][T17605] R13: 0000000000000000 R14: 00007fe177c45fa0 R15: 00007ffc29a437c8 [ 392.259338][T17605] [ 392.472423][T17607] loop5: detected capacity change from 0 to 2048 [ 392.509617][T17615] loop7: detected capacity change from 0 to 2048 [ 392.540672][T17607] EXT4-fs error (device loop5): ext4_ext_precache:631: inode #2: comm syz.5.4569: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 392.614950][T17607] EXT4-fs (loop5): Remounting filesystem read-only [ 392.640567][T17615] EXT4-fs error (device loop7): ext4_ext_precache:631: inode #2: comm syz.7.4572: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 392.659978][T17615] EXT4-fs (loop7): Remounting filesystem read-only [ 392.682748][T17632] loop0: detected capacity change from 0 to 2048 [ 392.683423][T17622] netlink: 'syz.2.4574': attribute type 8 has an invalid length. [ 392.700421][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4577'. [ 392.749108][T17639] loop5: detected capacity change from 0 to 512 [ 392.796129][T17639] EXT4-fs (loop5): orphan cleanup on readonly fs [ 392.806486][T17632] EXT4-fs error (device loop0): ext4_ext_precache:631: inode #2: comm syz.0.4576: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 392.842719][T17646] loop7: detected capacity change from 0 to 512 [ 392.858500][T17639] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 392.932862][T17639] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 392.944556][T17632] EXT4-fs (loop0): Remounting filesystem read-only [ 392.952304][T17639] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.4578: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 392.973277][T17639] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.4578: couldn't read orphan inode 13 (err -117) [ 392.985685][ T9967] EXT4-fs unmount: 25 callbacks suppressed [ 392.985703][ T9967] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.986425][T17646] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.015627][T17639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 393.028337][T17646] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.076608][T17639] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 393.087130][T17639] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 2 [ 393.136004][T10013] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.213409][T17665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4589'. [ 393.472821][T14015] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.728738][T17688] loop4: detected capacity change from 0 to 4096 [ 393.735428][T17688] ext4: Unknown parameter 'fsname' [ 393.808496][T17698] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4596'. [ 393.818676][T17688] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4596'. [ 393.863141][ T3373] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 393.871050][ T3373] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 393.878833][ T3373] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 393.886548][ T3373] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 393.894243][ T3373] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 393.902025][ T3373] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 393.909863][ T3373] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 393.917642][ T3373] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 393.925868][ T3373] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 393.933768][ T3373] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 393.941550][ T3373] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 393.949576][ T3373] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 393.957446][ T3373] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 393.965220][ T3373] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 393.972934][ T3373] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 393.980600][ T3373] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 393.988328][ T3373] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 393.996006][ T3373] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 394.003684][ T3373] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 394.011392][ T3373] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 394.019093][ T3373] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 394.032606][ T3373] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 394.047089][T17707] loop5: detected capacity change from 0 to 512 [ 394.053729][T17707] EXT4-fs: Ignoring removed oldalloc option [ 394.085754][T17710] loop7: detected capacity change from 0 to 512 [ 394.101172][T17707] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.4604: Parent and EA inode have the same ino 15 [ 394.118466][T17707] EXT4-fs (loop5): Remounting filesystem read-only [ 394.125131][T17707] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 394.135918][T17707] EXT4-fs (loop5): 1 orphan inode deleted [ 394.142279][T17707] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.155778][T17707] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 394.156878][T17710] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.177129][T17707] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.219539][T17710] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.264758][T10013] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.288724][T17735] 9pnet_fd: Insufficient options for proto=fd [ 394.929550][T17757] loop5: detected capacity change from 0 to 4096 [ 394.952046][T17757] ext4: Unknown parameter 'fsname' [ 395.010420][T17766] 9pnet_fd: Insufficient options for proto=fd [ 395.046846][T17770] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4622'. [ 395.064855][T17757] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4622'. [ 395.076606][T17775] loop4: detected capacity change from 0 to 512 [ 395.085684][T17775] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 395.104037][T17775] EXT4-fs (loop4): 1 truncate cleaned up [ 395.110189][T17775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.111232][T17779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4633'. [ 395.149870][T12439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.171790][T17784] tipc: Enabling of bearer rejected, already enabled [ 395.199432][T17788] pim6reg: entered allmulticast mode [ 395.222142][T17787] pim6reg: left allmulticast mode [ 395.246743][T17797] 9pnet_fd: Insufficient options for proto=fd [ 395.306182][T17799] loop5: detected capacity change from 0 to 764 [ 395.315390][T17801] loop7: detected capacity change from 0 to 4096 [ 395.322486][T17801] ext4: Unknown parameter 'fsname' [ 395.390778][T17809] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4643'. [ 395.407674][T17801] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4643'. [ 395.434253][T17807] IPv6: Can't replace route, no match found [ 395.699115][T17838] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 396.177681][T17859] 9pnet_fd: Insufficient options for proto=fd [ 396.231130][T17868] loop7: detected capacity change from 0 to 764 [ 396.339979][T17876] loop0: detected capacity change from 0 to 4096 [ 396.346904][T17876] ext4: Unknown parameter 'fsname' [ 396.630361][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 396.630379][ T29] audit: type=1400 audit(1740033083.005:19270): avc: denied { mount } for pid=17904 comm="syz.0.4681" name="/" dev="configfs" ino=1819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 396.697929][ T29] audit: type=1400 audit(1740033083.042:19271): avc: denied { read } for pid=17904 comm="syz.0.4681" name="/" dev="configfs" ino=1819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.720307][ T29] audit: type=1400 audit(1740033083.042:19272): avc: denied { open } for pid=17904 comm="syz.0.4681" path="/500/file0" dev="configfs" ino=1819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.743407][ T29] audit: type=1400 audit(1740033083.042:19273): avc: denied { open } for pid=17904 comm="syz.0.4681" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 396.849623][ T29] audit: type=1326 audit(1740033083.098:19274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17904 comm="syz.0.4681" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff220becde9 code=0x0 [ 396.872766][ T29] audit: type=1400 audit(1740033083.164:19275): avc: denied { unmount } for pid=9967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 396.877791][T17918] loop7: detected capacity change from 0 to 2048 [ 396.893066][ T29] audit: type=1400 audit(1740033083.164:19276): avc: denied { search } for pid=9967 comm="syz-executor" name="/" dev="configfs" ino=1819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.893112][ T29] audit: type=1400 audit(1740033083.164:19277): avc: denied { getattr } for pid=9967 comm="syz-executor" path="/500/file0/target/dbroot" dev="configfs" ino=61564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 396.893145][ T29] audit: type=1400 audit(1740033083.164:19278): avc: denied { write } for pid=9967 comm="syz-executor" name="target" dev="configfs" ino=1820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.893178][ T29] audit: type=1400 audit(1740033083.164:19279): avc: denied { remove_name } for pid=9967 comm="syz-executor" name="dbroot" dev="configfs" ino=61565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 397.108180][T17918] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.122500][T17928] FAULT_INJECTION: forcing a failure. [ 397.122500][T17928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.135710][T17928] CPU: 1 UID: 0 PID: 17928 Comm: syz.5.4688 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 397.135738][T17928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 397.135754][T17928] Call Trace: [ 397.135763][T17928] [ 397.135773][T17928] dump_stack_lvl+0xf2/0x150 [ 397.135802][T17928] dump_stack+0x15/0x1a [ 397.135877][T17928] should_fail_ex+0x24a/0x260 [ 397.135908][T17928] should_fail+0xb/0x10 [ 397.135942][T17928] should_fail_usercopy+0x1a/0x20 [ 397.136026][T17928] _copy_from_user+0x1c/0xa0 [ 397.136088][T17928] copy_msghdr_from_user+0x54/0x2a0 [ 397.136126][T17928] ? __fget_files+0x17c/0x1c0 [ 397.136162][T17928] __sys_sendmsg+0x13e/0x230 [ 397.136208][T17928] __x64_sys_sendmsg+0x46/0x50 [ 397.136266][T17928] x64_sys_call+0x2734/0x2dc0 [ 397.136301][T17928] do_syscall_64+0xc9/0x1c0 [ 397.136334][T17928] ? clear_bhb_loop+0x55/0xb0 [ 397.136384][T17928] ? clear_bhb_loop+0x55/0xb0 [ 397.136414][T17928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.136448][T17928] RIP: 0033:0x7f95f130cde9 [ 397.136524][T17928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.136549][T17928] RSP: 002b:00007f95ef971038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.136573][T17928] RAX: ffffffffffffffda RBX: 00007f95f1525fa0 RCX: 00007f95f130cde9 [ 397.136590][T17928] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 397.136605][T17928] RBP: 00007f95ef971090 R08: 0000000000000000 R09: 0000000000000000 [ 397.136622][T17928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.136645][T17928] R13: 0000000000000000 R14: 00007f95f1525fa0 R15: 00007ffddf9daaa8 [ 397.136668][T17928] [ 397.337811][T17931] loop5: detected capacity change from 0 to 764 [ 397.346058][T17918] EXT4-fs error (device loop7): ext4_ext_precache:631: inode #2: comm syz.7.4685: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 397.365431][T17918] EXT4-fs (loop7): Remounting filesystem read-only [ 397.456293][T10013] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.609287][T17945] loop7: detected capacity change from 0 to 512 [ 397.659484][T17945] EXT4-fs (loop7): orphan cleanup on readonly fs [ 397.670889][T17945] EXT4-fs warning (device loop7): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 397.832501][T17945] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 397.844086][T17945] EXT4-fs error (device loop7): ext4_ext_check_inode:524: inode #13: comm syz.7.4694: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 397.882572][T17945] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.4694: couldn't read orphan inode 13 (err -117) [ 397.929792][T17945] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 398.204957][T17945] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 398.252066][T17945] EXT4-fs warning (device loop7): read_mmp_block:115: Error -117 while reading MMP block 2 [ 398.443122][T17961] loop5: detected capacity change from 0 to 128 [ 398.443925][T10013] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.469556][T17961] netlink: 'syz.5.4697': attribute type 1 has an invalid length. [ 398.496581][T17963] IPv6: Can't replace route, no match found [ 398.744437][T17985] xt_hashlimit: max too large, truncated to 1048576 [ 399.247165][ T9967] ================================================================== [ 399.255317][ T9967] BUG: KCSAN: data-race in __dentry_kill / step_into [ 399.262060][ T9967] [ 399.264411][ T9967] read-write to 0xffff88813bdd0900 of 4 bytes by task 10581 on cpu 1: [ 399.272576][ T9967] __dentry_kill+0x22e/0x4c0 [ 399.277209][ T9967] dput+0x5c/0xd0 [ 399.280867][ T9967] do_unlinkat+0x258/0x4d0 [ 399.285315][ T9967] __x64_sys_unlink+0x2e/0x40 [ 399.290016][ T9967] x64_sys_call+0x2329/0x2dc0 [ 399.294722][ T9967] do_syscall_64+0xc9/0x1c0 [ 399.299267][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.305204][ T9967] [ 399.307541][ T9967] read to 0xffff88813bdd0900 of 4 bytes by task 9967 on cpu 0: [ 399.315096][ T9967] step_into+0x129/0x820 [ 399.319363][ T9967] path_openat+0x13e5/0x1fc0 [ 399.323984][ T9967] do_filp_open+0x107/0x230 [ 399.328523][ T9967] do_sys_openat2+0xab/0x120 [ 399.333162][ T9967] __x64_sys_openat+0xf3/0x120 [ 399.337944][ T9967] x64_sys_call+0x2b30/0x2dc0 [ 399.342730][ T9967] do_syscall_64+0xc9/0x1c0 [ 399.347260][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.353186][ T9967] [ 399.355514][ T9967] value changed: 0x00400008 -> 0x00008008 [ 399.361236][ T9967] [ 399.363570][ T9967] Reported by Kernel Concurrency Sanitizer on: [ 399.369718][ T9967] CPU: 0 UID: 0 PID: 9967 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 399.380572][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 399.390632][ T9967] ================================================================== [ 399.411683][ T9967] ================================================================== [ 399.419832][ T9967] BUG: KCSAN: data-race in __dentry_kill / step_into [ 399.426566][ T9967] [ 399.428897][ T9967] read-write to 0xffff88813bf08c00 of 4 bytes by task 10581 on cpu 1: [ 399.437063][ T9967] __dentry_kill+0x22e/0x4c0 [ 399.441689][ T9967] dput+0x5c/0xd0 [ 399.445368][ T9967] __fput+0x428/0x640 [ 399.449367][ T9967] __fput_sync+0x96/0xc0 [ 399.453628][ T9967] __x64_sys_close+0x55/0xe0 [ 399.458242][ T9967] x64_sys_call+0x266c/0x2dc0 [ 399.462947][ T9967] do_syscall_64+0xc9/0x1c0 [ 399.467522][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.473444][ T9967] [ 399.475784][ T9967] read to 0xffff88813bf08c00 of 4 bytes by task 9967 on cpu 0: [ 399.483342][ T9967] step_into+0xe3/0x820 [ 399.487539][ T9967] path_openat+0x13e5/0x1fc0 [ 399.492149][ T9967] do_filp_open+0x107/0x230 [ 399.496660][ T9967] do_sys_openat2+0xab/0x120 [ 399.501253][ T9967] __x64_sys_openat+0xf3/0x120 [ 399.506019][ T9967] x64_sys_call+0x2b30/0x2dc0 [ 399.510709][ T9967] do_syscall_64+0xc9/0x1c0 [ 399.515229][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.521135][ T9967] [ 399.523463][ T9967] value changed: 0x00400008 -> 0x00008008 [ 399.529180][ T9967] [ 399.531507][ T9967] Reported by Kernel Concurrency Sanitizer on: [ 399.537658][ T9967] CPU: 0 UID: 0 PID: 9967 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 399.548529][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 399.558594][ T9967] ================================================================== [ 401.346448][T10581] ================================================================== [ 401.354682][T10581] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 401.361418][T10581] [ 401.363762][T10581] write to 0xffff88813bd4a850 of 8 bytes by task 9967 on cpu 1: [ 401.371419][T10581] __dentry_kill+0x13e/0x4c0 [ 401.376053][T10581] dput+0x5c/0xd0 [ 401.379727][T10581] do_unlinkat+0x258/0x4d0 [ 401.384183][T10581] __x64_sys_unlink+0x2e/0x40 [ 401.388989][T10581] x64_sys_call+0x2329/0x2dc0 [ 401.393695][T10581] do_syscall_64+0xc9/0x1c0 [ 401.398231][T10581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.404154][T10581] [ 401.406483][T10581] read to 0xffff88813bd4a850 of 8 bytes by task 10581 on cpu 0: [ 401.414130][T10581] fast_dput+0x65/0x2c0 [ 401.418334][T10581] dput+0x24/0xd0 [ 401.422001][T10581] __fput+0x428/0x640 [ 401.425996][T10581] __fput_sync+0x96/0xc0 [ 401.430266][T10581] __x64_sys_close+0x55/0xe0 [ 401.434884][T10581] x64_sys_call+0x266c/0x2dc0 [ 401.439594][T10581] do_syscall_64+0xc9/0x1c0 [ 401.444125][T10581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.450045][T10581] [ 401.452374][T10581] value changed: 0xffff888237837168 -> 0x0000000000000000 [ 401.459491][T10581] [ 401.461824][T10581] Reported by Kernel Concurrency Sanitizer on: [ 401.467989][T10581] CPU: 0 UID: 0 PID: 10581 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 401.478969][T10581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 401.489042][T10581] ================================================================== [ 401.628011][ T9967] ================================================================== [ 401.636155][ T9967] BUG: KCSAN: data-race in __dentry_kill / lookup_fast [ 401.643063][ T9967] [ 401.645429][ T9967] read-write to 0xffff88813bd4dc00 of 4 bytes by task 10581 on cpu 0: [ 401.653634][ T9967] __dentry_kill+0x22e/0x4c0 [ 401.658263][ T9967] dput+0x5c/0xd0 [ 401.661965][ T9967] do_unlinkat+0x258/0x4d0 [ 401.666418][ T9967] __x64_sys_unlink+0x2e/0x40 [ 401.671124][ T9967] x64_sys_call+0x2329/0x2dc0 [ 401.675842][ T9967] do_syscall_64+0xc9/0x1c0 [ 401.680379][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.686311][ T9967] [ 401.688650][ T9967] read to 0xffff88813bd4dc00 of 4 bytes by task 9967 on cpu 1: [ 401.696201][ T9967] lookup_fast+0xe9/0x320 [ 401.700554][ T9967] path_openat+0x41e/0x1fc0 [ 401.705092][ T9967] do_filp_open+0x107/0x230 [ 401.709614][ T9967] do_sys_openat2+0xab/0x120 [ 401.714238][ T9967] __x64_sys_openat+0xf3/0x120 [ 401.719135][ T9967] x64_sys_call+0x2b30/0x2dc0 [ 401.723844][ T9967] do_syscall_64+0xc9/0x1c0 [ 401.728727][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.734659][ T9967] [ 401.736989][ T9967] value changed: 0x00400008 -> 0x00008008 [ 401.742719][ T9967] [ 401.745045][ T9967] Reported by Kernel Concurrency Sanitizer on: [ 401.751203][ T9967] CPU: 1 UID: 0 PID: 9967 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 401.762076][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 401.772156][ T9967] ================================================================== [ 402.384467][ T9967] ================================================================== [ 402.392606][ T9967] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 402.399877][ T9967] [ 402.402231][ T9967] write to 0xffff88813bf48030 of 8 bytes by task 10581 on cpu 1: [ 402.409973][ T9967] dentry_unlink_inode+0x65/0x260 [ 402.415036][ T9967] __dentry_kill+0x18b/0x4c0 [ 402.419665][ T9967] dput+0x5c/0xd0 [ 402.423371][ T9967] __fput+0x428/0x640 [ 402.427474][ T9967] __fput_sync+0x96/0xc0 [ 402.431743][ T9967] __x64_sys_close+0x55/0xe0 [ 402.436453][ T9967] x64_sys_call+0x266c/0x2dc0 [ 402.441165][ T9967] do_syscall_64+0xc9/0x1c0 [ 402.445696][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.451817][ T9967] [ 402.454159][ T9967] read to 0xffff88813bf48030 of 8 bytes by task 9967 on cpu 0: [ 402.461735][ T9967] step_into+0x11d/0x820 [ 402.466025][ T9967] path_openat+0x13e5/0x1fc0 [ 402.470737][ T9967] do_filp_open+0x107/0x230 [ 402.475273][ T9967] do_sys_openat2+0xab/0x120 [ 402.479888][ T9967] __x64_sys_openat+0xf3/0x120 [ 402.484680][ T9967] x64_sys_call+0x2b30/0x2dc0 [ 402.489381][ T9967] do_syscall_64+0xc9/0x1c0 [ 402.493919][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.499889][ T9967] [ 402.502222][ T9967] value changed: 0xffff88813bf64738 -> 0x0000000000000000 [ 402.509346][ T9967] [ 402.511674][ T9967] Reported by Kernel Concurrency Sanitizer on: [ 402.517834][ T9967] CPU: 0 UID: 0 PID: 9967 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 402.528708][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 402.538980][ T9967] ================================================================== [ 403.887009][ T9967] ================================================================== [ 403.895152][ T9967] BUG: KCSAN: data-race in __dentry_kill / step_into [ 403.901900][ T9967] [ 403.904241][ T9967] read-write to 0xffff88813bf2de40 of 4 bytes by task 10581 on cpu 1: [ 403.912514][ T9967] __dentry_kill+0x22e/0x4c0 [ 403.917152][ T9967] dput+0x5c/0xd0 [ 403.920815][ T9967] do_unlinkat+0x258/0x4d0 [ 403.925268][ T9967] __x64_sys_unlink+0x2e/0x40 [ 403.929980][ T9967] x64_sys_call+0x2329/0x2dc0 [ 403.934693][ T9967] do_syscall_64+0xc9/0x1c0 [ 403.939235][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.945175][ T9967] [ 403.947512][ T9967] read to 0xffff88813bf2de40 of 4 bytes by task 9967 on cpu 0: [ 403.955074][ T9967] step_into+0xe3/0x820 [ 403.959270][ T9967] path_openat+0x13e5/0x1fc0 [ 403.963890][ T9967] do_filp_open+0x107/0x230 [ 403.968423][ T9967] do_sys_openat2+0xab/0x120 [ 403.973040][ T9967] __x64_sys_openat+0xf3/0x120 [ 403.977830][ T9967] x64_sys_call+0x2b30/0x2dc0 [ 403.982535][ T9967] do_syscall_64+0xc9/0x1c0 [ 403.987067][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.992991][ T9967] [ 403.995328][ T9967] value changed: 0x00400008 -> 0x00008008 [ 404.001058][ T9967] [ 404.003396][ T9967] Reported by Kernel Concurrency Sanitizer on: [ 404.009560][ T9967] CPU: 0 UID: 0 PID: 9967 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 404.020430][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 404.030513][ T9967] ================================================================== [ 404.725135][T10581] ================================================================== [ 404.733283][T10581] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 404.740098][T10581] [ 404.742452][T10581] write to 0xffff88813be84490 of 8 bytes by task 9967 on cpu 1: [ 404.750105][T10581] __dentry_kill+0x13e/0x4c0 [ 404.754732][T10581] dput+0x5c/0xd0 [ 404.758407][T10581] do_unlinkat+0x258/0x4d0 [ 404.762855][T10581] __x64_sys_unlink+0x2e/0x40 [ 404.767551][T10581] x64_sys_call+0x2329/0x2dc0 [ 404.772259][T10581] do_syscall_64+0xc9/0x1c0 [ 404.776793][T10581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.782710][T10581] [ 404.785043][T10581] read to 0xffff88813be84490 of 8 bytes by task 10581 on cpu 0: [ 404.792697][T10581] fast_dput+0x65/0x2c0 [ 404.796884][T10581] dput+0x24/0xd0 [ 404.800549][T10581] __fput+0x428/0x640 [ 404.804798][T10581] __fput_sync+0x96/0xc0 [ 404.809151][T10581] __x64_sys_close+0x55/0xe0 [ 404.813776][T10581] x64_sys_call+0x266c/0x2dc0 [ 404.818480][T10581] do_syscall_64+0xc9/0x1c0 [ 404.823010][T10581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.828940][T10581] [ 404.831272][T10581] value changed: 0xffff888237837168 -> 0x0000000000000000 [ 404.838393][T10581] [ 404.840724][T10581] Reported by Kernel Concurrency Sanitizer on: [ 404.846882][T10581] CPU: 0 UID: 0 PID: 10581 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 404.857845][T10581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 404.867927][T10581] ================================================================== [ 405.401324][ T9967] ================================================================== [ 405.409465][ T9967] BUG: KCSAN: data-race in __dentry_kill / lookup_fast [ 405.416364][ T9967] [ 405.418699][ T9967] read-write to 0xffff888106654b40 of 4 bytes by task 10581 on cpu 1: [ 405.426867][ T9967] __dentry_kill+0x22e/0x4c0 [ 405.431502][ T9967] dput+0x5c/0xd0 [ 405.435177][ T9967] do_unlinkat+0x258/0x4d0 [ 405.439619][ T9967] __x64_sys_unlink+0x2e/0x40 [ 405.444328][ T9967] x64_sys_call+0x2329/0x2dc0 [ 405.449040][ T9967] do_syscall_64+0xc9/0x1c0 [ 405.453574][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.459502][ T9967] [ 405.461852][ T9967] read to 0xffff888106654b40 of 4 bytes by task 9967 on cpu 0: [ 405.469448][ T9967] lookup_fast+0xe9/0x320 [ 405.473801][ T9967] path_openat+0x41e/0x1fc0 [ 405.478419][ T9967] do_filp_open+0x107/0x230 [ 405.482961][ T9967] do_sys_openat2+0xab/0x120 [ 405.487596][ T9967] __x64_sys_openat+0xf3/0x120 [ 405.492473][ T9967] x64_sys_call+0x2b30/0x2dc0 [ 405.497182][ T9967] do_syscall_64+0xc9/0x1c0 [ 405.501722][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.507659][ T9967] [ 405.510001][ T9967] value changed: 0x00400008 -> 0x00008008 [ 405.515735][ T9967] [ 405.518065][ T9967] Reported by Kernel Concurrency Sanitizer on: [ 405.524236][ T9967] CPU: 0 UID: 0 PID: 9967 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 405.535188][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 405.545284][ T9967] ================================================================== [ 405.830789][T10581] ================================================================== [ 405.838922][T10581] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 405.846162][T10581] [ 405.848505][T10581] write to 0xffff88813bf3e7b0 of 8 bytes by task 9967 on cpu 0: [ 405.856155][T10581] dentry_unlink_inode+0x65/0x260 [ 405.861217][T10581] __dentry_kill+0x18b/0x4c0 [ 405.865849][T10581] dput+0x5c/0xd0 [ 405.869521][T10581] __fput+0x428/0x640 [ 405.873781][T10581] __fput_sync+0x96/0xc0 [ 405.878051][T10581] __x64_sys_close+0x55/0xe0 [ 405.882656][T10581] x64_sys_call+0x266c/0x2dc0 [ 405.887369][T10581] do_syscall_64+0xc9/0x1c0 [ 405.891907][T10581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.897829][T10581] [ 405.900162][T10581] read to 0xffff88813bf3e7b0 of 8 bytes by task 10581 on cpu 1: [ 405.907807][T10581] step_into+0x11d/0x820 [ 405.912112][T10581] path_openat+0x13e5/0x1fc0 [ 405.916733][T10581] do_filp_open+0x107/0x230 [ 405.921253][T10581] do_sys_openat2+0xab/0x120 [ 405.925865][T10581] __x64_sys_openat+0xf3/0x120 [ 405.930651][T10581] x64_sys_call+0x2b30/0x2dc0 [ 405.935361][T10581] do_syscall_64+0xc9/0x1c0 [ 405.939900][T10581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.945822][T10581] [ 405.948167][T10581] value changed: 0xffff88813bf01a78 -> 0x0000000000000000 [ 405.955281][T10581] [ 405.957618][T10581] Reported by Kernel Concurrency Sanitizer on: [ 405.963778][T10581] CPU: 1 UID: 0 PID: 10581 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 405.974763][T10581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 405.984843][T10581] ================================================================== [ 407.532124][ T9967] ================================================================== [ 407.540265][ T9967] BUG: KCSAN: data-race in __dentry_kill / step_into [ 407.547004][ T9967] [ 407.549334][ T9967] read-write to 0xffff88813bca80c0 of 4 bytes by task 10581 on cpu 0: [ 407.557506][ T9967] __dentry_kill+0x22e/0x4c0 [ 407.562227][ T9967] dput+0x5c/0xd0 [ 407.565892][ T9967] __fput+0x428/0x640 [ 407.569894][ T9967] __fput_sync+0x96/0xc0 [ 407.574271][ T9967] __x64_sys_close+0x55/0xe0 [ 407.578888][ T9967] x64_sys_call+0x266c/0x2dc0 [ 407.583587][ T9967] do_syscall_64+0xc9/0x1c0 [ 407.588124][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.594044][ T9967] [ 407.596383][ T9967] read to 0xffff88813bca80c0 of 4 bytes by task 9967 on cpu 1: [ 407.603947][ T9967] step_into+0x129/0x820 [ 407.608242][ T9967] path_openat+0x13e5/0x1fc0 [ 407.612871][ T9967] do_filp_open+0x107/0x230 [ 407.617397][ T9967] do_sys_openat2+0xab/0x120 [ 407.622012][ T9967] __x64_sys_openat+0xf3/0x120 [ 407.626806][ T9967] x64_sys_call+0x2b30/0x2dc0 [ 407.631521][ T9967] do_syscall_64+0xc9/0x1c0 [ 407.636081][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.642003][ T9967] [ 407.644327][ T9967] value changed: 0x00400008 -> 0x00008008 [ 407.650072][ T9967] [ 407.652430][ T9967] Reported by Kernel Concurrency Sanitizer on: [ 407.658798][ T9967] CPU: 1 UID: 0 PID: 9967 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 407.669776][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 407.679958][ T9967] ================================================================== [ 408.150799][T10581] ================================================================== [ 408.158950][T10581] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 408.165689][T10581] [ 408.168026][T10581] write to 0xffff88813be84490 of 8 bytes by task 9967 on cpu 0: [ 408.175727][T10581] __dentry_kill+0x13e/0x4c0 [ 408.180350][T10581] dput+0x5c/0xd0 [ 408.184016][T10581] __fput+0x428/0x640 [ 408.188013][T10581] __fput_sync+0x96/0xc0 [ 408.192271][T10581] __x64_sys_close+0x55/0xe0 [ 408.196880][T10581] x64_sys_call+0x266c/0x2dc0 [ 408.201591][T10581] do_syscall_64+0xc9/0x1c0 [ 408.206125][T10581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.212059][T10581] [ 408.214398][T10581] read to 0xffff88813be84490 of 8 bytes by task 10581 on cpu 1: [ 408.222039][T10581] fast_dput+0x65/0x2c0 [ 408.226229][T10581] dput+0x24/0xd0 [ 408.229903][T10581] __fput+0x428/0x640 [ 408.233897][T10581] __fput_sync+0x96/0xc0 [ 408.238165][T10581] __x64_sys_close+0x55/0xe0 [ 408.242789][T10581] x64_sys_call+0x266c/0x2dc0 [ 408.247492][T10581] do_syscall_64+0xc9/0x1c0 [ 408.252030][T10581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.257948][T10581] [ 408.260325][T10581] value changed: 0xffff888237837168 -> 0x0000000000000000 [ 408.267440][T10581] [ 408.269775][T10581] Reported by Kernel Concurrency Sanitizer on: [ 408.275951][T10581] CPU: 1 UID: 0 PID: 10581 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 408.286912][T10581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 408.297003][T10581] ================================================================== [ 408.385701][ T9967] ================================================================== [ 408.393863][ T9967] BUG: KCSAN: data-race in __dentry_kill / step_into [ 408.400615][ T9967] [ 408.402954][ T9967] read-write to 0xffff88813bf4e600 of 4 bytes by task 10581 on cpu 1: [ 408.411126][ T9967] __dentry_kill+0x22e/0x4c0 [ 408.415781][ T9967] dput+0x5c/0xd0 [ 408.419461][ T9967] __fput+0x428/0x640 [ 408.423502][ T9967] __fput_sync+0x96/0xc0 [ 408.428045][ T9967] __x64_sys_close+0x55/0xe0 [ 408.432671][ T9967] x64_sys_call+0x266c/0x2dc0 [ 408.437481][ T9967] do_syscall_64+0xc9/0x1c0 [ 408.442031][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.447974][ T9967] [ 408.450309][ T9967] read to 0xffff88813bf4e600 of 4 bytes by task 9967 on cpu 0: [ 408.457861][ T9967] step_into+0xe3/0x820 [ 408.462059][ T9967] path_openat+0x13e5/0x1fc0 [ 408.466668][ T9967] do_filp_open+0x107/0x230 [ 408.471202][ T9967] do_sys_openat2+0xab/0x120 [ 408.475828][ T9967] __x64_sys_openat+0xf3/0x120 [ 408.480616][ T9967] x64_sys_call+0x2b30/0x2dc0 [ 408.485320][ T9967] do_syscall_64+0xc9/0x1c0 [ 408.489849][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.495858][ T9967] [ 408.498192][ T9967] value changed: 0x00400008 -> 0x00008008 [ 408.503921][ T9967] [ 408.506249][ T9967] Reported by Kernel Concurrency Sanitizer on: [ 408.512403][ T9967] CPU: 0 UID: 0 PID: 9967 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 408.523275][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 408.533351][ T9967] ==================================================================