last executing test programs: 6m12.323434936s ago: executing program 32 (id=889): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60004000003c3c01207fdd25ef0000000000000040000000ff0200000000000000000000000000010004000000000000c91000000000000000000000000000000001"], 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r2 = eventfd2(0x9, 0x0) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) io_destroy(r1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xf60, 0x4}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101341) ioctl$USBDEVFS_IOCTL(r6, 0x8008551c, &(0x7f0000000040)=@usbdevfs_driver={0x942, 0xa1a6, 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000000), &(0x7f00000005c0)=r9}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) 2m15.489968038s ago: executing program 3 (id=4247): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x10, 0x1, 0x9, 0x3, 0x15, "007de521ec070ef4f834bbeda7f6647bbfdef7"}) epoll_create(0x3) socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x5, 0x400000) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000001c0)={0x2670a7f749be0f7f, 0x13, 0x8, 0x9, 0x27, 0x4, &(0x7f0000000180)="6cbd801cf3e75505d803b94e245e216dcf8df4936c920808bd3cbedb7ed7a0c3dae0836531cd5f"}) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x1, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000011140100000000000300000008004b0013000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x14) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x90, &(0x7f0000000200)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x3, @loopback, 0x53e8}, @in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x36}}, @in6={0xa, 0x4e20, 0x7f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e22, 0xb1f, @mcast1, 0xc857}]}, &(0x7f0000000300)=0x10) 2m14.317567463s ago: executing program 3 (id=4260): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x7, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) 2m14.098871376s ago: executing program 3 (id=4268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x7, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 2m14.066073337s ago: executing program 3 (id=4269): mknod$loop(0x0, 0x100000000000600d, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") r0 = socket(0x21, 0x2, 0x10000000000002) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)=@sco, 0x80, 0x0}, 0x7}], 0x1, 0x20, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setreuid(0xffffffffffffffff, 0xee00) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x8001) r5 = getpgid(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2, r5}) sendmmsg$unix(r3, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x181e00, 0x0) 2m13.502563214s ago: executing program 3 (id=4280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES8=r0, @ANYRES32], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) semop(0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) writev(r1, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x109080, 0x0) utimensat(r2, 0x0, 0x0, 0x0) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f00000000c0)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[], 0x48) 2m13.162527469s ago: executing program 3 (id=4285): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x100}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x84}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0x4, 0x6, 0x0, 0x9, 0x7ff}}, {0x4}}]}]}, 0x68}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0xe8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast1, @multicast2, 0xffffffff, 0xff, 0xd, 0x1, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0xe, 0x3, 0xff, 0xfff1, 0x5, 0xfff, 'caif0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x0, 0x80}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x80, 0x6, 0x3}}}, {{@arp={@multicast1, @remote, 0x0, 0xff000000, 0x4, 0x8, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x9, 0x1fdd, 0x3, 0x7, 0x2, 'syzkaller1\x00', 'rose0\x00', {0xff}, {}, 0x0, 0x982521f66ee8fc8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @broadcast, @empty, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x8000, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 2m13.162363099s ago: executing program 33 (id=4285): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x100}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x84}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0x4, 0x6, 0x0, 0x9, 0x7ff}}, {0x4}}]}]}, 0x68}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0xe8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast1, @multicast2, 0xffffffff, 0xff, 0xd, 0x1, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0xe, 0x3, 0xff, 0xfff1, 0x5, 0xfff, 'caif0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x0, 0x80}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x80, 0x6, 0x3}}}, {{@arp={@multicast1, @remote, 0x0, 0xff000000, 0x4, 0x8, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x9, 0x1fdd, 0x3, 0x7, 0x2, 'syzkaller1\x00', 'rose0\x00', {0xff}, {}, 0x0, 0x982521f66ee8fc8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @broadcast, @empty, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x8000, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1m5.54516308s ago: executing program 1 (id=5406): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000016000000b40000007f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000fd94362e777cf575000000000000ce", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000001000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000061006400000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000018000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES64=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_destroy(0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) memfd_create(&(0x7f0000000300)='keyring\x00', 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r8) r9 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) 1m5.220988994s ago: executing program 1 (id=5411): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket(0xa, 0x4, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x20000080) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x7}]}, 0x24}}, 0x0) r8 = dup(r7) r9 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, &(0x7f0000000080)=0x1, 0x4) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f00000001c0)) sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x14, 0x453, 0x400, 0x70bd2b, 0x25dfdbfb, '\x00'}, 0x14}, 0x1, 0x0, 0x0, 0x4008140}, 0x880) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) io_setup(0x8, &(0x7f0000004200)=0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r11, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r12, 0x0}]) r13 = dup(r10) fsetxattr$security_selinux(r12, &(0x7f00000002c0), &(0x7f0000000300)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x3) ioctl$USBDEVFS_SUBMITURB(r13, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x2, {0x0, 0x1}, {0x47, 0x2}, @cond=[{0x84, 0x3ff, 0x404, 0x4, 0x1, 0xd}, {0x0, 0xa0, 0x1, 0x5, 0x800, 0xff01}]}) 1m4.79436593s ago: executing program 1 (id=5417): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040014) (fail_nth: 1) 1m4.506516224s ago: executing program 1 (id=5420): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x10001}, 0x80, 0x0}, 0x20000800) sendmsg$kcm(r2, &(0x7f0000000380)={&(0x7f0000000440)=@nl=@kern={0x10, 0x0, 0x0, 0x1000000}, 0x80, 0x0}, 0x24008845) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x75) r5 = getpid() rt_tgsigqueueinfo(r5, 0x0, 0x20, 0x0) r6 = fspick(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x2802822, &(0x7f0000000400), 0x2, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") ftruncate(0xffffffffffffffff, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1000000, 0x2012, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) 1m4.02236851s ago: executing program 1 (id=5427): clock_getres(0x5, &(0x7f00000009c0)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x202202, 0x104, 0x1}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x8) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000003c0)=0x8, 0x4) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x3) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) listen(r1, 0x8000) 1m3.795227493s ago: executing program 1 (id=5430): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x80000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000010000000180012800b000100697036746e6c0000080002800400130008000300", @ANYRES32], 0x40}}, 0x0) 1m3.754445364s ago: executing program 34 (id=5430): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x80000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000010000000180012800b000100697036746e6c0000080002800400130008000300", @ANYRES32], 0x40}}, 0x0) 58.82836612s ago: executing program 6 (id=5473): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 58.756326251s ago: executing program 6 (id=5478): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=t']) 58.685810472s ago: executing program 6 (id=5479): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000007000000070000010900010073797a30000000003c000000090a010400000000000000000700001008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800a0001"], 0x104}}, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) 58.505193194s ago: executing program 6 (id=5481): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x10001}, 0x80, 0x0}, 0x20000800) sendmsg$kcm(r2, &(0x7f0000000380)={&(0x7f0000000440)=@nl=@kern={0x10, 0x0, 0x0, 0x1000000}, 0x80, 0x0}, 0x24008845) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x75) r5 = getpid() rt_tgsigqueueinfo(r5, 0x0, 0x20, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x2802822, &(0x7f0000000400), 0x2, 0x248, &(0x7f0000000940)="$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") ftruncate(0xffffffffffffffff, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1000000, 0x2012, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) 58.396804046s ago: executing program 6 (id=5483): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2713, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) 58.302425217s ago: executing program 6 (id=5484): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a958df39f9c5a8c8e876a52816446d0106f4a81dba144c80fda0b401f0774edbf73b3de44d7ca5c28b0830910f3b02be5e8", 0x427}], 0x2}, 0x0) recvmmsg$unix(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f000000a0c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f000000a100), 0x1, 0x7ae, &(0x7f000000a300)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_io_uring_setup(0x1750, &(0x7f0000000140)={0x0, 0x9381, 0x80, 0x7ffff, 0x2000088}, &(0x7f00000004c0), &(0x7f0000000200)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$packet(0x11, 0xa, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18f70000fbffff0f000000000000088df45500007d00000095d0999c828db438f41f759c819ab10bb9c54e5e13c3896d0fd8ec9ce5d26094999a1822c45cb6972e616ceb90319baa6c1c85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r9, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r5, 0x46f3, 0x0, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/84, 0x54}], 0x1}}], 0x1, 0x40000000, 0x0) write(r8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 58.260506048s ago: executing program 35 (id=5484): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x427}], 0x2}, 0x0) recvmmsg$unix(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f000000a0c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f000000a100), 0x1, 0x7ae, &(0x7f000000a300)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_io_uring_setup(0x1750, &(0x7f0000000140)={0x0, 0x9381, 0x80, 0x7ffff, 0x2000088}, &(0x7f00000004c0), &(0x7f0000000200)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$packet(0x11, 0xa, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18f70000fbffff0f000000000000088df45500007d00000095d0999c828db438f41f759c819ab10bb9c54e5e13c3896d0fd8ec9ce5d26094999a1822c45cb6972e616ceb90319baa6c1c85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r9, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r5, 0x46f3, 0x0, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/84, 0x54}], 0x1}}], 0x1, 0x40000000, 0x0) write(r8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 55.582673653s ago: executing program 0 (id=5499): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=t']) 55.544137874s ago: executing program 0 (id=5500): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 55.226328898s ago: executing program 0 (id=5503): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0300002000"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 55.017714302s ago: executing program 0 (id=5506): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x10001}, 0x80, 0x0}, 0x20000800) sendmsg$kcm(r2, &(0x7f0000000380)={&(0x7f0000000440)=@nl=@kern={0x10, 0x0, 0x0, 0x1000000}, 0x80, 0x0}, 0x24008845) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x75) r5 = getpid() rt_tgsigqueueinfo(r5, 0x0, 0x20, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x2802822, &(0x7f0000000400), 0x2, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") ftruncate(0xffffffffffffffff, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1000000, 0x2012, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) 54.907926503s ago: executing program 0 (id=5509): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=t']) 54.535519378s ago: executing program 0 (id=5512): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 54.463420769s ago: executing program 36 (id=5512): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 46.299845659s ago: executing program 8 (id=5634): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 46.290765839s ago: executing program 8 (id=5635): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x1, &(0x7f00000001c0)=[{0x0, 0xc, 0xde, 0x5}]}) inotify_init1(0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x3, 0x8, 0x8d2d) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x18) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xd32]}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) getrlimit(0x1, &(0x7f0000000000)) tkill(0x0, 0x7) getgroups(0x0, 0x0) ptrace(0x10, r1) ptrace$getregs(0xc, r1, 0xffffffffffffdcaf, &(0x7f0000000040)=""/45) r8 = syz_open_procfs(r1, &(0x7f0000000080)='net/l2cap\x00') read$msr(r8, &(0x7f0000000180)=""/174, 0xae) 46.20942303s ago: executing program 8 (id=5636): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) close(r1) sendmsg$nl_route_sched(r0, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5404, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3, 0x0, 0xffffffffffffffff}, 0x18) unlinkat(r2, &(0x7f0000000080)='./file1\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 46.099680341s ago: executing program 8 (id=5640): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") symlink(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x5c) open(0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x81}]}}}]}, 0x3c}}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r3, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 46.018521712s ago: executing program 8 (id=5642): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) clock_adjtime(0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f00000002c0), &(0x7f0000000400)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) io_setup(0x3, &(0x7f0000000340)) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 45.282620702s ago: executing program 8 (id=5656): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 45.254913843s ago: executing program 37 (id=5656): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 2.758537324s ago: executing program 4 (id=6310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0300002000"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.733796584s ago: executing program 4 (id=6311): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0xcdf) 2.698615234s ago: executing program 4 (id=6312): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000016000000b40000007f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000fd94362e777cf575000000000000ce", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000001000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000061006400000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000018000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_destroy(0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) memfd_create(&(0x7f0000000300)='keyring\x00', 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r7) r8 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) 2.535870586s ago: executing program 4 (id=6319): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000000), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) iopl(0x3) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe) 2.501387837s ago: executing program 4 (id=6321): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="16000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}, @TCA_MPLS_LABEL={0x11}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL]}, {0xfffffffffffffe81, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r5 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x64, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000011c0)={'syztnl2\x00', &(0x7f0000001140)={'syztnl0\x00', r6, 0x8000, 0x1, 0x7, 0xffff65e1, {{0xb, 0x4, 0x1, 0xe, 0x2c, 0x67, 0x0, 0x3, 0x4, 0x0, @remote, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0x28, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x33}]}]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000563c00000100000002000000", @ANYRES32, @ANYBLOB="000000000000000037069d1b65", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf79d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x66}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@version_u}]}}) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) 2.208283121s ago: executing program 4 (id=6326): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sys_enter\x00', r0}, 0x18) set_mempolicy(0x4005, 0x0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0xfffffffffffffdae, 0x0, 0x41000, 0x66, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/sco\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = io_uring_setup(0x3b1e, &(0x7f0000000400)={0x0, 0xf323, 0x400, 0x3, 0x31d, 0x0, r2}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000300)={&(0x7f0000002000)={[{0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x3}]}, 0x3, 0x1}, 0x1) getpid() unlink(0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf37, 0x0) write(r5, &(0x7f0000000240)="94", 0x1) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r4, r7, 0x8f5, 0x100000000000000) io_uring_enter(0xffffffffffffffff, 0xa2d, 0xfea2, 0x3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x480201) ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000240)={0x55, 0x8ea9, 0xfffd, {0x0, 0x1}, {0x53, 0x6}, @period={0x5d, 0x5a, 0x9, 0x7, 0xd, {0xf135, 0x0, 0x136f, 0xe1}, 0x0, 0x0}}) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x69}, &(0x7f0000000200), &(0x7f0000000280)) 1.315348213s ago: executing program 2 (id=6344): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd_index=0x4, 0xffffffffffff0001, 0x20000003, 0x8020, 0xa, 0x1, {0x1}}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB, @ANYRESDEC=r0, @ANYRES32, @ANYRES64=0x0, @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket(0x10, 0x3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/476], 0x0, 0x307, &(0x7f0000000200)="$eJzs3UtrG1cUwPEzeliSXddalFJKCxcXSkvxYAu666Km2FAqaLGtQhwIjONxIjSWjEYYZEKsRSDbrLPwIssQCIHssgkhW2/yCZI4O2+8ixciE0bzsB4TRSLIj+T/W1hHc8+Zez1zZeNraebwjzubpY20iGhyIt7ISkzi/rOG/Pp879WPy8++8p4rtTi/MpdTKiYil288mH5am/j/8ddPUrKfvXJ4lHuz/8OKyLuV6xJTRVuVHUcZaq1SqbldqPWiXdKV+s8yDdtUxbJtVmt+u7FmmWrDqmxt1ZVRXp8c36qatq2Mcl2VzLqqVVStWlfGNaNYVrquq8lxgYhkwyjW06b1KyzcP3YcOXIcx0k1xHGciOxGECT9x9SnDRbnSdf575vbMznioxwZTsOxkxj4/OPz473+X98d7Pw7u6c0LJyS5Uur/8zn8wtLSqVFNm9vF7YL3qPX/nJCimKJKXtLv602xZ0jPtHcr4t/5xdmVUtWft7c9et3twveL4f5jVb9QVDUVi9B/ZxXrzrrkzJ+Um9KTqbkG4mszwX1EmurH5Nffmqr12VKXlyViliy7s7ktvqbc0r99W++q/9MKw8AAAAAAAAAgItIV6GT9Xst/FdvRtdTrXd8hO0Zd7Ob5yWE6+uzMiXN6PX52cj1/YR8nzjDbxwAAAAAgC+IXd8pGZZlVkcTxO9l+nSRFBE3ELk17Q6m7w6/9Uc8WO9jItLbFO/fRUeQ+d3r7+GSPzAZ5YEKgvQQI4wIgg9rlIzmo6ApI1HJsaEmwMxY5JFPVzUZ6fzpCGSQZEkPPbG1hF3fSQ08tXrKm8GW7yJzHO3j+3EMK+ltkfAM9q/6c6iXwweDdPeBmjnw9mv1+aHxNlziAwAAAHCBtP3hBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzkj4+X/Nv9P/IBcPC67b39kk/i3iey/J1n2feK77DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAceh8AAP//8yCz0A==") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000180a05000000000000000000020000000900020073797a32000000000c00054000000000000000020c000540000000000000000208000740000000000900020073397a310000000014000000110001000000000000a7a80000000300000a"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x14, 0x20, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x59}]}, 0x2c}}, 0x0) fcntl$notify(r1, 0x402, 0x29) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000003080), 0x101000, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$TIOCGRS485(r7, 0x5453, 0x0) 1.271032464s ago: executing program 5 (id=6346): r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x30, 0xffffffffffffffff, 0x8000000) (async) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) (async) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000001480)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r2, 0x0, &(0x7f0000001440)={&(0x7f00000000c0)=@nfc_llcp={0x27, r3, 0x0, 0x4, 0x7, 0xfd, "120d0f04095b719d27e0eef241e209ca226f1505cb95a8ea6873b69ddd111293a13617d977ced7c628ee74e65d19522896abeaf65dfb5b93d1bcf202608dee", 0x3e}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000140)="eae3d3a6568a52a1d1231b5217d4fa73679d5ba0bb8820b976378754a244c9ee20b7690e0a16ee3972d741d2f8dda4c5393fc064b9819fdfbc18051575831bf7ed53a2cb01aa38cfd33545cfd666dfba3e61b55d2bf44fd94981020baf98977cac85be751656507467db63cbd415464d7508e3aee4fa81ffbc54351795158566aaf88632c340455f29c65009f9190119161f6c6543955f4e661dd1918409a96b55bc6507321a164ec2beece524f597229e9200b659debae7b864dc7b3a2448150d28fe8d501066856d3282d9a742f6ddee4ac34a08e2d3759e01acc76366d350ed17c57ff0929dca38f54ac9ef89fb5a6f628193b059c02879ba8086e6d8fcc4835f975f9c6a2a6bf978c48d8ffc14cd494d07b8eda254d6d543b111001a1f26424073ef6e74430de919593b78dfc805d18f8c963abe7fffdd3e452e4472487ece2e462107069a4bf7cc797eb3ec9844e90f3edea83baa1de7575baae3e139f75dc5ce2543ccec1bed611a0543a7776cf0a7291038f224a99eac9d79543f9048863b4fb8780dbccb1faf33f9552184f90683ca2e4d49845d34830513145f58391af839f7c65537ef72fa73f0ee952954e3b31869f35cb8bda77af839775f3c9c0a9a8d9b9377b6bc74436e944713073425345b2e680b07ed7c6df8601602fc7c60b3e0504c9b2d79c1e8f64aa0d66a66143dc0f9303d4e2be5e219aaf6d0c2cf7e2dc515c0561ad8705effca368c09199660a4e0b0ae78396f02d3362bb7dc03bf8b301082101269dca0d95afb698ed6c31f51858210aa5ae661e83101a0cd3cec2fa9debfd16969f63a3aa0c1162f3b812fbc34171dcef6e42a55982a9f188327bdb69569fbdc7c4103aa737edd55a195b9658aae6485625274b6bc490d9598235ab63427262b9681df7f9557f904ca8746a0083a17ed79e425c4a97d7119724ca94fcbd8861957937a53db7af319979acf5664eb152f8171750622888612d5d9a2282ec044d120990b45cc4ebeadb2a4ee48719514777210a95b03aacc79b12cab661e6fae6b30b3cd77f17a171c129ccd1923e5acea9497937a7b534941bf237945f213478c10e9d1c73d9f8df261617ee31ef47a3dd23c4dd939ee7ea1164194edf4f11733e56cf2dc7a782194cb4e83d538f25685b16b88683dc0cfb97cee899f411720dae350312ad7bafdfb3d9f6ec259387ff9e32477c02078bedab39a198e589f4288c86ea9b8e4943f6c62d12e75a438bdd2b2c0f314ab8d9e0397e109a8d4fef1716f7cabaf2f9c12136627b0f0f0f2a62609d5c60ec308a077d3f8ce68a70fd563e4465da3789616b502828b88f80783a401afee2436bdb3eb775c69f59930d7301ce38c7b4ac9fff2027d03b36021e4ed6fcd36859a0bde0633eef4a7c17f51e0962144a3b1252fc58035f7dab368f30c9fb4b8e18b51d350360bd5c4df791d9c5d8f0a8369117d9d25723be2384fcc04348ae10a3f9ddc2afdfbee197796aa37b116abe1204df5b3c74a9dc35600f805b0536452f27d759ef57f2ed322d420cf479a61d308132a35cdb9ae82cf7f654bc0c569db21a87ccc796a648382b0525769412341f7ad81d871133ef93f06187cf7cb42dfe39b71422bed013ff8b54b26af529a4d10151c75c7b7328e2be4a94c57d064dcb1cf694eff95d08eafc15c101d430f67d0d938dbf802b40280c5ddcb480f9bf6ce17ae99dcbf3921f1f4e300e5045962a31413558130c2f3a3feb63a83919948c4575f98165c3337da874c7a6f4f4dccdd930fa88d798efde1d96ccbc5bce6ed21223ea1122a85c3b23a814b9f1a08945b7f6a6aeb06613ab0f5a89e0ed3962c0bef235277c79b6aa37d20ed9e3fd0ae59fd4a8fceeb4360af8c0d1d475b72af8cedc7a7df73b1bb32046b29b87eca56cd0a99883ac29852b9cebfb567da15dc275255ea5947fea096160b7535928ca77aaf9add2df74e8378fdee2594b71a5d2f754f981a060133eb573afde8e9a7bc5705303c90afc23a324e3bfd9137bad80edfce9863515773a54cbf8c9d89fb3c97aecaa7ee6d582ac72fbb3f34940430df8eb3ec7611910da2c24ea639f1c87f8a0d83106b0b35de59aec695c0d91805f04218aa368ad896f2956f25b62e41c9e5d76ac5bfc74d242a80ae5550355d10d57d0ae3a15ce2360cb73c511123605f8337d740239db27dca36de82fa8d3f3e520f6be1c754fcfb6b8826c4829a4ee0f60be226d07a7bfc8b876b90bbd5c56ab938037d7dc39204e0016da43f8bff23d4bbb247ddd74d652326100bdd715f56a7a05bd093108778cbd66a1d45715e7feda4ef7b5d942a37f0621b3f00179dcc4557d997d91c11c51a23349f3c3f993aaa252916e3b7c95734e35cea504c3c993acda325bcbf82e40f531e8397f30bc3eb39159c5211d326f20b97805206641ce4137a441153f1dbda1a87258057d5fbdd61662500b50bd013ba3e46717bd0ac1bfc4faffd6c4a2d93a5d575e85b27291a0cb7e0626919047b9ce2c7f51b0bf2984e266a5b9056fde68691cc995f9d2eea0d5903e5565e62fbea828561ac192e7632d1b4005cbea371ad36c38654f0e2536564ed118a479ff921c2a9561ce3133855a3f98204b15584d801dae008a1a2fdc9e091f70bc074de4ccc326026792146125cc472629a009fa471af26e606bbd6120b46d6f54a376e747579f0db9e6a6e11f76742f8fecdb41150ba7fd0c5f6c98fe6a8831d7cc05227407cfbaeef252871cd098a9472fc5b9f0d15691ba309a4d455dee854123cb3ce08855eadcf321541236ee451b26a3dfd80cd12dfaedfcc7ff1a83b60d669d8c8401bdc9ab405712cf9812b01e8f6274eb8262f183828b14c38e05fc0a77d7bcfa266ada3333509e8a41a31badcbe503b297f50f157a3a163f514d7b3ba1d2ca1c5c5609d8f7cbd9efad015766301244a90bc762a2ca33bfa423cc0353a18523843f79d9f59e0246b109b77ea213a35694679d897e5c8eaa31b63c0d028dbd6322d51103e19762008ad81edd941cc2b1a9edd55c085fd591d53806224e064367d276c3d652458ca41f3d29ad2f1b5bf9439f7133ebc95755137c7e1bef4895420a20b8f443b7f2ecd0d636b15225cc2bfcb8008fbd2c3e0dab9abe0d7f995226cabeb87c8724aaaffa4e9ee6fcdde131eeb4df7bc2cbdd605bc80030e88a2cc593d81e4afabf336a516cac44d25f08d0d687c5b76d55f2b9a43dc38f4591cda843908736cb273f55572f49fe1a5b6d09a523a5ab8661f6f1e85f72c04e0cfc9e8bb7b86b40e3cb61ca80767c98e9538b3c6461d36996dde24c3fa85204777bb6290013847d6489f8baa40a90b63cebd27ae2b52c4c974ecdb4b720490ee9cd617303c94e48a7e16100d76f416cd0f6267fec7b1ad6c03847a0b92d84c3c3db6aea0008a6eeffc302ad253dd21c852126d41aec12d4878bd2f2e055de272ebd7813d8f14f651f4eb194bbacb9313786156fa821330e738490f5e056e2b8a00a98ef12ca7811d18d63d9f2b0d7ad8983a941cd1d18d83485db5467ade39a63b528897dc2995269bcece6cff7901dc3db41d13bc51aaa674831c4e9ae7400d7718ce89642b4a9bfdd0f9a3cd70aaf1b5bce799a224167656474b335a49b21e5885d81fb0e729ea7c60938d6948de6e1ecd4ab5cd5a3494dabba8c4e3673e33675e78cfa3e1d13c0a9ad7a5eefc6e176fc57389bf19716f8894d86b09015088df9d608e5bcf85f9d25d91f57c2ce14f3ed80096812dec872be20c24e52aaf34f9b0282d5f65412a29a27e4a20093b4d6087476b162ab6122bf773679389183a1a8b5564de4e1b0d6ce3cdcba6f07e1ca7541dfa1626f9be3c98067d0b8af46eeaab8fa80bc02da70741f6914cdfb0f8b61b486c46ed2c7f763629be024feedf0e1562005a37f5e54e895188e04dd0ef65cf8b80aa1ae52a9ced06954ebd6e8b315d5628a2008d2ad4419180b9af0a9dcf37e44e9160fd0e7cd889a483a56940142268d2206a96612055eb3422ca169031777026166c13e7c1821d139178d0813b770acb9a7d0628ca80d27389308d2ec074c6f42b19b63068a5ddb4dde3568af2f3fe7cfc2ccbe465dd06cd0beba6075879f09ae81336a469f1e28822810db01926937b1c353b283e478a148bafb8446cad776e4a96feae084d6579d04151b209c31748a35d00feb2b6a1b3109eece7f8423981b6a2178ffa482e40d037de1bf3bf855a8ffab077d54ca67d71225703d152aa575ab92d302b824c8969981bedaf65bb48f7b5dd29b0a0087d9b231841f17c5710c2877f6da27db856e5c3bfbbc6e70d1a94a16cda15b538c161e1d1e6ed8758d83cd2e8c573e4a096efe53a0a475e2811f5137d15e4ba78b5b2fe7d017ba83e3aa3adeddfbed69b66135c7151e2b90e4c4fac93afb68fef1d8d92550e35598bc71d44237aace7ce6c5bca3e05478efd2b1f75b5b4016248ab2488d40b47d98da0a013a2212bb0116117bd09ff8c3198a08212feb205fc7f4cd000f02c7e63dc61d651ca16e4e60c6d7cc9e220a2e47d1a4f1bd30949e0f354753e58c0777c4cd76114cd89938b21abb56026cc8558d094503b9ce9ec8b3eab6cb1861df3f35506877b81dc59e2708ba7205651b4f97f09bc9be357d3aacd6d93a4e67c75f6d0d173aec7082023079b07b45e32cc47e0355edd95ec5170495e4664e0670fe4e224418e5fa9721c33444b5650bc927d306399697aef066a75ec769fddf1258fcb6ffe2293f34c0e787a04a1de8c17dda9987199933b690f5f7cb3e34bd7216e3ab96735d72f9cbc253ddafb1e866c8b822dc7aa6ef8bc3d67871c65670e3c2bdd8f8b1d84318d8b06cc508ec8e92dafacad0a3774c37717e4332c2e4d3a76fc57af0d96f9bf35220f10c5a1822ca4882f76dedc799496b75a959e09f8a29469d9a834064c3bae2794d037cbc94ab475f849032df932669a582c975b677e4575f3b9a887e005dbcf14602d7a629f43866f723cc3a4c023e3f6fc3b6065c3ff2b68c9a0bb4aeca538239daee457ef408c3e742f73ac7abec2d7183af49b567506c996d8766c8f3580b01995257fd326943f711ef20535f5189aa466a359210e3cd58a1cc69aa57253f3df85928d8c56e0d7c224db4b4394548b149e1ce2d0086eee6b20f10736b92166453f729e12be2f89cf5ad40fede5d47e861eace20c0ec464bf00af70e2dc5cd4566c576fae6d653dd2a2083368eb0540b8cbce9044916ce9505bf8163399137df78f9d7f30f48549a75ba045b04f243f9da31aafb8862f4f4cbb0157267c6523b65fdd0e40319294f91ee9bb4e9df7d2b8590cd710244116995ca64f24e277fc70eaa05af4afde1675cba739e5015a1be4611ea6e0031fe745c306da89a6305172c51d8107a87d46b8e573c593cc988d98db07a5ce6c8d64a089fcfc4005e06e8c7860c020ae469a1ad27560591b732c1dca1c4272c77c9ac7eca0ce5f1766a441c5bdf50d1b8d469126001d6d4f3fc086836c0e028227b14b70ece36c669bf093c8fc4faf17e9a44d48b6dd58a60280ada91fdaadf7a053ca5dba7e82091818c9dd6f6874893f28fd297a9f774d52494bf64a48953d38d43bf535fb7f7764804559a95aa7213a045be9ef347f42f89030dadb74a19e2f3fb1dd33cfe26d74621a98c1a11b44085c17f729fa1363e4ec401bc6ec4b6b0e221f17a31b48d9a4c4234722f504c0d1ef21d1d069c73cc7ab289e37dbd1f1078d230cc5676f08116ae186e44b4b683296c6223d9b704001c5f07cbe", 0x1000}, {&(0x7f0000001140)="81267abe31af74ba6069c464a552594465d667ce822e63da5d0d05e7e0df0595a2ff43a1b27a3b282fd459982cbc86f937efd68a9160f2420e62dfa22a80f5398356e64d70ecc2a672dd6f6bda5c4f8fc09be1be1d66a22f3db32b876453c5b5e17f7dc3b54612d9561b15d228f3004236", 0x71}, {&(0x7f00000011c0)="63ef739ba3bc7f6d369076b05ec945c4c32012ca4031cfdd83d69f7515fbf91740798fd402791f623c7963160fa6254cf125eea1a93dd0a378ee33d027fe9986ec20b4b6ebfb81c77acdafe0a8c75dc7670cd66f383a59978b7559b0a8e0c4284a0b064d195d8ff2d7668770aa214b19e80303dbb9be3bc61e67d0563aafe9c35275b69448ae0dfb359cd17ab87e51c7796317d564b725cd8bfef1a8057b44647a7f4d6c8d19c2d13bb5769b5bfe330e1da711dbd7cdf7a642d48ee3", 0xbc}, {&(0x7f0000001280)="eadb987c95431435783e0cbfa6e17db3dd641a0722948028fd233228727f3b3b5a1304b95a330bb87610a9c8dcf36124ddbb5e6b829dca2c8b4784010b50fb52f2230e61860574e632149bbb7ddcfdfe128bc207d940e5823c6344ac03f7f0ef45e1316f518bc7b43bec8658c627606ce5fbade02bc596421cb1eb914cbb5deedb2a4accf12156e7ef7d26e5d323f25c54046f2acdcfb5d8f02fef57ef08a6f0d867df5928b98331a3e020b39285e4d6fa24c9826bce5eb6394c7f87c175050b3a4e6846fc6bea99163abf", 0xcb}], 0x4, &(0x7f00000013c0)=[{0x58, 0x10a, 0x9, "cf9d51e0d9d7d0767bc18cc7fbc2a4d3ebb9d66affcb2592e77fc259f130b160e4c64076488a7cd00377e5e3d886ff6c2e8113c59671cf2491514aa18e00259a19c38a75f13ca7"}], 0x58}, 0x0, 0x40000}) r4 = dup2(r2, r2) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f00000014c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r5 = getpid() ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000001700)={'\x00', 0x8, 0x6ad, 0x3, 0x8, 0xc, r5}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) keyctl$setperm(0x5, 0x0, 0x20008) (async) getpid() (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001780)={0x10001}, 0x8) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000017c0)={r4, 0x0, 0x25, 0x0, @void}, 0x10) (rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000001800), r6) prctl$PR_SET_NAME(0xf, &(0x7f0000001840)='nfc\x00') (async) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000001880)={0x0, 0xa, 0x4, 0x3, 0xb, "98fcff361c3b5f61138713e0904dddf3861072", 0x5, 0x8}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r8 = socket$tipc(0x1e, 0x2, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001900)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r9, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x54, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x2}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x415}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0xf2}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x20e}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_LLC_PARAM_RW={0x5}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xfd}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0xc0) (async, rerun: 32) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000001a80), r9) (rerun: 32) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r9, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x2c, r11, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x21}, 0x41) (async) close(r8) (async) r12 = fsmount(r4, 0x1, 0xe) ioctl$USBDEVFS_ALLOW_SUSPEND(r12, 0x5522) (async) write$P9_RLERRORu(r12, &(0x7f0000001b80)={0xf, 0x7, 0x2, {{0x2, '\xf2{'}, 0x31}}, 0xf) (async) mq_open(&(0x7f0000001bc0)='/\x00', 0x40, 0x1c0, &(0x7f0000001c00)={0xff, 0x2, 0x1, 0xbaa}) 1.260160593s ago: executing program 2 (id=6348): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_emit_ethernet(0xf6, &(0x7f0000000900)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0e86dd60010100004d1100fc010000000000000000000000000001ff02000000000000000000000000000100004e2200c090786281000000000000d6fdb163636537265d38ccb70963256e20dd706aa47a85338710cc072dc8ac26daf9e92c42a9a320f3b0e413a3efc1ae738c0f92cbae9375ca5c9bebf4ef4039127d23e043aa553e5ba5b5108ca43ea51ff5555c9d95062b08ba3c0a8e8a5b99d5d8381d3aece56e20cf9e7766d95110ad71cb3735b88eb9eba570bfa5da348ed6c0753172ae297baa113c265b979c2690d3bba3b2603841f7f769070148fa0d898b255cb9c650c21839914adea78759"], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r7, @ANYRESOCT=r2], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r8}, 0x10) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) sendto$packet(r4, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x8000000, &(0x7f0000000400)={0xc9, 0x0, r6, 0x1, 0x3, 0x6, @random="001800e1ff00"}, 0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000270000d7060000000200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018000000040000000000000008000000185200000a0000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x80000001, 0x9b, &(0x7f0000000280)=""/155, 0x40f00, 0x8, '\x00', r6, @sk_msg=0x7, r4, 0x8, &(0x7f0000000340)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x0, 0x7, 0x5}, 0x10, r9, 0xffffffffffffffff, 0x6, 0x0, &(0x7f00000004c0)=[{0x4, 0x2, 0xb, 0x4}, {0x1, 0x4, 0x9, 0x6}, {0x2, 0x4, 0x8, 0x2}, {0x1, 0x1, 0x7, 0x2}, {0x4, 0x5, 0xe, 0xc}, {0x4, 0x3, 0x1, 0x6}], 0x10, 0x7ff, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r11, 0x0, 0x2c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000840)='kvm_userspace_exit\x00', r12}, 0x18) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r13, &(0x7f0000000140)="54000000010006", 0x7) 438.762975ms ago: executing program 5 (id=6360): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = open(0x0, 0x0, 0x0) flock(r3, 0x2) flock(r3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00'}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x6, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r7 = open(0x0, 0x60142, 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r8, 0x2007ffb) sendfile(r7, r8, 0x0, 0x1000000201005) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="380100001000130700000000000000007f000001c22300830406dd7e40ab000000000000000000ac1e0101000000000000000000b410000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e70000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000002000000020001036f0000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$unix(r3, &(0x7f0000000200)={&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000000)="619f8256575c74522cddb7fefcb9934c9b59b3acabe6bd237abafd9ce602bb8b0f0bfecd5c", 0x25}, {&(0x7f0000000380)="6dd6cbac5aa43b60f7355d979c9f67d23cd5f6a9b9dab3facb7cb3901e43bd29607f88ae367f4655e4cda845208a8107d9ed4d811c24c85cadd613407bd423a88ad4f2a60701d8166396729aab0976618325d6c5a8ee3891a98a6569345d144507", 0x61}, {&(0x7f0000000400)="8315da745a88abd8223d81053e2e0a57c185da7ad4b87d6fb0156cf6d022872096c61d960f92a650e1c7cedbc992b3025980eb21d8e94006aad38778863123e2d4adcef2e999c08b48a4502c4435131f9804d04d2c1d65714ee15bcc802689010a4cc40a4ffe74ee7f5e0e93816173da7515909bd06a2f5b7b441b76db6df38fb70b23d5209ffb78dfb026fe83e48bc0c0c3b7c0432fc973d294f83e", 0x9c}, {&(0x7f00000004c0)="02ecf7e75369c053fe177bb4df4489d3dc92a6384093df70458c30364ec0cf2754c341365586acb66f6ceb2bc3de5e05f203949140b3f13acadbf0231f5e0fb109b51ae1f157c0b1c3e39bc535f875a64fa694fb6838b643db74ff6a0599c352aa5e2daf3d3e059ec2b7c57dd6db6cd72a7d7216674f8e62931a6c754c213ac9d47a56c5e83877a0dfd5e0336cca9f6925d5e72812f59931ed62bd9014b8ace94d3e75c47b9b36109104d0108879d5fd35a87d0b4c4131b1aed36fa5c41545612242662381cfccf2b4516ce9fd9cb3c58a", 0xd1}, {&(0x7f00000005c0)="4f30ef97253aba1752b2c35058a722714dc9ef7b8effb1df3aefa8b150140c3a22907f126eccc268a773b59aa434be6d70eb8a34c5f6c1c5c3dd2ab3b97573672762d29c64a5eb22c7c9e91cab0283b8a2edc0c295a62cb28ca61c447a80a1f935514040030bc69ed76fc51c286cbe922d26b6adc6dae7eff07c0dc11d778be58e4cfbfb11bb19f85dd298dc788b7c8aa521136a3da7f0b3fb23", 0x9a}], 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000001000000010000100000000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x40}, 0x10040001) 436.965724ms ago: executing program 7 (id=6361): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 383.692655ms ago: executing program 9 (id=6362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x70bd23, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xc8}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000080) (fail_nth: 1) 383.319265ms ago: executing program 7 (id=6363): ioctl$TIOCGRS485(0xffffffffffffffff, 0x5453, 0x0) 154.227518ms ago: executing program 7 (id=6364): sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000f80)={0x2e0, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x266, 0x2a, [@random={0x3, 0xf4, "8bd2f13c6e75079cc94ab09eb5c47d57f5fd88afa91856c4d10524a809d869629ac18df2a0674522d494f62a8d0302d09927f064b400054693676529833bd47f356c61ef397953a6d524a58f6056f18241ade2a26576dbd1515820d91d45de39472196e258deea129d2959b756b988dfaba8beb0f8752c65fd48c2d8585254a8756779fb7262e64596414ea28e968bcfc5df7c1834ae4445b66ca8966f5aafff70dbcb0e19fadb08c4e030dc2ee4e1350f39b5f9b80d9560492e7e68a93fdd49b039ab9a6f2a7d1cfdae94b86a5c4dabc9cdb3f0ea6d28b67195fc6dd0dc3b5f6bae828697ef676c51146e18b1ee8abc7cbb897c"}, @perr={0x84, 0x15, {0x68, 0x1, [{{0x0, 0x1}, @device_a, 0x8, @value, 0x40}]}}, @chsw_timing={0x68, 0x4, {0x5}}, @channel_switch={0x25, 0x3, {0x1, 0x9e, 0x4}}, @channel_switch={0x25, 0x3, {0x8, 0xad, 0x5}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @random={0x9, 0x42, "3c58aaeba18727f3a0e8bec824565115a35bcf84347ecf501f759db612bfa622f120675a4c4223c967a75a84e5c4b0f61ec68525a6a812f72b0ada8350147ad8d6fd"}, @tim={0x5, 0xf4, {0x2, 0x73, 0x2, "e26fa896de15c3838ebc5690cec54099333c22732b00267911702688e450fb1c30bf06f716abea4cff36333fdbe9297a6fdf2a286d02840fde345bed619a8c5f3869d0a61f97765560eca1b873a44a53889cf6676139e77f618129e6732eadac602ae44b24e553e8e6a043dd14b3b363e7fcc7b2b9d24f9311d0082ee94185bb80704eb991252ce64af8d23c921c3d21c416d47883adb8b5d84b9e1d189e5cc3e3668d0b5367ec693c011699c30948373331efc0ec34352465df909f6f2f38749a20d8457490ba61c4c61d40251934d33494cd776b9b3ec168bf78b5f16c7ff54cfb32ca421c11d865183b409b191cd036"}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_IE={0x23, 0x2a, [@supported_rates={0x1, 0x5, [{0x48}, {0x4, 0x1}, {0x48, 0x1}, {0x24}, {0x5}]}, @chsw_timing={0x68, 0x4, {0x6, 0x8}}, @ibss={0x6, 0x2, 0x7f}, @dsss={0x3, 0x1, 0x8c}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xa5, 0x8}}, @supported_rates={0x1, 0x3, [{0x3, 0x1}, {0x6c}, {0x2}]}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3b}, @NL80211_ATTR_IE={0x21, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0xb7, 0xeb}}, @rann={0x7e, 0x15, {{0x1, 0x12}, 0x7, 0x3, @device_a, 0x4, 0x4, 0x2}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5}]}, 0x2e0}, 0x1, 0x0, 0x0, 0xa0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) recvmsg(r2, &(0x7f0000000f40)={&(0x7f0000000dc0)=@can, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000e40)=""/7, 0x7}], 0x1, &(0x7f0000000ec0)=""/85, 0x55}, 0x10102) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x579, &(0x7f0000000680)="$eJzs3c9rHOUbAPBnNtk2/fH9JoVS1IMEerBSu2kSf1TwUI+ixYLe65JsQ8mmW7Kb0sSC7cFevEgRRCyI3jx491j8B/wrClooUoIevERmM5tuk910k+wmaffzgUned2Y2z/vuzPPmnZ1dNoC+NZr+yEW8HBFfJxHDTdsGI9s4urrf8uObU+mSxMrKJ38lkWTrGvsn2e8jWeWliPjty4jTuY1xq4tLs8VyuTSf1cdqc9fGqotLZ67MFWdKM6WrE5OT596anHj3nbe71tfXL/7z3cf3Pzj31cnlb395eOxuEufjaLatuR87cKu5Mhqj2XOSj/PrdhzvQrD9JNnrBrAtA1me5yMdA4ZjIMv6llaGd7NpQI99kaY10KcS+Q99qjEPaFzbd+k6+Lnx6P3VC6CN/R9cfW0khurXRoeXk6eujNLr3ZEuxE9j/PrnvbvpEt17HQLgmW7djoizg4Mbx78kG/+272wH+6yPkcXP7zA00IH76fznjVbzn9za/CdazH+OtMjd7WiT/01yD7sQpq10/vdey/nv2k2rkYGs9r/6nC+fXL5SLqVj2/8j4lTkD6b1Te7nfJZbfrDSbmPz/C9d0viNuWDWjoeDB59+zHSxVtxRp5s8uh3xSsv5b7J2/JMWxz99Pi52GONE6d6r7bY9u/9renKLaeXHiNdaHv/kqcCb3J8cq58PY42zYqO/75z4vV38LfS/Jx79nBXa938kab5fW916jB+G/i2127bd8/9A8mm9fCBbd6NYq82PRxxIPtq4fuLJYxv1xv7p+X/q5ObjX6vz/1Ca2B32/87xO827Dm2t/72V9n968/N/3fHfeuHBh59/3y5+Z8f/zXrpVLamk/Gv0wbu5LkDAAAAAACA/SYXEUcjyRXWyrlcobD6/o7jcThXrlRrpy9XFq5OR/2zsiORzzXudA83vR9iPHs/bKM+sa4+GRHHIuKbgUP1emGqUp7e684DAAAAAAAAAAAAAAAAAADAPnEkYqjV5/9TfwzsdeuAntvkK7+BF1z7/M+2dOObnoB9adv//4e62w5g95n/Q/+S/9C/5D/0L/kP/Uv+Q/+S/9C/tpL/P13oYUMAAAAAAAAAAAAAAAAAAAAAAAAAAADgxXDxwoV0WVl+fHMqrU9fX1yYrVw/M12qzhbmFqYKU5X5a4WZSmWmXCpMVeae9ffKlcq18YlYuDFWK1VrY9XFpUtzlYWrtUtX5oozpUul/K70CgAAAAAAAAAAAAAAAAAAAJ4v1cWl2WK5XJpXUNhWYXB/NEOhy4W9HpkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4In/AgAA//+z7zor") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 153.741178ms ago: executing program 2 (id=6365): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 127.269959ms ago: executing program 9 (id=6366): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0xcdf) 126.725939ms ago: executing program 9 (id=6367): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'queue1\x00', 0x8001}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) write$sndseq(r2, &(0x7f0000000240)=[{0x23, 0xf0, 0x0, 0xfd, @tick=0xc, {}, {}, @queue={0x0, {0x107a120, 0x100}}}], 0x1c) openat2(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x0, 0x0, 0x15}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2c, 0x25dfdbfc, {{{@in6=@mcast1, @in=@multicast1, 0x4e20, 0x5, 0x4e20, 0x8, 0xa, 0xb71a2e58cceecd81, 0x0, 0x16}, {@in=@multicast1, 0x4d5, 0x6c}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x4, 0x1, 0x78, 0x2, 0x2e5cee45, 0xffffffffffffffff, 0x3}, {0x515, 0xffffffffffff8001, 0xc, 0x5}, {0x0, 0x5, 0x9}, 0x70bd26, 0x3504, 0xa, 0x0, 0x49, 0xc2}, 0xfffffffc, 0x5}}, 0xf8}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000140)={0xffffffffffffffff, r4, 0x14, {0xffffffffffffffff, 0x1}, 0xd}, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup2(r8, r7) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$selinux_load(r9, &(0x7f0000002000)={0xf97cff8c, 0x8, 'SE Linux', "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"}, 0x1010) 98.405089ms ago: executing program 5 (id=6368): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='.\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000340)={[{@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}, {@user_xattr}]}, 0xfd, 0x4fa, &(0x7f00000005c0)="$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") bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f00000004c0)=""/155, 0x9b, 0x0, &(0x7f0000000ac0)=""/156, 0x9c}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x6}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x34, r7, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r9}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f"], 0x118}}, 0x0) 94.883829ms ago: executing program 2 (id=6369): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=6370): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="16000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}, @TCA_MPLS_LABEL={0x11}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL]}, {0xfffffffffffffe81, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r5 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x64, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000011c0)={'syztnl2\x00', &(0x7f0000001140)={'syztnl0\x00', r6, 0x8000, 0x1, 0x7, 0xffff65e1, {{0xb, 0x4, 0x1, 0xe, 0x2c, 0x67, 0x0, 0x3, 0x4, 0x0, @remote, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0x28, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x33}]}]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000563c00000100000002000000", @ANYRES32, @ANYBLOB="000000000000000037069d1b65110668d70000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf79d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x66}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@version_u}]}}) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) kernel console output (not intermixed with test programs): 54][T19896] bridge_slave_0: entered allmulticast mode [ 455.238400][T19927] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 455.249045][T19896] bridge_slave_0: entered promiscuous mode [ 455.277453][T19896] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.284760][T19896] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.301055][T19927] EXT4-fs error (device loop7): ext4_iget_extra_inode:4693: inode #15: comm syz.7.5729: corrupted in-inode xattr: e_value size too large [ 455.332794][T19896] bridge_slave_1: entered allmulticast mode [ 455.340672][T19937] loop9: detected capacity change from 0 to 256 [ 455.347655][T19896] bridge_slave_1: entered promiscuous mode [ 455.356400][T19927] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.5729: couldn't read orphan inode 15 (err -117) [ 455.384337][T19927] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.430398][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.437893][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.464103][T19938] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5733'. [ 455.483086][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.490746][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.521557][ T3431] veth1_macvtap: left promiscuous mode [ 455.527229][ T12] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 455.549412][ T3431] veth0_macvtap: left promiscuous mode [ 455.557026][ T3431] veth1_vlan: left promiscuous mode [ 455.565965][ T3431] veth0_vlan: left promiscuous mode [ 455.571715][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 455.575711][T19937] syz.9.5733: attempt to access beyond end of device [ 455.575711][T19937] loop9: rw=2049, sector=256, nr_sectors = 288 limit=256 [ 455.584255][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 455.584255][ T12] [ 455.607547][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 455.613617][ T12] EXT4-fs (loop4): Free/Dirty block details [ 455.619561][ T12] EXT4-fs (loop4): free_blocks=2415919504 [ 455.625296][ T12] EXT4-fs (loop4): dirty_blocks=14112 [ 455.630705][ T12] EXT4-fs (loop4): Block reservation details [ 455.636690][ T12] EXT4-fs (loop4): i_reserved_data_blocks=882 [ 455.645869][T18995] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.652990][T19937] syz.9.5733: attempt to access beyond end of device [ 455.652990][T19937] loop9: rw=2049, sector=608, nr_sectors = 320 limit=256 [ 455.676486][T19937] syz.9.5733: attempt to access beyond end of device [ 455.676486][T19937] loop9: rw=2049, sector=960, nr_sectors = 64 limit=256 [ 455.708070][T19937] syz.9.5733: attempt to access beyond end of device [ 455.708070][T19937] loop9: rw=2049, sector=1056, nr_sectors = 1380 limit=256 [ 455.742681][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 455.857839][ T3431] team0 (unregistering): Port device team_slave_1 removed [ 455.887751][ T3431] team0 (unregistering): Port device C removed [ 456.008566][ T3391] infiniband syz1: ib_query_port failed (-19) [ 456.017991][T19896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.052319][T19896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.053641][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 456.053660][ T30] audit: type=1400 audit(1747898777.002:24061): avc: denied { create } for pid=19947 comm="syz.9.5739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 456.113766][ T30] audit: type=1400 audit(1747898777.032:24062): avc: denied { create } for pid=19947 comm="syz.9.5739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 456.133603][ T30] audit: type=1400 audit(1747898777.042:24063): avc: denied { bind } for pid=19947 comm="syz.9.5739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 456.153091][ T30] audit: type=1400 audit(1747898777.042:24064): avc: denied { connect } for pid=19947 comm="syz.9.5739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 456.172976][ T30] audit: type=1400 audit(1747898777.042:24065): avc: denied { ioctl } for pid=19947 comm="syz.9.5739" path="socket:[63364]" dev="sockfs" ino=63364 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 456.197994][ T30] audit: type=1400 audit(1747898777.042:24066): avc: denied { write } for pid=19947 comm="syz.9.5739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 456.240959][ T30] audit: type=1400 audit(1747898777.172:24067): avc: denied { getopt } for pid=19949 comm="syz.9.5740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 456.260748][ T30] audit: type=1326 audit(1747898777.172:24068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19949 comm="syz.9.5740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0a1e969 code=0x7ffc0000 [ 456.284400][ T30] audit: type=1326 audit(1747898777.172:24069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19949 comm="syz.9.5740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0a1e969 code=0x7ffc0000 [ 456.308253][ T30] audit: type=1326 audit(1747898777.172:24070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19949 comm="syz.9.5740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11e0a1e969 code=0x7ffc0000 [ 456.369923][T19896] team0: Port device team_slave_0 added [ 456.376563][T19896] team0: Port device team_slave_1 added [ 456.412271][T19896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.419316][T19896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.445595][T19896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.471832][T19896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.478914][T19896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.479053][T19896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.550291][T19896] hsr_slave_0: entered promiscuous mode [ 456.552782][T19896] hsr_slave_1: entered promiscuous mode [ 456.553080][T19896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.553094][T19896] Cannot create hsr debugfs directory [ 456.960252][T19988] FAULT_INJECTION: forcing a failure. [ 456.960252][T19988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.973534][T19988] CPU: 1 UID: 0 PID: 19988 Comm: syz.7.5756 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 456.973578][T19988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 456.973595][T19988] Call Trace: [ 456.973604][T19988] [ 456.973614][T19988] __dump_stack+0x1d/0x30 [ 456.973637][T19988] dump_stack_lvl+0xe8/0x140 [ 456.973656][T19988] dump_stack+0x15/0x1b [ 456.973673][T19988] should_fail_ex+0x265/0x280 [ 456.973803][T19988] should_fail+0xb/0x20 [ 456.973841][T19988] should_fail_usercopy+0x1a/0x20 [ 456.973865][T19988] _copy_from_user+0x1c/0xb0 [ 456.973971][T19988] ___sys_sendmsg+0xc1/0x1d0 [ 456.974066][T19988] __x64_sys_sendmsg+0xd4/0x160 [ 456.974101][T19988] x64_sys_call+0x2999/0x2fb0 [ 456.974133][T19988] do_syscall_64+0xd0/0x1a0 [ 456.974163][T19988] ? clear_bhb_loop+0x40/0x90 [ 456.974191][T19988] ? clear_bhb_loop+0x40/0x90 [ 456.974221][T19988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.974333][T19988] RIP: 0033:0x7f1498ade969 [ 456.974350][T19988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.974369][T19988] RSP: 002b:00007f1497147038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.974388][T19988] RAX: ffffffffffffffda RBX: 00007f1498d05fa0 RCX: 00007f1498ade969 [ 456.974403][T19988] RDX: 0000000000008040 RSI: 0000200000000940 RDI: 0000000000000004 [ 456.974419][T19988] RBP: 00007f1497147090 R08: 0000000000000000 R09: 0000000000000000 [ 456.974436][T19988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.974488][T19988] R13: 0000000000000000 R14: 00007f1498d05fa0 R15: 00007ffd93bd8798 [ 456.974508][T19988] [ 457.020334][T19896] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 457.026291][T19896] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 457.030446][T19896] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 457.040677][T19896] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 457.061547][T19999] loop7: detected capacity change from 0 to 2048 [ 457.076203][T20001] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5762'. [ 457.087947][T19896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.093236][T19999] Alternate GPT is invalid, using primary GPT. [ 457.100938][T19896] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.104898][T19999] loop7: p1 p2 p3 [ 457.160444][ T3431] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.236980][ T3431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.292141][ T3431] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.299263][ T3431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.324692][T20006] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5763'. [ 457.333808][T20006] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5763'. [ 457.363783][T20010] macvlan3: entered promiscuous mode [ 457.370258][T20010] bridge0: port 3(macvlan3) entered blocking state [ 457.376827][T20010] bridge0: port 3(macvlan3) entered disabled state [ 457.397121][T20010] macvlan3: entered allmulticast mode [ 457.402738][T20010] bridge0: entered allmulticast mode [ 457.409476][T20010] macvlan3: left allmulticast mode [ 457.414662][T20010] bridge0: left allmulticast mode [ 457.439678][T20013] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5765'. [ 457.448760][T20013] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5765'. [ 457.461498][T19896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.477401][T20013] bridge0: entered promiscuous mode [ 457.482966][T20013] macvlan2: entered promiscuous mode [ 457.488799][T20013] bridge0: port 3(macvlan2) entered blocking state [ 457.495471][T20013] bridge0: port 3(macvlan2) entered disabled state [ 457.503771][T20013] macvlan2: entered allmulticast mode [ 457.509295][T20013] bridge0: entered allmulticast mode [ 457.518207][T20013] macvlan2: left allmulticast mode [ 457.523461][T20013] bridge0: left allmulticast mode [ 457.550636][T20013] bridge0: left promiscuous mode [ 457.686241][T19896] veth0_vlan: entered promiscuous mode [ 457.712214][T19896] veth1_vlan: entered promiscuous mode [ 457.722695][T20037] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5769'. [ 457.733551][T20037] IPVS: Error joining to the multicast group [ 457.756581][T19896] veth0_macvtap: entered promiscuous mode [ 457.756710][T20037] SELinux: Context system_u:object_r:etc_aliases_t:s0 is not valid (left unmapped). [ 457.766130][T19896] veth1_macvtap: entered promiscuous mode [ 457.795421][T20039] loop9: detected capacity change from 0 to 2048 [ 457.810442][T19896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.817403][T20045] loop7: detected capacity change from 0 to 256 [ 457.819667][T19896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.837576][T20039] EXT4-fs (loop9): failed to initialize system zone (-117) [ 457.845820][T20039] EXT4-fs (loop9): mount failed [ 457.846641][T19896] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.859874][T19896] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.868868][T19896] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.877697][T19896] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.977641][T20058] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5772'. [ 457.993112][T20052] pimreg: entered allmulticast mode [ 457.997677][T20052] pimreg: left allmulticast mode [ 458.023286][T20061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5776'. [ 458.038291][T20052] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(12) [ 458.038321][T20052] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 458.038355][T20052] vhci_hcd vhci_hcd.0: Device attached [ 458.047922][T20045] syz.7.5772: attempt to access beyond end of device [ 458.047922][T20045] loop7: rw=2049, sector=256, nr_sectors = 288 limit=256 [ 458.048148][T20062] vhci_hcd: connection closed [ 458.048440][T20045] syz.7.5772: attempt to access beyond end of device [ 458.048440][T20045] loop7: rw=2049, sector=608, nr_sectors = 320 limit=256 [ 458.048758][T20045] syz.7.5772: attempt to access beyond end of device [ 458.048758][T20045] loop7: rw=2049, sector=960, nr_sectors = 64 limit=256 [ 458.049326][T15935] vhci_hcd: stop threads [ 458.049338][T15935] vhci_hcd: release socket [ 458.049349][T15935] vhci_hcd: disconnect device [ 458.051664][T20045] syz.7.5772: attempt to access beyond end of device [ 458.051664][T20045] loop7: rw=2049, sector=1056, nr_sectors = 1380 limit=256 [ 458.172935][T20065] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5778'. [ 458.382537][T20082] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5779'. [ 458.396528][T20082] vlan3: entered allmulticast mode [ 458.401734][T20082] vlan1: entered allmulticast mode [ 458.406868][T20082] veth0_vlan: entered allmulticast mode [ 458.413882][T20082] bridge0: port 3(vlan3) entered blocking state [ 458.420379][T20082] bridge0: port 3(vlan3) entered disabled state [ 458.427386][T20082] vlan3: entered promiscuous mode [ 458.432532][T20082] vlan1: entered promiscuous mode [ 458.437981][T20082] bridge0: port 3(vlan3) entered blocking state [ 458.444302][T20082] bridge0: port 3(vlan3) entered forwarding state [ 458.815681][T20089] loop9: detected capacity change from 0 to 2048 [ 459.022666][T20089] EXT4-fs (loop9): failed to initialize system zone (-117) [ 459.022705][T20089] EXT4-fs (loop9): mount failed [ 459.128739][T20105] FAULT_INJECTION: forcing a failure. [ 459.128739][T20105] name failslab, interval 1, probability 0, space 0, times 0 [ 459.141505][T20105] CPU: 0 UID: 0 PID: 20105 Comm: syz.7.5792 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 459.141631][T20105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 459.141649][T20105] Call Trace: [ 459.141657][T20105] [ 459.141667][T20105] __dump_stack+0x1d/0x30 [ 459.141695][T20105] dump_stack_lvl+0xe8/0x140 [ 459.141716][T20105] dump_stack+0x15/0x1b [ 459.141738][T20105] should_fail_ex+0x265/0x280 [ 459.141785][T20105] should_failslab+0x8c/0xb0 [ 459.141826][T20105] kmem_cache_alloc_node_noprof+0x57/0x320 [ 459.141855][T20105] ? __alloc_skb+0x101/0x320 [ 459.141949][T20105] __alloc_skb+0x101/0x320 [ 459.141999][T20105] netlink_alloc_large_skb+0xba/0xf0 [ 459.142040][T20105] netlink_sendmsg+0x3cf/0x6b0 [ 459.142080][T20105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.142101][T20105] __sock_sendmsg+0x145/0x180 [ 459.142171][T20105] ____sys_sendmsg+0x31e/0x4e0 [ 459.142202][T20105] ___sys_sendmsg+0x17b/0x1d0 [ 459.142242][T20105] __x64_sys_sendmsg+0xd4/0x160 [ 459.142276][T20105] x64_sys_call+0x2999/0x2fb0 [ 459.142376][T20105] do_syscall_64+0xd0/0x1a0 [ 459.142408][T20105] ? clear_bhb_loop+0x40/0x90 [ 459.142449][T20105] ? clear_bhb_loop+0x40/0x90 [ 459.142470][T20105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.142492][T20105] RIP: 0033:0x7f1498ade969 [ 459.142511][T20105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.142558][T20105] RSP: 002b:00007f1497147038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.142639][T20105] RAX: ffffffffffffffda RBX: 00007f1498d05fa0 RCX: 00007f1498ade969 [ 459.142657][T20105] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 459.142674][T20105] RBP: 00007f1497147090 R08: 0000000000000000 R09: 0000000000000000 [ 459.142689][T20105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.142701][T20105] R13: 0000000000000000 R14: 00007f1498d05fa0 R15: 00007ffd93bd8798 [ 459.142720][T20105] [ 459.401418][T20116] loop5: detected capacity change from 0 to 2048 [ 459.433184][T20116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.519854][T20128] dvmrp1: entered allmulticast mode [ 459.655964][ T12] nci: nci_rsp_packet: unknown rsp opcode 0x116 [ 459.669158][T20160] 8021q: VLANs not supported on vcan0 [ 459.715062][T20136] loop7: detected capacity change from 0 to 512 [ 459.754303][T20136] EXT4-fs error (device loop7): __ext4_fill_super:5502: inode #2: comm syz.7.5805: casefold flag without casefold feature [ 459.771634][T20165] dvmrp1: left allmulticast mode [ 459.781732][T20136] EXT4-fs (loop7): get root inode failed [ 459.788402][T20136] EXT4-fs (loop7): mount failed [ 459.957502][ T3339] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 459.972688][ T3339] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 459.985434][ T3339] EXT4-fs (loop5): This should not happen!! Data will be lost [ 459.985434][ T3339] [ 459.995162][ T3339] EXT4-fs (loop5): Total free blocks count 0 [ 460.001207][ T3339] EXT4-fs (loop5): Free/Dirty block details [ 460.007145][ T3339] EXT4-fs (loop5): free_blocks=2415919504 [ 460.012914][ T3339] EXT4-fs (loop5): dirty_blocks=16400 [ 460.018286][ T3339] EXT4-fs (loop5): Block reservation details [ 460.024315][ T3339] EXT4-fs (loop5): i_reserved_data_blocks=1025 [ 460.045254][T15935] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 460.382770][T20171] loop9: detected capacity change from 0 to 2048 [ 460.405033][T20173] ipvlan0: entered promiscuous mode [ 460.412342][T20173] ipvlan0: left promiscuous mode [ 460.420180][T20171] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.455825][T20171] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5811: bg 0: block 408: padding at end of block bitmap is not set [ 460.494310][T20171] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 460.542433][ T12] EXT4-fs (loop9): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 1 with error 28 [ 460.554822][ T12] EXT4-fs (loop9): This should not happen!! Data will be lost [ 460.554822][ T12] [ 460.564600][ T12] EXT4-fs (loop9): Total free blocks count 0 [ 460.570643][ T12] EXT4-fs (loop9): Free/Dirty block details [ 460.576579][ T12] EXT4-fs (loop9): free_blocks=16 [ 460.581740][ T12] EXT4-fs (loop9): dirty_blocks=16 [ 460.586863][ T12] EXT4-fs (loop9): Block reservation details [ 460.593050][ T12] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 460.601439][T19258] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.667049][T20191] loop4: detected capacity change from 0 to 2048 [ 460.714032][T20191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.800911][T20198] bridge0: entered promiscuous mode [ 460.822469][T20198] macvlan2: entered promiscuous mode [ 460.848728][T20198] bridge0: port 3(macvlan2) entered blocking state [ 460.855630][T20198] bridge0: port 3(macvlan2) entered disabled state [ 460.878189][T20198] macvlan2: entered allmulticast mode [ 460.883785][T20198] bridge0: entered allmulticast mode [ 460.899972][T20198] macvlan2: left allmulticast mode [ 460.905196][T20198] bridge0: left allmulticast mode [ 460.920512][T20198] bridge0: left promiscuous mode [ 460.943710][T20206] bridge0: entered promiscuous mode [ 460.949531][T20206] vlan2: entered promiscuous mode [ 461.090495][ T30] kauditd_printk_skb: 456 callbacks suppressed [ 461.090513][ T30] audit: type=1400 audit(1747898782.042:24527): avc: denied { setopt } for pid=20209 comm="syz.9.5824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 461.197832][ T30] audit: type=1400 audit(1747898782.142:24528): avc: denied { create } for pid=20216 comm="syz.9.5827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 461.230797][T20217] loop9: detected capacity change from 0 to 2048 [ 461.251636][ T30] audit: type=1400 audit(1747898782.192:24529): avc: denied { open } for pid=20218 comm="syz.7.5828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 461.271233][ T30] audit: type=1400 audit(1747898782.192:24530): avc: denied { kernel } for pid=20218 comm="syz.7.5828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 461.291106][ T30] audit: type=1400 audit(1747898782.202:24531): avc: denied { read } for pid=20218 comm="syz.7.5828" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 461.315253][ T30] audit: type=1400 audit(1747898782.202:24532): avc: denied { open } for pid=20218 comm="syz.7.5828" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 461.339459][ T30] audit: type=1400 audit(1747898782.202:24533): avc: denied { ioctl } for pid=20218 comm="syz.7.5828" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 461.381550][T20217] EXT4-fs (loop9): failed to initialize system zone (-117) [ 461.388913][T20217] EXT4-fs (loop9): mount failed [ 461.446563][ T30] audit: type=1400 audit(1747898782.382:24534): avc: denied { create } for pid=20223 comm="syz.9.5830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 461.446749][ T30] audit: type=1400 audit(1747898782.382:24535): avc: denied { setopt } for pid=20223 comm="syz.9.5830" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 461.446792][ T30] audit: type=1400 audit(1747898782.382:24536): avc: denied { connect } for pid=20223 comm="syz.9.5830" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 461.543220][ T12] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 461.543443][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 461.543475][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 461.543475][ T12] [ 461.543491][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 461.543530][ T12] EXT4-fs (loop4): Free/Dirty block details [ 461.543543][ T12] EXT4-fs (loop4): free_blocks=2415919504 [ 461.543560][ T12] EXT4-fs (loop4): dirty_blocks=15184 [ 461.543589][ T12] EXT4-fs (loop4): Block reservation details [ 461.543602][ T12] EXT4-fs (loop4): i_reserved_data_blocks=949 [ 461.565977][T20230] FAULT_INJECTION: forcing a failure. [ 461.565977][T20230] name failslab, interval 1, probability 0, space 0, times 0 [ 461.644288][T20230] CPU: 1 UID: 0 PID: 20230 Comm: syz.7.5833 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 461.644376][T20230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 461.644391][T20230] Call Trace: [ 461.644398][T20230] [ 461.644406][T20230] __dump_stack+0x1d/0x30 [ 461.644428][T20230] dump_stack_lvl+0xe8/0x140 [ 461.644453][T20230] dump_stack+0x15/0x1b [ 461.644572][T20230] should_fail_ex+0x265/0x280 [ 461.644675][T20230] should_failslab+0x8c/0xb0 [ 461.644707][T20230] kmem_cache_alloc_node_noprof+0x57/0x320 [ 461.644730][T20230] ? __alloc_skb+0x101/0x320 [ 461.644845][T20230] __alloc_skb+0x101/0x320 [ 461.644931][T20230] netlink_alloc_large_skb+0xba/0xf0 [ 461.644973][T20230] netlink_sendmsg+0x3cf/0x6b0 [ 461.645003][T20230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.645154][T20230] __sock_sendmsg+0x145/0x180 [ 461.645183][T20230] ____sys_sendmsg+0x31e/0x4e0 [ 461.645208][T20230] ___sys_sendmsg+0x17b/0x1d0 [ 461.645271][T20230] __x64_sys_sendmsg+0xd4/0x160 [ 461.645416][T20230] x64_sys_call+0x2999/0x2fb0 [ 461.645439][T20230] do_syscall_64+0xd0/0x1a0 [ 461.645464][T20230] ? clear_bhb_loop+0x40/0x90 [ 461.645486][T20230] ? clear_bhb_loop+0x40/0x90 [ 461.645580][T20230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.645606][T20230] RIP: 0033:0x7f1498ade969 [ 461.645627][T20230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.645653][T20230] RSP: 002b:00007f1497147038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.645720][T20230] RAX: ffffffffffffffda RBX: 00007f1498d05fa0 RCX: 00007f1498ade969 [ 461.645737][T20230] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000006 [ 461.645755][T20230] RBP: 00007f1497147090 R08: 0000000000000000 R09: 0000000000000000 [ 461.645773][T20230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.645790][T20230] R13: 0000000000000000 R14: 00007f1498d05fa0 R15: 00007ffd93bd8798 [ 461.645827][T20230] [ 461.661287][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 462.240684][T20243] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 462.240716][T20243] vhci_hcd: default hub control req: 0531 v0000 i0000 l31125 [ 462.262758][T20245] __nla_validate_parse: 7 callbacks suppressed [ 462.262775][T20245] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5832'. [ 462.283365][T20243] lo speed is unknown, defaulting to 1000 [ 462.399648][T20256] loop4: detected capacity change from 0 to 2048 [ 462.451035][T20260] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 462.458745][T20260] vhci_hcd: default hub control req: 0531 v0000 i0000 l31125 [ 462.479921][T20256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.505229][T20270] FAULT_INJECTION: forcing a failure. [ 462.505229][T20270] name failslab, interval 1, probability 0, space 0, times 0 [ 462.506290][T20260] lo speed is unknown, defaulting to 1000 [ 462.518003][T20270] CPU: 0 UID: 0 PID: 20270 Comm: syz.7.5849 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 462.518106][T20270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 462.518124][T20270] Call Trace: [ 462.518137][T20270] [ 462.518148][T20270] __dump_stack+0x1d/0x30 [ 462.518180][T20270] dump_stack_lvl+0xe8/0x140 [ 462.518208][T20270] dump_stack+0x15/0x1b [ 462.518233][T20270] should_fail_ex+0x265/0x280 [ 462.518281][T20270] should_failslab+0x8c/0xb0 [ 462.518381][T20270] __kmalloc_noprof+0xa5/0x3e0 [ 462.518408][T20270] ? security_msg_msg_alloc+0x45/0x100 [ 462.518541][T20270] ? should_fail_ex+0xdb/0x280 [ 462.518631][T20270] security_msg_msg_alloc+0x45/0x100 [ 462.518679][T20270] load_msg+0x226/0x2f0 [ 462.518720][T20270] do_mq_timedsend+0x23e/0x6b0 [ 462.518755][T20270] __x64_sys_mq_timedsend+0xd1/0x160 [ 462.518804][T20270] x64_sys_call+0x2db9/0x2fb0 [ 462.518833][T20270] do_syscall_64+0xd0/0x1a0 [ 462.518867][T20270] ? clear_bhb_loop+0x40/0x90 [ 462.518920][T20270] ? clear_bhb_loop+0x40/0x90 [ 462.518957][T20270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.518987][T20270] RIP: 0033:0x7f1498ade969 [ 462.519028][T20270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.519060][T20270] RSP: 002b:00007f1497147038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 462.519147][T20270] RAX: ffffffffffffffda RBX: 00007f1498d05fa0 RCX: 00007f1498ade969 [ 462.519164][T20270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 462.519182][T20270] RBP: 00007f1497147090 R08: 0000000000000000 R09: 0000000000000000 [ 462.519199][T20270] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 462.519216][T20270] R13: 0000000000000000 R14: 00007f1498d05fa0 R15: 00007ffd93bd8798 [ 462.519279][T20270] [ 462.604922][T20274] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5845'. [ 462.746625][T20278] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5852'. [ 462.849763][T20285] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 462.849804][T20285] vhci_hcd: default hub control req: 0531 v0000 i0000 l31125 [ 462.888674][T20285] lo speed is unknown, defaulting to 1000 [ 462.942425][T15935] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 462.968210][T20292] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 462.980871][T15935] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 462.993440][T15935] EXT4-fs (loop4): This should not happen!! Data will be lost [ 462.993440][T15935] [ 463.003163][T15935] EXT4-fs (loop4): Total free blocks count 0 [ 463.009368][T15935] EXT4-fs (loop4): Free/Dirty block details [ 463.015290][T15935] EXT4-fs (loop4): free_blocks=2415919504 [ 463.021098][T15935] EXT4-fs (loop4): dirty_blocks=6880 [ 463.026411][T15935] EXT4-fs (loop4): Block reservation details [ 463.032493][T15935] EXT4-fs (loop4): i_reserved_data_blocks=430 [ 463.056774][T20300] loop7: detected capacity change from 0 to 256 [ 463.058126][T17908] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 463.161216][T20306] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5859'. [ 463.193074][T20300] syz.7.5859: attempt to access beyond end of device [ 463.193074][T20300] loop7: rw=2049, sector=256, nr_sectors = 288 limit=256 [ 463.198258][T20305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5863'. [ 463.207516][T20300] syz.7.5859: attempt to access beyond end of device [ 463.207516][T20300] loop7: rw=2049, sector=608, nr_sectors = 320 limit=256 [ 463.230675][T20300] syz.7.5859: attempt to access beyond end of device [ 463.230675][T20300] loop7: rw=2049, sector=960, nr_sectors = 64 limit=256 [ 463.280967][T20308] loop9: detected capacity change from 0 to 512 [ 463.287694][T20308] EXT4-fs: Ignoring removed oldalloc option [ 463.290870][T20300] syz.7.5859: attempt to access beyond end of device [ 463.290870][T20300] loop7: rw=2049, sector=1056, nr_sectors = 1380 limit=256 [ 463.316186][T20310] lo speed is unknown, defaulting to 1000 [ 463.326238][T20308] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 463.429116][T20308] EXT4-fs error (device loop9): __ext4_fill_super:5502: inode #2: comm syz.9.5864: iget: special inode unallocated [ 463.458057][T20308] EXT4-fs (loop9): get root inode failed [ 463.463842][T20308] EXT4-fs (loop9): mount failed [ 463.498798][T20308] 9pnet: Could not find request transport: rdma0000000006 [ 464.048622][T20348] loop5: detected capacity change from 0 to 512 [ 464.099408][T20362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5881'. [ 464.225844][T20368] loop7: detected capacity change from 0 to 512 [ 464.232974][T20368] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 464.241187][T20348] EXT4-fs error (device loop5): __ext4_fill_super:5502: inode #2: comm syz.5.5877: casefold flag without casefold feature [ 464.265479][T20368] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 464.265610][T20368] EXT4-fs (loop7): orphan cleanup on readonly fs [ 464.265802][T20368] EXT4-fs (loop7): 1 truncate cleaned up [ 464.266373][T20368] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 464.267013][T20368] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.272213][T20348] EXT4-fs (loop5): get root inode failed [ 464.322411][T20348] EXT4-fs (loop5): mount failed [ 464.548862][T20392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5893'. [ 464.586096][T20392] ipvlan0: entered promiscuous mode [ 464.591482][T20396] loop5: detected capacity change from 0 to 256 [ 464.604079][T20392] ipvlan0: left promiscuous mode [ 464.673665][T20396] syz.5.5895: attempt to access beyond end of device [ 464.673665][T20396] loop5: rw=2049, sector=256, nr_sectors = 288 limit=256 [ 464.683115][T20405] lo speed is unknown, defaulting to 1000 [ 464.690361][T20396] syz.5.5895: attempt to access beyond end of device [ 464.690361][T20396] loop5: rw=2049, sector=608, nr_sectors = 320 limit=256 [ 464.708798][T20396] syz.5.5895: attempt to access beyond end of device [ 464.708798][T20396] loop5: rw=2049, sector=960, nr_sectors = 64 limit=256 [ 464.722453][T20406] loop9: detected capacity change from 0 to 512 [ 464.725729][T20396] syz.5.5895: attempt to access beyond end of device [ 464.725729][T20396] loop5: rw=2049, sector=1056, nr_sectors = 1380 limit=256 [ 464.739045][T20406] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 464.756791][T20406] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 464.764930][T20406] EXT4-fs (loop9): orphan cleanup on readonly fs [ 464.771679][T20406] EXT4-fs (loop9): 1 truncate cleaned up [ 464.777831][T20406] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 464.786015][T20396] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5895'. [ 464.790676][T20406] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.065958][T20423] loop5: detected capacity change from 0 to 2048 [ 465.099798][T20423] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.180521][T20434] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5902'. [ 465.364858][T20442] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5910'. [ 465.452038][T20444] netlink: 'syz.4.5911': attribute type 10 has an invalid length. [ 465.491462][T20452] loop9: detected capacity change from 0 to 256 [ 465.524545][T20451] lo speed is unknown, defaulting to 1000 [ 465.531125][T20452] syz.9.5914: attempt to access beyond end of device [ 465.531125][T20452] loop9: rw=2049, sector=256, nr_sectors = 288 limit=256 [ 465.531740][T20452] syz.9.5914: attempt to access beyond end of device [ 465.531740][T20452] loop9: rw=2049, sector=608, nr_sectors = 320 limit=256 [ 465.550390][T20444] ipvlan0: entered allmulticast mode [ 465.573307][T20444] veth0_vlan: entered allmulticast mode [ 465.609697][T20444] team0: Device ipvlan0 failed to register rx_handler [ 465.731682][T20455] lo speed is unknown, defaulting to 1000 [ 465.917653][ T3431] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 465.969381][ T3431] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 465.982099][ T3431] EXT4-fs (loop5): This should not happen!! Data will be lost [ 465.982099][ T3431] [ 465.991824][ T3431] EXT4-fs (loop5): Total free blocks count 0 [ 465.997860][ T3431] EXT4-fs (loop5): Free/Dirty block details [ 466.003787][ T3431] EXT4-fs (loop5): free_blocks=2415919504 [ 466.009556][ T3431] EXT4-fs (loop5): dirty_blocks=15120 [ 466.014975][ T3431] EXT4-fs (loop5): Block reservation details [ 466.021046][ T3431] EXT4-fs (loop5): i_reserved_data_blocks=945 [ 466.085118][T17908] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 466.120019][ T30] kauditd_printk_skb: 243 callbacks suppressed [ 466.120061][ T30] audit: type=1326 audit(1747898787.072:24780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm="syz.4.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b9ce969 code=0x7ffc0000 [ 466.170026][ T30] audit: type=1326 audit(1747898787.102:24781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm="syz.4.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b9ce969 code=0x7ffc0000 [ 466.248968][ T30] audit: type=1326 audit(1747898787.172:24782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm="syz.4.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f261b9ce969 code=0x7ffc0000 [ 466.272979][ T30] audit: type=1326 audit(1747898787.172:24783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm="syz.4.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b9ce969 code=0x7ffc0000 [ 466.296693][ T30] audit: type=1326 audit(1747898787.172:24784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm="syz.4.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b9ce969 code=0x7ffc0000 [ 466.320511][ T30] audit: type=1326 audit(1747898787.172:24785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm="syz.4.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f261b9ce969 code=0x7ffc0000 [ 466.344184][ T30] audit: type=1326 audit(1747898787.172:24786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm="syz.4.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b9ce969 code=0x7ffc0000 [ 466.364803][T20481] loop9: detected capacity change from 0 to 2048 [ 466.368630][ T30] audit: type=1326 audit(1747898787.172:24787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm="syz.4.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f261b9ce969 code=0x7ffc0000 [ 466.397718][ T30] audit: type=1326 audit(1747898787.172:24788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm="syz.4.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b9ce969 code=0x7ffc0000 [ 466.421415][ T30] audit: type=1326 audit(1747898787.172:24789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm="syz.4.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b9ce969 code=0x7ffc0000 [ 466.485931][T20489] pim6reg1: entered promiscuous mode [ 466.491325][T20489] pim6reg1: entered allmulticast mode [ 466.505269][T20481] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.627289][T20500] loop5: detected capacity change from 0 to 2048 [ 466.707432][T20500] EXT4-fs (loop5): failed to initialize system zone (-117) [ 466.707545][T20500] EXT4-fs (loop5): mount failed [ 466.803938][T20517] macvlan3: entered promiscuous mode [ 466.804865][T20517] bridge0: port 3(macvlan3) entered blocking state [ 466.804978][T20517] bridge0: port 3(macvlan3) entered disabled state [ 466.817259][T20517] macvlan3: entered allmulticast mode [ 466.817283][T20517] bridge0: entered allmulticast mode [ 466.818908][T20517] macvlan3: left allmulticast mode [ 466.818928][T20517] bridge0: left allmulticast mode [ 467.097892][T20531] lo speed is unknown, defaulting to 1000 [ 467.119063][T15935] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 467.176174][T15935] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 467.176207][T15935] EXT4-fs (loop9): This should not happen!! Data will be lost [ 467.176207][T15935] [ 467.176277][T15935] EXT4-fs (loop9): Total free blocks count 0 [ 467.176292][T15935] EXT4-fs (loop9): Free/Dirty block details [ 467.176303][T15935] EXT4-fs (loop9): free_blocks=2415919504 [ 467.176316][T15935] EXT4-fs (loop9): dirty_blocks=9248 [ 467.176328][T15935] EXT4-fs (loop9): Block reservation details [ 467.176338][T15935] EXT4-fs (loop9): i_reserved_data_blocks=578 [ 467.232648][T17908] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 467.271464][T20540] SELinux: policydb version 337767811 does not match my version range 15-34 [ 467.274672][T20540] SELinux: failed to load policy [ 467.305938][T20542] FAULT_INJECTION: forcing a failure. [ 467.305938][T20542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.306000][T20542] CPU: 1 UID: 0 PID: 20542 Comm: syz.5.5946 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 467.306027][T20542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 467.306040][T20542] Call Trace: [ 467.306047][T20542] [ 467.306056][T20542] __dump_stack+0x1d/0x30 [ 467.306110][T20542] dump_stack_lvl+0xe8/0x140 [ 467.306137][T20542] dump_stack+0x15/0x1b [ 467.306182][T20542] should_fail_ex+0x265/0x280 [ 467.306217][T20542] should_fail+0xb/0x20 [ 467.306251][T20542] should_fail_usercopy+0x1a/0x20 [ 467.306348][T20542] strncpy_from_user+0x25/0x230 [ 467.306386][T20542] ? kmem_cache_alloc_noprof+0x186/0x310 [ 467.306407][T20542] ? getname_flags+0x80/0x3b0 [ 467.306442][T20542] getname_flags+0xae/0x3b0 [ 467.306566][T20542] user_path_at+0x28/0x130 [ 467.306590][T20542] __se_sys_mount+0x25b/0x2e0 [ 467.306651][T20542] ? fput+0x8f/0xc0 [ 467.306677][T20542] __x64_sys_mount+0x67/0x80 [ 467.306704][T20542] x64_sys_call+0xd36/0x2fb0 [ 467.306794][T20542] do_syscall_64+0xd0/0x1a0 [ 467.306827][T20542] ? clear_bhb_loop+0x40/0x90 [ 467.306929][T20542] ? clear_bhb_loop+0x40/0x90 [ 467.306950][T20542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.306976][T20542] RIP: 0033:0x7f01afa0e969 [ 467.307021][T20542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.307046][T20542] RSP: 002b:00007f01ae077038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 467.307131][T20542] RAX: ffffffffffffffda RBX: 00007f01afc35fa0 RCX: 00007f01afa0e969 [ 467.307148][T20542] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 467.307165][T20542] RBP: 00007f01ae077090 R08: 0000200000000400 R09: 0000000000000000 [ 467.307181][T20542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.307197][T20542] R13: 0000000000000000 R14: 00007f01afc35fa0 R15: 00007ffdba4c5498 [ 467.307295][T20542] [ 467.510452][T20550] __nla_validate_parse: 7 callbacks suppressed [ 467.510471][T20550] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5950'. [ 467.510491][T20550] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5950'. [ 467.513634][T20551] loop9: detected capacity change from 0 to 512 [ 467.518867][T20551] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 467.523984][T20550] macvlan3: entered promiscuous mode [ 467.532785][T20551] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 467.569066][T20550] bridge0: port 3(macvlan3) entered blocking state [ 467.581519][T20551] EXT4-fs (loop9): orphan cleanup on readonly fs [ 467.589859][T20550] bridge0: port 3(macvlan3) entered disabled state [ 467.598207][T20551] EXT4-fs (loop9): 1 truncate cleaned up [ 467.629287][T20550] macvlan3: entered allmulticast mode [ 467.630350][T20551] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 467.632863][T20550] bridge0: entered allmulticast mode [ 467.639996][T20551] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.743422][T20550] macvlan3: left allmulticast mode [ 467.743444][T20550] bridge0: left allmulticast mode [ 467.815794][T20570] loop4: detected capacity change from 0 to 2048 [ 467.846348][T20570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.339364][T20584] loop7: detected capacity change from 0 to 2048 [ 468.414062][T20584] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.469600][T20592] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5957'. [ 468.961876][ T3431] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 468.962188][ T3431] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 468.962221][ T3431] EXT4-fs (loop4): This should not happen!! Data will be lost [ 468.962221][ T3431] [ 468.962239][ T3431] EXT4-fs (loop4): Total free blocks count 0 [ 468.962255][ T3431] EXT4-fs (loop4): Free/Dirty block details [ 468.962270][ T3431] EXT4-fs (loop4): free_blocks=2415919504 [ 468.962365][ T3431] EXT4-fs (loop4): dirty_blocks=9920 [ 468.962380][ T3431] EXT4-fs (loop4): Block reservation details [ 468.962485][ T3431] EXT4-fs (loop4): i_reserved_data_blocks=620 [ 468.987459][T20597] xt_recent: hitcount (4294967294) is larger than allowed maximum (65535) [ 469.014560][ T3431] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 469.038676][T20597] Illegal XDP return value 4294967274 on prog (id 3744) dev N/A, expect packet loss! [ 469.154613][ T3431] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 469.154823][ T3431] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 469.154856][ T3431] EXT4-fs (loop7): This should not happen!! Data will be lost [ 469.154856][ T3431] [ 469.154874][ T3431] EXT4-fs (loop7): Total free blocks count 0 [ 469.154891][ T3431] EXT4-fs (loop7): Free/Dirty block details [ 469.154906][ T3431] EXT4-fs (loop7): free_blocks=2415919504 [ 469.154923][ T3431] EXT4-fs (loop7): dirty_blocks=3968 [ 469.154939][ T3431] EXT4-fs (loop7): Block reservation details [ 469.154997][ T3431] EXT4-fs (loop7): i_reserved_data_blocks=248 [ 469.207529][ T3431] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1914 with error 28 [ 469.335727][T20601] lo speed is unknown, defaulting to 1000 [ 469.359896][T20605] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5963'. [ 469.361245][T20605] IPVS: Error joining to the multicast group [ 469.526760][T20611] syz.7.5967 (20611): attempted to duplicate a private mapping with mremap. This is not supported. [ 469.665245][T20603] FAULT_INJECTION: forcing a failure. [ 469.665245][T20603] name failslab, interval 1, probability 0, space 0, times 0 [ 469.665281][T20603] CPU: 0 UID: 0 PID: 20603 Comm: syz.4.5962 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 469.665321][T20603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 469.665345][T20603] Call Trace: [ 469.665352][T20603] [ 469.665360][T20603] __dump_stack+0x1d/0x30 [ 469.665382][T20603] dump_stack_lvl+0xe8/0x140 [ 469.665409][T20603] dump_stack+0x15/0x1b [ 469.665431][T20603] should_fail_ex+0x265/0x280 [ 469.665511][T20603] should_failslab+0x8c/0xb0 [ 469.665549][T20603] kmem_cache_alloc_node_noprof+0x57/0x320 [ 469.665579][T20603] ? __alloc_skb+0x101/0x320 [ 469.665654][T20603] __alloc_skb+0x101/0x320 [ 469.665688][T20603] ? audit_log_start+0x365/0x6c0 [ 469.665728][T20603] audit_log_start+0x380/0x6c0 [ 469.665793][T20603] audit_seccomp+0x48/0x100 [ 469.665829][T20603] ? __seccomp_filter+0x68c/0x10d0 [ 469.665855][T20603] __seccomp_filter+0x69d/0x10d0 [ 469.665879][T20603] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 469.665917][T20603] ? vfs_write+0x75e/0x8d0 [ 469.665961][T20603] __secure_computing+0x82/0x150 [ 469.665988][T20603] syscall_trace_enter+0xcf/0x1e0 [ 469.666095][T20603] do_syscall_64+0xaa/0x1a0 [ 469.666163][T20603] ? clear_bhb_loop+0x40/0x90 [ 469.666185][T20603] ? clear_bhb_loop+0x40/0x90 [ 469.666253][T20603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.666283][T20603] RIP: 0033:0x7f261b9ce969 [ 469.666308][T20603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.666332][T20603] RSP: 002b:00007f261a037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 469.666352][T20603] RAX: ffffffffffffffda RBX: 00007f261bbf5fa0 RCX: 00007f261b9ce969 [ 469.666364][T20603] RDX: 0000000000000000 RSI: 0000000000000026 RDI: ffffffffffffffff [ 469.666378][T20603] RBP: 00007f261a037090 R08: 0000000000000000 R09: 0000000000000000 [ 469.666428][T20603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.666500][T20603] R13: 0000000000000000 R14: 00007f261bbf5fa0 R15: 00007ffe627a4bd8 [ 469.666521][T20603] [ 470.107736][T20632] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5975'. [ 470.108291][T20631] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5974'. [ 470.116869][T20631] ipvlan0: entered promiscuous mode [ 470.126072][T20631] ipvlan0: left promiscuous mode [ 470.176464][T20634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5976'. [ 470.301764][T20637] bridge0: entered promiscuous mode [ 470.301979][T20637] vlan2: entered promiscuous mode [ 470.860808][T20665] loop4: detected capacity change from 0 to 512 [ 470.870435][T20665] EXT4-fs error (device loop4): __ext4_fill_super:5502: inode #2: comm syz.4.5988: casefold flag without casefold feature [ 470.870582][T20665] EXT4-fs (loop4): get root inode failed [ 470.870595][T20665] EXT4-fs (loop4): mount failed [ 471.102135][T20672] loop4: detected capacity change from 0 to 512 [ 471.124794][T20672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.124883][T20672] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 471.176001][T19683] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.203014][ T30] kauditd_printk_skb: 203 callbacks suppressed [ 471.203033][ T30] audit: type=1400 audit(1747898792.142:24991): avc: denied { write } for pid=20677 comm="syz.7.5993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 471.296817][T20683] loop7: detected capacity change from 0 to 512 [ 471.321440][T20683] EXT4-fs error (device loop7): __ext4_fill_super:5502: inode #2: comm syz.7.5993: casefold flag without casefold feature [ 471.321586][T20683] EXT4-fs (loop7): get root inode failed [ 471.321647][T20683] EXT4-fs (loop7): mount failed [ 471.336211][ T30] audit: type=1400 audit(1747898792.282:24992): avc: denied { load_policy } for pid=20687 comm="syz.2.5997" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 471.439092][T20688] SELinux: policydb version 337767811 does not match my version range 15-34 [ 471.463828][T20691] loop4: detected capacity change from 0 to 1024 [ 471.470675][T20688] SELinux: failed to load policy [ 471.476741][T20691] EXT4-fs: Ignoring removed mblk_io_submit option [ 471.484227][T20691] EXT4-fs: Ignoring removed nobh option [ 471.490009][T20691] EXT4-fs: Ignoring removed bh option [ 471.541131][T20680] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5993'. [ 471.562642][ T30] audit: type=1400 audit(1747898792.502:24993): avc: denied { connect } for pid=20697 comm="syz.2.6000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 471.582824][T20691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.598592][ T30] audit: type=1400 audit(1747898792.542:24994): avc: denied { setattr } for pid=20690 comm="syz.4.5994" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 471.648945][T19683] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.711822][T20714] FAULT_INJECTION: forcing a failure. [ 471.711822][T20714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.725096][T20714] CPU: 1 UID: 0 PID: 20714 Comm: syz.9.6007 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 471.725204][T20714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 471.725264][T20714] Call Trace: [ 471.725271][T20714] [ 471.725279][T20714] __dump_stack+0x1d/0x30 [ 471.725308][T20714] dump_stack_lvl+0xe8/0x140 [ 471.725334][T20714] dump_stack+0x15/0x1b [ 471.725353][T20714] should_fail_ex+0x265/0x280 [ 471.725398][T20714] should_fail+0xb/0x20 [ 471.725441][T20714] should_fail_usercopy+0x1a/0x20 [ 471.725461][T20714] _copy_from_user+0x1c/0xb0 [ 471.725564][T20714] __sys_sendto+0x19e/0x330 [ 471.725611][T20714] __x64_sys_sendto+0x76/0x90 [ 471.725672][T20714] x64_sys_call+0x2eb6/0x2fb0 [ 471.725700][T20714] do_syscall_64+0xd0/0x1a0 [ 471.725725][T20714] ? clear_bhb_loop+0x40/0x90 [ 471.725747][T20714] ? clear_bhb_loop+0x40/0x90 [ 471.725830][T20714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.725852][T20714] RIP: 0033:0x7f11e0a1e969 [ 471.725884][T20714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.725909][T20714] RSP: 002b:00007f11df087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 471.725931][T20714] RAX: ffffffffffffffda RBX: 00007f11e0c45fa0 RCX: 00007f11e0a1e969 [ 471.725944][T20714] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 471.726017][T20714] RBP: 00007f11df087090 R08: 000020000005ffe4 R09: 000000000000001c [ 471.726029][T20714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.726116][T20714] R13: 0000000000000000 R14: 00007f11e0c45fa0 R15: 00007ffff35c45e8 [ 471.726137][T20714] [ 471.921741][ T30] audit: type=1400 audit(1747898792.862:24995): avc: denied { name_connect } for pid=20721 comm="syz.9.6009" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 471.962342][ T30] audit: type=1326 audit(1747898792.902:24996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20723 comm="syz.4.6004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b9ce969 code=0x7ffc0000 [ 471.986059][ T30] audit: type=1326 audit(1747898792.902:24997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20723 comm="syz.4.6004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b9ce969 code=0x7ffc0000 [ 472.009843][ T30] audit: type=1326 audit(1747898792.902:24998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20723 comm="syz.4.6004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f261b9ce969 code=0x7ffc0000 [ 472.033565][ T30] audit: type=1326 audit(1747898792.902:24999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20723 comm="syz.4.6004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b9ce969 code=0x7ffc0000 [ 472.057354][ T30] audit: type=1326 audit(1747898792.902:25000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20723 comm="syz.4.6004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b9ce969 code=0x7ffc0000 [ 472.099361][T20726] SELinux: policydb version 337767811 does not match my version range 15-34 [ 472.108814][T20726] SELinux: failed to load policy [ 472.149783][T20720] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6008'. [ 472.158886][T20720] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6008'. [ 472.180023][T20720] bridge0: entered promiscuous mode [ 472.185434][T20720] macvlan2: entered promiscuous mode [ 472.193275][T20720] bridge0: port 4(macvlan2) entered blocking state [ 472.199972][T20720] bridge0: port 4(macvlan2) entered disabled state [ 472.206801][T20720] macvlan2: entered allmulticast mode [ 472.212245][T20720] bridge0: entered allmulticast mode [ 472.220373][T20720] macvlan2: left allmulticast mode [ 472.225562][T20720] bridge0: left allmulticast mode [ 472.237847][T20720] bridge0: left promiscuous mode [ 472.486693][T20765] ipvlan0: entered promiscuous mode [ 472.492794][T20765] ipvlan0: left promiscuous mode [ 472.665679][T20784] can0: slcan on ttyS3. [ 472.700427][T20789] __nla_validate_parse: 1 callbacks suppressed [ 472.700444][T20789] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6036'. [ 472.712255][T20791] FAULT_INJECTION: forcing a failure. [ 472.712255][T20791] name failslab, interval 1, probability 0, space 0, times 0 [ 472.715723][T20789] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6036'. [ 472.728380][T20791] CPU: 0 UID: 0 PID: 20791 Comm: syz.5.6035 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 472.728417][T20791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.728436][T20791] Call Trace: [ 472.728446][T20791] [ 472.728511][T20791] __dump_stack+0x1d/0x30 [ 472.728541][T20791] dump_stack_lvl+0xe8/0x140 [ 472.728570][T20791] dump_stack+0x15/0x1b [ 472.728593][T20791] should_fail_ex+0x265/0x280 [ 472.728668][T20791] ? tcp_sendmsg_fastopen+0x172/0x520 [ 472.728704][T20791] should_failslab+0x8c/0xb0 [ 472.728755][T20791] __kmalloc_cache_noprof+0x4c/0x320 [ 472.728794][T20791] tcp_sendmsg_fastopen+0x172/0x520 [ 472.728834][T20791] tcp_sendmsg_locked+0x26a5/0x28b0 [ 472.728870][T20791] ? mntput_no_expire+0x6f/0x3d0 [ 472.728910][T20791] ? mntput+0x4b/0x80 [ 472.728996][T20791] ? __rcu_read_unlock+0x4f/0x70 [ 472.729026][T20791] ? avc_has_perm_noaudit+0x1b1/0x200 [ 472.729057][T20791] ? avc_has_perm+0xd3/0x150 [ 472.729086][T20791] ? _raw_spin_unlock_bh+0x36/0x40 [ 472.729200][T20791] ? __pfx_tcp_sendmsg+0x10/0x10 [ 472.729235][T20791] tcp_sendmsg+0x2f/0x50 [ 472.729269][T20791] inet6_sendmsg+0x76/0xd0 [ 472.729316][T20791] __sock_sendmsg+0x8b/0x180 [ 472.729379][T20791] __sys_sendto+0x268/0x330 [ 472.729439][T20791] __x64_sys_sendto+0x76/0x90 [ 472.729502][T20791] x64_sys_call+0x2eb6/0x2fb0 [ 472.729532][T20791] do_syscall_64+0xd0/0x1a0 [ 472.729565][T20791] ? clear_bhb_loop+0x40/0x90 [ 472.729595][T20791] ? clear_bhb_loop+0x40/0x90 [ 472.729625][T20791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.729708][T20791] RIP: 0033:0x7f01afa0e969 [ 472.729731][T20791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.729763][T20791] RSP: 002b:00007f01ae077038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 472.729790][T20791] RAX: ffffffffffffffda RBX: 00007f01afc35fa0 RCX: 00007f01afa0e969 [ 472.729808][T20791] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 472.729825][T20791] RBP: 00007f01ae077090 R08: 00002000000001c0 R09: 000000000000001c [ 472.729843][T20791] R10: 0000000024008844 R11: 0000000000000246 R12: 0000000000000001 [ 472.729902][T20791] R13: 0000000000000000 R14: 00007f01afc35fa0 R15: 00007ffdba4c5498 [ 472.729999][T20791] [ 472.983239][T20797] bridge0: entered promiscuous mode [ 472.988590][T20797] macvlan2: entered promiscuous mode [ 472.995230][T20797] bridge0: port 4(macvlan2) entered blocking state [ 473.001899][T20797] bridge0: port 4(macvlan2) entered disabled state [ 473.023163][T20809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6039'. [ 473.030227][T20797] macvlan2: entered allmulticast mode [ 473.037574][T20797] bridge0: entered allmulticast mode [ 473.050977][T20797] macvlan2: left allmulticast mode [ 473.056268][T20797] bridge0: left allmulticast mode [ 473.063756][T20797] bridge0: left promiscuous mode [ 473.078720][T20809] ipvlan0: entered promiscuous mode [ 473.084642][T20784] can0 (unregistered): slcan off ttyS3. [ 473.095788][T20809] ipvlan0: left promiscuous mode [ 473.105036][T20795] lo speed is unknown, defaulting to 1000 [ 473.126754][T20815] lo speed is unknown, defaulting to 1000 [ 473.253176][T20824] loop9: detected capacity change from 0 to 7 [ 473.253334][T20824] Buffer I/O error on dev loop9, logical block 0, async page read [ 473.253388][T20824] Buffer I/O error on dev loop9, logical block 0, async page read [ 473.253402][T20824] loop9: unable to read partition table [ 473.253509][T20824] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 473.253509][T20824] U) failed (rc=-5) [ 473.387418][T20840] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6049'. [ 473.511104][T20845] loop4: detected capacity change from 0 to 2048 [ 473.544319][T20845] EXT4-fs (loop4): failed to initialize system zone (-117) [ 473.544351][T20845] EXT4-fs (loop4): mount failed [ 473.683193][T20858] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6058'. [ 473.720995][T20860] loop4: detected capacity change from 0 to 2048 [ 473.742830][T20860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.905536][T20868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6061'. [ 474.189602][ T3431] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 474.215983][ T3431] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 474.228506][ T3431] EXT4-fs (loop4): This should not happen!! Data will be lost [ 474.228506][ T3431] [ 474.238191][ T3431] EXT4-fs (loop4): Total free blocks count 0 [ 474.244239][ T3431] EXT4-fs (loop4): Free/Dirty block details [ 474.250276][ T3431] EXT4-fs (loop4): free_blocks=2415919504 [ 474.256010][ T3431] EXT4-fs (loop4): dirty_blocks=16400 [ 474.261437][ T3431] EXT4-fs (loop4): Block reservation details [ 474.267453][ T3431] EXT4-fs (loop4): i_reserved_data_blocks=1025 [ 474.303846][T20884] loop7: detected capacity change from 0 to 2048 [ 474.326541][ T3431] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 474.406020][T20884] EXT4-fs (loop7): failed to initialize system zone (-117) [ 474.434076][T20884] EXT4-fs (loop7): mount failed [ 474.769756][T20916] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6079'. [ 474.787104][T20918] loop4: detected capacity change from 0 to 2048 [ 474.799300][T20916] IPVS: Error joining to the multicast group [ 474.841993][T20918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.237620][T20930] FAULT_INJECTION: forcing a failure. [ 475.237620][T20930] name failslab, interval 1, probability 0, space 0, times 0 [ 475.250589][T20930] CPU: 1 UID: 0 PID: 20930 Comm: syz.7.6084 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 475.250619][T20930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 475.250632][T20930] Call Trace: [ 475.250640][T20930] [ 475.250650][T20930] __dump_stack+0x1d/0x30 [ 475.250678][T20930] dump_stack_lvl+0xe8/0x140 [ 475.250723][T20930] dump_stack+0x15/0x1b [ 475.250744][T20930] should_fail_ex+0x265/0x280 [ 475.250803][T20930] should_failslab+0x8c/0xb0 [ 475.250842][T20930] __kmalloc_node_noprof+0xa9/0x410 [ 475.250863][T20930] ? crypto_create_tfm_node+0x5c/0x240 [ 475.250992][T20930] crypto_create_tfm_node+0x5c/0x240 [ 475.251025][T20930] ? crypto_alg_mod_lookup+0x2f9/0x490 [ 475.251073][T20930] crypto_alloc_tfm_node+0xdc/0x2b0 [ 475.251194][T20930] ? tls_set_sw_offload+0x12d/0xba0 [ 475.251222][T20930] crypto_alloc_aead+0x2d/0x40 [ 475.251281][T20930] tls_set_sw_offload+0x65a/0xba0 [ 475.251377][T20930] tls_setsockopt+0x9b9/0xce0 [ 475.251407][T20930] sock_common_setsockopt+0x66/0x80 [ 475.251437][T20930] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 475.251468][T20930] __sys_setsockopt+0x181/0x200 [ 475.251568][T20930] __x64_sys_setsockopt+0x64/0x80 [ 475.251590][T20930] x64_sys_call+0x2bd5/0x2fb0 [ 475.251655][T20930] do_syscall_64+0xd0/0x1a0 [ 475.251688][T20930] ? clear_bhb_loop+0x40/0x90 [ 475.251718][T20930] ? clear_bhb_loop+0x40/0x90 [ 475.251748][T20930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.251840][T20930] RIP: 0033:0x7f1498ade969 [ 475.251857][T20930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.251877][T20930] RSP: 002b:00007f1497147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 475.251903][T20930] RAX: ffffffffffffffda RBX: 00007f1498d05fa0 RCX: 00007f1498ade969 [ 475.251920][T20930] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000005 [ 475.251937][T20930] RBP: 00007f1497147090 R08: 0000000000000038 R09: 0000000000000000 [ 475.251953][T20930] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 475.252004][T20930] R13: 0000000000000000 R14: 00007f1498d05fa0 R15: 00007ffd93bd8798 [ 475.252027][T20930] [ 475.582629][T17908] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 475.618097][T17908] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 475.630704][T17908] EXT4-fs (loop4): This should not happen!! Data will be lost [ 475.630704][T17908] [ 475.640585][T17908] EXT4-fs (loop4): Total free blocks count 0 [ 475.646579][T17908] EXT4-fs (loop4): Free/Dirty block details [ 475.652562][T17908] EXT4-fs (loop4): free_blocks=2415919504 [ 475.658308][T17908] EXT4-fs (loop4): dirty_blocks=16400 [ 475.663725][T17908] EXT4-fs (loop4): Block reservation details [ 475.669799][T17908] EXT4-fs (loop4): i_reserved_data_blocks=1025 [ 475.681990][T20931] syz.5.6082 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 475.716611][T20939] ip6gretap0: entered promiscuous mode [ 475.723589][T20939] vlan4: entered promiscuous mode [ 475.832100][ T1668] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 476.032702][T20946] SELinux: policydb version 0 does not match my version range 15-34 [ 476.041407][T20946] SELinux: failed to load policy [ 476.081578][T20952] FAULT_INJECTION: forcing a failure. [ 476.081578][T20952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.094819][T20952] CPU: 0 UID: 0 PID: 20952 Comm: syz.7.6094 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 476.094909][T20952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 476.094927][T20952] Call Trace: [ 476.094936][T20952] [ 476.094946][T20952] __dump_stack+0x1d/0x30 [ 476.094970][T20952] dump_stack_lvl+0xe8/0x140 [ 476.095005][T20952] dump_stack+0x15/0x1b [ 476.095029][T20952] should_fail_ex+0x265/0x280 [ 476.095071][T20952] should_fail+0xb/0x20 [ 476.095113][T20952] should_fail_usercopy+0x1a/0x20 [ 476.095220][T20952] _copy_from_user+0x1c/0xb0 [ 476.095252][T20952] sel_write_load+0x192/0x380 [ 476.095279][T20952] ? __pfx_sel_write_load+0x10/0x10 [ 476.095299][T20952] vfs_write+0x266/0x8d0 [ 476.095349][T20952] ? __rcu_read_unlock+0x4f/0x70 [ 476.095378][T20952] ? __fget_files+0x184/0x1c0 [ 476.095410][T20952] ksys_write+0xda/0x1a0 [ 476.095488][T20952] __x64_sys_write+0x40/0x50 [ 476.095525][T20952] x64_sys_call+0x2cdd/0x2fb0 [ 476.095555][T20952] do_syscall_64+0xd0/0x1a0 [ 476.095620][T20952] ? clear_bhb_loop+0x40/0x90 [ 476.095650][T20952] ? clear_bhb_loop+0x40/0x90 [ 476.095730][T20952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.095759][T20952] RIP: 0033:0x7f1498ade969 [ 476.095779][T20952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.095804][T20952] RSP: 002b:00007f1497147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 476.095829][T20952] RAX: ffffffffffffffda RBX: 00007f1498d05fa0 RCX: 00007f1498ade969 [ 476.095859][T20952] RDX: 0000000000000098 RSI: 00002000000004c0 RDI: 0000000000000005 [ 476.095871][T20952] RBP: 00007f1497147090 R08: 0000000000000000 R09: 0000000000000000 [ 476.095884][T20952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.095895][T20952] R13: 0000000000000000 R14: 00007f1498d05fa0 R15: 00007ffd93bd8798 [ 476.095916][T20952] [ 476.377050][ T30] kauditd_printk_skb: 504 callbacks suppressed [ 476.377067][ T30] audit: type=1326 audit(1747898797.322:25505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20958 comm="syz.5.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afa0e969 code=0x7ffc0000 [ 476.414982][T20960] loop4: detected capacity change from 0 to 2048 [ 476.440611][ T30] audit: type=1326 audit(1747898797.322:25506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20958 comm="syz.5.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01afa0e969 code=0x7ffc0000 [ 476.464229][ T30] audit: type=1326 audit(1747898797.322:25507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20958 comm="syz.5.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afa0e969 code=0x7ffc0000 [ 476.487853][ T30] audit: type=1326 audit(1747898797.322:25508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20958 comm="syz.5.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f01afa0e969 code=0x7ffc0000 [ 476.511504][ T30] audit: type=1326 audit(1747898797.322:25509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20958 comm="syz.5.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afa0e969 code=0x7ffc0000 [ 476.535160][ T30] audit: type=1326 audit(1747898797.322:25510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20958 comm="syz.5.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f01afa0e969 code=0x7ffc0000 [ 476.558702][ T30] audit: type=1326 audit(1747898797.322:25511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20958 comm="syz.5.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afa0e969 code=0x7ffc0000 [ 476.582384][ T30] audit: type=1326 audit(1747898797.322:25512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20958 comm="syz.5.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f01afa0e969 code=0x7ffc0000 [ 476.605962][ T30] audit: type=1326 audit(1747898797.322:25513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20958 comm="syz.5.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afa0e969 code=0x7ffc0000 [ 476.629741][ T30] audit: type=1326 audit(1747898797.332:25514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20958 comm="syz.5.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afa0e969 code=0x7ffc0000 [ 476.672942][T20960] EXT4-fs (loop4): failed to initialize system zone (-117) [ 476.688086][T20972] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6102'. [ 476.697196][T20972] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6102'. [ 476.707525][T20960] EXT4-fs (loop4): mount failed [ 476.733560][T20972] geneve2: entered promiscuous mode [ 476.738852][T20972] geneve2: entered allmulticast mode [ 476.860553][T20987] loop7: detected capacity change from 0 to 512 [ 476.896404][T20987] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.921763][T20993] lo speed is unknown, defaulting to 1000 [ 476.932683][T20987] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.022854][T20987] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #18: comm syz.7.6108: corrupted inode contents [ 477.059466][T20987] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #18: comm syz.7.6108: mark_inode_dirty error [ 477.078206][T20987] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #18: comm syz.7.6108: corrupted inode contents [ 477.119798][T20987] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #18: comm syz.7.6108: mark_inode_dirty error [ 477.153995][T20987] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #18: comm syz.7.6108: mark inode dirty (error -117) [ 477.186702][T20987] EXT4-fs warning (device loop7): ext4_evict_inode:279: xattr delete (err -117) [ 477.316846][T18995] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.404200][T21019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6119'. [ 477.532487][T21030] ipvlan0: entered promiscuous mode [ 477.538842][T21030] ipvlan0: left promiscuous mode [ 477.551032][T21031] loop9: detected capacity change from 0 to 512 [ 477.610920][T21031] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 477.623790][T21031] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 477.632080][T21031] EXT4-fs (loop9): orphan cleanup on readonly fs [ 477.638818][T21031] EXT4-fs (loop9): 1 truncate cleaned up [ 477.645572][T21031] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 477.658552][T21031] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.887008][T21041] loop7: detected capacity change from 0 to 512 [ 477.938791][T21041] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.985234][T21048] __nla_validate_parse: 1 callbacks suppressed [ 477.985254][T21048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6131'. [ 478.010360][T21041] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 478.043933][T21050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6132'. [ 478.072022][T21041] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.6127: corrupted inode contents [ 478.097811][T21048] ipvlan0: entered promiscuous mode [ 478.114157][T21048] ipvlan0: left promiscuous mode [ 478.137976][T21041] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #2: comm syz.7.6127: mark_inode_dirty error [ 478.161734][T21050] IPVS: Error joining to the multicast group [ 478.232770][T21041] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.6127: corrupted inode contents [ 478.284852][T21053] lo speed is unknown, defaulting to 1000 [ 478.353779][T21041] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.667200][T21063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6137'. [ 478.681137][T21065] SELinux: wޣ (21065) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 478.725281][T21067] SELinux: security policydb version 18 (MLS) not backwards compatible [ 478.735690][T21065] netlink: 32 bytes leftover after parsing attributes in process `wޣ'. [ 478.754396][T21067] SELinux: failed to load policy [ 478.842487][T21070] loop4: detected capacity change from 0 to 512 [ 478.974664][T21080] loop7: detected capacity change from 0 to 2048 [ 479.066660][T21080] EXT4-fs (loop7): failed to initialize system zone (-117) [ 479.140583][T21080] EXT4-fs (loop7): mount failed [ 479.207581][T21088] SELinux: policydb version 337767811 does not match my version range 15-34 [ 479.243046][T21088] SELinux: failed to load policy [ 479.404728][T21092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6147'. [ 479.413778][T21092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6147'. [ 479.474351][T21092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6147'. [ 479.678211][T21078] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6143'. [ 479.853234][T21081] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in; [ 479.853234][T21081] program syz.5.6143 not setting count and/or reply_len properly [ 480.104397][T21103] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6150'. [ 480.174315][T21105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6151'. [ 480.193540][T21105] IPVS: Unknown mcast interface: vcan0 [ 480.258062][T21108] IPVS: Error joining to the multicast group [ 480.370995][T21114] FAULT_INJECTION: forcing a failure. [ 480.370995][T21114] name failslab, interval 1, probability 0, space 0, times 0 [ 480.383781][T21114] CPU: 0 UID: 0 PID: 21114 Comm: syz.7.6155 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 480.383811][T21114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 480.383829][T21114] Call Trace: [ 480.383837][T21114] [ 480.383848][T21114] __dump_stack+0x1d/0x30 [ 480.383875][T21114] dump_stack_lvl+0xe8/0x140 [ 480.383902][T21114] dump_stack+0x15/0x1b [ 480.383967][T21114] should_fail_ex+0x265/0x280 [ 480.384072][T21114] should_failslab+0x8c/0xb0 [ 480.384104][T21114] kmem_cache_alloc_noprof+0x50/0x310 [ 480.384203][T21114] ? flock_lock_inode+0x135/0xf60 [ 480.384233][T21114] flock_lock_inode+0x135/0xf60 [ 480.384270][T21114] ? file_has_perm+0x324/0x370 [ 480.384317][T21114] locks_lock_inode_wait+0x6f/0x2a0 [ 480.384413][T21114] ? selinux_file_lock+0x38/0x50 [ 480.384456][T21114] __se_sys_flock+0x2f1/0x3b0 [ 480.384563][T21114] __x64_sys_flock+0x31/0x40 [ 480.384617][T21114] x64_sys_call+0x2eed/0x2fb0 [ 480.384644][T21114] do_syscall_64+0xd0/0x1a0 [ 480.384679][T21114] ? clear_bhb_loop+0x40/0x90 [ 480.384706][T21114] ? clear_bhb_loop+0x40/0x90 [ 480.384727][T21114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.384748][T21114] RIP: 0033:0x7f1498ade969 [ 480.384764][T21114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.384827][T21114] RSP: 002b:00007f1497147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 480.384853][T21114] RAX: ffffffffffffffda RBX: 00007f1498d05fa0 RCX: 00007f1498ade969 [ 480.384867][T21114] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 480.384958][T21114] RBP: 00007f1497147090 R08: 0000000000000000 R09: 0000000000000000 [ 480.384994][T21114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.385006][T21114] R13: 0000000000000000 R14: 00007f1498d05fa0 R15: 00007ffd93bd8798 [ 480.385026][T21114] [ 480.493490][T21118] bridge0: entered promiscuous mode [ 480.493555][T21118] macvlan2: entered promiscuous mode [ 480.494806][T21118] bridge0: port 4(macvlan2) entered blocking state [ 480.494835][T21118] bridge0: port 4(macvlan2) entered disabled state [ 480.494996][T21118] macvlan2: entered allmulticast mode [ 480.495141][T21118] bridge0: entered allmulticast mode [ 480.495741][T21118] macvlan2: left allmulticast mode [ 480.495759][T21118] bridge0: left allmulticast mode [ 480.496158][T21118] bridge0: left promiscuous mode [ 480.730466][T21124] SELinux: policydb version 337767811 does not match my version range 15-34 [ 480.730965][T21124] SELinux: failed to load policy [ 481.391213][ T30] kauditd_printk_skb: 184 callbacks suppressed [ 481.391233][ T30] audit: type=1400 audit(1747898802.342:25699): avc: denied { open } for pid=21139 comm="syz.7.6164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 481.391333][ T30] audit: type=1400 audit(1747898802.342:25700): avc: denied { kernel } for pid=21139 comm="syz.7.6164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 481.469542][ T30] audit: type=1400 audit(1747898802.422:25701): avc: denied { create } for pid=21143 comm="syz.7.6166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 481.504946][ T30] audit: type=1400 audit(1747898802.442:25702): avc: denied { getopt } for pid=21143 comm="syz.7.6166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 481.524826][ T30] audit: type=1400 audit(1747898802.442:25703): avc: denied { create } for pid=21143 comm="syz.7.6166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 481.545606][ T30] audit: type=1400 audit(1747898802.452:25704): avc: denied { write } for pid=21143 comm="syz.7.6166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 481.566335][ T30] audit: type=1400 audit(1747898802.452:25705): avc: denied { read } for pid=21143 comm="syz.7.6166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 481.654966][T21146] loop7: detected capacity change from 0 to 16384 [ 481.771615][T21158] loop4: detected capacity change from 0 to 512 [ 481.776606][T21146] I/O error, dev loop7, sector 2560 op 0x0:(READ) flags 0x80700 phys_seg 9 prio class 0 [ 481.778757][ T30] audit: type=1400 audit(1747898802.702:25706): avc: denied { read } for pid=21154 comm="syz.5.6172" dev="nsfs" ino=4026532389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 481.809225][ T30] audit: type=1400 audit(1747898802.702:25707): avc: denied { open } for pid=21154 comm="syz.5.6172" path="net:[4026532389]" dev="nsfs" ino=4026532389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 481.810291][T21146] I/O error, dev loop7, sector 2816 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 481.835372][ T30] audit: type=1326 audit(1747898802.702:25708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21154 comm="syz.5.6172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afa0e969 code=0x7ffc0000 [ 481.894388][T21146] I/O error, dev loop7, sector 2560 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 481.904097][T21146] Buffer I/O error on dev loop7, logical block 320, async page read [ 481.929559][T21162] wireguard0: entered promiscuous mode [ 481.935173][T21162] wireguard0: entered allmulticast mode [ 481.970771][T21158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.999546][T21158] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.080885][T21166] sch_tbf: burst 2 is lower than device ip6tnl0 mtu (1452) ! [ 482.163201][T21145] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 482.172968][T21145] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 482.175951][T21166] lo speed is unknown, defaulting to 1000 [ 482.181409][T21145] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 482.195632][T21145] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 482.204108][T21145] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 482.212539][T21145] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 482.221201][T21145] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 482.229803][T21145] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 482.238303][T21145] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 482.246763][T21145] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 482.290147][T21145] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 482.303099][T21145] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x800 phys_seg 64 prio class 0 [ 482.465127][T19683] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.491382][T21194] loop5: detected capacity change from 0 to 512 [ 482.533890][T21194] EXT4-fs error (device loop5): __ext4_fill_super:5502: inode #2: comm syz.5.6183: casefold flag without casefold feature [ 482.582319][T21194] EXT4-fs (loop5): get root inode failed [ 482.592999][T21194] EXT4-fs (loop5): mount failed [ 482.622310][T21202] loop4: detected capacity change from 0 to 2048 [ 482.630873][T21204] loop9: detected capacity change from 0 to 256 [ 482.648326][T21206] IPVS: Error joining to the multicast group [ 482.665432][T21202] EXT4-fs (loop4): failed to initialize system zone (-117) [ 482.684828][T21202] EXT4-fs (loop4): mount failed [ 482.718363][T21210] loop5: detected capacity change from 0 to 512 [ 482.731700][T21204] bio_check_eod: 2 callbacks suppressed [ 482.731720][T21204] syz.9.6186: attempt to access beyond end of device [ 482.731720][T21204] loop9: rw=2049, sector=256, nr_sectors = 288 limit=256 [ 482.733551][T21213] FAULT_INJECTION: forcing a failure. [ 482.733551][T21213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.749136][T21204] syz.9.6186: attempt to access beyond end of device [ 482.749136][T21204] loop9: rw=2049, sector=608, nr_sectors = 320 limit=256 [ 482.751023][T21213] CPU: 1 UID: 0 PID: 21213 Comm: syz.7.6189 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 482.751085][T21213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.751112][T21213] Call Trace: [ 482.751122][T21213] [ 482.751141][T21213] __dump_stack+0x1d/0x30 [ 482.751171][T21213] dump_stack_lvl+0xe8/0x140 [ 482.751198][T21213] dump_stack+0x15/0x1b [ 482.751221][T21213] should_fail_ex+0x265/0x280 [ 482.751316][T21213] should_fail+0xb/0x20 [ 482.751380][T21213] should_fail_usercopy+0x1a/0x20 [ 482.751408][T21213] _copy_to_user+0x20/0xa0 [ 482.751441][T21213] simple_read_from_buffer+0xb5/0x130 [ 482.751504][T21213] proc_fail_nth_read+0x100/0x140 [ 482.751543][T21213] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 482.751579][T21213] vfs_read+0x19d/0x6f0 [ 482.751614][T21213] ? __rcu_read_unlock+0x4f/0x70 [ 482.751646][T21213] ? __fget_files+0x184/0x1c0 [ 482.751755][T21213] ksys_read+0xda/0x1a0 [ 482.751876][T21213] __x64_sys_read+0x40/0x50 [ 482.751913][T21213] x64_sys_call+0x2d77/0x2fb0 [ 482.751940][T21213] do_syscall_64+0xd0/0x1a0 [ 482.752008][T21213] ? clear_bhb_loop+0x40/0x90 [ 482.752080][T21213] ? clear_bhb_loop+0x40/0x90 [ 482.752110][T21213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.752147][T21213] RIP: 0033:0x7f1498add37c [ 482.752168][T21213] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 482.752226][T21213] RSP: 002b:00007f1497147030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 482.752252][T21213] RAX: ffffffffffffffda RBX: 00007f1498d05fa0 RCX: 00007f1498add37c [ 482.752270][T21213] RDX: 000000000000000f RSI: 00007f14971470a0 RDI: 0000000000000003 [ 482.752288][T21213] RBP: 00007f1497147090 R08: 0000000000000000 R09: 0000000000000000 [ 482.752305][T21213] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 482.752322][T21213] R13: 0000000000000000 R14: 00007f1498d05fa0 R15: 00007ffd93bd8798 [ 482.752350][T21213] [ 482.753604][T21210] EXT4-fs: Ignoring removed orlov option [ 482.791520][T21204] syz.9.6186: attempt to access beyond end of device [ 482.791520][T21204] loop9: rw=2049, sector=960, nr_sectors = 64 limit=256 [ 482.849368][T21210] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 482.857695][T21204] syz.9.6186: attempt to access beyond end of device [ 482.857695][T21204] loop9: rw=2049, sector=1056, nr_sectors = 1380 limit=256 [ 482.901308][T21210] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 483.016676][T21225] loop7: detected capacity change from 0 to 2048 [ 483.036513][T21210] EXT4-fs (loop5): orphan cleanup on readonly fs [ 483.045092][T21210] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6188: bg 0: block 248: padding at end of block bitmap is not set [ 483.063425][T21227] __nla_validate_parse: 18 callbacks suppressed [ 483.063446][T21227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6196'. [ 483.072882][T21210] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.6188: Failed to acquire dquot type 1 [ 483.080034][T21229] FAULT_INJECTION: forcing a failure. [ 483.080034][T21229] name failslab, interval 1, probability 0, space 0, times 0 [ 483.093399][T21227] ipvlan0: entered promiscuous mode [ 483.102564][T21229] CPU: 1 UID: 0 PID: 21229 Comm: syz.9.6195 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 483.102601][T21229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 483.102617][T21229] Call Trace: [ 483.102626][T21229] [ 483.102636][T21229] __dump_stack+0x1d/0x30 [ 483.102692][T21229] dump_stack_lvl+0xe8/0x140 [ 483.102722][T21229] dump_stack+0x15/0x1b [ 483.102806][T21229] should_fail_ex+0x265/0x280 [ 483.102889][T21229] should_failslab+0x8c/0xb0 [ 483.102933][T21229] kmem_cache_alloc_node_noprof+0x57/0x320 [ 483.102965][T21229] ? __alloc_skb+0x101/0x320 [ 483.103054][T21229] __alloc_skb+0x101/0x320 [ 483.103106][T21229] netlink_ack+0xfd/0x500 [ 483.103173][T21229] netlink_rcv_skb+0x192/0x220 [ 483.103238][T21229] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 483.103284][T21229] rtnetlink_rcv+0x1c/0x30 [ 483.103316][T21229] netlink_unicast+0x5a1/0x670 [ 483.103362][T21229] netlink_sendmsg+0x58b/0x6b0 [ 483.103533][T21229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.103633][T21229] __sock_sendmsg+0x145/0x180 [ 483.103673][T21229] ____sys_sendmsg+0x31e/0x4e0 [ 483.103706][T21229] ___sys_sendmsg+0x17b/0x1d0 [ 483.103756][T21229] __x64_sys_sendmsg+0xd4/0x160 [ 483.103793][T21229] x64_sys_call+0x2999/0x2fb0 [ 483.103887][T21229] do_syscall_64+0xd0/0x1a0 [ 483.103921][T21229] ? clear_bhb_loop+0x40/0x90 [ 483.103951][T21229] ? clear_bhb_loop+0x40/0x90 [ 483.103982][T21229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.104012][T21229] RIP: 0033:0x7f11e0a1e969 [ 483.104090][T21229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.104126][T21229] RSP: 002b:00007f11df087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.104169][T21229] RAX: ffffffffffffffda RBX: 00007f11e0c45fa0 RCX: 00007f11e0a1e969 [ 483.104187][T21229] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 483.104204][T21229] RBP: 00007f11df087090 R08: 0000000000000000 R09: 0000000000000000 [ 483.104222][T21229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.104239][T21229] R13: 0000000000000000 R14: 00007f11e0c45fa0 R15: 00007ffff35c45e8 [ 483.104266][T21229] [ 483.109451][T21210] EXT4-fs (loop5): 1 truncate cleaned up [ 483.121605][T21227] ipvlan0: left promiscuous mode [ 483.133195][T21225] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.137736][T21210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 483.197566][T21233] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6194'. [ 483.355934][T21210] netlink: 'syz.5.6188': attribute type 1 has an invalid length. [ 483.457603][T21244] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6199'. [ 483.467355][T21244] IPVS: Error joining to the multicast group [ 483.489399][T15222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.500328][T21232] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 483.591352][T21262] loop4: detected capacity change from 0 to 256 [ 483.651471][T21262] syz.4.6206: attempt to access beyond end of device [ 483.651471][T21262] loop4: rw=2049, sector=256, nr_sectors = 288 limit=256 [ 483.706090][T21262] syz.4.6206: attempt to access beyond end of device [ 483.706090][T21262] loop4: rw=2049, sector=608, nr_sectors = 320 limit=256 [ 483.744851][T21274] FAULT_INJECTION: forcing a failure. [ 483.744851][T21274] name failslab, interval 1, probability 0, space 0, times 0 [ 483.744888][T21274] CPU: 0 UID: 0 PID: 21274 Comm: syz.9.6211 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 483.744961][T21274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 483.744978][T21274] Call Trace: [ 483.744986][T21274] [ 483.744996][T21274] __dump_stack+0x1d/0x30 [ 483.745065][T21274] dump_stack_lvl+0xe8/0x140 [ 483.745172][T21274] dump_stack+0x15/0x1b [ 483.745190][T21274] should_fail_ex+0x265/0x280 [ 483.745246][T21274] should_failslab+0x8c/0xb0 [ 483.745286][T21274] kmem_cache_alloc_node_noprof+0x57/0x320 [ 483.745326][T21274] ? __alloc_skb+0x101/0x320 [ 483.745364][T21274] __alloc_skb+0x101/0x320 [ 483.745411][T21274] netlink_alloc_large_skb+0xba/0xf0 [ 483.745452][T21274] netlink_sendmsg+0x3cf/0x6b0 [ 483.745518][T21274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.745548][T21274] __sock_sendmsg+0x145/0x180 [ 483.745659][T21274] ____sys_sendmsg+0x31e/0x4e0 [ 483.745694][T21274] ___sys_sendmsg+0x17b/0x1d0 [ 483.745743][T21274] __x64_sys_sendmsg+0xd4/0x160 [ 483.745779][T21274] x64_sys_call+0x2999/0x2fb0 [ 483.745810][T21274] do_syscall_64+0xd0/0x1a0 [ 483.745940][T21274] ? clear_bhb_loop+0x40/0x90 [ 483.745997][T21274] ? clear_bhb_loop+0x40/0x90 [ 483.746027][T21274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.746104][T21274] RIP: 0033:0x7f11e0a1e969 [ 483.746124][T21274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.746150][T21274] RSP: 002b:00007f11df087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.746175][T21274] RAX: ffffffffffffffda RBX: 00007f11e0c45fa0 RCX: 00007f11e0a1e969 [ 483.746193][T21274] RDX: 0000000000000000 RSI: 0000200000000bc0 RDI: 0000000000000004 [ 483.746210][T21274] RBP: 00007f11df087090 R08: 0000000000000000 R09: 0000000000000000 [ 483.746228][T21274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.746313][T21274] R13: 0000000000000000 R14: 00007f11e0c45fa0 R15: 00007ffff35c45e8 [ 483.746341][T21274] [ 483.768934][T21262] syz.4.6206: attempt to access beyond end of device [ 483.768934][T21262] loop4: rw=2049, sector=960, nr_sectors = 64 limit=256 [ 483.890560][T21275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6206'. [ 483.927665][T21262] syz.4.6206: attempt to access beyond end of device [ 483.927665][T21262] loop4: rw=2049, sector=1056, nr_sectors = 1380 limit=256 [ 484.006991][ T1668] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 484.007019][ T1668] EXT4-fs (loop7): This should not happen!! Data will be lost [ 484.007019][ T1668] [ 484.007031][ T1668] EXT4-fs (loop7): Total free blocks count 0 [ 484.007071][ T1668] EXT4-fs (loop7): Free/Dirty block details [ 484.007085][ T1668] EXT4-fs (loop7): free_blocks=2415919504 [ 484.007097][ T1668] EXT4-fs (loop7): dirty_blocks=12400 [ 484.007147][ T1668] EXT4-fs (loop7): Block reservation details [ 484.007162][ T1668] EXT4-fs (loop7): i_reserved_data_blocks=775 [ 484.055266][ T1668] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 484.104669][T21283] loop9: detected capacity change from 0 to 2048 [ 484.114749][T21285] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6218'. [ 484.184546][T21292] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6219'. [ 484.209363][T21283] EXT4-fs (loop9): failed to initialize system zone (-117) [ 484.227222][T21283] EXT4-fs (loop9): mount failed [ 484.346928][T21299] lo speed is unknown, defaulting to 1000 [ 484.441703][T21307] loop7: detected capacity change from 0 to 2048 [ 484.463964][T21307] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.654246][T21314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6225'. [ 484.655188][T21315] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6223'. [ 484.741001][T21288] loop4: detected capacity change from 0 to 2048 [ 484.789986][T21288] Alternate GPT is invalid, using primary GPT. [ 484.790194][T21288] loop4: p1 p2 p3 [ 484.851090][T21326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6228'. [ 485.101072][T21339] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6234'. [ 485.127271][T21339] loop9: detected capacity change from 0 to 1024 [ 485.136238][T21339] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 485.136291][T21339] EXT4-fs (loop9): group descriptors corrupted! [ 485.136855][ T41] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 485.137121][ T41] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 485.137154][ T41] EXT4-fs (loop7): This should not happen!! Data will be lost [ 485.137154][ T41] [ 485.137200][ T41] EXT4-fs (loop7): Total free blocks count 0 [ 485.137212][ T41] EXT4-fs (loop7): Free/Dirty block details [ 485.137223][ T41] EXT4-fs (loop7): free_blocks=2415919504 [ 485.137277][ T41] EXT4-fs (loop7): dirty_blocks=16400 [ 485.137293][ T41] EXT4-fs (loop7): Block reservation details [ 485.137321][ T41] EXT4-fs (loop7): i_reserved_data_blocks=1025 [ 485.153765][ T12] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 485.662830][T21367] bridge0: entered promiscuous mode [ 485.662897][T21367] macvlan2: entered promiscuous mode [ 485.663845][T21367] bridge0: port 4(macvlan2) entered blocking state [ 485.663917][T21367] bridge0: port 4(macvlan2) entered disabled state [ 485.663995][T21367] macvlan2: entered allmulticast mode [ 485.664013][T21367] bridge0: entered allmulticast mode [ 485.664563][T21367] macvlan2: left allmulticast mode [ 485.664578][T21367] bridge0: left allmulticast mode [ 485.665047][T21367] bridge0: left promiscuous mode [ 485.760616][T21370] loop9: detected capacity change from 0 to 2048 [ 485.791589][T21370] EXT4-fs (loop9): failed to initialize system zone (-117) [ 485.791635][T21370] EXT4-fs (loop9): mount failed [ 485.845298][T21376] lo speed is unknown, defaulting to 1000 [ 486.043918][T21385] wireguard0: entered promiscuous mode [ 486.049488][T21385] wireguard0: entered allmulticast mode [ 486.203999][T21394] loop7: detected capacity change from 0 to 2048 [ 486.214758][T21400] ipvlan0: entered promiscuous mode [ 486.223352][T21400] ipvlan0: left promiscuous mode [ 486.229695][T21394] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.281707][T21406] ipvlan0: entered promiscuous mode [ 486.287994][T21406] ipvlan0: left promiscuous mode [ 486.427374][ T30] kauditd_printk_skb: 253 callbacks suppressed [ 486.427393][ T30] audit: type=1400 audit(1747898807.282:25960): avc: denied { execmem } for pid=21412 comm="syz.5.6263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 486.496196][ T30] audit: type=1400 audit(1747898807.382:25961): avc: denied { read write } for pid=21414 comm="syz.9.6264" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 486.520144][ T30] audit: type=1400 audit(1747898807.382:25962): avc: denied { open } for pid=21414 comm="syz.9.6264" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 486.564108][T21417] lo speed is unknown, defaulting to 1000 [ 486.621533][ T30] audit: type=1400 audit(1747898807.442:25963): avc: denied { watch watch_reads } for pid=21414 comm="syz.9.6264" path="/148" dev="tmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 486.644841][ T30] audit: type=1400 audit(1747898807.472:25964): avc: denied { append } for pid=21422 comm="syz.2.6265" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 486.668590][ T30] audit: type=1400 audit(1747898807.472:25965): avc: denied { create } for pid=21422 comm="syz.2.6265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 486.689554][ T30] audit: type=1400 audit(1747898807.472:25966): avc: denied { write } for pid=21422 comm="syz.2.6265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 486.710385][ T30] audit: type=1400 audit(1747898807.562:25967): avc: denied { create } for pid=21427 comm="syz.4.6268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 486.731058][ T30] audit: type=1400 audit(1747898807.562:25968): avc: denied { write } for pid=21427 comm="syz.4.6268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 486.751680][ T30] audit: type=1400 audit(1747898807.562:25969): avc: denied { read } for pid=21427 comm="syz.4.6268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 486.772633][T21419] loop5: detected capacity change from 0 to 512 [ 486.779131][T21428] IPVS: Error joining to the multicast group [ 486.819989][T21419] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 486.851538][T21419] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 486.863056][T21419] EXT4-fs (loop5): orphan cleanup on readonly fs [ 486.886370][T21419] EXT4-fs (loop5): 1 truncate cleaned up [ 487.017807][T21419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 487.056188][T21419] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.089141][ T1668] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 487.118024][ T1668] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 487.122919][T21441] ipvlan0: entered promiscuous mode [ 487.130631][ T1668] EXT4-fs (loop7): This should not happen!! Data will be lost [ 487.130631][ T1668] [ 487.145708][ T1668] EXT4-fs (loop7): Total free blocks count 0 [ 487.151884][ T1668] EXT4-fs (loop7): Free/Dirty block details [ 487.157090][T21441] ipvlan0: left promiscuous mode [ 487.157784][ T1668] EXT4-fs (loop7): free_blocks=2415919504 [ 487.168540][ T1668] EXT4-fs (loop7): dirty_blocks=16400 [ 487.174663][ T1668] EXT4-fs (loop7): Block reservation details [ 487.180798][ T1668] EXT4-fs (loop7): i_reserved_data_blocks=1025 [ 487.230919][ T41] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 487.296990][T21443] sd 0:0:1:0: device reset [ 487.355805][T21449] loop4: detected capacity change from 0 to 256 [ 487.510928][T21453] loop5: detected capacity change from 0 to 256 [ 487.624282][T21453] syz.5.6280: attempt to access beyond end of device [ 487.624282][T21453] loop5: rw=2049, sector=256, nr_sectors = 288 limit=256 [ 487.624989][T21453] syz.5.6280: attempt to access beyond end of device [ 487.624989][T21453] loop5: rw=2049, sector=608, nr_sectors = 320 limit=256 [ 487.770570][T21465] loop5: detected capacity change from 0 to 1024 [ 487.775930][T21465] EXT4-fs (loop5): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 487.831952][T21468] gretap0: mtu less than device minimum [ 487.890506][T21471] loop5: detected capacity change from 0 to 764 [ 487.966343][T21474] SELinux: policydb version 337767811 does not match my version range 15-34 [ 487.967018][T21474] SELinux: failed to load policy [ 488.070198][T21478] __nla_validate_parse: 12 callbacks suppressed [ 488.070214][T21478] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6288'. [ 488.134090][T21480] loop5: detected capacity change from 0 to 256 [ 488.180974][T21480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6289'. [ 488.340602][T21493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6295'. [ 488.363228][T21491] loop5: detected capacity change from 0 to 512 [ 488.404891][T21491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.427965][T21491] ext4 filesystem being mounted at /407/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 488.466106][T15222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.604032][T21511] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6301'. [ 488.692582][T21516] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6302'. [ 488.736332][T21516] IPVS: Unknown mcast interface: vcan0 [ 488.905372][T21523] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6305'. [ 488.914919][T21523] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6305'. [ 488.961299][T21523] macvlan3: entered promiscuous mode [ 488.975297][T21523] bridge0: port 3(macvlan3) entered blocking state [ 488.982238][T21523] bridge0: port 3(macvlan3) entered disabled state [ 489.004290][T21523] macvlan3: entered allmulticast mode [ 489.009753][T21523] bridge0: entered allmulticast mode [ 489.030464][T21523] macvlan3: left allmulticast mode [ 489.035706][T21523] bridge0: left allmulticast mode [ 489.154842][T21544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6312'. [ 489.173098][T21546] SELinux: policydb version 337767811 does not match my version range 15-34 [ 489.188414][T21546] SELinux: failed to load policy [ 489.339277][T21567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6321'. [ 489.348309][T21567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6321'. [ 489.392856][T21567] macvlan2: entered promiscuous mode [ 489.399868][T21567] bridge0: port 3(macvlan2) entered blocking state [ 489.406447][T21567] bridge0: port 3(macvlan2) entered disabled state [ 489.420718][T21567] macvlan2: entered allmulticast mode [ 489.426359][T21567] bridge0: entered allmulticast mode [ 489.450601][T21567] macvlan2: left allmulticast mode [ 489.456013][T21567] bridge0: left allmulticast mode [ 489.492312][T21578] 9pnet_fd: Insufficient options for proto=fd [ 489.622581][T21570] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.661973][T21586] loop9: detected capacity change from 0 to 512 [ 489.670441][T21586] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 489.700533][T21570] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.702632][T21581] loop5: detected capacity change from 0 to 512 [ 489.717478][T21586] EXT4-fs (loop9): failed to open journal device unknown-block(0,0) -6 [ 489.721022][T21581] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 489.756769][T21581] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 489.766437][T21581] EXT4-fs (loop5): orphan cleanup on readonly fs [ 489.775634][T21581] EXT4-fs (loop5): 1 truncate cleaned up [ 489.785470][T21570] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.798076][T21581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 489.812703][T21581] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.864556][T21570] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.923666][T21570] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.936891][T21570] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.964840][T21570] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.981020][T21570] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.034676][T21612] loop9: detected capacity change from 0 to 512 [ 490.055796][T21615] FAULT_INJECTION: forcing a failure. [ 490.055796][T21615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.068955][T21612] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.068981][T21615] CPU: 0 UID: 0 PID: 21615 Comm: syz.2.6336 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 490.069024][T21615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.069039][T21615] Call Trace: [ 490.069104][T21615] [ 490.069115][T21615] __dump_stack+0x1d/0x30 [ 490.069146][T21615] dump_stack_lvl+0xe8/0x140 [ 490.069175][T21615] dump_stack+0x15/0x1b [ 490.069200][T21615] should_fail_ex+0x265/0x280 [ 490.069277][T21615] should_fail+0xb/0x20 [ 490.069357][T21615] should_fail_usercopy+0x1a/0x20 [ 490.069415][T21615] copy_fpstate_to_sigframe+0x62b/0x7d0 [ 490.069461][T21615] ? copy_fpstate_to_sigframe+0xe5/0x7d0 [ 490.069558][T21615] get_sigframe+0x34d/0x490 [ 490.069600][T21615] ? get_signal+0xdc8/0xf70 [ 490.069651][T21615] x64_setup_rt_frame+0xa8/0x580 [ 490.069700][T21615] arch_do_signal_or_restart+0x26e/0x480 [ 490.069811][T21615] syscall_exit_to_user_mode+0x68/0xb0 [ 490.069844][T21615] do_syscall_64+0xdd/0x1a0 [ 490.069877][T21615] ? clear_bhb_loop+0x40/0x90 [ 490.069952][T21615] ? clear_bhb_loop+0x40/0x90 [ 490.069983][T21615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.070013][T21615] RIP: 0033:0x7fe2b8e3d41f [ 490.070077][T21615] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 490.070103][T21615] RSP: 002b:00007fe2b74a7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 490.070129][T21615] RAX: 0000000000000001 RBX: 0000000000000006 RCX: 00007fe2b8e3d41f [ 490.070147][T21615] RDX: 0000000000000001 RSI: 00007fe2b74a7090 RDI: 0000000000000006 [ 490.070173][T21615] RBP: 00007fe2b74a7090 R08: 0000000000000000 R09: 00007fe2b74a6df7 [ 490.070191][T21615] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 490.070208][T21615] R13: 0000000000000000 R14: 00007fe2b9065fa0 R15: 00007ffe3d38ba38 [ 490.070237][T21615] [ 490.267249][T21623] FAULT_INJECTION: forcing a failure. [ 490.267249][T21623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.271132][T21612] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 490.283885][T21623] CPU: 0 UID: 0 PID: 21623 Comm: syz.2.6339 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 490.283949][T21623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.283968][T21623] Call Trace: [ 490.283977][T21623] [ 490.283989][T21623] __dump_stack+0x1d/0x30 [ 490.284021][T21623] dump_stack_lvl+0xe8/0x140 [ 490.284048][T21623] dump_stack+0x15/0x1b [ 490.284066][T21623] should_fail_ex+0x265/0x280 [ 490.284191][T21623] should_fail+0xb/0x20 [ 490.284233][T21623] should_fail_usercopy+0x1a/0x20 [ 490.284284][T21623] _copy_from_user+0x1c/0xb0 [ 490.284316][T21623] ___sys_sendmsg+0xc1/0x1d0 [ 490.284422][T21623] __x64_sys_sendmsg+0xd4/0x160 [ 490.284591][T21623] x64_sys_call+0x2999/0x2fb0 [ 490.284622][T21623] do_syscall_64+0xd0/0x1a0 [ 490.284656][T21623] ? clear_bhb_loop+0x40/0x90 [ 490.284687][T21623] ? clear_bhb_loop+0x40/0x90 [ 490.284718][T21623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.284762][T21623] RIP: 0033:0x7fe2b8e3e969 [ 490.284784][T21623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.284809][T21623] RSP: 002b:00007fe2b74a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.284895][T21623] RAX: ffffffffffffffda RBX: 00007fe2b9065fa0 RCX: 00007fe2b8e3e969 [ 490.284912][T21623] RDX: 0000000000008040 RSI: 0000200000001540 RDI: 0000000000000003 [ 490.284929][T21623] RBP: 00007fe2b74a7090 R08: 0000000000000000 R09: 0000000000000000 [ 490.284947][T21623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.285038][T21623] R13: 0000000000000000 R14: 00007fe2b9065fa0 R15: 00007ffe3d38ba38 [ 490.285072][T21623] [ 490.434217][T21627] lo speed is unknown, defaulting to 1000 [ 490.554780][T21641] loop7: detected capacity change from 0 to 16384 [ 490.565269][T19258] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.574335][T21645] xt_CT: You must specify a L4 protocol and not use inversions on it [ 490.608013][T21645] loop5: detected capacity change from 0 to 256 [ 490.640088][T21641] I/O error, dev loop7, sector 8448 op 0x0:(READ) flags 0x80700 phys_seg 14 prio class 0 [ 490.658187][T21641] I/O error, dev loop7, sector 8704 op 0x0:(READ) flags 0x80700 phys_seg 9 prio class 0 [ 490.668454][T21641] I/O error, dev loop7, sector 8448 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.678075][T21641] buffer_io_error: 311 callbacks suppressed [ 490.678092][T21641] Buffer I/O error on dev loop7, logical block 1056, async page read [ 490.681717][T21653] FAULT_INJECTION: forcing a failure. [ 490.681717][T21653] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 490.692259][T21651] loop9: detected capacity change from 0 to 256 [ 490.705526][T21653] CPU: 1 UID: 0 PID: 21653 Comm: syz.7.6351 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 490.705562][T21653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.705578][T21653] Call Trace: [ 490.705589][T21653] [ 490.705601][T21653] __dump_stack+0x1d/0x30 [ 490.705705][T21653] dump_stack_lvl+0xe8/0x140 [ 490.705733][T21653] dump_stack+0x15/0x1b [ 490.705756][T21653] should_fail_ex+0x265/0x280 [ 490.705881][T21653] should_fail_alloc_page+0xf2/0x100 [ 490.705928][T21653] __alloc_frozen_pages_noprof+0xff/0x360 [ 490.706039][T21653] __alloc_pages_noprof+0x9/0x20 [ 490.706074][T21653] ___kmalloc_large_node+0x73/0x130 [ 490.706112][T21653] __kmalloc_large_node_noprof+0x16/0xa0 [ 490.706143][T21653] __kmalloc_noprof+0x2ab/0x3e0 [ 490.706170][T21653] ? iovec_from_user+0x84/0x210 [ 490.706247][T21653] iovec_from_user+0x84/0x210 [ 490.706278][T21653] ? process_vm_rw+0x137/0x950 [ 490.706306][T21653] process_vm_rw+0x15b/0x950 [ 490.706335][T21653] ? _parse_integer+0x27/0x40 [ 490.706423][T21653] ? kstrtoull+0x111/0x140 [ 490.706550][T21653] ? bpf_trace_run2+0x124/0x1c0 [ 490.706589][T21653] ? __bpf_trace_sys_enter+0x10/0x30 [ 490.706623][T21653] __x64_sys_process_vm_writev+0x78/0x90 [ 490.706656][T21653] x64_sys_call+0xe80/0x2fb0 [ 490.706712][T21653] do_syscall_64+0xd0/0x1a0 [ 490.706747][T21653] ? clear_bhb_loop+0x40/0x90 [ 490.706779][T21653] ? clear_bhb_loop+0x40/0x90 [ 490.706810][T21653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.706839][T21653] RIP: 0033:0x7f1498ade969 [ 490.706861][T21653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.706886][T21653] RSP: 002b:00007f1497147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 490.706912][T21653] RAX: ffffffffffffffda RBX: 00007f1498d05fa0 RCX: 00007f1498ade969 [ 490.706954][T21653] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 00000000000001e6 [ 490.706971][T21653] RBP: 00007f1497147090 R08: 000000000000023a R09: 0000000000000000 [ 490.706989][T21653] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001 [ 490.707007][T21653] R13: 0000000000000000 R14: 00007f1498d05fa0 R15: 00007ffd93bd8798 [ 490.707037][T21653] [ 490.729878][T21640] I/O error, dev loop7, sector 2032 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 490.787000][T21651] bio_check_eod: 2 callbacks suppressed [ 490.787021][T21651] syz.9.6345: attempt to access beyond end of device [ 490.787021][T21651] loop9: rw=2049, sector=256, nr_sectors = 288 limit=256 [ 490.790598][T21640] Buffer I/O error on dev loop7, logical block 254, lost async page write [ 490.790630][T21640] Buffer I/O error on dev loop7, logical block 255, lost async page write [ 490.796856][T21651] syz.9.6345: attempt to access beyond end of device [ 490.796856][T21651] loop9: rw=2049, sector=608, nr_sectors = 320 limit=256 [ 490.800204][T21640] Buffer I/O error on dev loop7, logical block 256, lost async page write [ 490.806602][T21651] syz.9.6345: attempt to access beyond end of device [ 490.806602][T21651] loop9: rw=2049, sector=960, nr_sectors = 64 limit=256 [ 490.809700][T21640] Buffer I/O error on dev loop7, logical block 257, lost async page write [ 490.817043][T21651] syz.9.6345: attempt to access beyond end of device [ 490.817043][T21651] loop9: rw=2049, sector=1056, nr_sectors = 1380 limit=256 [ 490.818792][T21640] Buffer I/O error on dev loop7, logical block 258, lost async page write [ 491.047671][T21640] Buffer I/O error on dev loop7, logical block 259, lost async page write [ 491.056294][T21640] Buffer I/O error on dev loop7, logical block 260, lost async page write [ 491.064853][T21640] Buffer I/O error on dev loop7, logical block 261, lost async page write [ 491.073394][T21640] Buffer I/O error on dev loop7, logical block 262, lost async page write [ 491.086634][T21640] I/O error, dev loop7, sector 3056 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 491.099943][T21640] I/O error, dev loop7, sector 4080 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 491.113107][T21640] I/O error, dev loop7, sector 5104 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 491.135797][T21640] I/O error, dev loop7, sector 6128 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 491.155296][T21640] I/O error, dev loop7, sector 7152 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 491.170706][T21640] I/O error, dev loop7, sector 8176 op 0x1:(WRITE) flags 0x800 phys_seg 34 prio class 0 [ 491.192258][T21657] SELinux: policydb version 337767811 does not match my version range 15-34 [ 491.202110][T21657] SELinux: failed to load policy [ 491.298756][T21669] lo speed is unknown, defaulting to 1000 [ 491.365132][T21674] loop5: detected capacity change from 0 to 2048 [ 491.408109][T21674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.430198][ T30] kauditd_printk_skb: 400 callbacks suppressed [ 491.430215][ T30] audit: type=1400 audit(1747898812.382:26370): avc: denied { create } for pid=21673 comm="syz.5.6360" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 491.460607][T21683] FAULT_INJECTION: forcing a failure. [ 491.460607][T21683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.473930][T21683] CPU: 0 UID: 0 PID: 21683 Comm: syz.9.6362 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 491.473981][T21683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 491.473999][T21683] Call Trace: [ 491.474009][T21683] [ 491.474017][T21683] __dump_stack+0x1d/0x30 [ 491.474099][T21683] dump_stack_lvl+0xe8/0x140 [ 491.474127][T21683] dump_stack+0x15/0x1b [ 491.474149][T21683] should_fail_ex+0x265/0x280 [ 491.474222][T21683] should_fail+0xb/0x20 [ 491.474268][T21683] should_fail_usercopy+0x1a/0x20 [ 491.474295][T21683] _copy_from_user+0x1c/0xb0 [ 491.474335][T21683] ___sys_sendmsg+0xc1/0x1d0 [ 491.474432][T21683] __x64_sys_sendmsg+0xd4/0x160 [ 491.474470][T21683] x64_sys_call+0x2999/0x2fb0 [ 491.474494][T21683] do_syscall_64+0xd0/0x1a0 [ 491.474522][T21683] ? clear_bhb_loop+0x40/0x90 [ 491.474550][T21683] ? clear_bhb_loop+0x40/0x90 [ 491.474628][T21683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.474737][T21683] RIP: 0033:0x7f11e0a1e969 [ 491.474754][T21683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.474778][T21683] RSP: 002b:00007f11df087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.474803][T21683] RAX: ffffffffffffffda RBX: 00007f11e0c45fa0 RCX: 00007f11e0a1e969 [ 491.474824][T21683] RDX: 0000000004000080 RSI: 0000200000000180 RDI: 0000000000000003 [ 491.474883][T21683] RBP: 00007f11df087090 R08: 0000000000000000 R09: 0000000000000000 [ 491.474901][T21683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.474914][T21683] R13: 0000000000000000 R14: 00007f11e0c45fa0 R15: 00007ffff35c45e8 [ 491.474939][T21683] [ 491.668890][T21688] loop7: detected capacity change from 0 to 512 [ 491.683754][ T30] audit: type=1400 audit(1747898812.602:26371): avc: denied { read write open } for pid=21673 comm="syz.5.6360" path="/420/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 491.708193][ T30] audit: type=1326 audit(1747898812.612:26372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21689 comm="syz.9.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0a1e969 code=0x7ffc0000 [ 491.731857][ T30] audit: type=1326 audit(1747898812.612:26373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21689 comm="syz.9.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0a1e969 code=0x7ffc0000 [ 491.755674][ T30] audit: type=1326 audit(1747898812.612:26374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21689 comm="syz.9.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f11e0a1e969 code=0x7ffc0000 [ 491.779315][ T30] audit: type=1326 audit(1747898812.612:26375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21689 comm="syz.9.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0a1e969 code=0x7ffc0000 [ 491.779936][T21688] EXT4-fs (loop7): orphan cleanup on readonly fs [ 491.803160][ T30] audit: type=1326 audit(1747898812.612:26376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21689 comm="syz.9.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f11e0a1e969 code=0x7ffc0000 [ 491.833201][ T30] audit: type=1326 audit(1747898812.612:26377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21689 comm="syz.9.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e0a1e969 code=0x7ffc0000 [ 491.835007][T21688] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6364: bg 0: block 248: padding at end of block bitmap is not set [ 491.875443][T15222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.883671][T21688] Quota error (device loop7): write_blk: dquota write failed [ 491.892075][T21688] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 491.902124][T21688] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.6364: Failed to acquire dquot type 1 [ 491.914315][T21688] EXT4-fs (loop7): 1 truncate cleaned up [ 491.921369][T15222] ================================================================== [ 491.922791][T21688] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 491.929478][T15222] BUG: KCSAN: data-race in avc_policy_seqno / avc_ss_reset [ 491.929526][T15222] [ 491.929534][T15222] write to 0xffffffff88e76c48 of 4 bytes by task 21698 on cpu 1: [ 491.929556][T15222] avc_ss_reset+0x20c/0x240 [ 491.929593][T15222] security_set_bools+0x301/0x340 [ 491.956799][T21693] SELinux: policydb version 337767811 does not match my version range 15-34 [ 491.959212][T15222] sel_commit_bools_write+0x1ea/0x270 [ 491.959245][T15222] vfs_writev+0x3eb/0x870 [ 491.959266][T15222] do_writev+0xe7/0x210 [ 491.959287][T15222] __x64_sys_writev+0x45/0x50 [ 491.966195][T21693] SELinux: failed to load policy [ 491.968792][T15222] x64_sys_call+0x2006/0x2fb0 [ 492.005810][T15222] do_syscall_64+0xd0/0x1a0 [ 492.010339][T15222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.016245][T15222] [ 492.018589][T15222] read to 0xffffffff88e76c48 of 4 bytes by task 15222 on cpu 0: [ 492.026226][T15222] avc_policy_seqno+0x15/0x30 [ 492.030924][T15222] selinux_file_open+0x140/0x370 [ 492.035883][T15222] security_file_open+0x36/0x70 [ 492.040755][T15222] do_dentry_open+0x204/0xa20 [ 492.045529][T15222] vfs_open+0x37/0x1e0 [ 492.049610][T15222] path_openat+0x1c5e/0x2170 [ 492.054212][T15222] do_filp_open+0x109/0x230 [ 492.058725][T15222] do_sys_openat2+0xa6/0x110 [ 492.063342][T15222] __x64_sys_openat+0xf2/0x120 [ 492.068119][T15222] x64_sys_call+0x1af/0x2fb0 [ 492.072724][T15222] do_syscall_64+0xd0/0x1a0 [ 492.077248][T15222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.083225][T15222] [ 492.085559][T15222] value changed: 0x000000c1 -> 0x000000c2 [ 492.091286][T15222] [ 492.093633][T15222] Reported by Kernel Concurrency Sanitizer on: [ 492.099804][T15222] CPU: 0 UID: 0 PID: 15222 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 492.112497][T15222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 492.122569][T15222] ================================================================== [ 492.147614][T21700] bridge0: entered promiscuous mode [ 492.153609][T21700] macvlan2: entered promiscuous mode [ 492.160839][T21688] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 492.161516][T21700] bridge0: port 3(macvlan2) entered blocking state [ 492.176837][T21700] bridge0: port 3(macvlan2) entered disabled state [ 492.183737][T21688] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 492.192757][T21700] macvlan2: entered allmulticast mode [ 492.198204][T21700] bridge0: entered allmulticast mode [ 492.215205][T21700] macvlan2: left allmulticast mode [ 492.220443][T21700] bridge0: left allmulticast mode [ 492.226270][T21700] bridge0: left promiscuous mode [ 492.226694][T18995] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.291110][T21702] loop5: detected capacity change from 0 to 512 [ 492.340564][T21702] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.354521][T21702] ext4 filesystem being mounted at /421/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 492.494399][T15222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.