last executing test programs: 2m18.468877897s ago: executing program 32 (id=55): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000000)=0x6e) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x200000000200}, 0x18) write$selinux_access(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) bind$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r6 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='cpu<0+||!') r8 = dup(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r8}}) 2m3.561207053s ago: executing program 33 (id=336): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @remote}}, 0x0, 0x0, 0xb, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) r0 = syz_io_uring_setup(0x26c0, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xd7e5}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$UHID_CREATE2(r3, &(0x7f0000000200)=ANY=[@ANYBLOB=','], 0x118) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r5}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m30.304602785s ago: executing program 34 (id=640): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0x10fffff, 0xffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) finit_module(0xffffffffffffffff, 0x0, 0x200000000000000) 24.926728413s ago: executing program 5 (id=2412): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x8c00) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000003c0)=0x1) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=""/85, 0x5b, 0x55, 0x0, 0x9, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x3, 0x5, 0x1, 0x2400, r3, 0xd40, '\x00', r5, 0xffffffffffffffff, 0x5, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) 24.814225049s ago: executing program 5 (id=2415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) 24.762006572s ago: executing program 5 (id=2417): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x4400, 0xffffffff, 0x7, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0xe, 0x4, 0x0, 0x0, 0x48, 0x0, 0xe000, 0x0, 0x11, 0x0, @local, @empty, {[@lsrr={0x83, 0x1f, 0xb6, [@empty, @multicast2, @private=0xa010101, @rand_addr=0x64010100, @empty, @empty, @empty]}, @ra={0x94, 0x4}, @end]}}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = semget$private(0x0, 0x1, 0x4f0) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000d00)={{0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x45, 0x2}, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000100000000000100cf3f0bd71e0000000014", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) r8 = accept$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @dev}, &(0x7f00000003c0)=0x10) getsockopt$inet_int(r8, 0x0, 0xd, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioctl$FIBMAP(r7, 0x1, &(0x7f00000000c0)=0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xff600000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x23000000}, 0x50) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socket$nl_sock_diag(0x10, 0x3, 0x4) keyctl$setperm(0x5, r9, 0x1100100) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) syz_emit_ethernet(0x43, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000002bbbbbbbbbbbb08004500003500000002001190780000000000000000000000070021907804000000ab0e0000030000000000001ae19b0900b081039b17"], 0x0) 24.504034887s ago: executing program 5 (id=2425): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 24.45888524s ago: executing program 5 (id=2428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 24.051036463s ago: executing program 5 (id=2432): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3ff}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x108}}}, &(0x7f0000000240)='GPL\x00', 0xd67a, 0xb3, &(0x7f0000000340)=""/179, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x6, 0xe88, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[r2], &(0x7f0000000440)=[{0x3, 0x3, 0x7, 0xd}], 0x10, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'macvlan1\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) write$binfmt_aout(r1, &(0x7f0000001640)=ANY=[], 0x5ea) 24.029758175s ago: executing program 35 (id=2432): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3ff}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x108}}}, &(0x7f0000000240)='GPL\x00', 0xd67a, 0xb3, &(0x7f0000000340)=""/179, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x6, 0xe88, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[r2], &(0x7f0000000440)=[{0x3, 0x3, 0x7, 0xd}], 0x10, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'macvlan1\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) write$binfmt_aout(r1, &(0x7f0000001640)=ANY=[], 0x5ea) 20.49835033s ago: executing program 1 (id=2508): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x800000000000, 0x800800000003}, 0x1100, 0x5dd8, 0x1, 0x5, 0x0, 0x7, 0xff7b, 0x0, 0x0, 0x0, 0x80000000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (fail_nth: 1) 20.206056207s ago: executing program 1 (id=2510): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x4216, &(0x7f0000000000)=ANY=[], 0x2, 0x337, &(0x7f0000000140)="$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") (async) r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f00000007c0)={[{@nombcache}, {@barrier_val={'barrier', 0x3d, 0x3fe}}, {@stripe={'stripe', 0x3d, 0x1}}, {@discard}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@delalloc}, {@barrier_val={'barrier', 0x3d, 0x7}}]}, 0xd, 0x5f8, &(0x7f0000001200)="$eJzs3c9rHGUfAPDvbH40afq+ScvL+771YBdEWpAmTdpKEQ/tVUqoP/DixdiktXbbhiaiqUJTqBdBvIgInjxYwT9Ci732pCB48OJJCkWlR8GV2Z1Js9nd/Ngm2dj5fGCbmeeZmeeZbr55Zp59ntkACquc/lOK2B8Rs0nEcLK4lNcbWWa5vt2DP94/m76SqFZf/i2JJEvLt0+yn0PZzgMR8f13SezraS53buHaxalKZeZqtj42f2l2bG7h2uELl6bOz5yfuTzx7MSJ48eOnxg/0tF5XW+RdvrmW+8Mfzj52pef/5mMf/XzZBIn44Vsw+XnERE/ljoqtVE5yrX/k6Q5a+jEJhx/J+jJfk+Wv8VJbxcrxIbk719fRPwvhqMnHr55w/HBi12tHLClqklEFSioRPxDQeXXAfm9/Yr74NiM+2BgZ7p/qt4B0Bz/vfW+wRio9Q3sfpDE8m6dJCI665lrtCci7t6ZvHnuzuTNaO6HA7bQ4o2I+H+r+E9q8T8SAzFSi/9SQ/yn1wVnsp9p+ksdlr+yq7g5/o92eGRgLfX4H1g1/qNN/L++LP7f6LD88sPFNwcb4n+w01MCAAAAAACAwrp9qj49rfnzv9LS+J9oMf5nKCJObkL55RXrzZ//l+5tQjFAC/dPRTzfJv6z0b8jPdnSv2rjAfqScxcqM0ci4t8RcSj6dqXr46uUcfijfZ+1yytn4//yV1r+3WwsYFaPe727GveZnpqfetTzBiLu34h4ouX432Sp/U9atP/p34PZdZax7+lbZ9rlrR3/wFapfhFxsGX7//CpFcnqz+cYq10PjOVXBc2efO/jb9qV32n8e8QEPLq0/d+9evyPJMuf1zO38TKOLvRW2+V1ev3fn7xSe+RMf5b27tT8/NXxiP7kdE+a2pA+sfE6w+Moj4c8XtL4P/TU6v1/ra7/ByNiccWxk98b5xTn/vvX0C/t6uP6H7onjf/pDbX/G1+YuDXybbvy19f+H6u19YeyFP1/UPdpHqb9jenNUbgU0A1Z211fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgclCJiTySl0aXlUml0NGIoIv4Tu0uVK3Pzz5y78vbl6TSv9v3/pfybfofr60n+/f8jy9YnVqwfjYi9EfFJz2BtffTslcp0t08eAAAAAAAAAAAAAAAAAAAAdoihNvP/U7/2dLt2wJbr7XYFgK5pEf8/dKMewPbT/kNxiX8oLvEPxSX+objEPxSX+IfiEv9QXOIfAAAAAAAeK3sP3P4piYjF5wZrr1R/ltfX1ZoBW63U7QoAXeMRP1Bchv5AcbnHB5I18gfa7rTWnquZPfsIOwMAAAAAAAAAAABA4Rzcb/4/FJX5/1Bc5v9DceXz/w90uR7A9nOPD8QaM/lbzv9fcy8AAAAAAAAAAAAAYDPNLVy7OFWpzFzdzIVdsc6Nv96K0jtdeHVnVGM7F6rV6vX0t2Cn1OcfvpAPhd/m0ntjfRvnc/3Wd+Tu/U0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa/R0AAP//IMQjuA==") iopl(0x3) (async) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_getoverrun(r1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) (async, rerun: 32) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) (rerun: 32) fallocate(r0, 0x0, 0x0, 0x1000f4) (async) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r4, 0x1a, &(0x7f0000001d00)=[&(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x0, 0xf00, r3, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r3}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff}]) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async, rerun: 64) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904008100000000030000000000000800040006020000", 0x24) (async, rerun: 64) r6 = openat$cgroup_ro(r3, &(0x7f0000000700)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = dup(r7) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup3(r9, r8, 0x80000) (async) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x24008915) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_io_uring_setup(0x52dc, &(0x7f0000000480)={0x0, 0x3926, 0x400, 0x1, 0x1d3}, &(0x7f00000000c0), &(0x7f0000000500)) (async) ioctl$TCSETS2(r10, 0x402c542b, &(0x7f00000007c0)={0xfffffffb, 0x80000001, 0x1000, 0x6, 0xcb, "56cea3ad396b9ff300", 0x401, 0x2}) (async) ioctl$FS_IOC_SETFSLABEL(r10, 0x41009432, &(0x7f0000000600)="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") (async) fallocate(r6, 0xd, 0x0, 0x20000) 20.088833463s ago: executing program 1 (id=2511): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRES8], 0xfe, 0x68f, &(0x7f0000000c00)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 20.000961829s ago: executing program 1 (id=2512): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 19.903156604s ago: executing program 1 (id=2515): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0xff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast, 0x10001}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0x0, [@remote, @empty, @empty, @multicast1, @remote, @dev, @loopback, @rand_addr]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0, 0x0, 0x20000000000000}, 0x18) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, 0x0, 0x0) 19.573456513s ago: executing program 0 (id=2518): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x2) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x8}]}) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x8}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0xfff) syz_emit_ethernet(0xa2, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x94, 0x65, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x2, 0x0, @remote, {0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x13}, {[@lsrr={0x83, 0x1b, 0x5b, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x25}, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x22, 0x3, 0x1, [{@remote, 0x8}, {@loopback, 0x2c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400}]}, @ra={0x94, 0x4}, @generic={0x0, 0xa, "83dc61b1ce570743"}, @cipso={0x86, 0x1c, 0x0, [{0x0, 0xc, "82ee46f3c317e9defd56"}, {0x0, 0xa, "5056f7e467350191"}]}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0xa2, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x94, 0x65, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x2, 0x0, @remote, {0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x13}, {[@lsrr={0x83, 0x1b, 0x5b, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x25}, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x22, 0x3, 0x1, [{@remote, 0x8}, {@loopback, 0x2c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400}]}, @ra={0x94, 0x4}, @generic={0x0, 0xa, "83dc61b1ce570743"}, @cipso={0x86, 0x1c, 0x0, [{0x0, 0xc, "82ee46f3c317e9defd56"}, {0x0, 0xa, "5056f7e467350191"}]}]}}}}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='syscall\x00') read$eventfd(r2, &(0x7f00000006c0), 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$cgroup_pid(r3, &(0x7f00000031c0), 0x12) (async) write$cgroup_pid(r3, &(0x7f00000031c0), 0x12) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x31380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108006, 0x0, 0x0, 0x6, 0x40, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) (async) syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r7) sendmmsg$unix(r6, &(0x7f0000000240)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x12, 0x0}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) (async) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffc, 0x0, 0x10000000, 0x1000000}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6b}]}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x70}}, 0x0) 19.442124751s ago: executing program 0 (id=2519): symlink(&(0x7f0000000780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000003000000df7f000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073019800000000009500008000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000f1ff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8, 0x2c, 0xd27, 0x70bd24, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {}, {0xfff1, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xbc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_SEL={0x94, 0x5, {0x9, 0xf, 0x8, 0x16, 0x0, 0x4, 0x9, 0x6, [{0x0, 0x80000001, 0xff, 0x6}, {0x9, 0x8, 0x389, 0x8}, {0x2, 0x0, 0x101, 0x1}, {0x5, 0x2, 0x9, 0x5}, {0x7fffffff, 0x10000, 0x7, 0x1}, {0x4, 0xd, 0x9, 0xfffffff7}, {0x730, 0xb13, 0x7, 0xd3}, {0x6, 0x4bd25261, 0x0, 0x4}]}}, @TCA_U32_LINK={0x8, 0x3, 0x2}, @TCA_U32_INDEV={0x14, 0x8, 'bond_slave_1\x00'}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r8, &(0x7f0000002140)=""/245, 0xf5) 19.441965241s ago: executing program 1 (id=2520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x182ecbac137d7a0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x8000000000000001}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x4010) (fail_nth: 11) 19.441874091s ago: executing program 36 (id=2520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x182ecbac137d7a0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x8000000000000001}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x4010) (fail_nth: 11) 19.422093122s ago: executing program 0 (id=2522): io_uring_setup(0x2e34, &(0x7f0000000680)={0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x806, &(0x7f00000002c0)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c73686f53746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d302c6e6f6e756d7461696c3d302c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c6e6e6f6e756d7461696c3d312c73686f72741a3c91fc8d6a6e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00"], 0xfe, 0x2aa, &(0x7f0000000a40)="$eJzs3c9qY1UYAPDvpkka7SJZuBLBu5iFG8tkti7MIBXErpQs/AM6ODMwNGGggcCoGGflE7hw4Xu4cy+48Q0EH8Cdgwwcubm3SWzTtGlNK53fb9PDOd93z3dyTtvVPfn8teHB/cejh0+//j1arSxqvejFsyw6UYsj3wYAcJM8Syn+TKX1Muu1TdUEAGzWwv//xikh2ye73t50WQDABn340cfv393f3/sgz1sRw+/G/SzKn+X43YfxKAbxIG5HO55HpJmy/e57+3tRzwuduDWcjPtF5vCzX+ehMc3vRjs6y/O7eWkhfzLuN+LliCyLeNQrCrkT7XjlRH4xvndnSX70m/FGq1pkMf9utOO3L+JxDOJ+FLnz+b/p5vk76fu/vvqkCC7ys8m4vz2Nm0tbV703AAAAAAAAAAAAAAAAAAAAAADcXLv5TCduDYuu6v6drefT8d1/jU/v16lNx8v8LKI5bRy7H2iS4sej+3Vu53mesjJ+fr9PPV6tR/3aFg4AAAAAAAAAAAAAAAAAAAD/I6MnXx7cGwweHP4njeol/9lr/Rd9Tm+h5/VYHby91lyxVYUXtR6P6f7y6XDWUyziIsWPG3nEqpobJ3peKuo5+8l/p5RSlkVcbpsa55nrjMbO6pjiA/75h503D+5lZ32GraON+2lxqBmHoyfH9jSydSpMax2/5oqYZnVizvWcnUv+Er31RzlZ1ZOtsYpG1YjTjl9rrfN8dX+DAAAAAAAAAAAAAAAAAACA0vyl3yWDT1em1jZWFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcsfn3/6/RmFTJy2NSSpNZTzMOR9e8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF4A/wQAAP//+YxnlA==") socket$nl_generic(0x10, 0x3, 0x10) syz_create_resource$binfmt(0x0) close(0xffffffffffffffff) mprotect(&(0x7f0000926000/0x1000)=nil, 0x1000, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) sendmsg$inet(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa}, 0x20) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) utimensat(r0, &(0x7f00000000c0)='./file3\x00', &(0x7f0000000180)={{}, {0x77359400}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000280)={0x0, 0x1, 0x9, 0x2000003}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="080000008f9b3a3d94234f661f9830bc5ee26a4fa575235a9f7b0000062577d797f3e153c893dda8e554c610a0e4db5750f0ad64cb2c09b3989abec16d04c2845f21d1f4c3fa4e20300e02a5a4bbd99ba095c7d173a6396bd911ed3054e9b3c0e3f5627ce22c99838db459c537347c8642d1ca3d7a4049dc0861ef4313360d3c8f75d45c91f1076ed73204b81080d05debd2965aa307439450f5553bfd76863597080fb6f27637860bfd6fd34196a204e927d36bcdf95129262a9d48751625"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x10}, {0x18, 0x110, 0xc, "f8"}], 0x28}, 0x0) setns(r6, 0x24020000) 19.001099507s ago: executing program 0 (id=2525): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 18.916450342s ago: executing program 0 (id=2527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 18.202260733s ago: executing program 0 (id=2530): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) 18.197784374s ago: executing program 37 (id=2530): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) 18.166175596s ago: executing program 8 (id=2533): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) 18.07685474s ago: executing program 8 (id=2534): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gretap0\x00', 0x0}) (async) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) getsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f00000002c0)=""/28, &(0x7f0000000500)=0x1c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', r2, 0x4, 0x4, 0x40, 0x1, 0xb, @dev={0xfe, 0x80, '\x00', 0x33}, @remote, 0x700, 0x80, 0x7, 0xb}}) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES16, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$RNDADDENTROPY(r6, 0x40045201, &(0x7f0000000580)=ANY=[]) r7 = socket$rds(0x15, 0x5, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0b00000007000000080000000900000805000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000556b71dd2be23d00000000000000000000000000007ca824982c6d8f24a6675c7e08015f3edd315e1b1fca7981395e06630aecd98627f84b34d15587cd681cda4709f4a2dbb299d655525fc45ee4d44f3ae611634c8d"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000090001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) (async) r10 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$selinux_access(r10, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) (async) r11 = syz_io_uring_setup(0x24a9, &(0x7f0000000300)={0x0, 0x40001000, 0x10100, 0x3, 0x5c}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r11, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r14}, 0x10) unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') (async) r15 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x10090, 0x1, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x834}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r15, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r4, @ANYBLOB="000328bd7000fbdbdf250d0000000c000180040003000200000084000180140002006c6f000000000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="1400020076657468305f746f5f62726964676500080003000100000008000100", @ANYRES32=r2, @ANYBLOB="08000300030000001400020077673000000000000000000000000000140002007663616e300000000000000000000000080003000200000008000300010000004000018008000300020000001400020070696d3672656700000000000000000008000100", @ANYRES32=r2, @ANYBLOB="080003000000000008000300020000000800030002000000400001801400020076657468305f746f5f627269646765001400020077673100000000000000000000000000140002007665746831000000000000000000000048000180080003000100000008000100", @ANYRES32=r5, @ANYBLOB="220010000000000000000000000000000000000000000180", @ANYRES32=r2, @ANYBLOB="0800030003000000080003000200000008000100", @ANYRES32=r2, @ANYBLOB="4000018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="1400020076657468315f6d61637674617000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0800030001000000"], 0x1ac}, 0x1, 0x0, 0x0, 0x4040}, 0x48010) r16 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r7, &(0x7f0000000900)=[{{&(0x7f0000000780)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000002000)=""/4096, 0x1000}], 0x2, &(0x7f0000000640)=""/59, 0x3b}, 0x5}], 0x1, 0x2001, 0x0) (async) sendmsg$nl_route(r16, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB], 0x44}}, 0x0) 17.794120577s ago: executing program 8 (id=2535): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000002"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x2, 0x7, 0x3, 0x0, 0x1, 0x2, 0xffffffffffffffff}, @exit, @jmp={0x5, 0x1, 0xd, 0x2, 0x4, 0x18, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, &(0x7f0000000080), 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x4, 0x1, 0x1ff, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000200)=[r0, r0, r0], &(0x7f0000000240)=[{0x0, 0x4, 0x10, 0x9}, {0x4, 0x3, 0xb, 0x8}, {0x1, 0x4, 0xd, 0x1}, {0x3, 0x2, 0x4, 0xb}, {0x2, 0x1, 0x0, 0x4}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='pwc_handler_exit\x00', r1, 0x0, 0x6}, 0x18) 17.774221938s ago: executing program 8 (id=2536): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 17.730829911s ago: executing program 8 (id=2537): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000000)=0x6e) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x200000000200}, 0x18) write$selinux_access(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) bind$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x24, 0x5, [@union={0x9, 0x2, 0x0, 0x5, 0x1, 0xffffffc0, [{0x9, 0x0, 0x3}, {0x2, 0x0, 0x1}]}]}, {0x0, [0x2e, 0x30, 0x5f]}}, 0x0, 0x3b, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ff"], 0x15) r6 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='cpu<0+||!') fcntl$setpipe(r5, 0x407, 0x1) r8 = dup(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r8}}) 15.802841763s ago: executing program 9 (id=2521): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@loopback, 0x0}, &(0x7f00000000c0)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000100)=r2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x581, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 15.642236991s ago: executing program 9 (id=2545): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 15.591132635s ago: executing program 9 (id=2547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRES8], 0xfe, 0x68f, &(0x7f0000000c00)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 13.642316938s ago: executing program 9 (id=2562): r0 = gettid() r1 = getpgrp(0x0) rt_tgsigqueueinfo(r1, r0, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x6}) 13.642144458s ago: executing program 38 (id=2562): r0 = gettid() r1 = getpgrp(0x0) rt_tgsigqueueinfo(r1, r0, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x6}) 13.164386966s ago: executing program 8 (id=2573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0xad5, &(0x7f0000000100)) close(r1) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000004) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 13.135553657s ago: executing program 39 (id=2573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0xad5, &(0x7f0000000100)) close(r1) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000004) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 2.954124209s ago: executing program 2 (id=2694): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000940)=""/124, 0x7c}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x16, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) 2.950814479s ago: executing program 2 (id=2695): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffff1c00000280c20000030800450000200000000000"], 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.721147603s ago: executing program 2 (id=2697): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5425, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a385000000700000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @empty, @local, @broadcast}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) (fail_nth: 2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 2.58609427s ago: executing program 6 (id=2700): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = getpid() set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) (async) setns(r3, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x15140100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r2], 0x1}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 2.438235729s ago: executing program 6 (id=2701): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa33"], 0x0) 2.41353783s ago: executing program 6 (id=2702): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) rename(&(0x7f0000000240)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f00000000c0)='mm_page_alloc\x00', r3, 0x0, 0x4}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x0, 0x9c}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x8001}, {}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x7}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xd5}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x800, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x5, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x5}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {0x4}, {}, {0xa7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, {0x0, 0x0, 0x1000}, {}, {0xd2, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x4, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1000000}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {0x523e}, {}, {0x4, 0x0, 0x0, 0x10}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x1, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001"], 0x24}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x202000, 0x0) 2.126710427s ago: executing program 6 (id=2704): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100), 0x8, 0x5fb, &(0x7f00000004c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x10000000, 0x0, 0x0}, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYRESHEX], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x22, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getitimer(0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c30000009505a28cd225c9ec5024f454d9ee354c242f6629a20bea15920280f87ea12ee9ad0349c412473d0a40b77bb5787478bff887bae5f7a67312d5e1f00fce2e52bc1f20d2"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) eventfd2(0x0, 0x80001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mincore(&(0x7f0000869000/0x3000)=nil, 0x3000, &(0x7f0000000500)=""/62) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r6, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) 1.232493449s ago: executing program 2 (id=2707): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffff1c00000280c20000030800450000200000000000"], 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 977.184714ms ago: executing program 2 (id=2710): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = epoll_create1(0x80000) epoll_pwait2(r1, &(0x7f0000000180)=[{}], 0x1, &(0x7f00000001c0), &(0x7f0000000200)={[0x4]}, 0x8) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x220000, 0xa) execveat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)={[&(0x7f0000000140)='raw\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='system_u:object_r:usb_device_t:s0\x00', &(0x7f0000000300)='\x00']}, &(0x7f0000000440)={[&(0x7f0000000380)='GPL\x00', &(0x7f00000003c0)='*\xb9G::**\x00', &(0x7f0000000400)='}{\x00']}, 0x1000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 871.27236ms ago: executing program 6 (id=2714): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000600)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000640)={[{@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@noinit_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@dax_never}, {@nogrpid}, {@delalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodioread_nolock}]}, 0x1, 0x439, &(0x7f0000000100)="$eJzs28tvG8UfAPDvrp3219cvpiqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCgJC5YgqcUcckfgLOMEFASckrnBHlSqUSwsno7V3G8exncY4ccGfj7TtzO5EM1/PTjyzkw1gaI1l/yQRuyPi14gYbWRXFxhr/Hdr+crMn8tXZpKo1d74I6mXu7l8ZaYoWvzcriJTjkg/SeJgm3oXLl0+N12tzl3M8xOL59+dWLh0+Zmz56fPzJ2ZuzB18uTxY5PPnZh6ti9xZnHdPPDB/KH9r7x17bWZU9fe/vHrpIi/JY4+Get28fFarc/VDdaepnRSHmBD2JBSY5jGSH38j0YpVjpvNF7+eKCNAzZVrVar3df58lIN+A9LYtAtAAaj+KLP1r/FsUVTj7vCjRcaC6As7lv50bhSjjQvM9Kyvu2nsYg4tfTXF9kRm/McAgBglW+z+c/T7eZ/aTQ/F/p/vodSiYh7ImJvRJyIiH0RcW9Evez9EfHAButv3SRZO/9Jr/cU2B3K5n/P53tbq+d/xewvKqU8t6ce/0hy+mx17mj+mRyJke1ZfrJLHd+99Mtnna41z/+yI6u/mAvm7bhe3t6nYNu48VHEgXK7+JPbOwFJROyPiAM91nH2ya8Odbq2fvxd9GGfqfZlxBON/l+KlvgLSff9yYn/RXXu6ERxV6z1089XX+9U/z+Kvw+y/t/Z9v4v4t9TSZr3axc2XsfV3z7tuKbp5f6fnV6c3pa8uerc+9OLixcnI7Ylr9bzlebzUy3lplbKZ/EfOdx+/O+NlU/iYERkN/GDEfFQRDyct/2RiHg0Ig53if+HFx97p/f4N1cW/2zX/o+W/l9JbIvWM+0TpXPff7Oq0spG4s/6/3g9dSQ/k/X/enHdSbt6u5sBAADg3yeNiN2RpOO302k6Pt74G/59sTOtzi8sPnV6/r0Ls413BCoxkhZPukabnodO5sv6Ij/Vkj+WPzf+vLSjnh+fma/ODjp4GHK7Ooz/zO+lQbcO2HTe14LhZfzD8DL+YXgZ/zC82oz/HYNoB7D12n3/fziAdgBbr2X82/aDIWL9D8OrbL0PQ8v3PwylhR2x/kvyEhJrEpHeFc2Q6DGRRkS3MoP+zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAffwcAAP//KvHjlA==") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000a40), 0x4) fdatasync(r3) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x15, 0x3, 0x2, 0x2, 0x10200, r1, 0x9, '\x00', 0x0, r3, 0x3, 0x4, 0x0, 0x0, @void, @value, @value=r4}, 0x50) 797.308884ms ago: executing program 4 (id=2715): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup3(r2, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000ddffff9400000000000000000061b76f1febd300120f"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3, 0x0, 0xbed}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0028da", @ANYRES16=r5, @ANYBLOB="010b03100000000000000f000000180001801400020073797a5f74756e000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0100001a00010000000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000000000000000330000002001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000300000000000000004c001400636d61632861657329"], 0x13c}}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socket(0x10, 0x803, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r9, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) unshare(0x2040600) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pselect6(0x40, &(0x7f0000000380)={0x3, 0x6, 0x848, 0x55b, 0x0, 0x9, 0x401, 0xa}, 0x0, 0x0, &(0x7f0000000500), 0x0) 783.457235ms ago: executing program 3 (id=2716): r0 = fsopen(&(0x7f0000000000)='zonefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x2002, 0x0, 0x9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0x7c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) dup2(r5, r6) 767.947046ms ago: executing program 6 (id=2717): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/263, 0xf000, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 670.212662ms ago: executing program 2 (id=2718): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 593.580606ms ago: executing program 4 (id=2719): r0 = socket$pptp(0x18, 0x1, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x4, &(0x7f0000000280)=[{0x2, 0x8, 0x0, 0x9}, {0x1, 0x7, 0x9, 0x1000}, {0xe, 0x1, 0x2f, 0x8}, {0x3ff, 0x4, 0x7, 0x9}]}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x8, 0x301000) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', r3, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) open(0x0, 0x400141042, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e0500001e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba0", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") chdir(&(0x7f0000000000)='./file0\x00') truncate(&(0x7f0000000000)='./file0\x00', 0x40200) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000005c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0xa5, &(0x7f0000000280), 0x0, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) 533.881809ms ago: executing program 3 (id=2720): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffff1c00000280c20000030800450000200000000000"], 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 366.523529ms ago: executing program 3 (id=2721): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x4080, 0xffffffff, 0x3, 0x5, 0x2, 0x1088f109, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000) 308.256682ms ago: executing program 3 (id=2722): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000d4cd336500000000000000"], 0x50) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000002c0)={@multicast2, @remote, 0x0}, &(0x7f00000004c0)=0xc) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getownex(r4, 0x10, &(0x7f0000000340)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r8}, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x4) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x15c) fcntl$notify(r10, 0x402, 0x8000003d) r11 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r11, 0x402, 0x8000003d) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000740)={0x0, 0x22, "3cfaddca2b9cb7747ee6d8b3e752292b961a936b853e045b11631a4d6128dd753cdb"}, &(0x7f0000000780)=0x2a) close_range(r10, r11, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x9, 0x6}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000340)={r12, 0x2, 0xce, "1e322385af83de6b16e5f38eb4a24fb49613d0d7b98dbd197503329bb7e6c9e9d790875426ce2cec5a0fd0f0b3800524ae35890dd918e5ee140f6afbed97728fc3ff33b303bb7e08dfb7189cd662763b47e8c515210737057df225a2a824e8425bd1a806a5e55682a253d3abb703942e832ebf861f0b77150a89b793fbf376832f6bdd9abd54742dc6d7175bd48ac062104a1a012b41c9edbd1ad4fd190e831cf7527d0c6a4b30009cc34e97fa8ea30898bd5768c6c5c4f361b894ce91b23dc7068770c92e8bc4aca5164363e1e4"}, 0xd6) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 308.015123ms ago: executing program 4 (id=2723): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa33"], 0x0) 307.427592ms ago: executing program 3 (id=2724): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0xfffffffd, 0x1880, 0x8000002}) (async) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) syz_emit_ethernet(0x36, &(0x7f0000001b00)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd69394a09000032010000000000000000000000ff64010102ff020000000000000000000000000001"], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000002c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@user_xattr}, {@max_batch_time={'max_batch_time', 0x3d, 0x8cc}}, {@block_validity}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") (async) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r7) 281.346984ms ago: executing program 3 (id=2725): socket$packet(0x11, 0x2, 0x300) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r1 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0}) io_uring_enter(r1, 0x44fd, 0x3, 0x1, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000080)={0x1, 0x9}, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x3f000000, 0xffffffff, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x26}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010101}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}, 0x1, 0xd}, 0x0) accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) read(r8, &(0x7f0000000200)=""/4090, 0xffa) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r9}, 0x18) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r11, &(0x7f0000000000)={0x27}, 0x74) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x24, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0xfe, 0xe, "7701d734ec220a0000000000"}]}}}}}}}}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) syz_emit_ethernet(0x17b, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60000000ff000000000005000000000000000000000000bbff02000000000000000100004e227d3e0f150721"], 0x0) pread64(r7, &(0x7f00000003c0)=""/179, 0xb3, 0x40) 276.752395ms ago: executing program 4 (id=2726): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 250.031466ms ago: executing program 4 (id=2727): mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 249.414746ms ago: executing program 4 (id=2728): socket$packet(0x11, 0x2, 0x300) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r1 = syz_io_uring_setup(0x38a9, &(0x7f0000001200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0}) io_uring_enter(r1, 0x44fd, 0x3, 0x1, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000080)={0x1, 0x9}, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="50000000100001040000003fffffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100736974001c00028006000800260000000500090029000000080002000a010101080003002f3285c5f5700f39648abcd6f21aa1699a1b8c133ca8c6e1d69df66f5ba3131a397a052c8ef86e3dd7b832f14ed257388f4b094a60f47b9d1cf731f2d1703df663e129de903374b2a16685347f0d8a146c9a", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0xd}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x58c, &(0x7f00000005c0)="$eJzs3T1sG2UfAPD/neO3X3mbvtL7Si+oQwVIRarqJP2AwtSuiEqVOiCxlMhxoyhOHMUONFGGdK8QHRCgLmWDgRHEwIBYkFhYWUDMSBWNQGo6gJG/0jaxg1OaOI1/P+nse+45+/88d/4/9p3u5AD61rHaQxrxTERcSiKGHqobiGblscZ6qytL+fsrS/kkqtXLvyaRRMS9laV8a/2k+XwoIpYj4v8R8U024kS6MW55YXFqrFgszDXLw5Xp2eHywuLJyemxicJEYeb0y6+cPXfm7Oip0c6Nz26trzd+uvnuje9fu33z08+OLuffH0vifAw26x7ux5PU2CbZOL9u+ZntCNZDSa8bwGPJNPO8lkr/i6HINLO+nerQjjYN2GbVfRHVrUiWt7Q6sJslW8t/YM9o/Q6oHf+2pp38/XHnQuMApBZ3tTk1agYa5yZif/3Y5OBvySNHJrXjzSM72VD2pOXrETEyMLDx8580P3+Pb+RJNJBt9fWFxo7auP/TtfEn2ow/g61zp/9Qa/xb3TD+PYif6TD+Xeoyxh9v/vxRx/jXI55tGz9Zi5+0iZ9GxFtdxr/1xpfnOtVVP444Hu3jtySbnx8evjpZLIw0HtvG+Or40Vc36//BDvEb52z3179m2m3/2S77/8W3nz+3vEn8F5/ffP+32/4HIuK9LuP/594nr3equ3M9uVv7FbDV/V9bdrvL+C+dP/Zjh6oDXb4FAAAAAAAAAADQRlq/li1Jc2vzaZrLNe7h/W8cTIulcuXE1dL8zHjjmrcjkU1bV1oNNcpJrTzavB63VT61rnw60wyYOVAv5/Kl4niP+w4AAAAAAAAAAAAAAAAAAAC7xaF19///nqnf/7/+76qBvarzX34De538h/71aP4nPWsHsPN8/0Pfqsp/6F/yH/qX/If+Jf+hf8l/6F/yH/qX/AcAAAAAAAAAAAAAAAAAAAAAAAAAgG1x6eLF2lS9v7KUr5XHBxbmp0pvnxwvlKdy0/P5XL40N5ubKJUmioVcvjT9d+9XLJVmR2Jm/tpwpVCuDJcXFq9Ml+ZnKlcmp8cmClcK2R3pFQAAAAAAAAAAAAAAAAAAADxdButTkuYiIq3Pp2kuF/HviDgS2eTqZLEwEhGHI+KHTHZfrTza60YDAAAAAAAAAAAAAAAAAADAHlNeWJwaKxYLc30yM7BhyXedV46I5SfbjNo7bvlV2ea+2i3b8GmbObw7mvGUzfR4YAIAAAAAAAAAAAAAAAAAgD704Kbfbl/x5/Y2CAAAAAAAAAAAAAAAAAAAAPpS+ksSEbXp+NALg+tr/5WsZurPEfHOrcsfXBurVOZGa8vvri2vfNhcfqoX7Qe61crTVh4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5QXFqfGisXC3DbO9LqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/jrwAAAP//iG/XoQ==") r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000180)={0x0, 0x2, 0x5, 0xfff}) accept4(r5, 0x0, 0x0, 0x80000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) read(r8, &(0x7f0000000200)=""/4090, 0xffa) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r9}, 0x18) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @multicast, @rand_addr=0x64010100, @empty, @empty}}}}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) 81.953406ms ago: executing program 7 (id=2732): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRES8], 0xfe, 0x68f, &(0x7f0000000c00)="$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") r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) 64.786277ms ago: executing program 7 (id=2733): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES16=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000201"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='sched_switch\x00', r4, 0x0, 0x1}, 0x18) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001000)={0x50, 0x2, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x5e}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @local}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x24004004) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x2000000000000016, &(0x7f0000000b00)=ANY=[@ANYRES32=r5, @ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095", @ANYBLOB="881506f71c9ebfaa24e277af68c216f9c1ae68d5f470679fb6cdb7b7e95ef865338bb248986988d9951cfd06545ad0080f02fa33941f238aae9593b9abcbf781f126e7e3d28ef41a6010fa6487129add66fe6cbdba16e29cebee17f332ead7a817706c5bb17cb8e42b50e7d0c13bfc518f33d5cf4237a605adfd049e43185a2d6ad70dfc60774f220c6e7de2b7a77ed68603fe721f655caeb622c34633c59700eb45d5c5d74d431a9739332e544a4ff263162a403cf56abd50f9788e0340041ecdaf8982cbabf7e95dd3c0cfc241"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) recvmmsg(r6, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x31042, 0x0) getgroups(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xf0, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 44.878438ms ago: executing program 7 (id=2734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000200)={@loopback, @local, 0x0}, &(0x7f0000000280)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0x8b, 0x80, 0x7, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x700, 0x10, 0xffffffff, 0x8}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xf8, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_OURS={0x5c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2c, 0x5, "3ebbae688beb0bfa1a3c7f4ba07445475a954a6e777142460cefe0ea50007c71a7d30bf3acfb285d"}, @ETHTOOL_A_BITSET_MASK={0x27, 0x5, "0f2b5fc437e8e425a2e56722b3cc8340090d4c1bf1c1ef662f9b0cd2aa32ecd833ea44"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x69}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)={0x28, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x4001000000000000}, 0x0) 3.58799ms ago: executing program 7 (id=2735): r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x141081, 0x0) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000100)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x9}, &(0x7f0000000100)=0x90) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x140, 0x1, 0x3, 0x5, 0x0, 0x8, 0x5d, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x9) (async) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r6, &(0x7f00000021c0), 0x5b, 0x40, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000008400000000000000f222d93663e91ee0c1db90e8057669d57e35e0905d58af32b1cd9e3f7d5a7b772c5aca4f9332"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kmem_cache_free\x00', r7, 0x0, 0x8}, 0x18) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0xffffffff}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8010}, 0x0) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000004c0)={0x8, {{0x2, 0x4e21, @rand_addr=0x64010101}}, {{0x2, 0x4e21, @local}}}, 0x108) (async) dup(r0) (async) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r8 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r8, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 522.05µs ago: executing program 7 (id=2736): socket$inet6(0xa, 0x3, 0x5) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000080)={0x7, 0x3, 0x1, 0x1, 0x3fc0000000, 0x100000001, 0xe8, 0x2}, &(0x7f0000000240)={0x9, 0x5, 0xb, 0x0, 0x299, 0x2, 0xffffffff80000001, 0x2c362cc3}, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=2737): pipe(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r4}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x508, 0x0, 0xd0, 0xd0, 0x368, 0x1a8, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x438}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) r5 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f00000001c0), &(0x7f00000005c0)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r5}, 0x0, 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r5}, &(0x7f00000002c0), &(0x7f0000000300)) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7d7}, 0x0, 0x0, r3, 0xa) socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80, 0xd2) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)) ioprio_set$pid(0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): syz.6.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb65facde9 code=0x7ffc0000 [ 138.870765][ T29] audit: type=1326 audit(1739861508.124:13603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9674 comm="syz.6.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb65facde9 code=0x7ffc0000 [ 138.941359][ T29] audit: type=1326 audit(1739861508.134:13604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9674 comm="syz.6.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb65facde9 code=0x7ffc0000 [ 138.941396][ T29] audit: type=1326 audit(1739861508.134:13605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9674 comm="syz.6.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb65facde9 code=0x7ffc0000 [ 138.941429][ T29] audit: type=1326 audit(1739861508.134:13606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9674 comm="syz.6.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb65facde9 code=0x7ffc0000 [ 138.941477][ T29] audit: type=1326 audit(1739861508.134:13607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9674 comm="syz.6.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb65facde9 code=0x7ffc0000 [ 138.941534][ T29] audit: type=1326 audit(1739861508.134:13608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9674 comm="syz.6.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb65facde9 code=0x7ffc0000 [ 138.941560][ T29] audit: type=1326 audit(1739861508.134:13609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9674 comm="syz.6.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb65facde9 code=0x7ffc0000 [ 139.124241][ T9692] loop1: detected capacity change from 0 to 164 [ 139.125169][ T9692] Unable to read rock-ridge attributes [ 139.125727][ T9692] Unable to read rock-ridge attributes [ 139.261067][ T9700] loop5: detected capacity change from 0 to 512 [ 139.267266][ T9700] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.2187: corrupted in-inode xattr: invalid ea_ino [ 139.297559][ T9700] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2187: couldn't read orphan inode 15 (err -117) [ 139.298242][ T9700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.357825][ T9705] gretap0: entered promiscuous mode [ 139.359071][ T9705] gretap0: left promiscuous mode [ 139.407709][ T9707] __nla_validate_parse: 6 callbacks suppressed [ 139.407730][ T9707] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2190'. [ 139.407746][ T9707] tipc: Invalid UDP bearer configuration [ 139.407780][ T9707] tipc: Enabling of bearer rejected, failed to enable media [ 139.450329][ T3594] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.500097][ T9710] loop5: detected capacity change from 0 to 2048 [ 139.521721][ T9710] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.549105][ T9720] loop1: detected capacity change from 0 to 164 [ 139.559529][ T9720] Unable to read rock-ridge attributes [ 139.566745][ T9720] Unable to read rock-ridge attributes [ 139.599710][ T9728] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2199'. [ 139.602702][ T9725] loop0: detected capacity change from 0 to 2048 [ 139.620984][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2199'. [ 139.631890][ T9725] EXT4-fs: Mount option(s) incompatible with ext3 [ 139.639220][ T3594] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.699493][ T9734] gretap0: entered promiscuous mode [ 139.716195][ T9732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.724716][ T9732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.746058][ T9734] gretap0: left promiscuous mode [ 139.751075][ T9740] loop1: detected capacity change from 0 to 164 [ 139.773229][ T9740] Unable to read rock-ridge attributes [ 139.798526][ T9740] Unable to read rock-ridge attributes [ 139.804457][ T9743] gretap0: entered promiscuous mode [ 139.816864][ T9743] gretap0: left promiscuous mode [ 139.952126][ T9753] loop1: detected capacity change from 0 to 2048 [ 139.981819][ T9753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.007056][ T9767] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2213'. [ 140.013415][ T9769] gretap0: entered promiscuous mode [ 140.027751][ T9769] gretap0: left promiscuous mode [ 140.033316][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2213'. [ 140.050463][ T9772] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 140.064008][ T9771] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2215'. [ 140.073101][ T9771] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2215'. [ 140.082140][ T9771] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2215'. [ 140.118519][ T9775] gretap0: entered promiscuous mode [ 140.124846][ T9775] gretap0: left promiscuous mode [ 140.199456][ T9785] loop5: detected capacity change from 0 to 164 [ 140.206902][ T9785] Unable to read rock-ridge attributes [ 140.213260][ T9785] Unable to read rock-ridge attributes [ 140.237134][ T9789] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2223'. [ 140.255036][ T9793] gretap0: entered promiscuous mode [ 140.261278][ T9793] gretap0: left promiscuous mode [ 140.334343][ T9796] netlink: 'syz.5.2226': attribute type 13 has an invalid length. [ 140.342237][ T9796] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.2226'. [ 140.367915][ T9798] gretap0: entered promiscuous mode [ 140.373990][ T9798] gretap0: left promiscuous mode [ 140.429701][ T9803] loop6: detected capacity change from 0 to 512 [ 140.437113][ T9803] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 140.450705][ T9803] EXT4-fs (loop6): 1 truncate cleaned up [ 140.457153][ T9803] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.648130][ T9817] loop0: detected capacity change from 0 to 512 [ 140.666462][ T9817] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 140.674995][ T9817] EXT4-fs (loop0): orphan cleanup on readonly fs [ 140.682071][ T9817] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2234: bg 0: block 248: padding at end of block bitmap is not set [ 140.697528][ T9817] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.2234: Failed to acquire dquot type 1 [ 140.709555][ T9817] EXT4-fs (loop0): 1 truncate cleaned up [ 140.716051][ T9817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.739212][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.784454][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.613136][ T9850] gretap0: entered promiscuous mode [ 141.619667][ T9850] gretap0: left promiscuous mode [ 141.729294][ T9859] loop1: detected capacity change from 0 to 512 [ 141.736244][ T9859] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.746148][ T9859] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.2250: invalid block [ 141.758700][ T9859] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2250: invalid indirect mapped block 4294967295 (level 1) [ 141.773199][ T9859] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2250: invalid indirect mapped block 4294967295 (level 1) [ 141.787671][ T9859] EXT4-fs (loop1): 2 truncates cleaned up [ 141.793947][ T9859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.808379][ T9858] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2250: bg 0: block 5: invalid block bitmap [ 141.831494][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.852829][ T9863] loop1: detected capacity change from 0 to 1024 [ 141.859613][ T9863] EXT4-fs: Ignoring removed orlov option [ 141.865891][ T9863] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 141.887015][ T9863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.910364][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.956723][ T9869] loop1: detected capacity change from 0 to 4096 [ 141.963581][ T9869] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 142.033029][ T9878] SELinux: policydb magic number 0x2d0a7ffe does not match expected magic number 0xf97cff8c [ 142.043735][ T9878] SELinux: failed to load policy [ 142.077899][ T9882] vlan0: entered allmulticast mode [ 142.083069][ T9882] bridge_slave_0: entered allmulticast mode [ 142.093322][ T9882] bridge_slave_0: left allmulticast mode [ 142.278154][ T9893] usb usb1: usbfs: process 9893 (syz.0.2262) did not claim interface 0 before use [ 142.287850][ T9893] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 142.318594][ T9893] tipc: Enabling of bearer rejected, failed to enable media [ 142.347637][ T9899] loop1: detected capacity change from 0 to 2048 [ 142.394761][ T9904] loop0: detected capacity change from 0 to 164 [ 142.404819][ T9904] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 142.500494][ T9906] syz.0.2265: attempt to access beyond end of device [ 142.500494][ T9906] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 142.515909][ T9899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.529638][ T9906] syz.0.2265: attempt to access beyond end of device [ 142.529638][ T9906] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 142.563683][ T9921] loop5: detected capacity change from 0 to 128 [ 142.630384][ T9921] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 142.643423][ T9923] loop0: detected capacity change from 0 to 2048 [ 142.702029][ T9923] loop0: p2 p3 p7 [ 142.815197][ T9929] loop0: detected capacity change from 0 to 164 [ 142.842934][ T9929] Unable to read rock-ridge attributes [ 142.856702][ T9929] Unable to read rock-ridge attributes [ 143.218269][ T9940] loop5: detected capacity change from 0 to 164 [ 143.246559][ T9940] Unable to read rock-ridge attributes [ 143.258729][ T9940] Unable to read rock-ridge attributes [ 143.363635][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.493800][ T9967] loop1: detected capacity change from 0 to 164 [ 143.506312][ T9966] loop5: detected capacity change from 0 to 1156 [ 143.526231][ T9967] Unable to read rock-ridge attributes [ 143.536496][ T9967] Unable to read rock-ridge attributes [ 143.547371][ T4583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.598476][ T9977] loop1: detected capacity change from 0 to 512 [ 143.609839][ T9977] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 143.620796][ T9977] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002] [ 143.629807][ T9977] EXT4-fs (loop1): orphan cleanup on readonly fs [ 143.642469][ T9977] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.2291: attempt to clear invalid blocks 1024 len 1 [ 143.657557][ T9977] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2291: bg 0: block 361: padding at end of block bitmap is not set [ 143.672499][ T9977] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 143.683913][ T9977] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2291: invalid indirect mapped block 1811939328 (level 0) [ 143.700069][ T9977] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2291: invalid indirect mapped block 2185560079 (level 1) [ 143.713942][ T9985] 9pnet_fd: Insufficient options for proto=fd [ 143.714950][ T9977] EXT4-fs (loop1): 1 truncate cleaned up [ 143.727908][ T9977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 143.742828][ T9977] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.2291: dx entry: limit 0 != root limit 125 [ 143.754772][ T9977] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2291: Corrupt directory, running e2fsck is recommended [ 143.775325][ T9977] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.2291: dx entry: limit 0 != root limit 125 [ 143.787273][ T9977] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2291: Corrupt directory, running e2fsck is recommended [ 143.810079][ T9985] pim6reg1: entered promiscuous mode [ 143.815482][ T9985] pim6reg1: entered allmulticast mode [ 143.822156][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 143.903159][ T9998] loop6: detected capacity change from 0 to 164 [ 143.911559][ T9998] Unable to read rock-ridge attributes [ 143.918817][ T9998] Unable to read rock-ridge attributes [ 143.964663][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 143.964681][ T29] audit: type=1400 audit(1739861513.234:13978): avc: denied { create } for pid=9999 comm="syz.6.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 143.973302][T10004] loop1: detected capacity change from 0 to 2048 [ 143.997838][ T29] audit: type=1400 audit(1739861513.264:13979): avc: denied { bind } for pid=9999 comm="syz.6.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.017449][ T29] audit: type=1400 audit(1739861513.264:13980): avc: denied { write } for pid=9999 comm="syz.6.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.036986][ T29] audit: type=1400 audit(1739861513.264:13981): avc: denied { mount } for pid=9999 comm="syz.6.2298" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 144.059188][ T29] audit: type=1400 audit(1739861513.264:13982): avc: denied { remount } for pid=9999 comm="syz.6.2298" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 144.079146][ T29] audit: type=1400 audit(1739861513.264:13983): avc: denied { create } for pid=9999 comm="syz.6.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 144.099077][ T29] audit: type=1400 audit(1739861513.264:13984): avc: denied { ioctl } for pid=9999 comm="syz.6.2298" path="socket:[30685]" dev="sockfs" ino=30685 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 144.159887][T10004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.218309][ T9999] delete_channel: no stack [ 144.287644][ T29] audit: type=1400 audit(1739861513.554:13985): avc: denied { unmount } for pid=4583 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 144.301580][T10018] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 144.354523][T10018] loop5: detected capacity change from 0 to 128 [ 144.471279][T10038] loop5: detected capacity change from 0 to 2048 [ 144.507157][T10038] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.564197][T10027] loop6: detected capacity change from 0 to 8192 [ 144.578570][ T3594] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.606051][T10027] netlink: 'syz.6.2306': attribute type 1 has an invalid length. [ 144.652532][T10053] loop5: detected capacity change from 0 to 164 [ 144.669241][ T29] audit: type=1400 audit(1739861513.934:13986): avc: denied { write } for pid=10054 comm="syz.6.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.693064][T10053] rock: directory entry would overflow storage [ 144.699335][T10053] rock: sig=0x66, size=4, remaining=3 [ 144.706082][T10053] rock: directory entry would overflow storage [ 144.712316][T10053] rock: sig=0x66, size=4, remaining=3 [ 144.721432][T10057] __nla_validate_parse: 10 callbacks suppressed [ 144.721448][T10057] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2319'. [ 144.738026][T10057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2319'. [ 144.743026][T10053] rock: directory entry would overflow storage [ 144.748748][T10059] FAULT_INJECTION: forcing a failure. [ 144.748748][T10059] name failslab, interval 1, probability 0, space 0, times 0 [ 144.753086][T10053] rock: sig=0x66, size=4, remaining=3 [ 144.765726][T10059] CPU: 0 UID: 0 PID: 10059 Comm: syz.6.2320 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 144.765762][T10059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 144.765779][T10059] Call Trace: [ 144.765787][T10059] [ 144.765798][T10059] dump_stack_lvl+0xf2/0x150 [ 144.765834][T10059] dump_stack+0x15/0x1a [ 144.765862][T10059] should_fail_ex+0x24a/0x260 [ 144.765972][T10059] should_failslab+0x8f/0xb0 [ 144.766017][T10059] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 144.766117][T10059] ? sock_alloc_inode+0x34/0xa0 [ 144.766196][T10059] sock_alloc_inode+0x34/0xa0 [ 144.766233][T10059] ? __pfx_sock_alloc_inode+0x10/0x10 [ 144.766319][T10059] alloc_inode+0x3c/0x160 [ 144.766358][T10059] new_inode_pseudo+0x15/0x20 [ 144.766427][T10059] do_accept+0xa3/0x390 [ 144.766449][T10059] ? vfs_write+0x644/0x920 [ 144.766488][T10059] __sys_accept4+0xc3/0x150 [ 144.766542][T10059] __x64_sys_accept4+0x53/0x60 [ 144.766566][T10059] x64_sys_call+0x2824/0x2dc0 [ 144.766643][T10059] do_syscall_64+0xc9/0x1c0 [ 144.766687][T10059] ? clear_bhb_loop+0x55/0xb0 [ 144.766720][T10059] ? clear_bhb_loop+0x55/0xb0 [ 144.766808][T10059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.766842][T10059] RIP: 0033:0x7fbb65facde9 [ 144.766857][T10059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.766897][T10059] RSP: 002b:00007fbb64617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 144.766921][T10059] RAX: ffffffffffffffda RBX: 00007fbb661c5fa0 RCX: 00007fbb65facde9 [ 144.766936][T10059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 144.766951][T10059] RBP: 00007fbb64617090 R08: 0000000000000000 R09: 0000000000000000 [ 144.766966][T10059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.766981][T10059] R13: 0000000000000000 R14: 00007fbb661c5fa0 R15: 00007ffd9be431f8 [ 144.767005][T10059] [ 144.795915][T10060] xt_l2tp: missing protocol rule (udp|l2tpip) [ 144.800967][ T29] audit: type=1326 audit(1739861513.994:13987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10052 comm="syz.5.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1326d13da7 code=0x7ffc0000 [ 144.814258][T10062] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2321'. [ 144.820384][T10053] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 144.920135][T10067] loop0: detected capacity change from 0 to 512 [ 145.017013][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.045202][T10069] loop5: detected capacity change from 0 to 2048 [ 145.055036][T10067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.071710][T10067] ext4 filesystem being mounted at /501/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.083080][T10069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.111279][T10067] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #18: comm syz.0.2324: corrupted inode contents [ 145.126478][T10067] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #18: comm syz.0.2324: mark_inode_dirty error [ 145.138387][T10084] loop1: detected capacity change from 0 to 512 [ 145.149258][ T3451] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 145.157084][ T3451] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 145.168404][ T3594] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.169613][ T3451] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 145.180131][T10067] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #18: comm syz.0.2324: corrupted inode contents [ 145.185110][ T3451] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 145.198279][T10090] gretap0: entered promiscuous mode [ 145.204603][ T3451] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 145.213354][T10090] gretap0: left promiscuous mode [ 145.217575][ T3451] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 145.230365][ T3451] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 145.230462][T10067] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #18: comm syz.0.2324: mark_inode_dirty error [ 145.238060][ T3451] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 145.238087][ T3451] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 145.257964][T10067] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #18: comm syz.0.2324: mark inode dirty (error -117) [ 145.265511][ T3451] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 145.279426][T10067] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 145.285809][ T3451] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 145.302762][ T3451] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 145.310590][ T3451] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 145.318306][ T3451] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 145.326064][ T3451] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 145.333888][ T3451] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 145.342823][ T3451] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 145.354077][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.372321][T10095] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2330'. [ 145.386727][T10099] netlink: 'syz.6.2332': attribute type 13 has an invalid length. [ 145.394612][T10099] netlink: 24859 bytes leftover after parsing attributes in process `syz.6.2332'. [ 145.422262][T10103] loop0: detected capacity change from 0 to 1024 [ 145.429911][T10103] EXT4-fs: Ignoring removed orlov option [ 145.445631][T10095] loop5: detected capacity change from 0 to 1024 [ 145.452257][T10103] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 145.462769][T10095] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 145.486081][T10095] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 145.501937][T10095] EXT4-fs (loop5): orphan cleanup on readonly fs [ 145.509307][T10095] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 145.522064][T10095] EXT4-fs (loop5): Remounting filesystem read-only [ 145.528848][T10095] EXT4-fs (loop5): 1 orphan inode deleted [ 145.535304][T10095] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 145.554415][T10117] loop1: detected capacity change from 0 to 2048 [ 145.560295][T10095] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 145.561265][T10117] ext4: Unknown parameter 'fowner<00000000000000000000' [ 145.584865][T10116] lo speed is unknown, defaulting to 1000 [ 145.591242][T10096] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 145.613199][T10123] loop0: detected capacity change from 0 to 2048 [ 145.701439][T10128] loop0: detected capacity change from 0 to 128 [ 145.708957][T10130] gretap0: entered promiscuous mode [ 145.724563][T10130] gretap0: left promiscuous mode [ 145.742244][T10114] lo speed is unknown, defaulting to 1000 [ 145.783361][T10117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2338'. [ 145.817160][T10135] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2344'. [ 145.826285][T10135] tipc: Invalid UDP bearer configuration [ 145.826301][T10135] tipc: Enabling of bearer rejected, failed to enable media [ 145.845910][T10116] wg1 speed is unknown, defaulting to 1000 [ 145.864747][T10139] loop5: detected capacity change from 0 to 128 [ 145.875215][T10117] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 145.886198][T10139] ext4 filesystem being mounted at /486/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.930049][T10140] netlink: 47 bytes leftover after parsing attributes in process `syz.5.2346'. [ 145.948503][T10139] netlink: 47 bytes leftover after parsing attributes in process `syz.5.2346'. [ 145.951086][T10146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2347'. [ 145.967039][T10146] smc: net device bond0 applied user defined pnetid SYZ2 [ 146.105203][T10158] loop5: detected capacity change from 0 to 128 [ 146.184766][T10164] loop5: detected capacity change from 0 to 1024 [ 146.330711][T10169] tipc: Invalid UDP bearer configuration [ 146.330745][T10169] tipc: Enabling of bearer rejected, failed to enable media [ 146.388169][T10174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10174 comm=syz.7.2358 [ 146.438381][T10114] wg1 speed is unknown, defaulting to 1000 [ 146.517370][T10180] cgroup: fork rejected by pids controller in /syz7 [ 147.161898][T10233] loop5: detected capacity change from 0 to 164 [ 147.169139][T10232] batman_adv: batadv0: Removing interface: ip6gretap1 [ 147.181974][T10233] Unable to read rock-ridge attributes [ 147.190474][T10233] Unable to read rock-ridge attributes [ 147.340054][T10250] loop6: detected capacity change from 0 to 164 [ 147.348362][T10250] Unable to read rock-ridge attributes [ 147.356624][T10250] Unable to read rock-ridge attributes [ 147.840213][T10273] loop6: detected capacity change from 0 to 2048 [ 147.981141][T10284] sg_write: data in/out 93/14 bytes for SCSI command 0x0-- guessing data in; [ 147.981141][T10284] program syz.1.2386 not setting count and/or reply_len properly [ 148.205939][T10305] loop5: detected capacity change from 0 to 512 [ 148.229291][T10305] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 148.230872][T10307] bond2: entered promiscuous mode [ 148.244274][T10307] bond2: entered allmulticast mode [ 148.250843][T10307] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.287358][T10307] bond2 (unregistering): Released all slaves [ 148.294413][T10305] EXT4-fs (loop5): 1 truncate cleaned up [ 148.302926][T10310] netlink: 'syz.7.2393': attribute type 1 has an invalid length. [ 148.392973][T10318] gretap0: entered promiscuous mode [ 148.401943][T10318] gretap0: left promiscuous mode [ 148.437830][T10322] loop1: detected capacity change from 0 to 1024 [ 148.453463][T10322] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 148.470416][T10322] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 148.479494][T10322] EXT4-fs (loop1): orphan cleanup on readonly fs [ 148.496962][T10322] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 148.509227][T10322] EXT4-fs (loop1): Remounting filesystem read-only [ 148.523431][T10333] loop5: detected capacity change from 0 to 164 [ 148.528438][T10322] EXT4-fs (loop1): 1 orphan inode deleted [ 148.536009][T10333] Unable to read rock-ridge attributes [ 148.540183][T10322] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 148.543086][T10333] Unable to read rock-ridge attributes [ 148.613672][T10340] loop5: detected capacity change from 0 to 164 [ 148.635368][T10340] Unable to read rock-ridge attributes [ 148.642357][T10340] Unable to read rock-ridge attributes [ 148.686524][T10344] batadv_slave_1: entered promiscuous mode [ 148.692898][T10343] batadv_slave_1: left promiscuous mode [ 148.856167][T10358] gretap0: entered promiscuous mode [ 148.862362][T10358] gretap0: left promiscuous mode [ 148.911034][T10362] loop0: detected capacity change from 0 to 1024 [ 148.918605][T10362] EXT4-fs: Ignoring removed orlov option [ 148.932633][T10364] loop1: detected capacity change from 0 to 164 [ 148.934059][T10369] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.940523][T10362] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 148.961124][T10364] Unable to read rock-ridge attributes [ 148.969520][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 148.969536][ T29] audit: type=1326 audit(1739861518.244:14236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.6.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb65facde9 code=0x7ffc0000 [ 149.001004][ T29] audit: type=1326 audit(1739861518.244:14237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.6.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb65facde9 code=0x7ffc0000 [ 149.024764][ T29] audit: type=1326 audit(1739861518.244:14238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.6.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbb65facde9 code=0x7ffc0000 [ 149.048381][ T29] audit: type=1326 audit(1739861518.244:14239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.6.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb65facde9 code=0x7ffc0000 [ 149.072017][ T29] audit: type=1326 audit(1739861518.244:14240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.6.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb65facde9 code=0x7ffc0000 [ 149.079711][T10364] Unable to read rock-ridge attributes [ 149.103621][T10373] loop6: detected capacity change from 0 to 512 [ 149.141110][T10373] EXT4-fs: Ignoring removed bh option [ 149.147172][T10373] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 149.167009][T10373] EXT4-fs (loop6): 1 truncate cleaned up [ 149.191163][T10383] netlink: 'syz.7.2422': attribute type 3 has an invalid length. [ 149.338514][ T29] audit: type=1400 audit(1739861518.614:14241): avc: denied { read } for pid=10397 comm="syz.6.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.400845][T10401] loop6: detected capacity change from 0 to 1024 [ 149.407907][T10401] EXT4-fs: Ignoring removed orlov option [ 149.414137][T10401] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 149.447397][ T29] audit: type=1326 audit(1739861518.724:14242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.6.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb65facde9 code=0x7ffc0000 [ 149.471313][ T29] audit: type=1326 audit(1739861518.724:14243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.6.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb65facde9 code=0x7ffc0000 [ 149.495176][ T29] audit: type=1326 audit(1739861518.724:14244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.6.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fbb65facde9 code=0x7ffc0000 [ 149.518764][ T29] audit: type=1326 audit(1739861518.724:14245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.6.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb65facde9 code=0x7ffc0000 [ 149.743699][T10418] netlink: 'syz.6.2437': attribute type 27 has an invalid length. [ 149.751725][T10418] netlink: 'syz.6.2437': attribute type 3 has an invalid length. [ 149.759573][T10418] __nla_validate_parse: 5 callbacks suppressed [ 149.759590][T10418] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2437'. [ 149.775496][T10418] dccp_v4_rcv: dropped packet with invalid checksum [ 149.815071][T10414] lo speed is unknown, defaulting to 1000 [ 149.873336][T10414] wg1 speed is unknown, defaulting to 1000 [ 149.935405][T10414] chnl_net:caif_netlink_parms(): no params data found [ 149.948040][T10434] loop6: detected capacity change from 0 to 1024 [ 149.954901][T10434] EXT4-fs: Ignoring removed orlov option [ 149.961086][T10434] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 149.981953][T10414] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.989300][T10414] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.998716][T10414] bridge_slave_0: entered allmulticast mode [ 150.005217][T10414] bridge_slave_0: entered promiscuous mode [ 150.012371][T10414] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.019682][T10414] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.027058][T10414] bridge_slave_1: entered allmulticast mode [ 150.033704][T10414] bridge_slave_1: entered promiscuous mode [ 150.055546][T10414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.077774][T10414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.123237][T10446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2443'. [ 150.164009][T10414] team0: Port device team_slave_0 added [ 150.173184][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2443'. [ 150.173802][T10414] team0: Port device team_slave_1 added [ 150.213092][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2446'. [ 150.222104][T10450] tc_dump_action: action bad kind [ 150.243821][T10414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.251027][T10414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.277035][T10414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.288530][T10414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.295529][T10414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.321554][T10414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.338857][T10464] loop1: detected capacity change from 0 to 1024 [ 150.358104][T10468] loop0: detected capacity change from 0 to 164 [ 150.358725][T10464] EXT4-fs: Ignoring removed orlov option [ 150.370876][T10468] Unable to read rock-ridge attributes [ 150.376947][T10468] Unable to read rock-ridge attributes [ 150.378347][T10464] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 150.395735][T10414] hsr_slave_0: entered promiscuous mode [ 150.404925][T10414] hsr_slave_1: entered promiscuous mode [ 150.411044][T10414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.421438][T10414] Cannot create hsr debugfs directory [ 150.551112][T10414] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 150.565782][T10491] FAULT_INJECTION: forcing a failure. [ 150.565782][T10491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.579043][T10491] CPU: 0 UID: 0 PID: 10491 Comm: syz.0.2458 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 150.579076][T10491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 150.579092][T10491] Call Trace: [ 150.579100][T10491] [ 150.579108][T10491] dump_stack_lvl+0xf2/0x150 [ 150.579143][T10491] dump_stack+0x15/0x1a [ 150.579169][T10491] should_fail_ex+0x24a/0x260 [ 150.579203][T10491] should_fail+0xb/0x10 [ 150.579239][T10491] should_fail_usercopy+0x1a/0x20 [ 150.579277][T10491] _copy_to_user+0x20/0xa0 [ 150.579317][T10491] simple_read_from_buffer+0xa0/0x110 [ 150.579352][T10491] proc_fail_nth_read+0xf9/0x140 [ 150.579419][T10491] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.579460][T10491] vfs_read+0x19b/0x6f0 [ 150.579489][T10491] ? bpf_trace_run2+0x123/0x1d0 [ 150.579517][T10491] ? __rcu_read_unlock+0x4e/0x70 [ 150.579595][T10491] ? __fget_files+0x17c/0x1c0 [ 150.579711][T10491] ksys_read+0xe8/0x1b0 [ 150.579824][T10491] __x64_sys_read+0x42/0x50 [ 150.579854][T10491] x64_sys_call+0x2874/0x2dc0 [ 150.579880][T10491] do_syscall_64+0xc9/0x1c0 [ 150.579935][T10491] ? clear_bhb_loop+0x55/0xb0 [ 150.579968][T10491] ? clear_bhb_loop+0x55/0xb0 [ 150.580044][T10491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.580077][T10491] RIP: 0033:0x7f68c034b7fc [ 150.580096][T10491] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 150.580118][T10491] RSP: 002b:00007f68be990030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.580158][T10491] RAX: ffffffffffffffda RBX: 00007f68c0566080 RCX: 00007f68c034b7fc [ 150.580173][T10491] RDX: 000000000000000f RSI: 00007f68be9900a0 RDI: 0000000000000007 [ 150.580185][T10491] RBP: 00007f68be990090 R08: 0000000000000000 R09: 0000000000000000 [ 150.580197][T10491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.580210][T10491] R13: 0000000000000001 R14: 00007f68c0566080 R15: 00007fff1d3d2008 [ 150.580302][T10491] [ 150.590526][T10493] netlink: 'syz.6.2462': attribute type 1 has an invalid length. [ 150.608463][T10414] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 150.679276][T10496] loop6: detected capacity change from 0 to 512 [ 150.715746][T10500] loop0: detected capacity change from 0 to 164 [ 150.767864][T10496] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.782734][T10500] Unable to read rock-ridge attributes [ 150.787039][T10414] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 150.795085][T10500] Unable to read rock-ridge attributes [ 150.842409][T10496] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 150.853711][T10414] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 150.863957][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2462'. [ 150.872951][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2462'. [ 150.896561][T10493] hub 1-0:1.0: USB hub found [ 150.901241][T10493] hub 1-0:1.0: 8 ports detected [ 150.920167][T10492] Process accounting resumed [ 150.928571][T10414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.941245][T10414] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.957400][ T4541] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.964606][ T4541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.979239][ T4541] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.986367][ T4541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.987503][T10512] SELinux: Context system_u:object_r:udev_exec_t:s0 is not valid (left unmapped). [ 151.008257][T10513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2468'. [ 151.115035][T10414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.203550][T10538] loop6: detected capacity change from 0 to 164 [ 151.215064][T10538] Unable to read rock-ridge attributes [ 151.222198][T10538] Unable to read rock-ridge attributes [ 151.264421][T10551] 9pnet_fd: Insufficient options for proto=fd [ 151.350910][T10414] veth0_vlan: entered promiscuous mode [ 151.366439][T10414] veth1_vlan: entered promiscuous mode [ 151.383553][T10414] veth0_macvtap: entered promiscuous mode [ 151.391509][T10414] veth1_macvtap: entered promiscuous mode [ 151.403782][T10414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.414613][T10414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.427563][T10414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.436814][T10414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.445150][T10414] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.453990][T10414] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.462798][T10414] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.471577][T10414] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.544442][T10579] SELinux: Context system_u:object_r:shell_exec_t:s0 is not valid (left unmapped). [ 151.566102][T10579] loop0: detected capacity change from 0 to 1024 [ 151.599515][T10587] loop8: detected capacity change from 0 to 1024 [ 151.602680][T10579] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: comm syz.0.2487: inode #2039685683: comm syz.0.2487: iget: illegal inode # [ 151.606586][T10587] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 151.628652][T10579] EXT4-fs (loop0): Remounting filesystem read-only [ 151.651939][T10579] EXT4-fs warning (device loop0): ext4_xattr_inode_inc_ref_all:1146: inode #18: comm syz.0.2487: cleanup dec ref error -5 [ 151.660772][T10591] loop8: detected capacity change from 0 to 512 [ 151.671608][T10579] EXT4-fs warning (device loop0): ext4_xattr_block_set:2198: inode #18: comm syz.0.2487: dec ref error=-5 [ 151.716589][T10591] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.835202][T10609] loop8: detected capacity change from 0 to 164 [ 151.860619][T10609] Unable to read rock-ridge attributes [ 151.880702][T10609] Unable to read rock-ridge attributes [ 151.946215][T10611] loop8: detected capacity change from 0 to 512 [ 151.989466][T10611] EXT4-fs (loop8): 1 orphan inode deleted [ 151.989905][ T4542] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.007694][T10611] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.018178][ T4531] EXT4-fs error (device loop8): ext4_release_dquot:6950: comm kworker/u8:8: Failed to release dquot type 1 [ 152.077274][ T4542] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.114775][T10615] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.150185][ T4542] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.204318][T10615] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.228349][T10620] loop6: detected capacity change from 0 to 128 [ 152.250878][ T4542] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.293387][T10615] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.369601][ T4542] bridge_slave_1: left allmulticast mode [ 152.375313][ T4542] bridge_slave_1: left promiscuous mode [ 152.381341][ T4542] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.407014][T10628] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2503'. [ 152.417373][ T4542] bridge_slave_0: left allmulticast mode [ 152.423141][ T4542] bridge_slave_0: left promiscuous mode [ 152.429032][ T4542] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.760281][ T4542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.780549][ T4542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.802085][ T4542] bond0 (unregistering): Released all slaves [ 152.985855][ T4542] veth1_macvtap: left promiscuous mode [ 153.001665][ T4542] veth0_macvtap: left promiscuous mode [ 153.007408][ T4542] veth1_vlan: left promiscuous mode [ 153.012843][ T4542] veth0_vlan: left promiscuous mode [ 153.020854][T10636] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2507'. [ 153.150720][ T4542] team0 (unregistering): Port device team_slave_1 removed [ 153.161662][ T4542] team0 (unregistering): Port device team_slave_0 removed [ 153.215839][T10636] 0ªX¹¦À: renamed from caif0 [ 153.232107][T10644] FAULT_INJECTION: forcing a failure. [ 153.232107][T10644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.245350][T10644] CPU: 0 UID: 0 PID: 10644 Comm: syz.1.2508 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 153.245390][T10644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 153.245405][T10644] Call Trace: [ 153.245414][T10644] [ 153.245426][T10644] dump_stack_lvl+0xf2/0x150 [ 153.245460][T10644] dump_stack+0x15/0x1a [ 153.245533][T10644] should_fail_ex+0x24a/0x260 [ 153.245569][T10644] should_fail+0xb/0x10 [ 153.245666][T10644] should_fail_usercopy+0x1a/0x20 [ 153.245702][T10644] _copy_from_user+0x1c/0xa0 [ 153.245744][T10644] copy_msghdr_from_user+0x54/0x2a0 [ 153.245782][T10644] ? __fget_files+0x17c/0x1c0 [ 153.245910][T10644] __sys_sendmsg+0x13e/0x230 [ 153.245966][T10644] __x64_sys_sendmsg+0x46/0x50 [ 153.245995][T10644] x64_sys_call+0x2734/0x2dc0 [ 153.246023][T10644] do_syscall_64+0xc9/0x1c0 [ 153.246058][T10644] ? clear_bhb_loop+0x55/0xb0 [ 153.246104][T10644] ? clear_bhb_loop+0x55/0xb0 [ 153.246170][T10644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.246203][T10644] RIP: 0033:0x7f5ed9fdcde9 [ 153.246221][T10644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.246244][T10644] RSP: 002b:00007f5ed8641038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.246275][T10644] RAX: ffffffffffffffda RBX: 00007f5eda1f5fa0 RCX: 00007f5ed9fdcde9 [ 153.246290][T10644] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000003 [ 153.246305][T10644] RBP: 00007f5ed8641090 R08: 0000000000000000 R09: 0000000000000000 [ 153.246318][T10644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.246330][T10644] R13: 0000000000000000 R14: 00007f5eda1f5fa0 R15: 00007ffd16aa1ea8 [ 153.246384][T10644] [ 153.420214][T10636] 0ªX¹¦À: entered allmulticast mode [ 153.425495][T10636] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 153.643584][T10655] loop1: detected capacity change from 0 to 164 [ 153.651580][T10655] Unable to read rock-ridge attributes [ 153.675793][T10655] Unable to read rock-ridge attributes [ 153.686503][ T4542] IPVS: stop unused estimator thread 0... [ 153.808861][T10615] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.045348][ T29] kauditd_printk_skb: 364 callbacks suppressed [ 154.045367][ T29] audit: type=1400 audit(1739861523.314:14609): avc: denied { read } for pid=10663 comm="syz.0.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 154.113023][T10668] loop0: detected capacity change from 0 to 164 [ 154.120524][T10668] Unable to read rock-ridge attributes [ 154.128267][T10668] Unable to read rock-ridge attributes [ 154.310854][T10678] loop0: detected capacity change from 0 to 256 [ 154.318442][T10678] vfat: Unknown parameter 'shoStname' [ 154.381425][T10684] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2523'. [ 154.409600][ T4542] batadv1: left allmulticast mode [ 154.414787][ T4542] batadv1: left promiscuous mode [ 154.419970][ T4542] bridge0: port 3(batadv1) entered disabled state [ 154.431705][ T4542] bridge_slave_1: left allmulticast mode [ 154.437468][ T4542] bridge_slave_1: left promiscuous mode [ 154.443423][ T4542] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.451279][ T4542] bridge_slave_0: left allmulticast mode [ 154.456995][ T4542] bridge_slave_0: left promiscuous mode [ 154.462729][ T4542] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.516433][ T29] audit: type=1326 audit(1739861523.794:14610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10688 comm="syz.7.2524" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1efbf6cde9 code=0x0 [ 154.597314][ T4542]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.606491][ T4542]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.615230][ T4542]  (unregistering): Released all slaves [ 154.623485][ T4542] bond1 (unregistering): Released all slaves [ 154.632188][T10675] lo speed is unknown, defaulting to 1000 [ 154.642407][T10692] 0ªX¹¦À: renamed from 61ªX¹¦À [ 154.662245][T10692] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 154.721766][T10675] wg1 speed is unknown, defaulting to 1000 [ 154.786387][ T29] audit: type=1326 audit(1739861524.054:14611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10696 comm="syz.6.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb65facde9 code=0x7ffc0000 [ 154.810084][ T29] audit: type=1326 audit(1739861524.054:14612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10696 comm="syz.6.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fbb65facde9 code=0x7ffc0000 [ 154.878841][ T4542] hsr_slave_0: left promiscuous mode [ 154.892987][ T4542] hsr_slave_1: left promiscuous mode [ 154.907481][ T4542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.933342][ T4542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.072273][ T4542] team0 (unregistering): Port device team_slave_1 removed [ 155.083120][ T4542] team0 (unregistering): Port device team_slave_0 removed [ 155.136807][ T7793] smc: removing ib device sz1 [ 155.213901][T10615] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.321036][T10615] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.334150][T10615] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.421526][T10615] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.448312][T10675] chnl_net:caif_netlink_parms(): no params data found [ 155.479290][T10703] loop8: detected capacity change from 0 to 164 [ 155.499550][T10703] Unable to read rock-ridge attributes [ 155.509885][T10703] Unable to read rock-ridge attributes [ 155.539765][T10675] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.547097][T10675] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.561107][T10675] bridge_slave_0: entered allmulticast mode [ 155.571722][T10675] bridge_slave_0: entered promiscuous mode [ 155.582149][T10675] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.589432][T10675] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.616668][T10675] bridge_slave_1: entered allmulticast mode [ 155.623229][T10675] bridge_slave_1: entered promiscuous mode [ 155.640104][ T29] audit: type=1326 audit(1739861524.914:14613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.7.2532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efbf6cde9 code=0x7ffc0000 [ 155.663770][ T29] audit: type=1326 audit(1739861524.914:14614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.7.2532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efbf6cde9 code=0x7ffc0000 [ 155.687400][ T29] audit: type=1326 audit(1739861524.914:14615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.7.2532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f1efbf6cde9 code=0x7ffc0000 [ 155.711214][ T29] audit: type=1326 audit(1739861524.914:14616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.7.2532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efbf6cde9 code=0x7ffc0000 [ 155.735011][ T29] audit: type=1326 audit(1739861524.914:14617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.7.2532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efbf6cde9 code=0x7ffc0000 [ 155.807323][T10675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.866736][T10675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.889930][ T4542] IPVS: stop unused estimator thread 0... [ 155.923604][ T29] audit: type=1326 audit(1739861524.924:14618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.7.2532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1efbf6b89f code=0x7ffc0000 [ 155.957183][T10675] team0: Port device team_slave_0 added [ 155.966791][T10675] team0: Port device team_slave_1 added [ 156.027870][T10675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.034855][T10675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.060950][T10675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.074918][T10675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.081977][T10675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.108021][T10675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.151419][T10714] chnl_net:caif_netlink_parms(): no params data found [ 156.163747][T10675] hsr_slave_0: entered promiscuous mode [ 156.170162][T10675] hsr_slave_1: entered promiscuous mode [ 156.274385][T10714] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.281558][T10714] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.290237][T10714] bridge_slave_0: entered allmulticast mode [ 156.296747][T10714] bridge_slave_0: entered promiscuous mode [ 156.323648][T10714] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.330788][T10714] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.340208][T10714] bridge_slave_1: entered allmulticast mode [ 156.347127][T10714] bridge_slave_1: entered promiscuous mode [ 156.368125][T10675] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 156.392099][T10741] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.404450][T10675] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 156.421217][T10714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.430809][T10675] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 156.443053][T10714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.452722][T10675] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 156.479349][T10741] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.491626][T10714] team0: Port device team_slave_0 added [ 156.501351][T10714] team0: Port device team_slave_1 added [ 156.523513][T10714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.530544][T10714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.556677][T10714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.571341][T10714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.578402][T10714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.604675][T10714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.626817][T10741] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.661096][T10714] hsr_slave_0: entered promiscuous mode [ 156.667505][T10714] hsr_slave_1: entered promiscuous mode [ 156.673318][T10714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.681589][T10714] Cannot create hsr debugfs directory [ 156.689073][T10741] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.704540][T10675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.728667][T10675] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.747210][ T2065] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.754294][ T2065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.765753][T10741] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.787810][ T4531] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.795005][ T4531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.812160][T10741] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.824605][T10741] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.858580][T10741] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.998822][T10749] loop6: detected capacity change from 0 to 128 [ 157.067592][T10760] loop6: detected capacity change from 0 to 164 [ 157.075389][T10675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.083568][T10760] Unable to read rock-ridge attributes [ 157.090332][T10760] Unable to read rock-ridge attributes [ 157.350939][T10675] veth0_vlan: entered promiscuous mode [ 157.360878][T10675] veth1_vlan: entered promiscuous mode [ 157.383476][T10675] veth0_macvtap: entered promiscuous mode [ 157.393431][T10675] veth1_macvtap: entered promiscuous mode [ 157.408968][T10675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.419461][T10675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.429434][T10675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.439918][T10675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.452169][T10675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.464742][T10675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.475353][T10675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.509092][T10675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.522597][T10675] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.531537][T10675] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.540330][T10675] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.549150][T10675] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.549518][T10782] FAULT_INJECTION: forcing a failure. [ 157.549518][T10782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.571559][T10782] CPU: 0 UID: 0 PID: 10782 Comm: syz.6.2542 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 157.571590][T10782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 157.571605][T10782] Call Trace: [ 157.571612][T10782] [ 157.571620][T10782] dump_stack_lvl+0xf2/0x150 [ 157.571668][T10782] dump_stack+0x15/0x1a [ 157.571753][T10782] should_fail_ex+0x24a/0x260 [ 157.571792][T10782] should_fail+0xb/0x10 [ 157.571826][T10782] should_fail_usercopy+0x1a/0x20 [ 157.571866][T10782] _copy_from_user+0x1c/0xa0 [ 157.571943][T10782] move_addr_to_kernel+0x82/0x120 [ 157.571982][T10782] copy_msghdr_from_user+0x271/0x2a0 [ 157.572046][T10782] __sys_sendmsg+0x13e/0x230 [ 157.572111][T10782] __x64_sys_sendmsg+0x46/0x50 [ 157.572143][T10782] x64_sys_call+0x2734/0x2dc0 [ 157.572177][T10782] do_syscall_64+0xc9/0x1c0 [ 157.572214][T10782] ? clear_bhb_loop+0x55/0xb0 [ 157.572298][T10782] ? clear_bhb_loop+0x55/0xb0 [ 157.572328][T10782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.572436][T10782] RIP: 0033:0x7fbb65facde9 [ 157.572455][T10782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.572628][T10782] RSP: 002b:00007fbb64617038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.572708][T10782] RAX: ffffffffffffffda RBX: 00007fbb661c5fa0 RCX: 00007fbb65facde9 [ 157.572724][T10782] RDX: 0000000000000000 RSI: 0000400000000640 RDI: 0000000000000005 [ 157.572738][T10782] RBP: 00007fbb64617090 R08: 0000000000000000 R09: 0000000000000000 [ 157.572751][T10782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.572762][T10782] R13: 0000000000000000 R14: 00007fbb661c5fa0 R15: 00007ffd9be431f8 [ 157.572854][T10782] [ 157.815203][T10790] loop6: detected capacity change from 0 to 2048 [ 157.883003][T10714] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 157.899207][T10714] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 157.917651][T10714] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 157.932413][T10714] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 157.997698][T10714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.010149][T10714] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.023243][ T4541] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.030454][ T4541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.052221][ T4541] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.059387][ T4541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.160719][T10714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.297165][T10714] veth0_vlan: entered promiscuous mode [ 158.329182][T10714] veth1_vlan: entered promiscuous mode [ 158.359620][T10714] veth0_macvtap: entered promiscuous mode [ 158.367630][T10714] veth1_macvtap: entered promiscuous mode [ 158.378657][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.389356][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.399309][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.409894][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.419775][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.430335][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.441355][T10714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.453276][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.463866][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.473777][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.484265][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.494936][T10714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.507500][T10714] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.516286][T10714] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.525037][T10714] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.533879][T10714] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.929240][T10895] loop6: detected capacity change from 0 to 128 [ 159.045582][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 159.045604][ T29] audit: type=1326 audit(1739861528.314:14671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.7.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1efbf6cde9 code=0x7ffc0000 [ 159.075513][ T29] audit: type=1326 audit(1739861528.314:14672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.7.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efbf6cde9 code=0x7ffc0000 [ 159.099118][ T29] audit: type=1326 audit(1739861528.314:14673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.7.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1efbf6cde9 code=0x7ffc0000 [ 159.122772][ T29] audit: type=1326 audit(1739861528.314:14674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.7.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efbf6cde9 code=0x7ffc0000 [ 159.146524][ T29] audit: type=1326 audit(1739861528.314:14675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.7.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1efbf6cde9 code=0x7ffc0000 [ 159.170197][ T29] audit: type=1326 audit(1739861528.314:14676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.7.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efbf6cde9 code=0x7ffc0000 [ 159.193848][ T29] audit: type=1326 audit(1739861528.314:14677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.7.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1efbf6cde9 code=0x7ffc0000 [ 159.217504][ T29] audit: type=1326 audit(1739861528.314:14678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.7.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efbf6cde9 code=0x7ffc0000 [ 159.241208][ T29] audit: type=1326 audit(1739861528.314:14679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.7.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1efbf6cde9 code=0x7ffc0000 [ 159.264834][ T29] audit: type=1326 audit(1739861528.314:14680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.7.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efbf6cde9 code=0x7ffc0000 [ 159.644635][T10960] 9pnet_fd: Insufficient options for proto=fd [ 160.057425][ T4553] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.488950][T11030] chnl_net:caif_netlink_parms(): no params data found [ 160.558127][T11030] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.565236][T11030] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.574162][T11030] bridge_slave_0: entered allmulticast mode [ 160.590966][T11030] bridge_slave_0: entered promiscuous mode [ 160.599148][T11030] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.606412][T11030] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.613733][T11030] bridge_slave_1: entered allmulticast mode [ 160.621787][T11030] bridge_slave_1: entered promiscuous mode [ 160.660140][T11030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.672353][T11105] pimreg: entered allmulticast mode [ 160.695944][T11030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.726817][T11105] pimreg: left allmulticast mode [ 160.768521][T11030] team0: Port device team_slave_0 added [ 160.775472][T11030] team0: Port device team_slave_1 added [ 160.832773][T11030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.839801][T11030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.866521][T11030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.897567][T11030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.904588][T11030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.930660][T11030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.968902][T11030] hsr_slave_0: entered promiscuous mode [ 160.978242][T11030] hsr_slave_1: entered promiscuous mode [ 160.984196][T11030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.993034][T11030] Cannot create hsr debugfs directory [ 161.149374][ T4553] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.189209][T11157] __nla_validate_parse: 2 callbacks suppressed [ 161.189226][T11157] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2581'. [ 161.263098][T11157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.315663][T11157] bond0 (unregistering): Released all slaves [ 161.316539][T11172] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2581'. [ 161.339402][ T4553] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.415891][ T4553] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.519610][T11110] chnl_net:caif_netlink_parms(): no params data found [ 161.653549][ T4553] bridge_slave_1: left allmulticast mode [ 161.659347][ T4553] bridge_slave_1: left promiscuous mode [ 161.665038][ T4553] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.702188][ T4553] bridge_slave_0: left allmulticast mode [ 161.707929][ T4553] bridge_slave_0: left promiscuous mode [ 161.713606][ T4553] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.858189][ T4553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.870487][ T4553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.880331][ T4553] bond0 (unregistering): Released all slaves [ 161.896286][T11110] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.903469][T11110] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.928816][T11110] bridge_slave_0: entered allmulticast mode [ 161.937163][T11110] bridge_slave_0: entered promiscuous mode [ 161.955582][T11110] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.962898][T11110] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.972492][T11223] loop2: detected capacity change from 0 to 512 [ 161.979353][T11110] bridge_slave_1: entered allmulticast mode [ 161.988468][T11110] bridge_slave_1: entered promiscuous mode [ 161.994640][T11223] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 162.004826][T11223] EXT4-fs (loop2): orphan cleanup on readonly fs [ 162.010150][T11030] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.011737][T11223] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.2588: Failed to acquire dquot type 1 [ 162.030000][T11223] EXT4-fs (loop2): 1 truncate cleaned up [ 162.041962][T11223] EXT4-fs mount: 34 callbacks suppressed [ 162.041984][T11223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.063550][T11110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.078767][T11030] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 162.098542][T11030] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 162.110952][T11110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.123352][T10714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.132723][ T4553] hsr_slave_0: left promiscuous mode [ 162.145248][ T4553] hsr_slave_1: left promiscuous mode [ 162.151339][ T4553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.158838][ T4553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.170640][ T4553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.178461][ T4553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.192659][ T4553] veth1_macvtap: left promiscuous mode [ 162.198547][ T4553] veth0_macvtap: left promiscuous mode [ 162.208725][ T4553] veth1_vlan: left promiscuous mode [ 162.214024][ T4553] veth0_vlan: left promiscuous mode [ 162.312670][ T4553] team0 (unregistering): Port device team_slave_1 removed [ 162.333129][ T4553] team0 (unregistering): Port device team_slave_0 removed [ 162.415160][T11030] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 162.468373][T11110] team0: Port device team_slave_0 added [ 162.473647][T11269] loop2: detected capacity change from 0 to 164 [ 162.491578][T11269] Unable to read rock-ridge attributes [ 162.498227][T11110] team0: Port device team_slave_1 added [ 162.501367][T11269] Unable to read rock-ridge attributes [ 162.544400][T11110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.551626][T11110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.577761][T11110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.613530][T11273] loop2: detected capacity change from 0 to 164 [ 162.626454][T11110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.628163][T11273] Unable to read rock-ridge attributes [ 162.633417][T11110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.654759][T11273] Unable to read rock-ridge attributes [ 162.665035][T11110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.700980][T11271] loop6: detected capacity change from 0 to 8192 [ 162.712675][T11030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.754807][T11030] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.764510][T11110] hsr_slave_0: entered promiscuous mode [ 162.771043][T11110] hsr_slave_1: entered promiscuous mode [ 162.796404][ T4541] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.803579][ T4541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.826977][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.834162][ T7793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.993842][T11283] loop2: detected capacity change from 0 to 164 [ 163.001693][ T4553] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.013116][T11283] Unable to read rock-ridge attributes [ 163.019399][T11283] Unable to read rock-ridge attributes [ 163.087614][ T4553] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.144175][ T4553] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.191141][T11030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.221660][ T4553] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.304531][T11110] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.342708][T11110] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.365112][ T4553] bridge_slave_1: left allmulticast mode [ 163.370941][ T4553] bridge_slave_1: left promiscuous mode [ 163.376774][ T4553] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.399412][ T4553] bridge_slave_0: left allmulticast mode [ 163.405114][ T4553] bridge_slave_0: left promiscuous mode [ 163.410863][ T4553] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.687168][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2604'. [ 163.713599][ T4553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.738901][ T4553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.751173][ T4553] bond0 (unregistering): Released all slaves [ 163.772967][T11110] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.779931][T11305] loop6: detected capacity change from 0 to 512 [ 163.793398][T11110] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 163.807488][T11310] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2608'. [ 163.829084][T11030] veth0_vlan: entered promiscuous mode [ 163.851354][T11305] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.869640][T11030] veth1_vlan: entered promiscuous mode [ 163.937652][T11110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.956549][T11305] ext4 filesystem being mounted at /471/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.993384][T11030] veth0_macvtap: entered promiscuous mode [ 164.014137][T11110] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.048422][T11030] veth1_macvtap: entered promiscuous mode [ 164.061828][T11030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.072438][T11030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.082405][T11030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.085447][ T29] kauditd_printk_skb: 398 callbacks suppressed [ 164.085464][ T29] audit: type=1326 audit(1739861533.334:15077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f17decde9 code=0x7ffc0000 [ 164.092880][T11030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.099069][ T29] audit: type=1326 audit(1739861533.334:15078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f17decde9 code=0x7ffc0000 [ 164.122652][T11030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.132507][ T29] audit: type=1326 audit(1739861533.334:15079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f17decde9 code=0x7ffc0000 [ 164.156267][T11030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.166598][ T29] audit: type=1326 audit(1739861533.334:15080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f17decde9 code=0x7ffc0000 [ 164.166632][ T29] audit: type=1326 audit(1739861533.334:15081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f17decde9 code=0x7ffc0000 [ 164.247560][ T29] audit: type=1326 audit(1739861533.334:15082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3f17decde9 code=0x7ffc0000 [ 164.271157][ T29] audit: type=1326 audit(1739861533.334:15083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3f17dece23 code=0x7ffc0000 [ 164.294734][ T29] audit: type=1326 audit(1739861533.334:15084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3f17dece23 code=0x7ffc0000 [ 164.318205][ T29] audit: type=1326 audit(1739861533.334:15085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f17decde9 code=0x7ffc0000 [ 164.333235][T11030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.341910][ T29] audit: type=1326 audit(1739861533.334:15086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f17decde9 code=0x7ffc0000 [ 164.389698][ T4553] hsr_slave_0: left promiscuous mode [ 164.396534][ T4553] hsr_slave_1: left promiscuous mode [ 164.411011][ T4553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.418621][ T4553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.447835][ T4553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.455390][ T4553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.465011][ T4553] veth1_macvtap: left promiscuous mode [ 164.471948][ T4553] veth0_macvtap: left promiscuous mode [ 164.477562][ T4553] veth1_vlan: left promiscuous mode [ 164.482891][ T4553] veth0_vlan: left promiscuous mode [ 164.561927][ T4553] team0 (unregistering): Port device team_slave_1 removed [ 164.575330][ T4553] team0 (unregistering): Port device team_slave_0 removed [ 164.613053][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.620188][ T7793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.630245][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.637424][ T7793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.657142][T11030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.667674][T11030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.683645][T11030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.704807][T11110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.718409][ T4583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.720110][T11030] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.736339][T11030] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.745187][T11030] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.754082][T11030] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.800859][T11332] loop6: detected capacity change from 0 to 512 [ 164.855050][T11110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.865285][T11332] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2613: bg 0: block 248: padding at end of block bitmap is not set [ 164.895812][T11332] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.2613: Failed to acquire dquot type 1 [ 164.924232][T11332] EXT4-fs (loop6): 1 truncate cleaned up [ 164.939536][T11332] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.987835][T11332] ext4 filesystem being mounted at /472/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.069037][ T4583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.081290][ T4541] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:16: Failed to release dquot type 1 [ 165.142882][T11355] loop6: detected capacity change from 0 to 164 [ 165.176987][T11110] veth0_vlan: entered promiscuous mode [ 165.187043][T11110] veth1_vlan: entered promiscuous mode [ 165.189553][T11360] netlink: 'syz.2.2617': attribute type 4 has an invalid length. [ 165.201936][T11355] Unable to read rock-ridge attributes [ 165.220105][T11110] veth0_macvtap: entered promiscuous mode [ 165.227971][T11355] Unable to read rock-ridge attributes [ 165.235380][T11110] veth1_macvtap: entered promiscuous mode [ 165.266168][T11110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.276953][T11110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.286868][T11110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.297354][T11110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.307294][T11110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.317810][T11110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.340889][T11363] loop2: detected capacity change from 0 to 512 [ 165.353102][T11110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.353324][T11363] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2617: corrupted in-inode xattr: invalid ea_ino [ 165.361363][T11110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.384316][T11110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.394197][T11110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.404632][T11110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.415354][T11110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.422961][T11363] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.2617: couldn't read orphan inode 15 (err -117) [ 165.436162][T11363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.456543][T11110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.465316][T11110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.474195][T11110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.483003][T11110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.516827][T11365] loop6: detected capacity change from 0 to 2048 [ 165.546079][T11365] loop6: p1 < > p4 [ 165.550433][T11365] loop6: p4 size 8388608 extends beyond EOD, truncated [ 165.582243][T11368] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.704450][T11360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.714650][T11360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.832731][T11373] lo speed is unknown, defaulting to 1000 [ 165.838824][T11373] lo speed is unknown, defaulting to 1000 [ 165.844856][T11373] lo speed is unknown, defaulting to 1000 [ 165.851477][T11373] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 165.861834][T11373] lo speed is unknown, defaulting to 1000 [ 165.868369][T11373] lo speed is unknown, defaulting to 1000 [ 165.874580][T11373] lo speed is unknown, defaulting to 1000 [ 165.881469][T11373] lo speed is unknown, defaulting to 1000 [ 165.888564][T11373] lo speed is unknown, defaulting to 1000 [ 165.894701][T11373] lo speed is unknown, defaulting to 1000 [ 165.901144][T11373] lo speed is unknown, defaulting to 1000 [ 165.984390][T11381] FAULT_INJECTION: forcing a failure. [ 165.984390][T11381] name failslab, interval 1, probability 0, space 0, times 0 [ 165.997195][T11381] CPU: 1 UID: 0 PID: 11381 Comm: syz.3.2619 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 165.997302][T11381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 165.997317][T11381] Call Trace: [ 165.997326][T11381] [ 165.997335][T11381] dump_stack_lvl+0xf2/0x150 [ 165.997369][T11381] dump_stack+0x15/0x1a [ 165.997396][T11381] should_fail_ex+0x24a/0x260 [ 165.997438][T11381] should_failslab+0x8f/0xb0 [ 165.997545][T11381] __kmalloc_cache_node_noprof+0x56/0x320 [ 165.997575][T11381] ? __get_vm_area_node+0xfb/0x1c0 [ 165.997606][T11381] ? bpf_get_stack+0x33/0x50 [ 165.997639][T11381] __get_vm_area_node+0xfb/0x1c0 [ 165.997665][T11381] __vmalloc_node_range_noprof+0x280/0xe70 [ 165.997765][T11381] ? n_tty_open+0x1b/0xe0 [ 165.997801][T11381] ? __perf_event_task_sched_out+0x138/0x1010 [ 165.997831][T11381] ? _raw_spin_unlock+0x26/0x50 [ 165.997876][T11381] ? __schedule+0x75b/0x990 [ 165.997968][T11381] ? n_tty_open+0x1b/0xe0 [ 165.998010][T11381] vzalloc_noprof+0x5e/0x70 [ 165.998038][T11381] ? n_tty_open+0x1b/0xe0 [ 165.998073][T11381] n_tty_open+0x1b/0xe0 [ 165.998126][T11381] tty_ldisc_setup+0x83/0x230 [ 165.998158][T11381] tty_init_dev+0x182/0x320 [ 165.998203][T11381] tty_open+0x6c7/0xb00 [ 165.998299][T11381] chrdev_open+0x2f9/0x370 [ 165.998390][T11381] ? __pfx_chrdev_open+0x10/0x10 [ 165.998430][T11381] do_dentry_open+0x621/0xa20 [ 165.998467][T11381] vfs_open+0x38/0x1e0 [ 165.998559][T11381] path_openat+0x1ae0/0x1fc0 [ 165.998583][T11381] ? _parse_integer_limit+0x167/0x180 [ 165.998655][T11381] ? kstrtouint_from_user+0xb0/0xe0 [ 165.998687][T11381] do_filp_open+0x107/0x230 [ 165.998720][T11381] do_sys_openat2+0xab/0x120 [ 165.998796][T11381] __x64_sys_openat+0xf3/0x120 [ 165.998822][T11381] x64_sys_call+0x2b30/0x2dc0 [ 165.998852][T11381] do_syscall_64+0xc9/0x1c0 [ 165.998883][T11381] ? clear_bhb_loop+0x55/0xb0 [ 165.998917][T11381] ? clear_bhb_loop+0x55/0xb0 [ 165.998949][T11381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.998977][T11381] RIP: 0033:0x7fc22825cde9 [ 165.998996][T11381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.999056][T11381] RSP: 002b:00007fc226885038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 165.999078][T11381] RAX: ffffffffffffffda RBX: 00007fc228476160 RCX: 00007fc22825cde9 [ 165.999169][T11381] RDX: 0000000000000000 RSI: 00004000000003c0 RDI: ffffffffffffff9c [ 165.999181][T11381] RBP: 00007fc226885090 R08: 0000000000000000 R09: 0000000000000000 [ 165.999193][T11381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.999206][T11381] R13: 0000000000000000 R14: 00007fc228476160 R15: 00007fffc752c748 [ 165.999228][T11381] [ 165.999237][T11381] syz.3.2619: vmalloc error: size 8904, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 166.284112][T11381] CPU: 1 UID: 0 PID: 11381 Comm: syz.3.2619 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 166.284144][T11381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 166.284160][T11381] Call Trace: [ 166.284169][T11381] [ 166.284178][T11381] dump_stack_lvl+0xf2/0x150 [ 166.284208][T11381] dump_stack+0x15/0x1a [ 166.284228][T11381] warn_alloc+0x145/0x1b0 [ 166.284288][T11381] ? bpf_get_stack+0x33/0x50 [ 166.284328][T11381] __vmalloc_node_range_noprof+0x2a5/0xe70 [ 166.284446][T11381] ? __perf_event_task_sched_out+0x138/0x1010 [ 166.284476][T11381] ? _raw_spin_unlock+0x26/0x50 [ 166.284511][T11381] ? __schedule+0x75b/0x990 [ 166.284532][T11381] ? n_tty_open+0x1b/0xe0 [ 166.284660][T11381] vzalloc_noprof+0x5e/0x70 [ 166.284712][T11381] ? n_tty_open+0x1b/0xe0 [ 166.284745][T11381] n_tty_open+0x1b/0xe0 [ 166.284778][T11381] tty_ldisc_setup+0x83/0x230 [ 166.284820][T11381] tty_init_dev+0x182/0x320 [ 166.284843][T11381] tty_open+0x6c7/0xb00 [ 166.284881][T11381] chrdev_open+0x2f9/0x370 [ 166.284920][T11381] ? __pfx_chrdev_open+0x10/0x10 [ 166.284974][T11381] do_dentry_open+0x621/0xa20 [ 166.285010][T11381] vfs_open+0x38/0x1e0 [ 166.285051][T11381] path_openat+0x1ae0/0x1fc0 [ 166.285076][T11381] ? _parse_integer_limit+0x167/0x180 [ 166.285189][T11381] ? kstrtouint_from_user+0xb0/0xe0 [ 166.285226][T11381] do_filp_open+0x107/0x230 [ 166.285268][T11381] do_sys_openat2+0xab/0x120 [ 166.285330][T11381] __x64_sys_openat+0xf3/0x120 [ 166.285351][T11381] x64_sys_call+0x2b30/0x2dc0 [ 166.285421][T11381] do_syscall_64+0xc9/0x1c0 [ 166.285455][T11381] ? clear_bhb_loop+0x55/0xb0 [ 166.285487][T11381] ? clear_bhb_loop+0x55/0xb0 [ 166.285519][T11381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.285588][T11381] RIP: 0033:0x7fc22825cde9 [ 166.285625][T11381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.285711][T11381] RSP: 002b:00007fc226885038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 166.285735][T11381] RAX: ffffffffffffffda RBX: 00007fc228476160 RCX: 00007fc22825cde9 [ 166.285750][T11381] RDX: 0000000000000000 RSI: 00004000000003c0 RDI: ffffffffffffff9c [ 166.285765][T11381] RBP: 00007fc226885090 R08: 0000000000000000 R09: 0000000000000000 [ 166.285858][T11381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.285872][T11381] R13: 0000000000000000 R14: 00007fc228476160 R15: 00007fffc752c748 [ 166.285893][T11381] [ 166.529725][T11381] Mem-Info: [ 166.532989][T11381] active_anon:23848 inactive_anon:7 isolated_anon:0 [ 166.532989][T11381] active_file:10748 inactive_file:14402 isolated_file:0 [ 166.532989][T11381] unevictable:0 dirty:170 writeback:0 [ 166.532989][T11381] slab_reclaimable:3379 slab_unreclaimable:34110 [ 166.532989][T11381] mapped:32867 shmem:19725 pagetables:1307 [ 166.532989][T11381] sec_pagetables:0 bounce:0 [ 166.532989][T11381] kernel_misc_reclaimable:0 [ 166.532989][T11381] free:1848022 free_pcp:4980 free_cma:0 [ 166.578281][T11381] Node 0 active_anon:94556kB inactive_anon:28kB active_file:42992kB inactive_file:57608kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131408kB dirty:684kB writeback:0kB shmem:78040kB writeback_tmp:0kB kernel_stack:3712kB pagetables:5332kB sec_pagetables:0kB all_unreclaimable? no [ 166.606231][T11381] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.633253][T11381] lowmem_reserve[]: 0 2885 7863 0 [ 166.638351][T11381] Node 0 DMA32 free:2950748kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954380kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 166.667174][T11381] lowmem_reserve[]: 0 0 4978 0 [ 166.672044][T11381] Node 0 Normal free:4425980kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:94556kB inactive_anon:28kB active_file:42992kB inactive_file:57608kB unevictable:0kB writepending:684kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:16924kB local_pcp:6564kB free_cma:0kB [ 166.702555][T11381] lowmem_reserve[]: 0 0 0 0 [ 166.707149][T11381] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 166.720034][T11381] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950748kB [ 166.736239][T11381] Node 0 Normal: 69*4kB (E) 121*8kB (UME) 80*16kB (UME) 111*32kB (UE) 39*64kB (UE) 29*128kB (UME) 31*256kB (UME) 81*512kB (UME) 60*1024kB (UME) 51*2048kB (UME) 1024*4096kB (UM) = 4421884kB [ 166.755232][T11381] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 166.764551][T11381] 44663 total pagecache pages [ 166.769325][T11381] 7 pages in swap cache [ 166.773486][T11381] Free swap = 124884kB [ 166.777664][T11381] Total swap = 124996kB [ 166.781823][T11381] 2097051 pages RAM [ 166.785724][T11381] 0 pages HighMem/MovableOnly [ 166.790489][T11381] 80064 pages reserved [ 166.794696][T11381] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 166.803702][T10714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.837051][T11389] loop2: detected capacity change from 0 to 164 [ 166.844308][T11389] Unable to read rock-ridge attributes [ 166.851212][T11389] Unable to read rock-ridge attributes [ 166.863278][T11391] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2624'. [ 166.967561][T11394] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2624'. [ 166.990973][T11397] loop3: detected capacity change from 0 to 128 [ 167.003479][T11398] loop2: detected capacity change from 0 to 1024 [ 167.034666][T11400] bridge0: port 3(hsr0) entered blocking state [ 167.041488][T11400] bridge0: port 3(hsr0) entered disabled state [ 167.047710][T11400] FAULT_INJECTION: forcing a failure. [ 167.047710][T11400] name failslab, interval 1, probability 0, space 0, times 0 [ 167.060401][T11400] CPU: 0 UID: 0 PID: 11400 Comm: syz.3.2628 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 167.060435][T11400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 167.060451][T11400] Call Trace: [ 167.060460][T11400] [ 167.060469][T11400] dump_stack_lvl+0xf2/0x150 [ 167.060507][T11400] dump_stack+0x15/0x1a [ 167.060532][T11400] should_fail_ex+0x24a/0x260 [ 167.060561][T11400] should_failslab+0x8f/0xb0 [ 167.060591][T11400] __kmalloc_noprof+0xab/0x3f0 [ 167.060646][T11400] ? switchdev_deferred_enqueue+0x49/0x210 [ 167.060681][T11400] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 167.060718][T11400] switchdev_deferred_enqueue+0x49/0x210 [ 167.060743][T11400] switchdev_port_attr_set+0x80/0x1c0 [ 167.060780][T11400] ? init_timer_key+0x7a/0x170 [ 167.060813][T11400] br_multicast_add_port+0x15f/0x280 [ 167.060897][T11400] new_nbp+0x250/0x310 [ 167.060982][T11400] br_add_if+0x1ef/0xa50 [ 167.061008][T11400] ? security_capable+0x81/0x90 [ 167.061071][T11400] br_ioctl_stub+0x218/0x5d0 [ 167.061161][T11400] ? sock_ioctl+0x40f/0x600 [ 167.061220][T11400] ? __se_sys_ioctl+0xc9/0x140 [ 167.061240][T11400] ? __x64_sys_ioctl+0x43/0x50 [ 167.061260][T11400] ? x64_sys_call+0x1690/0x2dc0 [ 167.061283][T11400] ? do_syscall_64+0xc9/0x1c0 [ 167.061342][T11400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.061365][T11400] ? __rtnl_unlock+0x99/0xb0 [ 167.061424][T11400] ? netdev_run_todo+0x793/0x7f0 [ 167.061442][T11400] ? __pfx_br_ioctl_stub+0x10/0x10 [ 167.061542][T11400] br_ioctl_call+0x93/0xc0 [ 167.061582][T11400] dev_ifsioc+0x901/0xa10 [ 167.061601][T11400] dev_ioctl+0x7fa/0xab0 [ 167.061619][T11400] sock_do_ioctl+0x11c/0x260 [ 167.061672][T11400] sock_ioctl+0x40f/0x600 [ 167.061704][T11400] ? __pfx_sock_ioctl+0x10/0x10 [ 167.061768][T11400] __se_sys_ioctl+0xc9/0x140 [ 167.061790][T11400] __x64_sys_ioctl+0x43/0x50 [ 167.061810][T11400] x64_sys_call+0x1690/0x2dc0 [ 167.061887][T11400] do_syscall_64+0xc9/0x1c0 [ 167.061912][T11400] ? clear_bhb_loop+0x55/0xb0 [ 167.061937][T11400] ? clear_bhb_loop+0x55/0xb0 [ 167.062049][T11400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.062076][T11400] RIP: 0033:0x7fc22825cde9 [ 167.062092][T11400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.062176][T11400] RSP: 002b:00007fc2268c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.062193][T11400] RAX: ffffffffffffffda RBX: 00007fc228475fa0 RCX: 00007fc22825cde9 [ 167.062204][T11400] RDX: 0000400000000000 RSI: 00000000000089a2 RDI: 0000000000000003 [ 167.062292][T11400] RBP: 00007fc2268c7090 R08: 0000000000000000 R09: 0000000000000000 [ 167.062303][T11400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.062313][T11400] R13: 0000000000000000 R14: 00007fc228475fa0 R15: 00007fffc752c748 [ 167.062329][T11400] [ 167.065482][T11398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.383751][T11398] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.2627: Allocating blocks 385-513 which overlap fs metadata [ 167.402647][T11398] EXT4-fs (loop2): pa ffff888106555690: logic 16, phys. 129, len 24 [ 167.410931][T11398] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 167.425165][T11411] IPv6: Can't replace route, no match found [ 167.432050][T11411] netlink: 'syz.3.2632': attribute type 9 has an invalid length. [ 167.439844][T11411] netlink: 'syz.3.2632': attribute type 6 has an invalid length. [ 167.464347][T11411] loop3: detected capacity change from 0 to 1024 [ 167.471620][T11411] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 167.483044][T11411] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 167.493014][T11411] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 167.503685][T10714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.504238][T11411] EXT4-fs (loop3): invalid journal inode [ 167.519125][T11411] EXT4-fs (loop3): can't get journal size [ 167.525355][T11411] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.2632: blocks 2-2 from inode overlap system zone [ 167.539745][T11411] EXT4-fs (loop3): failed to initialize system zone (-117) [ 167.547060][T11411] EXT4-fs (loop3): mount failed [ 167.559762][T11417] pim6reg1: entered promiscuous mode [ 167.565234][T11417] pim6reg1: entered allmulticast mode [ 167.615067][T11419] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.669238][T11419] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.711921][T11429] loop2: detected capacity change from 0 to 512 [ 167.714656][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2635'. [ 167.720123][T11429] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 167.745823][T11419] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.777222][T11433] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 167.798977][T11419] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.803346][T11435] loop2: detected capacity change from 0 to 512 [ 167.819357][T11435] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2641: bg 0: block 35: padding at end of block bitmap is not set [ 167.833804][T11435] EXT4-fs (loop2): Remounting filesystem read-only [ 167.840850][T11435] EXT4-fs (loop2): 1 truncate cleaned up [ 167.847140][T11435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.859806][T11435] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 167.867673][T11435] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.873373][T11419] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.889297][T11419] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.901362][T11419] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.914048][T11419] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.926306][T11438] FAULT_INJECTION: forcing a failure. [ 167.926306][T11438] name failslab, interval 1, probability 0, space 0, times 0 [ 167.939042][T11438] CPU: 0 UID: 0 PID: 11438 Comm: syz.2.2642 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 167.939098][T11438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 167.939112][T11438] Call Trace: [ 167.939121][T11438] [ 167.939130][T11438] dump_stack_lvl+0xf2/0x150 [ 167.939187][T11438] dump_stack+0x15/0x1a [ 167.939213][T11438] should_fail_ex+0x24a/0x260 [ 167.939250][T11438] should_failslab+0x8f/0xb0 [ 167.939308][T11438] kmem_cache_alloc_noprof+0x52/0x320 [ 167.939334][T11438] ? alloc_empty_file+0xd0/0x200 [ 167.939361][T11438] alloc_empty_file+0xd0/0x200 [ 167.939421][T11438] dentry_open+0x2d/0x90 [ 167.939461][T11438] __se_sys_open_tree+0x61d/0x700 [ 167.939504][T11438] __x64_sys_open_tree+0x43/0x50 [ 167.939603][T11438] x64_sys_call+0x2011/0x2dc0 [ 167.939633][T11438] do_syscall_64+0xc9/0x1c0 [ 167.939678][T11438] ? clear_bhb_loop+0x55/0xb0 [ 167.939735][T11438] ? clear_bhb_loop+0x55/0xb0 [ 167.939775][T11438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.939806][T11438] RIP: 0033:0x7f3f17decde9 [ 167.939825][T11438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.939844][T11438] RSP: 002b:00007f3f16457038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 167.939863][T11438] RAX: ffffffffffffffda RBX: 00007f3f18005fa0 RCX: 00007f3f17decde9 [ 167.939951][T11438] RDX: 0000000000089901 RSI: 0000400000000640 RDI: ffffffffffffff9c [ 167.939965][T11438] RBP: 00007f3f16457090 R08: 0000000000000000 R09: 0000000000000000 [ 167.939978][T11438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.939991][T11438] R13: 0000000000000000 R14: 00007f3f18005fa0 R15: 00007fffa0467978 [ 167.940012][T11438] [ 168.123526][T11368] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.300039][T11443] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2643'. [ 168.309836][T11443] 1ªX¹¦À: renamed from 60ªX¹¦À [ 168.317366][T11443] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 168.372886][T11449] loop2: detected capacity change from 0 to 512 [ 168.380090][T11449] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.389997][T11449] EXT4-fs (loop2): orphan cleanup on readonly fs [ 168.397017][T11449] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2646: bg 0: block 248: padding at end of block bitmap is not set [ 168.411592][T11449] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.2646: Failed to acquire dquot type 1 [ 168.423649][T11449] EXT4-fs (loop2): 1 truncate cleaned up [ 168.429928][T11449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.442896][T11449] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.502077][T11454] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.2648' sets config #0 [ 168.537178][T11459] loop3: detected capacity change from 0 to 512 [ 168.537178][T11462] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11462 comm=syz.6.2651 [ 168.577665][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2651'. [ 168.579039][T11467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2652'. [ 168.597177][T11467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2652'. [ 168.869101][T11474] loop6: detected capacity change from 0 to 128 [ 168.899197][T11476] loop6: detected capacity change from 0 to 164 [ 168.906518][T11476] Unable to read rock-ridge attributes [ 168.913211][T11476] Unable to read rock-ridge attributes [ 168.936903][T11478] loop6: detected capacity change from 0 to 128 [ 168.968209][T11480] netlink: 'syz.6.2658': attribute type 3 has an invalid length. [ 168.976063][T11480] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2658'. [ 168.986101][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2658'. [ 168.997768][T11480] vlan2: entered promiscuous mode [ 169.100973][ T29] kauditd_printk_skb: 405 callbacks suppressed [ 169.100993][ T29] audit: type=1400 audit(1739861538.374:15487): avc: denied { bind } for pid=11484 comm="syz.6.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.130186][ T29] audit: type=1400 audit(1739861538.374:15488): avc: denied { setopt } for pid=11484 comm="syz.6.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.167951][ T29] audit: type=1400 audit(1739861538.444:15489): avc: denied { module_request } for pid=11488 comm="syz.2.2662" kmod="net-pf-10-proto-255-type-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 169.191672][ T29] audit: type=1326 audit(1739861538.464:15490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11483 comm="syz.7.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f1efbf6cde9 code=0x7ffc0000 [ 169.221044][ T29] audit: type=1326 audit(1739861538.474:15491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.7.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1efbf08fb9 code=0x7ffc0000 [ 169.244737][ T29] audit: type=1326 audit(1739861538.474:15492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.7.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efbf6cde9 code=0x7ffc0000 [ 169.268704][ T29] audit: type=1326 audit(1739861538.474:15493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.7.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efbf6cde9 code=0x7ffc0000 [ 169.331874][ T29] audit: type=1400 audit(1739861538.604:15494): avc: denied { name_bind } for pid=11496 comm="syz.7.2665" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 169.332595][T11497] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 169.367093][T11495] pim6reg1: entered promiscuous mode [ 169.368043][T11499] 9pnet_fd: Insufficient options for proto=fd [ 169.372399][T11495] pim6reg1: entered allmulticast mode [ 169.379097][ T29] audit: type=1400 audit(1739861538.604:15495): avc: denied { node_bind } for pid=11496 comm="syz.7.2665" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 169.405334][ T29] audit: type=1400 audit(1739861538.644:15496): avc: denied { read write } for pid=11498 comm="syz.2.2666" name="event2" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 169.467983][T11504] loop2: detected capacity change from 0 to 164 [ 169.475200][T11504] Unable to read rock-ridge attributes [ 169.481383][T11504] Unable to read rock-ridge attributes [ 169.492414][T11506] loop6: detected capacity change from 0 to 164 [ 169.499950][T11506] Unable to read rock-ridge attributes [ 169.516453][T11506] Unable to read rock-ridge attributes [ 169.542229][T11508] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.556649][T11512] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2671'. [ 169.571231][T11512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.581650][T11512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.591938][T11512] bond0 (unregistering): Released all slaves [ 169.608906][T11516] FAULT_INJECTION: forcing a failure. [ 169.608906][T11516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.622520][T11516] CPU: 1 UID: 0 PID: 11516 Comm: syz.3.2673 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 169.622552][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 169.622567][T11516] Call Trace: [ 169.622574][T11516] [ 169.622606][T11516] dump_stack_lvl+0xf2/0x150 [ 169.622682][T11516] dump_stack+0x15/0x1a [ 169.622703][T11516] should_fail_ex+0x24a/0x260 [ 169.622732][T11516] should_fail+0xb/0x10 [ 169.622795][T11516] should_fail_usercopy+0x1a/0x20 [ 169.622851][T11516] _copy_from_iter+0xd5/0xd00 [ 169.622882][T11516] ? kmalloc_reserve+0x16e/0x190 [ 169.622902][T11516] ? __build_skb_around+0x196/0x1f0 [ 169.622922][T11516] ? __alloc_skb+0x21f/0x310 [ 169.622940][T11516] ? __virt_addr_valid+0x1ed/0x250 [ 169.623045][T11516] ? __check_object_size+0x364/0x520 [ 169.623100][T11516] netlink_sendmsg+0x460/0x6e0 [ 169.623135][T11516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.623166][T11516] __sock_sendmsg+0x140/0x180 [ 169.623224][T11516] ____sys_sendmsg+0x326/0x4b0 [ 169.623296][T11516] __sys_sendmsg+0x19d/0x230 [ 169.623332][T11516] __x64_sys_sendmsg+0x46/0x50 [ 169.623359][T11516] x64_sys_call+0x2734/0x2dc0 [ 169.623385][T11516] do_syscall_64+0xc9/0x1c0 [ 169.623428][T11516] ? clear_bhb_loop+0x55/0xb0 [ 169.623494][T11516] ? clear_bhb_loop+0x55/0xb0 [ 169.623525][T11516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.623552][T11516] RIP: 0033:0x7fc22825cde9 [ 169.623567][T11516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.623620][T11516] RSP: 002b:00007fc2268c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.623639][T11516] RAX: ffffffffffffffda RBX: 00007fc228475fa0 RCX: 00007fc22825cde9 [ 169.623651][T11516] RDX: 0000000004048084 RSI: 0000400000000380 RDI: 0000000000000005 [ 169.623665][T11516] RBP: 00007fc2268c7090 R08: 0000000000000000 R09: 0000000000000000 [ 169.623677][T11516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.623688][T11516] R13: 0000000000000000 R14: 00007fc228475fa0 R15: 00007fffc752c748 [ 169.623706][T11516] [ 169.834808][T11517] loop6: detected capacity change from 0 to 512 [ 169.854214][T11517] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 169.864148][T11508] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.878280][T11368] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.892076][T11519] loop3: detected capacity change from 0 to 128 [ 169.901127][T11519] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.914302][T11519] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.926587][T11519] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.2674: No space for directory leaf checksum. Please run e2fsck -D. [ 169.942165][T11519] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm syz.3.2674: checksumming directory block 0 [ 169.955509][T11519] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.2674: No space for directory leaf checksum. Please run e2fsck -D. [ 169.970926][T11519] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm syz.3.2674: checksumming directory block 0 [ 169.984070][T11508] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.000267][T11525] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm iou-wrk-11519: No space for directory leaf checksum. Please run e2fsck -D. [ 170.015958][T11525] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm iou-wrk-11519: checksumming directory block 0 [ 170.029871][T11531] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm iou-wrk-11519: No space for directory leaf checksum. Please run e2fsck -D. [ 170.045695][T11531] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm iou-wrk-11519: checksumming directory block 0 [ 170.058550][T11531] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm iou-wrk-11519: No space for directory leaf checksum. Please run e2fsck -D. [ 170.074462][T11531] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm iou-wrk-11519: checksumming directory block 0 [ 170.087379][T11531] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm iou-wrk-11519: No space for directory leaf checksum. Please run e2fsck -D. [ 170.089215][T11368] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.102985][T11531] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm iou-wrk-11519: checksumming directory block 0 [ 170.134984][T11508] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.156579][T11531] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm iou-wrk-11519: No space for directory leaf checksum. Please run e2fsck -D. [ 170.172310][T11531] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm iou-wrk-11519: checksumming directory block 0 [ 170.184881][T11532] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm iou-wrk-11519: No space for directory leaf checksum. Please run e2fsck -D. [ 170.200707][T11532] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm iou-wrk-11519: checksumming directory block 0 [ 170.214549][T11532] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm iou-wrk-11519: No space for directory leaf checksum. Please run e2fsck -D. [ 170.224842][T11368] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.230424][T11532] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm iou-wrk-11519: checksumming directory block 0 [ 170.251211][T11531] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm iou-wrk-11519: No space for directory leaf checksum. Please run e2fsck -D. [ 170.267089][T11531] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm iou-wrk-11519: checksumming directory block 0 [ 170.338490][T11368] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.385701][T11368] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.399896][T11508] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.408893][T11030] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.422826][T11508] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.449446][T11543] loop3: detected capacity change from 0 to 164 [ 170.459949][T11368] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.469596][T11543] Unable to read rock-ridge attributes [ 170.478359][T11508] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.488923][T11543] Unable to read rock-ridge attributes [ 170.492139][T11508] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.522492][T11523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=11523 comm=syz.6.2675 [ 170.594401][T11560] loop2: detected capacity change from 0 to 256 [ 170.685719][T11576] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.698360][T11577] loop4: detected capacity change from 0 to 1024 [ 170.728207][T11577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.742755][T11576] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.837753][T11576] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.870008][T11110] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.908896][T11576] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.988219][T11576] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.010024][T11593] loop4: detected capacity change from 0 to 128 [ 171.027815][T11576] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.050784][T11576] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.063838][T11576] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.155096][T11594] lo speed is unknown, defaulting to 1000 [ 171.274352][T11599] lo speed is unknown, defaulting to 1000 [ 171.390140][T11594] FAULT_INJECTION: forcing a failure. [ 171.390140][T11594] name failslab, interval 1, probability 0, space 0, times 0 [ 171.402831][T11594] CPU: 0 UID: 0 PID: 11594 Comm: syz.2.2697 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 171.402861][T11594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 171.402873][T11594] Call Trace: [ 171.402880][T11594] [ 171.402888][T11594] dump_stack_lvl+0xf2/0x150 [ 171.402915][T11594] dump_stack+0x15/0x1a [ 171.402940][T11594] should_fail_ex+0x24a/0x260 [ 171.403012][T11594] should_failslab+0x8f/0xb0 [ 171.403050][T11594] __kmalloc_noprof+0xab/0x3f0 [ 171.403073][T11594] ? bpf_test_init+0xc7/0x170 [ 171.403142][T11594] bpf_test_init+0xc7/0x170 [ 171.403170][T11594] bpf_prog_test_run_xdp+0x321/0x8b0 [ 171.403253][T11594] ? __rcu_read_unlock+0x4e/0x70 [ 171.403281][T11594] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 171.403372][T11594] bpf_prog_test_run+0x20f/0x3a0 [ 171.403414][T11594] __sys_bpf+0x400/0x7a0 [ 171.403532][T11594] __x64_sys_bpf+0x43/0x50 [ 171.403557][T11594] x64_sys_call+0x2914/0x2dc0 [ 171.403620][T11594] do_syscall_64+0xc9/0x1c0 [ 171.403654][T11594] ? clear_bhb_loop+0x55/0xb0 [ 171.403736][T11594] ? clear_bhb_loop+0x55/0xb0 [ 171.403764][T11594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.403796][T11594] RIP: 0033:0x7f3f17decde9 [ 171.403811][T11594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.403858][T11594] RSP: 002b:00007f3f16457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.403879][T11594] RAX: ffffffffffffffda RBX: 00007f3f18005fa0 RCX: 00007f3f17decde9 [ 171.403894][T11594] RDX: 0000000000000048 RSI: 0000400000000600 RDI: 000000000000000a [ 171.403910][T11594] RBP: 00007f3f16457090 R08: 0000000000000000 R09: 0000000000000000 [ 171.403944][T11594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.403959][T11594] R13: 0000000000000000 R14: 00007f3f18005fa0 R15: 00007fffa0467978 [ 171.403982][T11594] [ 172.369653][T11615] loop6: detected capacity change from 0 to 1024 [ 172.376727][T11615] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 172.387693][T11615] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 172.417243][T11615] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 172.429784][T11618] __nla_validate_parse: 3 callbacks suppressed [ 172.429802][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2706'. [ 172.449907][T11619] loop3: detected capacity change from 0 to 1024 [ 172.467447][T11619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.496729][T11615] EXT4-fs (loop6): invalid journal inode [ 172.502780][T11618] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 172.518154][T11619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.569279][T11615] Cannot find add_set index 0 as target [ 172.607055][T11030] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.758431][T11638] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2711'. [ 172.858293][T11641] xt_CT: No such helper "pptp" [ 172.892443][T11645] loop6: detected capacity change from 0 to 512 [ 172.911785][T11645] EXT4-fs: Ignoring removed nobh option [ 172.918127][T11645] EXT4-fs: dax option not supported [ 173.016695][T11655] pim6reg1: entered promiscuous mode [ 173.022037][T11655] pim6reg1: entered allmulticast mode [ 173.164424][T11659] loop4: detected capacity change from 0 to 8192 [ 173.396610][T11666] sd 0:0:1:0: device reset [ 173.486666][T11681] loop4: detected capacity change from 0 to 1024 [ 173.508440][T11681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.522021][T11681] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.741591][T11711] ================================================================== [ 173.749756][T11711] BUG: KCSAN: data-race in getrusage / vms_clear_ptes [ 173.756560][T11711] [ 173.758888][T11711] write to 0xffff88811a056978 of 8 bytes by task 11710 on cpu 0: [ 173.766617][T11711] vms_clear_ptes+0x1a2/0x300 [ 173.771313][T11711] vms_complete_munmap_vmas+0x17b/0x480 [ 173.776889][T11711] do_vmi_align_munmap+0x344/0x390 [ 173.782027][T11711] do_vmi_munmap+0x1eb/0x230 [ 173.786639][T11711] __se_sys_mremap+0x696/0xf10 [ 173.791416][T11711] __x64_sys_mremap+0x67/0x80 [ 173.796109][T11711] x64_sys_call+0x27e8/0x2dc0 [ 173.800799][T11711] do_syscall_64+0xc9/0x1c0 [ 173.805317][T11711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.811223][T11711] [ 173.813565][T11711] read to 0xffff88811a056978 of 8 bytes by task 11711 on cpu 1: [ 173.821196][T11711] getrusage+0xa15/0xb70 [ 173.825464][T11711] io_sq_thread+0x5f9/0x1100 [ 173.830070][T11711] ret_from_fork+0x4b/0x60 [ 173.834498][T11711] ret_from_fork_asm+0x1a/0x30 [ 173.839294][T11711] [ 173.841619][T11711] value changed: 0x00000000000014e6 -> 0x0000000000001ab1 [ 173.848726][T11711] [ 173.851047][T11711] Reported by Kernel Concurrency Sanitizer on: [ 173.857193][T11711] CPU: 1 UID: 0 PID: 11711 Comm: iou-sqp-11710 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 173.868220][T11711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 173.878284][T11711] ================================================================== [ 174.321688][T11110] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.