last executing test programs: 4m5.552769832s ago: executing program 32 (id=105): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='br_fdb_add\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 3m44.528719039s ago: executing program 3 (id=358): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000580)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@fragment={0x6, 0x0, 0x2, 0x0, 0x0, 0x3, 0x65}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @empty}}}}}}, 0x0) (fail_nth: 1) 3m44.525247568s ago: executing program 3 (id=360): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x80000000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8102, &(0x7f0000001240), 0x7, 0x521, &(0x7f0000001400)="$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") mount(0x0, &(0x7f00000009c0)='.\x00', 0x0, 0x22be836, 0x0) 3m44.43435162s ago: executing program 3 (id=362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 3m44.331329902s ago: executing program 3 (id=363): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./bus\x00', 0x100c000, &(0x7f0000000840)={[{@nolazytime}, {}, {@barrier_val}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}]}, 0xfc, 0x57c, &(0x7f0000000100)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, 0x0, 0x0, 0x5c5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[], 0x50) r4 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000052d0b3d38e3e0ab0000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) ptrace$pokeuser(0x6, r4, 0x358, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x6000) syz_pidfd_open(0x0, 0x0) setregid(0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001814010000000000fedbdf250800010000000000080003"], 0x20}}, 0x0) 3m44.160445014s ago: executing program 3 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone3(&(0x7f0000000600)={0x40000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff], 0x1}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x30, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @loopback, {[@ssrr={0x89, 0x2b, 0xe8, [@private=0xa010102, @remote, @private=0xa010100, @multicast2, @multicast1, @private=0xa010101, @rand_addr=0x64010100, @local, @multicast2, @loopback]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r3 = eventfd(0x5) io_setup(0x3, &(0x7f0000001000)=0x0) io_submit(r4, 0x1, &(0x7f0000001640)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x6, 0x3, r3, 0x0, 0x59, 0x6, 0x0, 0x3, r3}]) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 3m43.679513841s ago: executing program 3 (id=376): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x3, {0xa, 0x4e20, 0xdf9, @private2, 0x400}}}, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100002d0001000000000000600000010100800c0000000000000000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x44010}, 0x0) 3m43.633152081s ago: executing program 33 (id=376): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x3, {0xa, 0x4e20, 0xdf9, @private2, 0x400}}}, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100002d0001000000000000600000010100800c0000000000000000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x44010}, 0x0) 2m4.62566768s ago: executing program 6 (id=1754): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2m4.59928642s ago: executing program 6 (id=1755): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 2m4.364206593s ago: executing program 6 (id=1758): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x4000, &(0x7f0000000180), 0x1, 0x789, &(0x7f0000001240)="$eJzs3M9rG2caAOB3JlacH96VF/awe8kuJJBAiGzHl+RU91J6CQQCvabGHhvjsRUsObXdQJzeCoU0vrSlUNp7j70WQvoH9FYCLfTWQ6G0qXtoe1GRLCuJIylKYkeJ+zww1veNvpn3fWfkzzPgUQB/W/+v/0gihiLiYkQUm+vTiDjYaB2KWN8at3nv2lR9SaJWu/RzUt8sNmvF1r6S5uvRaGwS/4mIO4WI0+88GreyujY/mefZUrM/Ul24MlJZXTsztzA5m81mi2Pj50fPjY+fGx3ftVpPvHH+8K2vX9vY+OaL6s1jA2eSmGjUHc3adi3QA7aOSSEmdqxf3ItgfZT0MGbgOeQBAEB39ev8A81rs0IU40C3qzQXcAAAAPBSqg3WevVHzyMBAACAF0wS/c4AAAAA2Fvb/wew/WzvXj0H28lPr0bEcLv4A41niCMORSEijmwmDz1+kGxtBs9k/UZE3J5o8/nr5Ynm7kbvNw/vzh7Zbbfr889Eu/knbc0/0Wb+Gdj+7oRn1Hn+ux//QIf572KPMb785L+FjvFvVFbePdYuftKKn3SI/2aP8W9uvHer03u1zyJOtv37kzwUq8v3Q4zMzOXtfrVa6d7589TdzvVHHHkkfpI0oibd67/SY/1vb/46v94l/qnj3c//VvzBh7arfybeb+aRRsSt5mu9v7EjxvGFb796NHKyvh1/usPxb3/+X2/V/2mP9X//+eBKj0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgIY2IoUjSUqudpqVSxNGI+HccSfNypXp6pry8OF1/L2I4CunMXJ6NRkRxq5/U+2ON9v3+2R398Yj413eHt4LO5VlpqpxP97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWo5GxFAkaSki0oj4rZimpVK/swIAAAB23XC/EwAAAAD2nPt/AAAA2P+e9v4/2eU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3t4oUL9aW2ee/aVL0/fXV1eb589cx0VpkvLSxPlabKS1dKs+XybJ6VpsoLj9tfGhFj52N5ZaSaVaojldW1ywvl5cXq5bmFydnsclZ4LlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwpIYaS5KWIiJttNO0VIr4R0QMRyGZmcuz0Yj4Z0TcLRYG6/2xficNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArqusrs1P5nm29HI3avurnJ4bkUS8AGl0aHzUPCvdxiTrEXn2Q3Nkn1JNm+GfZT9Plvz1xxyWfjf+14e5CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/qusrs1P5nm2VOl3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRX+mMSEfXlZPHE0M53Dya/FxuvEfHWx5c+WJmsVpfG6ut/aa2vfthcf/aBDa8/zxoAAABg33vlSQZv36dv38cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qrK6Nj+Z59nSHjbiRr+rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsZfAQAA//9bFLc7") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000008001000ffffffff08001900", @ANYRES32], 0x38}}, 0x8090) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socketpair(0x27, 0x80000, 0x1ff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000200)={0xffffffffffffffff, 0x4, 0xe1, 0x3, @vifc_lcl_addr=@loopback, @broadcast}, 0x10) pwrite64(r2, 0x0, 0x0, 0x9000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10) r4 = syz_clone3(&(0x7f0000000900)={0x10200000, &(0x7f0000000380), &(0x7f0000000400), &(0x7f00000004c0), {0x18}, &(0x7f0000000800)=""/223, 0xdf, &(0x7f0000001a00)=""/4096, &(0x7f0000000540)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r2}}, 0x58) ptrace(0x8, r4) modify_ldt$read(0x0, 0xfffffffffffffffd, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e7465720004", @ANYBLOB="d7"], 0x118}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xa, 'vxcan1\x00'}) 2m2.641949208s ago: executing program 6 (id=1773): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x4000, &(0x7f0000000180), 0x1, 0x789, &(0x7f0000001240)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000008001000ffffffff08001900", @ANYRES32], 0x38}}, 0x8090) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socketpair(0x27, 0x80000, 0x1ff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000200)={0xffffffffffffffff, 0x4, 0xe1, 0x3, @vifc_lcl_addr=@loopback, @broadcast}, 0x10) pwrite64(r1, 0x0, 0x0, 0x9000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10) r4 = syz_clone3(&(0x7f0000000900)={0x10200000, &(0x7f0000000380), &(0x7f0000000400), &(0x7f00000004c0), {0x18}, &(0x7f0000000800)=""/223, 0xdf, &(0x7f0000001a00)=""/4096, &(0x7f0000000540)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r1}}, 0x58) ptrace(0x8, r4) modify_ldt$read(0x0, 0xfffffffffffffffd, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e7465720004", @ANYBLOB="d7"], 0x118}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xa, 'vxcan1\x00'}) 2m1.444526705s ago: executing program 6 (id=1786): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r3, r2, r2, 0x0) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) 2m1.166140419s ago: executing program 6 (id=1789): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 2m1.165917799s ago: executing program 34 (id=1789): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 1m43.33723885s ago: executing program 1 (id=2039): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 1m43.115432243s ago: executing program 1 (id=2042): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_config_ext, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000200)={r2, r3}) syz_io_uring_setup(0xa6a, &(0x7f0000000280)={0x0, 0x18e2, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r6, 0x0, 0x0, r6}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x0, 0x290, 0x290, 0x0, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, &(0x7f00000000c0), {[{{@ipv6={@local, @empty, [0xff000000, 0xff000000, 0x0, 0xffffffff], [0xffffff00, 0xff, 0x0, 0xffffff00], 'veth1\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0x4, 0x9, 0x2, 0xa}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@dev={0xac, 0x14, 0x14, 0x38}, 0x18, 0x1a}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x4a, 0x7, 0x2, 0x3e}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x7}}}, {{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x0, 0xff], [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], 'bond0\x00', 'macvlan1\x00', {}, {}, 0x0, 0x2, 0x1, 0x8}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@remote, 0xe, 0x4, 0x6}}}, {{@ipv6={@private2, @mcast2, [0xffffff00, 0xffffff00, 0xffffff, 0xffffff00], [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 'vcan0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x73, 0xf7, 0x5, 0x26}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv6=@local, 0x17, 0x30, 0xc7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3, 0x80, 0x6, 0x9}, {0xe6, 0x8, 0x9, 0xfffffff8}, {0x6, 0x1, 0xff, 0xd71a}, {0x9, 0xb, 0x2, 0x2}]}, 0x10) write$binfmt_misc(r7, &(0x7f0000001280), 0x6) 1m42.568392181s ago: executing program 1 (id=2049): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1m42.425913503s ago: executing program 1 (id=2052): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x4000, &(0x7f0000000180), 0x1, 0x789, &(0x7f0000001240)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8090) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socketpair(0x27, 0x80000, 0x1ff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000200)={0xffffffffffffffff, 0x4, 0xe1, 0x3, @vifc_lcl_addr=@loopback, @broadcast}, 0x10) pwrite64(r2, 0x0, 0x0, 0x9000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10) r5 = syz_clone3(&(0x7f0000000900)={0x10200000, &(0x7f0000000380), &(0x7f0000000400), &(0x7f00000004c0), {0x18}, &(0x7f0000000800)=""/223, 0xdf, &(0x7f0000001a00)=""/4096, &(0x7f0000000540)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r2}}, 0x58) ptrace(0x8, r5) modify_ldt$read(0x0, 0xfffffffffffffffd, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e7465720004", @ANYBLOB="d7"], 0x118}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xa, 'vxcan1\x00'}) 1m41.003856123s ago: executing program 1 (id=2070): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x2800800, &(0x7f0000000240)={[{@inode_readahead_blks}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fb}}, {}, {@prjquota}, {@dioread_nolock}, {@noinit_itable}]}, 0x1e, 0x4bc, &(0x7f0000000540)="$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") 1m40.55987943s ago: executing program 1 (id=2076): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_alloc\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x32d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 1m40.52738868s ago: executing program 35 (id=2076): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_alloc\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x32d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 1m12.88369226s ago: executing program 5 (id=2349): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x4000, &(0x7f0000000180), 0x1, 0x789, &(0x7f0000001240)="$eJzs3M9rG2caAOB3JlacH96VF/awe8kuJJBAiGzHl+RU91J6CQQCvabGHhvjsRUsObXdQJzeCoU0vrSlUNp7j70WQvoH9FYCLfTWQ6G0qXtoe1GRLCuJIylKYkeJ+zww1veNvpn3fWfkzzPgUQB/W/+v/0gihiLiYkQUm+vTiDjYaB2KWN8at3nv2lR9SaJWu/RzUt8sNmvF1r6S5uvRaGwS/4mIO4WI0+88GreyujY/mefZUrM/Ul24MlJZXTsztzA5m81mi2Pj50fPjY+fGx3ftVpPvHH+8K2vX9vY+OaL6s1jA2eSmGjUHc3adi3QA7aOSSEmdqxf3ItgfZT0MGbgOeQBAEB39ev8A81rs0IU40C3qzQXcAAAAPBSqg3WevVHzyMBAACAF0wS/c4AAAAA2Fvb/wew/WzvXj0H28lPr0bEcLv4A41niCMORSEijmwmDz1+kGxtBs9k/UZE3J5o8/nr5Ynm7kbvNw/vzh7Zbbfr889Eu/knbc0/0Wb+Gdj+7oRn1Hn+ux//QIf572KPMb785L+FjvFvVFbePdYuftKKn3SI/2aP8W9uvHer03u1zyJOtv37kzwUq8v3Q4zMzOXtfrVa6d7589TdzvVHHHkkfpI0oibd67/SY/1vb/46v94l/qnj3c//VvzBh7arfybeb+aRRsSt5mu9v7EjxvGFb796NHKyvh1/usPxb3/+X2/V/2mP9X//+eBKj0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgIY2IoUjSUqudpqVSxNGI+HccSfNypXp6pry8OF1/L2I4CunMXJ6NRkRxq5/U+2ON9v3+2R398Yj413eHt4LO5VlpqpxP97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWo5GxFAkaSki0oj4rZimpVK/swIAAAB23XC/EwAAAAD2nPt/AAAA2P+e9v4/2eU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3t4oUL9aW2ee/aVL0/fXV1eb589cx0VpkvLSxPlabKS1dKs+XybJ6VpsoLj9tfGhFj52N5ZaSaVaojldW1ywvl5cXq5bmFydnsclZ4LlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwpIYaS5KWIiJttNO0VIr4R0QMRyGZmcuz0Yj4Z0TcLRYG6/2xficNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArqusrs1P5nm29HI3avurnJ4bkUS8AGl0aHzUPCvdxiTrEXn2Q3Nkn1JNm+GfZT9Plvz1xxyWfjf+14e5CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/qusrs1P5nm2VOl3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRX+mMSEfXlZPHE0M53Dya/FxuvEfHWx5c+WJmsVpfG6ut/aa2vfthcf/aBDa8/zxoAAABg33vlSQZv36dv38cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qrK6Nj+Z59nSHjbiRr+rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsZfAQAA//9bFLc7") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32], 0x38}}, 0x8090) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socketpair(0x27, 0x80000, 0x1ff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000200)={0xffffffffffffffff, 0x4, 0xe1, 0x3, @vifc_lcl_addr=@loopback, @broadcast}, 0x10) pwrite64(r2, 0x0, 0x0, 0x9000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10) r5 = syz_clone3(&(0x7f0000000900)={0x10200000, &(0x7f0000000380), &(0x7f0000000400), &(0x7f00000004c0), {0x18}, &(0x7f0000000800)=""/223, 0xdf, &(0x7f0000001a00)=""/4096, &(0x7f0000000540)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r2}}, 0x58) ptrace(0x8, r5) modify_ldt$read(0x0, 0xfffffffffffffffd, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e7465720004", @ANYBLOB="d7"], 0x118}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xa, 'vxcan1\x00'}) 1m11.298278002s ago: executing program 5 (id=2365): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040200000000806c010000150010001800feffffff09000d2000000401a80074efc22bb31ad49f50a03cb4d92706000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e67c20b278d56cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000004c0)=r2}, 0x20) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x101}, 0x18) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [0x0, 0xff000000], 'veth1_to_batadv\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {'Yv'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x4, 0x4, 0x6, 0x10, 0x800, r8, 0x80000000, '\x00', 0x0, r9, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000006780)={0xffffffffffffffff, 0xe0, &(0x7f0000006680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000064c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000006500)=[0x0, 0x0], &(0x7f0000006540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8f, &(0x7f0000006580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000065c0), &(0x7f0000006600), 0x8, 0x2c, 0x8, 0x8, &(0x7f0000006640)}}, 0x10) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000006a40)={0x18, 0x7, &(0x7f00000067c0)=@raw=[@map_idx={0x18, 0x5, 0x5, 0x0, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}], &(0x7f0000006800)='GPL\x00', 0x3, 0x87, &(0x7f0000006840)=""/135, 0x40f00, 0x53, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000006900)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000006940)={0x2, 0x9, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000006980)=[r12, r12, r8], &(0x7f00000069c0)=[{0x4, 0x2, 0x9, 0xb}, {0x1, 0x3, 0xc}, {0x2, 0x5, 0xe, 0xa}, {0x3, 0x3, 0x2, 0x9}, {0x0, 0x1, 0x5, 0x8}, {0x0, 0x2, 0xa, 0x2f8a1d4cf953b35}], 0x10, 0x9f1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000006b80)={0x17, 0x16, &(0x7f0000006340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, r8}, @alu={0x4, 0x1, 0xb, 0x1, 0x4, 0xffffffffffffffc0, 0x8}, @map_val={0x18, 0x1, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x913a}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000006400)='GPL\x00', 0xc, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sysctl, r9, 0x8, &(0x7f0000006440)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000006480)={0x4, 0xb, 0x5, 0x2bbd}, 0x10, r13, r14, 0x2, &(0x7f0000006b00)=[r8], &(0x7f0000006b40)=[{0x5, 0x3, 0x3, 0x8}, {0x3, 0x4, 0x3, 0x1}], 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x8, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000300)='GPL\x00', 0xa2d, 0xc7, &(0x7f0000000540)=""/199, 0x41000, 0x40, '\x00', r6, @fallback=0x5, r7, 0x8, &(0x7f0000000380)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x5, 0x3, 0x6}, 0x10, r13, r0, 0x1, &(0x7f0000000440)=[r1, r3, 0xffffffffffffffff], &(0x7f0000000480)=[{0x3, 0x3, 0x5, 0xf}], 0x10, 0x8, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440), 0x4) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$incfs(0xffffffffffffffff, &(0x7f0000000480)='.pending_reads\x00', 0x102, 0x132) r16 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r16, 0x0) 1m10.314396857s ago: executing program 5 (id=2376): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x4000, &(0x7f0000000180), 0x1, 0x789, &(0x7f0000001240)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32], 0x38}}, 0x8090) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socketpair(0x27, 0x80000, 0x1ff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000200)={0xffffffffffffffff, 0x4, 0xe1, 0x3, @vifc_lcl_addr=@loopback, @broadcast}, 0x10) pwrite64(r2, 0x0, 0x0, 0x9000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10) r5 = syz_clone3(&(0x7f0000000900)={0x10200000, &(0x7f0000000380), &(0x7f0000000400), &(0x7f00000004c0), {0x18}, &(0x7f0000000800)=""/223, 0xdf, &(0x7f0000001a00)=""/4096, &(0x7f0000000540)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r2}}, 0x58) ptrace(0x8, r5) modify_ldt$read(0x0, 0xfffffffffffffffd, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e7465720004", @ANYBLOB="d7"], 0x118}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xa, 'vxcan1\x00'}) 1m8.908732856s ago: executing program 5 (id=2394): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x2800800, &(0x7f0000000240)={[{@inode_readahead_blks}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fb}}, {}, {@prjquota}, {@dioread_nolock}, {@noinit_itable}]}, 0x1e, 0x4bc, &(0x7f0000000540)="$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") 1m8.471734273s ago: executing program 5 (id=2405): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x4000, &(0x7f0000000180), 0x1, 0x789, &(0x7f0000001240)="$eJzs3M9rG2caAOB3JlacH96VF/awe8kuJJBAiGzHl+RU91J6CQQCvabGHhvjsRUsObXdQJzeCoU0vrSlUNp7j70WQvoH9FYCLfTWQ6G0qXtoe1GRLCuJIylKYkeJ+zww1veNvpn3fWfkzzPgUQB/W/+v/0gihiLiYkQUm+vTiDjYaB2KWN8at3nv2lR9SaJWu/RzUt8sNmvF1r6S5uvRaGwS/4mIO4WI0+88GreyujY/mefZUrM/Ul24MlJZXTsztzA5m81mi2Pj50fPjY+fGx3ftVpPvHH+8K2vX9vY+OaL6s1jA2eSmGjUHc3adi3QA7aOSSEmdqxf3ItgfZT0MGbgOeQBAEB39ev8A81rs0IU40C3qzQXcAAAAPBSqg3WevVHzyMBAACAF0wS/c4AAAAA2Fvb/wew/WzvXj0H28lPr0bEcLv4A41niCMORSEijmwmDz1+kGxtBs9k/UZE3J5o8/nr5Ynm7kbvNw/vzh7Zbbfr889Eu/knbc0/0Wb+Gdj+7oRn1Hn+ux//QIf572KPMb785L+FjvFvVFbePdYuftKKn3SI/2aP8W9uvHer03u1zyJOtv37kzwUq8v3Q4zMzOXtfrVa6d7589TdzvVHHHkkfpI0oibd67/SY/1vb/46v94l/qnj3c//VvzBh7arfybeb+aRRsSt5mu9v7EjxvGFb796NHKyvh1/usPxb3/+X2/V/2mP9X//+eBKj0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgIY2IoUjSUqudpqVSxNGI+HccSfNypXp6pry8OF1/L2I4CunMXJ6NRkRxq5/U+2ON9v3+2R398Yj413eHt4LO5VlpqpxP97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWo5GxFAkaSki0oj4rZimpVK/swIAAAB23XC/EwAAAAD2nPt/AAAA2P+e9v4/2eU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3t4oUL9aW2ee/aVL0/fXV1eb589cx0VpkvLSxPlabKS1dKs+XybJ6VpsoLj9tfGhFj52N5ZaSaVaojldW1ywvl5cXq5bmFydnsclZ4LlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwpIYaS5KWIiJttNO0VIr4R0QMRyGZmcuz0Yj4Z0TcLRYG6/2xficNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArqusrs1P5nm29HI3avurnJ4bkUS8AGl0aHzUPCvdxiTrEXn2Q3Nkn1JNm+GfZT9Plvz1xxyWfjf+14e5CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/qusrs1P5nm2VOl3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRX+mMSEfXlZPHE0M53Dya/FxuvEfHWx5c+WJmsVpfG6ut/aa2vfthcf/aBDa8/zxoAAABg33vlSQZv36dv38cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qrK6Nj+Z59nSHjbiRr+rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsZfAQAA//9bFLc7") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000", @ANYRES32], 0x38}}, 0x8090) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socketpair(0x27, 0x80000, 0x1ff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000200)={0xffffffffffffffff, 0x4, 0xe1, 0x3, @vifc_lcl_addr=@loopback, @broadcast}, 0x10) pwrite64(r2, 0x0, 0x0, 0x9000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10) r5 = syz_clone3(&(0x7f0000000900)={0x10200000, &(0x7f0000000380), &(0x7f0000000400), &(0x7f00000004c0), {0x18}, &(0x7f0000000800)=""/223, 0xdf, &(0x7f0000001a00)=""/4096, &(0x7f0000000540)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r2}}, 0x58) ptrace(0x8, r5) modify_ldt$read(0x0, 0xfffffffffffffffd, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e7465720004", @ANYBLOB="d7"], 0x118}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xa, 'vxcan1\x00'}) 1m8.436203613s ago: executing program 36 (id=2405): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x4000, &(0x7f0000000180), 0x1, 0x789, &(0x7f0000001240)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000", @ANYRES32], 0x38}}, 0x8090) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socketpair(0x27, 0x80000, 0x1ff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000200)={0xffffffffffffffff, 0x4, 0xe1, 0x3, @vifc_lcl_addr=@loopback, @broadcast}, 0x10) pwrite64(r2, 0x0, 0x0, 0x9000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10) r5 = syz_clone3(&(0x7f0000000900)={0x10200000, &(0x7f0000000380), &(0x7f0000000400), &(0x7f00000004c0), {0x18}, &(0x7f0000000800)=""/223, 0xdf, &(0x7f0000001a00)=""/4096, &(0x7f0000000540)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r2}}, 0x58) ptrace(0x8, r5) modify_ldt$read(0x0, 0xfffffffffffffffd, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e7465720004", @ANYBLOB="d7"], 0x118}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xa, 'vxcan1\x00'}) 1m4.201832053s ago: executing program 9 (id=2406): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x4000, &(0x7f0000000180), 0x1, 0x789, &(0x7f0000001240)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000008001000ffffffff08001900", @ANYRES32], 0x38}}, 0x8090) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socketpair(0x27, 0x80000, 0x1ff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000200)={0xffffffffffffffff, 0x4, 0xe1, 0x3, @vifc_lcl_addr=@loopback, @broadcast}, 0x10) pwrite64(r1, 0x0, 0x0, 0x9000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10) r4 = syz_clone3(&(0x7f0000000900)={0x10200000, &(0x7f0000000380), &(0x7f0000000400), &(0x7f00000004c0), {0x18}, &(0x7f0000000800)=""/223, 0xdf, &(0x7f0000001a00)=""/4096, &(0x7f0000000540)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r1}}, 0x58) ptrace(0x8, r4) modify_ldt$read(0x0, 0xfffffffffffffffd, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e7465720004", @ANYBLOB="d7"], 0x118}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xa, 'vxcan1\x00'}) 1m3.030501839s ago: executing program 9 (id=2448): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) 1m1.730622848s ago: executing program 9 (id=2454): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) (fail_nth: 1) 1m1.684577748s ago: executing program 37 (id=2454): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) (fail_nth: 1) 3.594932469s ago: executing program 7 (id=3360): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r2, 0x102, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'H,\\\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040080}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 3.400361291s ago: executing program 7 (id=3364): r0 = socket(0x10, 0x80003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) 3.355465032s ago: executing program 7 (id=3367): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@discard}]}, 0x1, 0x787, &(0x7f0000001000)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==") r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000680)={0xb, 0x29, 0x2, {0x4}}, 0xb) sendfile(r1, r1, &(0x7f00000002c0), 0x7f03) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) 2.483306074s ago: executing program 7 (id=3382): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32"], 0xf8}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) 1.901868823s ago: executing program 8 (id=3394): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@discard}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000680)={0xb, 0x29, 0x2, {0x4}}, 0xb) sendfile(r1, r1, &(0x7f00000002c0), 0x7f03) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) 1.692777646s ago: executing program 0 (id=3395): sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0203", 0x2, 0x0, 0x0, 0x0) unshare(0x2c020400) r0 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 1.634656376s ago: executing program 0 (id=3396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.606787247s ago: executing program 4 (id=3397): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$eJzs3M9rG2caAOB3JlacH96VF/awe8kuJJBAiGzHl+RU91J6CQQCvabGHhvjsRUsObXdQJzeCoU0vrSlUNp7j70WQvoH9FYCLfTWQ6G0qXtoe1GRLCuJIylKYkeJ+zww1veNvpn3fWfkzzPgUQB/W/+v/0gihiLiYkQUm+vTiDjYaB2KWN8at3nv2lR9SaJWu/RzUt8sNmvF1r6S5uvRaGwS/4mIO4WI0+88GreyujY/mefZUrM/Ul24MlJZXTsztzA5m81mi2Pj50fPjY+fGx3ftVpPvHH+8K2vX9vY+OaL6s1jA2eSmGjUHc3adi3QA7aOSSEmdqxf3ItgfZT0MGbgOeQBAEB39ev8A81rs0IU40C3qzQXcAAAAPBSqg3WevVHzyMBAACAF0wS/c4AAAAA2Fvb/wew/WzvXj0H28lPr0bEcLv4A41niCMORSEijmwmDz1+kGxtBs9k/UZE3J5o8/nr5Ynm7kbvNw/vzh7Zbbfr889Eu/knbc0/0Wb+Gdj+7oRn1Hn+ux//QIf572KPMb785L+FjvFvVFbePdYuftKKn3SI/2aP8W9uvHer03u1zyJOtv37kzwUq8v3Q4zMzOXtfrVa6d7589TdzvVHHHkkfpI0oibd67/SY/1vb/46v94l/qnj3c//VvzBh7arfybeb+aRRsSt5mu9v7EjxvGFb796NHKyvh1/usPxb3/+X2/V/2mP9X//+eBKj0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgIY2IoUjSUqudpqVSxNGI+HccSfNypXp6pry8OF1/L2I4CunMXJ6NRkRxq5/U+2ON9v3+2R398Yj413eHt4LO5VlpqpxP97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWo5GxFAkaSki0oj4rZimpVK/swIAAAB23XC/EwAAAAD2nPt/AAAA2P+e9v4/2eU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3t4oUL9aW2ee/aVL0/fXV1eb589cx0VpkvLSxPlabKS1dKs+XybJ6VpsoLj9tfGhFj52N5ZaSaVaojldW1ywvl5cXq5bmFydnsclZ4LlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwpIYaS5KWIiJttNO0VIr4R0QMRyGZmcuz0Yj4Z0TcLRYG6/2xficNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArqusrs1P5nm29HI3avurnJ4bkUS8AGl0aHzUPCvdxiTrEXn2Q3Nkn1JNm+GfZT9Plvz1xxyWfjf+14e5CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/qusrs1P5nm2VOl3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRX+mMSEfXlZPHE0M53Dya/FxuvEfHWx5c+WJmsVpfG6ut/aa2vfthcf/aBDa8/zxoAAABg33vlSQZv36dv38cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qrK6Nj+Z59nSHjbiRr+rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsZfAQAA//9bFLc7") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) 1.538465708s ago: executing program 7 (id=3398): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000008000000000000000000000000000000000007c14ade99767eb322d9931d887e5836a2a12ac9b3a08ce29e8288bbd6744a4c0eca251eb343b5d31cf9f17736ef5cc8eb6bbe999361004b50bf137bbf049cbe4fb077a7b98f0db8ac297028399e0d57cf043d449ac5ac52f5bda9d460000f2e56a6b31472484d6938a804487aa010eaf7eba30c8de8d85187f372743ec2f522dc041c8bb437ad320c51663440ea3145aa0587ad97ce334818a9e2e9d0155d90f6067bb73315d97844ac999b905e42c5de2dfbbdf0a3c93a973b767c9a01e958ede"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='afs_send_data\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x3c) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100), 0x4) r1 = dup(r0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x14, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @exit, @jmp={0x5, 0x1, 0x3, 0x5, 0x6, 0xffffffffffffffff}, @generic={0x10, 0xf, 0x9, 0x7, 0x83}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0xd, 0xa2, &(0x7f00000006c0)=""/162, 0x41100, 0x20, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x5, 0x4, 0x8}, 0x10, 0x2a666, 0xffffffffffffffff, 0x4, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x2, 0x5, 0x3, 0x5}, {0x5, 0x3, 0xa, 0x1}, {0x5, 0x2, 0x2, 0x1}, {0x1, 0x4, 0x7, 0x7}], 0x10, 0x4, @void, @value}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', 0xffffffffffffffff, 0x0, 0x10000000000ac6}, 0x18) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1.523177008s ago: executing program 0 (id=3399): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)}], 0x1, 0xe7b, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033449fdd0200000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.309591211s ago: executing program 7 (id=3404): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x0, 0x9c}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x7, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {0x0, 0x400}, {}, {0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x8001}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x403}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x4, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x4000bf}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x7}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xd5}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe6f1}, {}, {0x0, 0x0, 0x0, 0x0, 0x3e0d905c, 0x6}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x2}, {0x4, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x5, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x57, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x1, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x8, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x0, 0x0, 0x20}, {}, {}, {0x4}, {}, {0xa7, 0x0, 0x0, 0x0, 0x401}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, {0x0, 0x0, 0x1000, 0x1}, {}, {0xd2, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x4, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff801}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1000000}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x1}, {}, {0x523e, 0xfffffffe}, {}, {0x4, 0x0, 0x0, 0x10}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {0x4}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_usb_connect(0x5, 0x5e9, &(0x7f0000001240)={{0x12, 0x1, 0x110, 0x3d, 0x8, 0xaa, 0x10, 0x1e2d, 0xb7, 0xacc4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d7, 0x3, 0xe3, 0x3, 0x40, 0xc4, [{{0x9, 0x4, 0x8f, 0x0, 0x2, 0xff, 0xe7, 0xb7, 0x6, [], [{{0x9, 0x5, 0x0, 0x8, 0x8, 0x5, 0x7, 0x6}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0xf3, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x9}]}}]}}, {{0x9, 0x4, 0x83, 0x50, 0x8, 0xa9, 0xe3, 0x8a, 0x3, [@uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x8, 0x6, "36a5dc"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7, 0x9f7, 0xf, "2d870a"}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x5, 0x8, 0x5}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x44, 0xe, 0x7, "41ab81e02f"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x81, 0x4, 0x7, 0x6, "47b5", "8f4b"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x1ff, 0x7, "9bf718"}]}], [{{0x9, 0x5, 0x6, 0x8, 0x200, 0xfb, 0x5, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x2}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x13, 0xf6, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x77}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x81, 0x2, 0xfc}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x7, 0x7, 0xfa, [@generic={0xa2, 0xf, "7487b516e71ffe818e9fb73ccdbe8165bf66431ccc2c5adb27db83ff158b32706d981a468497c0298e7a7d0d2d4d43271cf7a419d61214a92db5810671e3fb1f717f90ab154d01e345e7f3a511a84aba0f6861a8be2dccb0a71ecaf3c2e36e366eeeeb4bd9edf34225075c7d08e5c99663c1f1e5ada4e44fda0951cd9b4a352cf346745688dcc31e3628925e764819f4c72e289c828284712cf3cc210feae134"}, @generic={0x47, 0xb, "5f4893c9099feab622f348940323a2f2607329848a2d14cfe9b1b44f2dfa49b7f4e420ed4c467c50a7119711621aea04fef997ea6fb36d7530ad7cbd342d1844edac864e7b"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0xa, 0x2, 0x0, [@generic={0x60, 0x0, "5f055d6b7c6b09337bb770eaa9fb468b67998286038293e29c257928c13c4f32e573d0e0908837941d7de361ba0aba7658bfe5d74dd3c26c152af62d875112d4d9b71e0c06d887c04dceaababdb3b47d8e45ec215cff232a07eed447a7cd"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0x2, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xf}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x7, 0x5, 0x1, [@generic={0x3f, 0x31, "3a4e8a51cb244d535541fbd574c3bbabd4a6842bde8239ec69c88c32c1ab9bc1daf263192cbbe4bf96c089ed877ce387d65cbdc1b7693c737f065aecf2"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x6, 0xe3, 0x9, [@generic={0x2a, 0xf, "057d7bfeca4d56fb1df2366f6d4315a1ec2f17bf60853282f627aac28bec672579282c15c19ad63d"}]}}]}}, {{0x9, 0x4, 0x93, 0x8, 0x7, 0x17, 0x78, 0x79, 0x10, [@hid_hid={0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0xaa7}}], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x3, 0x4, 0xc, [@generic={0xf2, 0x7, "1274a639f18e1ef2bf23da63603fe6c6520669e4226dc07f8c265bdf293d3573f1d1931734f16575590e9ae4d386900ba7be039df78c2bdce130368b70e8e8f36ea0a52e9f21f08b3002680a30015c83484915aacb4be011a62789d9c35d5d74e78a59afb1e1a5aa6a21623ad2648fc5c62e17b1cf3d88a644a21550035a4a17b7e322d78f567d96cb42f65930abbebe318bc5abe21dc8c0c83df38a086f67986503c846eee58ca5a4e49ef0925e205c2f044d32b9d0713af0a9d138380140c766cf1b68f9a2896278637e55a3e4d90b8659eb4ac6cfe3e007a3d88cb9fa4b713438d5ced0eeb573beca800e6658653b"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x1, 0x8, 0x1}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x2, 0x4, 0x2a}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x25, 0x5, 0xc7, [@generic={0xd3, 0x3, "e5f4f415d2fbdaaa537fa74578dd59a28e4c5d1dee1e500a827d60e0f4575243cc7ed660099ef0ef180ba45cca25d4c755217a0e20188b52e49ce2dc31762cd051520b8ffea22ed730e99db3c4b114abaafa8274d9b464fbd280c421e888dcae6f7a2d20c725c7ee1ce2139940c1b1c02a5d2c4d6497802b163288ca35ed5a6259fd6f21dfdbe667cbaddc4d1b1bc7401bd02c801436913775493b818fd1ecc32524e102e022fa9670249c67ccfa66a75d71b20f7449cd4bed5a2d62b2b8cd31d96451bb7659357306115cf9a72d00e92a"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x20, 0x3, 0x4, 0xd0, [@generic={0x6f, 0x22, "be275c54224490c9205ba53e72ed4c30dc1d56f927122c02bcf9a1a417ce79323bc070a68510299a4b1a211a73b9fd175b867d734ef4f82849b8b8258d7044dd2480fac0c9a8f9c2b2ffa43652b09a91007445533c880bd0971d5c825573992ea48b5b7933b35e90fdf5bc5021"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x7208}]}}, {{0x9, 0x5, 0x80, 0x0, 0x418, 0x4, 0x81, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x38}, @generic={0x2b, 0x21, "0e12532a49caac5a579352c7d0111a3d0e7f8d6a48446dfde4ca323bc118aa85abfacb83ee344346f9"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0xe5, 0x2, 0x8, [@generic={0x8a, 0x3, "78b0e35c20d269a6381360fc9e817fbfbad948b877768d5524285aca61f6ba148f2776e4a4e2eba139627988a83245db9f4e335eeaf6bafbd1afae83ebe726b1464db6e67f7d115097276f73d8f70b02beab90b7328b41196e10299fa7943fd09bff7524dd35002f39a52e4b89a362593fdb501ed7535ce07d205a29bad66725aa4721cd95952a04"}]}}]}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x201, 0x6, 0x4, 0xb, 0x20, 0xad}, 0x2f, &(0x7f0000000700)={0x5, 0xf, 0x2f, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x6, 0x2, 0x0, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x71, 0x1000}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3, 0xc, 0x200, 0x5}]}, 0x3, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x2002}}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000009000000010000000000000a05000000000000615f612e00000af769c3b33370e6476da69a327d2cb8600e7e66dd4c8b45128b85cea637"], &(0x7f0000000200)=""/109, 0x2d, 0x6d, 0x0, 0x5, 0x10000, @value}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x9, 0x7, 0x80000000, 0x100, 0xffffffffffffffff, 0xb1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="81000000000000000000000000007f784c6cac354331c2770e8e50036533ac8ea783e731873284b2cecff62584008e27456a2f1115810f31847aaa84ad64355138e70d931b2f5746bf257bfd08d89469efb7339da805f5fcd3849d9baefcc317bc6c9da2b1d6423a14907899703627db0887b0ccdcf0b747793e4c912cc0ad32c9a226fbe8b9890b5190af4ce99b9a7eab4119", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000400"/28], 0x50) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r7, &(0x7f0000000300)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f00000002c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xf, 0x5, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, r4, 0x1, r5, r2, r6, r7], &(0x7f0000000500), 0x10, 0x7, @void, @value}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) fchdir(r9) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000500)='affs\x00', 0xa00800, 0x0) r10 = syz_open_procfs(r8, &(0x7f0000000240)='smaps_rollup\x00') read$hiddev(r10, &(0x7f0000000100)=""/145, 0x91) pread64(r2, &(0x7f00000194c0)=""/102398, 0xfeb3, 0x8) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000e80)={'pim6reg1\x00', @broadcast}) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f0000001180)={0x6, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) setsockopt$inet_mreqn(r11, 0x0, 0x24, &(0x7f0000000400)={@multicast1, @rand_addr=0x64010100}, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 1.260533122s ago: executing program 2 (id=3405): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2000000000000000}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x52, &(0x7f0000000080)={0x0, 0x624d, 0x2, 0x0, 0x3d8}, &(0x7f0000ff0000), 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000094fffffffffff700"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kmem_cache_free\x00', r6, 0x0, 0x80000000000007}, 0x18) sendmsg$inet6(r4, &(0x7f0000000500)={&(0x7f0000000300)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}, 0x3}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000003c0)="a83affa8dd42a30952132aaddbfece4dc6b602", 0x13}, {&(0x7f00000005c0)="9f40fed503c1c080ec8bc3a315feddc19ffbf2611129bb949aaa1aae3c4fd9defa00ebb49fde6867ef8c9440d350e11de7420ea396147a6046c7fe4cb784967d12bb52448d2306acb8ca2e75dd235e2ec931e8f08fc9596b50cfcc6614db688b63ea6293472a170166991213b148d3978ba2f3746c8ac86b07aaa3c17e86b43cd9ca3215b43509a5720df23c384edbf3c47c00c05c0205e0276a368c7f070731bce7db5ac441a7247675845860bee85d64d2688b26b60f29d1466e5e5e", 0xbd}, {&(0x7f0000000680)="ee90ab32593d5f8cecc9621937250bd2f82119473f1b74e4cb103562997ae179460d8c749211ba4671f9349f1aacdac2a85e2b1f3043e5099bbee93042653a267e358a9c55a5f2104e7ce6675ddaa8781f9329a3963af617882a0ae61313276f25665389e16c42d230e98f86f97c2d586fc301a4cad7cda07082304056463d4af429047a1d4fc553ce4f0806a62c9f", 0x8f}, {&(0x7f0000000440)="650fbf7f0cba9fa2f543b6a95f8bb2e0d67b256fc3f2a58fadc09b7dc1ce1802c009eb4a62de53fbde74994000e43098df2773", 0x33}, {&(0x7f0000000740)="9184204b3dfa711ceee61ff4c1c8808d63ef0618ba0808673122c587ef53ca20514afb86ed6c2344531d3c3af6969911a817966d0aeea3b54d30251161fd0ed262bccec712a3041683d937427643757885bfca79d59b1add5344ccf92b0970f6aeb0bf56c7cae5db4fe0b3e1dd2f7cf2fd4f8ad4f75a07e1dd156c92722c0f8f0488d4f5c894b54e759376ed89c71b9381de8bd534a8d9f0f4430e8ef2845fa0f7", 0xa1}, {&(0x7f0000000480)="7c8705d7b615051ce4be764bded1a89106e60a2d4ca367ce7ed3ebb0b419bd30e83488e154463c2e28f94e93a195", 0x2e}, {&(0x7f00000010c0)="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", 0x1000}], 0x7, &(0x7f0000000a40)=ANY=[@ANYBLOB="b80000000000000029000000360000006213000000000000075000000002125c0100030000000000000094000000000000000800000000000000800000000000000007000000000000000affff9966146d476230c1621944cc36a1ffffffffff0500000000000000070000000000000002000000000000000718000000020400040005000000000000000500000000000000c91020010000000000000000000000000000000100c910ff01000000000000000000000000000105020008050200000401100000"], 0xb8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m ', 0x2}], 0x1}, 0x8005) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg$unix(r7, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x2) 1.234773372s ago: executing program 4 (id=3406): sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0203", 0x2, 0x0, 0x0, 0x0) unshare(0x2c020400) r0 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 1.174324623s ago: executing program 4 (id=3407): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 1.064800655s ago: executing program 4 (id=3408): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c0003801800038014000100"], 0xf8}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) 948.404306ms ago: executing program 8 (id=3409): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 738.808729ms ago: executing program 4 (id=3410): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r1) 722.233149ms ago: executing program 8 (id=3411): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x0, 0x9c}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x7, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {0x0, 0x400}, {}, {0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x8001}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x403}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x4, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x4000bf}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x7}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xd5}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe6f1}, {}, {0x0, 0x0, 0x0, 0x0, 0x3e0d905c, 0x6}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x2}, {0x4, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x5, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x57, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x1, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x8, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x0, 0x0, 0x20}, {}, {}, {0x4}, {}, {0xa7, 0x0, 0x0, 0x0, 0x401}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, {0x0, 0x0, 0x1000, 0x1}, {}, {0xd2, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x4, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff801}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1000000}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x1}, {}, {0x523e, 0xfffffffe}, {}, {0x4, 0x0, 0x0, 0x10}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {0x4}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_usb_connect(0x5, 0x5e9, &(0x7f0000001240)={{0x12, 0x1, 0x110, 0x3d, 0x8, 0xaa, 0x10, 0x1e2d, 0xb7, 0xacc4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d7, 0x3, 0xe3, 0x3, 0x40, 0xc4, [{{0x9, 0x4, 0x8f, 0x0, 0x2, 0xff, 0xe7, 0xb7, 0x6, [], [{{0x9, 0x5, 0x0, 0x8, 0x8, 0x5, 0x7, 0x6}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0xf3, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x9}]}}]}}, {{0x9, 0x4, 0x83, 0x50, 0x8, 0xa9, 0xe3, 0x8a, 0x3, [@uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x8, 0x6, "36a5dc"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7, 0x9f7, 0xf, "2d870a"}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x5, 0x8, 0x5}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x44, 0xe, 0x7, "41ab81e02f"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x81, 0x4, 0x7, 0x6, "47b5", "8f4b"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x1ff, 0x7, "9bf718"}]}], [{{0x9, 0x5, 0x6, 0x8, 0x200, 0xfb, 0x5, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x2}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x13, 0xf6, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x77}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x81, 0x2, 0xfc}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x7, 0x7, 0xfa, [@generic={0xa2, 0xf, "7487b516e71ffe818e9fb73ccdbe8165bf66431ccc2c5adb27db83ff158b32706d981a468497c0298e7a7d0d2d4d43271cf7a419d61214a92db5810671e3fb1f717f90ab154d01e345e7f3a511a84aba0f6861a8be2dccb0a71ecaf3c2e36e366eeeeb4bd9edf34225075c7d08e5c99663c1f1e5ada4e44fda0951cd9b4a352cf346745688dcc31e3628925e764819f4c72e289c828284712cf3cc210feae134"}, @generic={0x47, 0xb, "5f4893c9099feab622f348940323a2f2607329848a2d14cfe9b1b44f2dfa49b7f4e420ed4c467c50a7119711621aea04fef997ea6fb36d7530ad7cbd342d1844edac864e7b"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0xa, 0x2, 0x0, [@generic={0x60, 0x0, "5f055d6b7c6b09337bb770eaa9fb468b67998286038293e29c257928c13c4f32e573d0e0908837941d7de361ba0aba7658bfe5d74dd3c26c152af62d875112d4d9b71e0c06d887c04dceaababdb3b47d8e45ec215cff232a07eed447a7cd"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0x2, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xf}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x7, 0x5, 0x1, [@generic={0x3f, 0x31, "3a4e8a51cb244d535541fbd574c3bbabd4a6842bde8239ec69c88c32c1ab9bc1daf263192cbbe4bf96c089ed877ce387d65cbdc1b7693c737f065aecf2"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x6, 0xe3, 0x9, [@generic={0x2a, 0xf, "057d7bfeca4d56fb1df2366f6d4315a1ec2f17bf60853282f627aac28bec672579282c15c19ad63d"}]}}]}}, {{0x9, 0x4, 0x93, 0x8, 0x7, 0x17, 0x78, 0x79, 0x10, [@hid_hid={0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0xaa7}}], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x3, 0x4, 0xc, [@generic={0xf2, 0x7, "1274a639f18e1ef2bf23da63603fe6c6520669e4226dc07f8c265bdf293d3573f1d1931734f16575590e9ae4d386900ba7be039df78c2bdce130368b70e8e8f36ea0a52e9f21f08b3002680a30015c83484915aacb4be011a62789d9c35d5d74e78a59afb1e1a5aa6a21623ad2648fc5c62e17b1cf3d88a644a21550035a4a17b7e322d78f567d96cb42f65930abbebe318bc5abe21dc8c0c83df38a086f67986503c846eee58ca5a4e49ef0925e205c2f044d32b9d0713af0a9d138380140c766cf1b68f9a2896278637e55a3e4d90b8659eb4ac6cfe3e007a3d88cb9fa4b713438d5ced0eeb573beca800e6658653b"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x1, 0x8, 0x1}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x2, 0x4, 0x2a}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x25, 0x5, 0xc7, [@generic={0xd3, 0x3, "e5f4f415d2fbdaaa537fa74578dd59a28e4c5d1dee1e500a827d60e0f4575243cc7ed660099ef0ef180ba45cca25d4c755217a0e20188b52e49ce2dc31762cd051520b8ffea22ed730e99db3c4b114abaafa8274d9b464fbd280c421e888dcae6f7a2d20c725c7ee1ce2139940c1b1c02a5d2c4d6497802b163288ca35ed5a6259fd6f21dfdbe667cbaddc4d1b1bc7401bd02c801436913775493b818fd1ecc32524e102e022fa9670249c67ccfa66a75d71b20f7449cd4bed5a2d62b2b8cd31d96451bb7659357306115cf9a72d00e92a"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x20, 0x3, 0x4, 0xd0, [@generic={0x6f, 0x22, "be275c54224490c9205ba53e72ed4c30dc1d56f927122c02bcf9a1a417ce79323bc070a68510299a4b1a211a73b9fd175b867d734ef4f82849b8b8258d7044dd2480fac0c9a8f9c2b2ffa43652b09a91007445533c880bd0971d5c825573992ea48b5b7933b35e90fdf5bc5021"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x7208}]}}, {{0x9, 0x5, 0x80, 0x0, 0x418, 0x4, 0x81, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x38}, @generic={0x2b, 0x21, "0e12532a49caac5a579352c7d0111a3d0e7f8d6a48446dfde4ca323bc118aa85abfacb83ee344346f9"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0xe5, 0x2, 0x8, [@generic={0x8a, 0x3, "78b0e35c20d269a6381360fc9e817fbfbad948b877768d5524285aca61f6ba148f2776e4a4e2eba139627988a83245db9f4e335eeaf6bafbd1afae83ebe726b1464db6e67f7d115097276f73d8f70b02beab90b7328b41196e10299fa7943fd09bff7524dd35002f39a52e4b89a362593fdb501ed7535ce07d205a29bad66725aa4721cd95952a04"}]}}]}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x201, 0x6, 0x4, 0xb, 0x20, 0xad}, 0x2f, &(0x7f0000000700)={0x5, 0xf, 0x2f, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x6, 0x2, 0x0, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x71, 0x1000}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3, 0xc, 0x200, 0x5}]}, 0x3, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x2002}}]}) 620.868241ms ago: executing program 0 (id=3412): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x503, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x58}}, 0x0) 619.954541ms ago: executing program 4 (id=3413): socket$kcm(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000300)=@ethtool_gstrings={0x1b, 0x6, 0x7c, "7e6bfe330ef9485f1d32fbbdf835728aff346beeed4d2c8820ec2f60b5a2d0058b1675bfb6379b16aa7d9ba5ab928bcef3889f7b3ea48c8c0865e01b33e87de2a5a9e53605bcdef86ceaa049948c0b30474860887a5460542337bf1a636e283a1eed401435ad1e904f85878db9672b5c9d9a9c3f620df2ba637c353d"}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4842, &(0x7f00000000c0), 0x7, 0x4c6, &(0x7f0000000b00)="$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") recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3cd369014538b7f1840034de59dc515a2adb7dc9e2d8261d3e5219a9010010190043674c0000000000000000ff010000000000000000000075f000019c00000100000000000000000000000000000000000000006357008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000003000000000000000000000010000000084000500ac1414aa000000000000000000000000000004d3320000000a000000fe80000000000000000000000000001906350000003f0900010000004789000009000000ac1414aa000000000000000000000000000004d6ff0000000a0000007f00000100000000000000000000000007350000da0203000f0000000200000001000100"], 0x13c}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000400)=0x10f3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00dce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendto$inet6(r7, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 496.704693ms ago: executing program 0 (id=3414): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000008000000000000000000000000000000000007c14ade99767eb322d9931d887e5836a2a12ac9b3a08ce29e8288bbd6744a4c0eca251eb343b5d31cf9f17736ef5cc8eb6bbe999361004b50bf137bbf049cbe4fb077a7b98f0db8ac297028399e0d57cf043d449ac5ac52f5bda9d460000f2e56a6b31472484d6938a804487aa010eaf7eba30c8de8d85187f372743ec2f522dc041c8bb437ad320c51663440ea3145aa0587ad97ce334818a9e2e9d0155d90f6067bb73315d97844ac999b905e42c5de2dfbbdf0a3c93a973b767c9a01e958ede"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='afs_send_data\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x3c) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100), 0x4) r1 = dup(r0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x14, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @exit, @jmp={0x5, 0x1, 0x3, 0x5, 0x6, 0xffffffffffffffff}, @generic={0x10, 0xf, 0x9, 0x7, 0x83}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0xd, 0xa2, &(0x7f00000006c0)=""/162, 0x41100, 0x20, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x5, 0x4, 0x8}, 0x10, 0x2a666, 0xffffffffffffffff, 0x4, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x2, 0x5, 0x3, 0x5}, {0x5, 0x3, 0xa, 0x1}, {0x5, 0x2, 0x2, 0x1}, {0x1, 0x4, 0x7, 0x7}], 0x10, 0x4, @void, @value}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', 0xffffffffffffffff, 0x0, 0x10000000000ac6}, 0x18) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 430.419283ms ago: executing program 0 (id=3415): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_config_ext, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c000380080001400000000008000240"], 0xf8}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000200)={r2, r3}) syz_io_uring_setup(0xa6a, &(0x7f0000000280)={0x0, 0x18e2, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r6, 0x0, 0x0, r6}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x0, 0x290, 0x290, 0x0, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, &(0x7f00000000c0), {[{{@ipv6={@local, @empty, [0xff000000, 0xff000000, 0x0, 0xffffffff], [0xffffff00, 0xff, 0x0, 0xffffff00], 'veth1\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0x4, 0x9, 0x2, 0xa}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@dev={0xac, 0x14, 0x14, 0x38}, 0x18, 0x1a}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x4a, 0x7, 0x2, 0x3e}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x7}}}, {{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x0, 0xff], [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], 'bond0\x00', 'macvlan1\x00', {}, {}, 0x0, 0x2, 0x1, 0x8}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@remote, 0xe, 0x4, 0x6}}}, {{@ipv6={@private2, @mcast2, [0xffffff00, 0xffffff00, 0xffffff, 0xffffff00], [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 'vcan0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x73, 0xf7, 0x5, 0x26}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv6=@local, 0x17, 0x30, 0xc7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3, 0x80, 0x6, 0x9}, {0xe6, 0x8, 0x9, 0xfffffff8}, {0x6, 0x1, 0xff, 0xd71a}, {0x9, 0xb, 0x2, 0x2}]}, 0x10) 226.260436ms ago: executing program 2 (id=3416): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) unshare(0x2000400) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 189.425007ms ago: executing program 2 (id=3417): sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0203", 0x2, 0x0, 0x0, 0x0) unshare(0x2c020400) r0 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 189.096127ms ago: executing program 2 (id=3418): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 173.861367ms ago: executing program 2 (id=3419): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) 126.810918ms ago: executing program 8 (id=3420): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 46.958289ms ago: executing program 8 (id=3421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x9}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r0, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) connect$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x1, r2, 0x1, 0x88, 0x6, @multicast}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) 18.864139ms ago: executing program 2 (id=3422): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000800)={[{@shortname_winnt}, {@utf8no}, {@fat=@check_strict}, {@fat=@discard}, {@utf8}, {@fat=@nfs}, {@shortname_win95}, {@shortname_lower}, {@utf8}], [{@smackfsroot={'smackfsroot', 0x3d, ')/#\xa1#{)#)[\xe9A\x04\xb6+$\xd7!Ze\x18\x11\xc9\xd5.+\xf8\x0f+\xa5=e_zAq5c\xba\xd8\xad\x93\xe7QJ\xf6\x8e\x99\xe2\xae4\xa60\xa7\xf5\xaasx?L\xc3\x93\x19o?t\xe3Y\xdb\xb8aW\xb8\xf2\xf9\x8f\xa0v\x8b\xb6*D\x85\xea\xbd\x81\xb2\x9d\xd3\xf8#\xf2o\x9b22\xba\t\x10\xeb\x10\b(\x02\xb9\x8aN\xab\x18~\xaa\xbf\xd7'}}, {@smackfshat={'smackfshat', 0x3d, ')@^!,&['}}, {@obj_type={'obj_type', 0x3d, ')/#\xa1#{)#)[\xe9A\x04\xb6+$\xd7!Ze\x18\x11\xc9\xd5.+\xf8\x0f+\xa5=e_zAq5c\xba\xd8\xad\x93\xe7QJ\xf6\x8e\x99\xe2\xae4\xa60\xa7\xf5\xaasx?L\xc3\x93\x19o?t\xe3Y\xdb\xb8aW\xb8\xf2\xf9\x8f\xa0v\x8b\xb6*D\x85\xea\xbd\x81\xb2\x9d\xd3\xf8#\xf2o\x9b22\xba\t\x10\xeb\x10\b(\x02\xb9\x8aN\xab\x18~\xaa\xbf\xd7'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}, 0xfd, 0x2a0, &(0x7f0000000540)="$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") openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpu.weight\x00', 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x0) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0xffffffff}, 0x10, 0x100800) bind$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff, @local}, 0x10) syslog(0x2, &(0x7f0000000000)=""/36, 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) creat(&(0x7f00000001c0)='./file1\x00', 0x2) 0s ago: executing program 8 (id=3423): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033449fdd0200000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): vated: batadv_slave_1 [ 227.941610][T13041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.950637][T13041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.959483][T13041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.968490][T13041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.054011][T13132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.075479][T13132] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.096761][ T3864] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.104053][ T3864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.135496][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.142721][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.216419][T13132] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.227228][T13132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.312667][T13344] loop0: detected capacity change from 0 to 8192 [ 228.326639][T13350] loop7: detected capacity change from 0 to 2048 [ 228.396462][T13132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.409384][T13350] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.486211][T13350] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.863032][T13132] veth0_vlan: entered promiscuous mode [ 228.899670][T13132] veth1_vlan: entered promiscuous mode [ 228.934414][T13132] veth0_macvtap: entered promiscuous mode [ 228.954559][T13132] veth1_macvtap: entered promiscuous mode [ 229.003268][T13132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.013958][T13132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.064772][T13132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.099559][T13132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.100284][T13418] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2492'. [ 229.110197][T13132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.173518][T13132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.223121][T13132] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.232200][T13132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.241014][T13132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.249844][T13132] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.475584][T13350] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2489: bg 0: block 345: padding at end of block bitmap is not set [ 229.515592][T13437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2495'. [ 229.542254][T13350] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 236 with error 117 [ 229.554975][T13350] EXT4-fs (loop7): This should not happen!! Data will be lost [ 229.554975][T13350] [ 229.737875][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2499'. [ 229.943294][ T9891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.129671][T13506] loop2: detected capacity change from 0 to 164 [ 230.223938][T13516] loop8: detected capacity change from 0 to 1024 [ 230.231529][T13516] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 230.242571][T13516] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 230.264981][T13516] JBD2: no valid journal superblock found [ 230.270816][T13516] EXT4-fs (loop8): Could not load journal inode [ 230.488373][T13533] FAULT_INJECTION: forcing a failure. [ 230.488373][T13533] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 230.502048][T13533] CPU: 1 UID: 0 PID: 13533 Comm: syz.4.2506 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 230.502081][T13533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 230.502107][T13533] Call Trace: [ 230.502115][T13533] [ 230.502124][T13533] __dump_stack+0x1d/0x30 [ 230.502149][T13533] dump_stack_lvl+0xe8/0x140 [ 230.502171][T13533] dump_stack+0x15/0x1b [ 230.502192][T13533] should_fail_ex+0x265/0x280 [ 230.502296][T13533] should_fail_alloc_page+0xf2/0x100 [ 230.502334][T13533] __alloc_frozen_pages_noprof+0xff/0x360 [ 230.502368][T13533] alloc_pages_mpol+0xb3/0x250 [ 230.502395][T13533] folio_alloc_mpol_noprof+0x39/0x80 [ 230.502475][T13533] shmem_get_folio_gfp+0x3cf/0xd40 [ 230.502504][T13533] shmem_write_begin+0xa8/0x190 [ 230.502539][T13533] generic_perform_write+0x181/0x490 [ 230.502606][T13533] shmem_file_write_iter+0xc5/0xf0 [ 230.502636][T13533] iter_file_splice_write+0x5ef/0x970 [ 230.502666][T13533] ? __pfx_iter_file_splice_write+0x10/0x10 [ 230.502710][T13533] direct_splice_actor+0x153/0x2a0 [ 230.502730][T13533] ? shmem_mmap+0x31/0xb0 [ 230.502939][T13533] splice_direct_to_actor+0x30f/0x680 [ 230.502961][T13533] ? __pfx_direct_splice_actor+0x10/0x10 [ 230.503036][T13533] do_splice_direct+0xda/0x150 [ 230.503062][T13533] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 230.503100][T13533] do_sendfile+0x380/0x640 [ 230.503144][T13533] __x64_sys_sendfile64+0x105/0x150 [ 230.503182][T13533] x64_sys_call+0xb39/0x2fb0 [ 230.503250][T13533] do_syscall_64+0xd0/0x1a0 [ 230.503277][T13533] ? clear_bhb_loop+0x25/0x80 [ 230.503304][T13533] ? clear_bhb_loop+0x25/0x80 [ 230.503329][T13533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.503427][T13533] RIP: 0033:0x7f6905d2e969 [ 230.503446][T13533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.503468][T13533] RSP: 002b:00007f6904397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 230.503494][T13533] RAX: ffffffffffffffda RBX: 00007f6905f55fa0 RCX: 00007f6905d2e969 [ 230.503509][T13533] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 230.503520][T13533] RBP: 00007f6904397090 R08: 0000000000000000 R09: 0000000000000000 [ 230.503531][T13533] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 230.503542][T13533] R13: 0000000000000000 R14: 00007f6905f55fa0 R15: 00007ffc2f6a7818 [ 230.503559][T13533] [ 230.913064][T13541] netlink: 'syz.7.2508': attribute type 1 has an invalid length. [ 231.114595][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 231.114614][ T29] audit: type=1326 audit(1746233336.471:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13552 comm="syz.8.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3429e7e969 code=0x7ffc0000 [ 231.144694][T13554] loop2: detected capacity change from 0 to 2048 [ 231.146548][ T29] audit: type=1326 audit(1746233336.471:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13552 comm="syz.8.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3429e7e969 code=0x7ffc0000 [ 231.285448][T13561] syz.4.2510 uses obsolete (PF_INET,SOCK_PACKET) [ 231.358735][T13565] loop8: detected capacity change from 0 to 512 [ 231.383222][T13565] EXT4-fs (loop8): too many log groups per flexible block group [ 231.390968][T13565] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 231.417319][T13554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.442517][T13554] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.454209][T13565] EXT4-fs (loop8): mount failed [ 231.461131][ T29] audit: type=1326 audit(1746233336.531:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13552 comm="syz.8.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f3429e7e969 code=0x7ffc0000 [ 231.485551][ T29] audit: type=1326 audit(1746233336.531:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13552 comm="syz.8.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3429e7e969 code=0x7ffc0000 [ 231.509503][ T29] audit: type=1326 audit(1746233336.531:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13552 comm="syz.8.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3429e7e969 code=0x7ffc0000 [ 231.633894][T13580] loop0: detected capacity change from 0 to 2048 [ 231.653598][T13575] 9pnet_fd: Insufficient options for proto=fd [ 231.827957][T13580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.873575][T13580] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.014880][T13596] loop8: detected capacity change from 0 to 8192 [ 232.082563][T13554] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2511: bg 0: block 345: padding at end of block bitmap is not set [ 232.149184][T13554] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 232.161847][T13554] EXT4-fs (loop2): This should not happen!! Data will be lost [ 232.161847][T13554] [ 232.297550][T13621] loop8: detected capacity change from 0 to 8192 [ 232.341133][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.482992][ T29] audit: type=1326 audit(1746233337.841:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.2.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 232.516655][T13580] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2517: bg 0: block 345: padding at end of block bitmap is not set [ 232.517867][ T29] audit: type=1326 audit(1746233337.841:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.2.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 232.555007][ T29] audit: type=1326 audit(1746233337.841:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.2.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 232.619368][T13643] loop7: detected capacity change from 0 to 8192 [ 232.644672][T13657] loop8: detected capacity change from 0 to 512 [ 232.647735][T13580] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 232.660266][T13657] EXT4-fs: dax option not supported [ 232.663759][T13580] EXT4-fs (loop0): This should not happen!! Data will be lost [ 232.663759][T13580] [ 232.669178][ T29] audit: type=1326 audit(1746233337.951:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.2.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 232.702233][ T29] audit: type=1400 audit(1746233337.991:3307): avc: denied { bind } for pid=13656 comm="syz.8.2525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.764669][T13657] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.811569][T13661] loop2: detected capacity change from 0 to 8192 [ 232.827538][T13671] wireguard0: entered promiscuous mode [ 232.833218][T13671] wireguard0: entered allmulticast mode [ 232.869249][T13657] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.924223][T13041] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.934621][T13657] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.985960][T13657] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.061034][T13657] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.085655][T13657] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.135800][T13657] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.155482][T13657] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.175841][T13698] loop7: detected capacity change from 0 to 8192 [ 233.240116][T13702] loop0: detected capacity change from 0 to 512 [ 233.269089][T13702] EXT4-fs (loop0): too many log groups per flexible block group [ 233.277009][T13702] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 233.313770][T13702] EXT4-fs (loop0): mount failed [ 233.392588][T13717] loop7: detected capacity change from 0 to 512 [ 233.463250][T13717] EXT4-fs (loop7): too many log groups per flexible block group [ 233.471085][T13717] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 233.493311][T13717] EXT4-fs (loop7): mount failed [ 233.641443][T13743] loop7: detected capacity change from 0 to 128 [ 233.664854][T13743] vfat: Unknown parameter 'smackfsroot' [ 233.895412][T13779] vlan2: entered allmulticast mode [ 233.900655][T13779] bond0: entered allmulticast mode [ 233.905922][T13779] bond_slave_0: entered allmulticast mode [ 233.911778][T13779] bond_slave_1: entered allmulticast mode [ 234.079674][T13790] loop0: detected capacity change from 0 to 8192 [ 234.513580][T13825] netlink: 'syz.4.2547': attribute type 10 has an invalid length. [ 234.522028][T13825] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.529531][T13825] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.547887][T13825] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.555114][T13825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.562572][T13825] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.569851][T13825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.603298][T13825] bridge0: entered allmulticast mode [ 234.639722][T13825] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 234.696853][T13847] loop0: detected capacity change from 0 to 2048 [ 234.754304][T13847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.808523][T13850] loop8: detected capacity change from 0 to 8192 [ 234.819653][T13847] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.100558][T13847] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2550: bg 0: block 345: padding at end of block bitmap is not set [ 235.134159][T13847] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 235.146937][T13847] EXT4-fs (loop0): This should not happen!! Data will be lost [ 235.146937][T13847] [ 235.356534][T13041] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.549312][T13931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2563'. [ 235.571787][T13925] netlink: 'syz.7.2562': attribute type 39 has an invalid length. [ 235.806294][T13919] loop0: detected capacity change from 0 to 512 [ 235.836519][T13919] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 235.899635][T13919] EXT4-fs (loop0): orphan cleanup on readonly fs [ 235.952493][T13919] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2560: invalid indirect mapped block 256 (level 2) [ 236.011319][T13919] EXT4-fs (loop0): 2 truncates cleaned up [ 236.091065][T13919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 236.122318][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 236.122345][ T29] audit: type=1326 audit(1746233341.481:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.4.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6905d2d41f code=0x7ffc0000 [ 236.151245][T13961] netlink: 'syz.7.2565': attribute type 39 has an invalid length. [ 236.162184][T13967] FAULT_INJECTION: forcing a failure. [ 236.162184][T13967] name failslab, interval 1, probability 0, space 0, times 0 [ 236.174965][T13967] CPU: 0 UID: 0 PID: 13967 Comm: syz.4.2567 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 236.175041][T13967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 236.175056][T13967] Call Trace: [ 236.175064][T13967] [ 236.175074][T13967] __dump_stack+0x1d/0x30 [ 236.175100][T13967] dump_stack_lvl+0xe8/0x140 [ 236.175125][T13967] dump_stack+0x15/0x1b [ 236.175146][T13967] should_fail_ex+0x265/0x280 [ 236.175251][T13967] should_failslab+0x8c/0xb0 [ 236.175281][T13967] kmem_cache_alloc_noprof+0x50/0x310 [ 236.175366][T13967] ? audit_log_start+0x365/0x6c0 [ 236.175404][T13967] audit_log_start+0x365/0x6c0 [ 236.175446][T13967] audit_seccomp+0x48/0x100 [ 236.175482][T13967] ? __seccomp_filter+0x68c/0x10d0 [ 236.175502][T13967] __seccomp_filter+0x69d/0x10d0 [ 236.175523][T13967] ? avc_has_perm_noaudit+0x1b1/0x200 [ 236.175575][T13967] ? selinux_capable+0x1f9/0x270 [ 236.175606][T13967] __secure_computing+0x82/0x150 [ 236.175631][T13967] syscall_trace_enter+0xcf/0x1e0 [ 236.175659][T13967] do_syscall_64+0xaa/0x1a0 [ 236.175685][T13967] ? clear_bhb_loop+0x25/0x80 [ 236.175761][T13967] ? clear_bhb_loop+0x25/0x80 [ 236.175789][T13967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.175816][T13967] RIP: 0033:0x7f6905d2d37c [ 236.175835][T13967] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 236.175878][T13967] RSP: 002b:00007f6904397030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 236.175902][T13967] RAX: ffffffffffffffda RBX: 00007f6905f55fa0 RCX: 00007f6905d2d37c [ 236.175918][T13967] RDX: 000000000000000f RSI: 00007f69043970a0 RDI: 0000000000000004 [ 236.175934][T13967] RBP: 00007f6904397090 R08: 0000000000000000 R09: 0000000000000000 [ 236.175949][T13967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.175964][T13967] R13: 0000000000000000 R14: 00007f6905f55fa0 R15: 00007ffc2f6a7818 [ 236.175987][T13967] [ 236.175996][T13967] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 236.388325][T13967] audit: out of memory in audit_log_start [ 236.412491][ T29] audit: type=1326 audit(1746233341.521:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.4.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f6905d2e969 code=0x7ffc0000 [ 236.436378][ T29] audit: type=1326 audit(1746233341.761:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13987 comm="syz.8.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3429e7e969 code=0x7ffc0000 [ 236.460242][ T29] audit: type=1326 audit(1746233341.761:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13987 comm="syz.8.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3429e7e969 code=0x7ffc0000 [ 236.483783][ T29] audit: type=1326 audit(1746233341.761:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13987 comm="syz.8.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3429e7e969 code=0x7ffc0000 [ 236.507541][ T29] audit: type=1326 audit(1746233341.761:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13987 comm="syz.8.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3429e7e969 code=0x7ffc0000 [ 236.531510][ T29] audit: type=1326 audit(1746233341.761:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13987 comm="syz.8.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3429e7e969 code=0x7ffc0000 [ 236.555415][ T29] audit: type=1326 audit(1746233341.761:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13987 comm="syz.8.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3429e7e969 code=0x7ffc0000 [ 236.665992][T13041] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.790622][T14004] loop0: detected capacity change from 0 to 2048 [ 236.966908][T14004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.011897][T14004] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.152964][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2563'. [ 237.162222][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2563'. [ 237.171368][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2563'. [ 237.220036][T14058] loop7: detected capacity change from 0 to 8192 [ 237.479595][T14004] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2571: bg 0: block 345: padding at end of block bitmap is not set [ 237.551589][T14004] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 237.564329][T14004] EXT4-fs (loop0): This should not happen!! Data will be lost [ 237.564329][T14004] [ 237.620298][T14085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2580'. [ 237.733496][T13041] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.911650][T14097] loop8: detected capacity change from 0 to 128 [ 237.950033][T14097] EXT4-fs: Ignoring removed nobh option [ 237.995426][T14097] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.062059][T14097] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 238.168551][T14112] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2584'. [ 238.230477][T14112] netlink: 'syz.0.2584': attribute type 1 has an invalid length. [ 238.242992][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2584'. [ 238.381608][T14140] loop0: detected capacity change from 0 to 8192 [ 238.503518][T14156] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2589'. [ 238.545760][T14156] netlink: 'syz.7.2589': attribute type 1 has an invalid length. [ 238.567959][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2589'. [ 238.648262][T14160] loop2: detected capacity change from 0 to 2048 [ 238.748732][T14160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.772438][T14160] ext4 filesystem being mounted at /504/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.786309][T11284] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 238.926634][T14190] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2597'. [ 238.938313][T14190] netlink: 'syz.7.2597': attribute type 1 has an invalid length. [ 239.042993][T14186] loop8: detected capacity change from 0 to 8192 [ 239.247266][T14212] loop8: detected capacity change from 0 to 128 [ 239.287606][T14212] vfat: Unknown parameter 'smackfsroot' [ 239.626184][T14045] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 239.689094][ T152] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 106 with error 117 [ 239.704237][ T152] EXT4-fs (loop2): This should not happen!! Data will be lost [ 239.704237][ T152] [ 239.830060][T14247] loop8: detected capacity change from 0 to 8192 [ 240.183776][T14271] netlink: 'syz.7.2608': attribute type 1 has an invalid length. [ 240.195756][T14274] loop0: detected capacity change from 0 to 512 [ 240.245894][T14274] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 240.419282][T14287] loop7: detected capacity change from 0 to 2048 [ 240.470123][T14287] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.632088][T14293] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 240.923744][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.951683][T14311] loop8: detected capacity change from 0 to 512 [ 241.042951][T14311] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 241.055903][T14335] __nla_validate_parse: 7 callbacks suppressed [ 241.055922][T14335] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2615'. [ 241.110138][T14311] EXT4-fs (loop8): orphan cleanup on readonly fs [ 241.136477][T14335] netlink: 'syz.2.2615': attribute type 1 has an invalid length. [ 241.152133][T14311] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2613: invalid indirect mapped block 256 (level 2) [ 241.178621][T14335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2615'. [ 241.188708][T14311] EXT4-fs (loop8): 2 truncates cleaned up [ 241.195029][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 241.195054][ T29] audit: type=1400 audit(1746233346.551:3535): avc: denied { write } for pid=2987 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.197417][T14311] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 241.207682][ T29] audit: type=1400 audit(1746233346.551:3536): avc: denied { remove_name } for pid=2987 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.258707][ T29] audit: type=1400 audit(1746233346.551:3537): avc: denied { add_name } for pid=2987 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.304477][ T9891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.372123][ T29] audit: type=1326 audit(1746233346.721:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.7.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 241.395983][ T29] audit: type=1326 audit(1746233346.721:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.7.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 241.444430][T14362] loop2: detected capacity change from 0 to 1024 [ 241.464961][T14362] EXT4-fs: Ignoring removed nobh option [ 241.500151][T14362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.512065][ T29] audit: type=1326 audit(1746233346.781:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.7.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 241.536870][ T29] audit: type=1326 audit(1746233346.781:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.7.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 241.560733][ T29] audit: type=1326 audit(1746233346.781:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.7.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 241.584345][ T29] audit: type=1326 audit(1746233346.781:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.7.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 241.608750][ T29] audit: type=1326 audit(1746233346.781:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.7.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 241.699040][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.709131][T11284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.863871][T14401] tipc: Enabled bearer , priority 0 [ 241.937486][T14413] tipc: Disabling bearer [ 241.981088][T14400] loop8: detected capacity change from 0 to 8192 [ 241.994408][T14410] netlink: 'syz.7.2626': attribute type 39 has an invalid length. [ 242.231779][T14436] loop7: detected capacity change from 0 to 8192 [ 242.493434][T14463] syz_tun: entered allmulticast mode [ 242.510429][T14462] syz_tun: left allmulticast mode [ 242.519580][T14465] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2632'. [ 242.564703][T14465] netlink: 'syz.0.2632': attribute type 1 has an invalid length. [ 242.574919][T14474] FAULT_INJECTION: forcing a failure. [ 242.574919][T14474] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 242.588583][T14474] CPU: 1 UID: 0 PID: 14474 Comm: syz.4.2633 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 242.588618][T14474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 242.588711][T14474] Call Trace: [ 242.588718][T14474] [ 242.588726][T14474] __dump_stack+0x1d/0x30 [ 242.588752][T14474] dump_stack_lvl+0xe8/0x140 [ 242.588777][T14474] dump_stack+0x15/0x1b [ 242.588798][T14474] should_fail_ex+0x265/0x280 [ 242.588856][T14474] should_fail_alloc_page+0xf2/0x100 [ 242.588928][T14474] __alloc_frozen_pages_noprof+0xff/0x360 [ 242.588961][T14474] alloc_pages_mpol+0xb3/0x250 [ 242.589035][T14474] alloc_pages_noprof+0x90/0x130 [ 242.589063][T14474] pgd_alloc+0x4f/0x2b0 [ 242.589087][T14474] mm_init+0x34b/0x810 [ 242.589112][T14474] ? kmem_cache_alloc_noprof+0x220/0x310 [ 242.589236][T14474] ? copy_mm+0xdf/0x1310 [ 242.589268][T14474] copy_mm+0x11b/0x1310 [ 242.589299][T14474] ? __hrtimer_setup+0x144/0x170 [ 242.589363][T14474] ? __pfx_it_real_fn+0x10/0x10 [ 242.589386][T14474] ? __pfx_it_real_fn+0x10/0x10 [ 242.589409][T14474] ? tty_audit_fork+0x4b/0x60 [ 242.589433][T14474] ? __init_rwsem+0x5d/0x70 [ 242.589522][T14474] copy_process+0xcf1/0x1f90 [ 242.589551][T14474] kernel_clone+0x16c/0x5b0 [ 242.589575][T14474] ? vfs_write+0x75e/0x8d0 [ 242.589714][T14474] __x64_sys_clone+0xe6/0x120 [ 242.589745][T14474] x64_sys_call+0x2c59/0x2fb0 [ 242.589765][T14474] do_syscall_64+0xd0/0x1a0 [ 242.589792][T14474] ? clear_bhb_loop+0x25/0x80 [ 242.589818][T14474] ? clear_bhb_loop+0x25/0x80 [ 242.589927][T14474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.589953][T14474] RIP: 0033:0x7f6905d2e969 [ 242.589971][T14474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.590056][T14474] RSP: 002b:00007f6904396fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 242.590076][T14474] RAX: ffffffffffffffda RBX: 00007f6905f55fa0 RCX: 00007f6905d2e969 [ 242.590088][T14474] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000004021400 [ 242.590101][T14474] RBP: 00007f6904397090 R08: 0000000000000000 R09: 0000000000000000 [ 242.590114][T14474] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 242.590128][T14474] R13: 0000000000000000 R14: 00007f6905f55fa0 R15: 00007ffc2f6a7818 [ 242.590228][T14474] [ 242.890068][T14465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2632'. [ 242.945038][T14482] loop8: detected capacity change from 0 to 2048 [ 243.026495][T14486] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2635'. [ 243.038044][T14482] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.091223][T14482] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.186312][T14505] loop7: detected capacity change from 0 to 2048 [ 243.219355][T14511] tipc: Started in network mode [ 243.224365][T14511] tipc: Node identity aac920d9ccab, cluster identity 4711 [ 243.231860][T14511] tipc: Enabled bearer , priority 0 [ 243.273202][T14505] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.342356][T14518] tipc: Disabling bearer [ 243.636458][T14482] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2634: bg 0: block 345: padding at end of block bitmap is not set [ 243.653975][T14482] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 243.666787][T14482] EXT4-fs (loop8): This should not happen!! Data will be lost [ 243.666787][T14482] [ 243.762715][T14563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14563 comm=syz.0.2644 [ 243.798295][T14563] vhci_hcd: default hub control req: 8010 v0002 i0000 l86 [ 243.815050][T11284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.885059][T14573] FAULT_INJECTION: forcing a failure. [ 243.885059][T14573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.899109][T14573] CPU: 1 UID: 0 PID: 14573 Comm: syz.0.2646 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 243.899143][T14573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 243.899159][T14573] Call Trace: [ 243.899168][T14573] [ 243.899177][T14573] __dump_stack+0x1d/0x30 [ 243.899203][T14573] dump_stack_lvl+0xe8/0x140 [ 243.899340][T14573] dump_stack+0x15/0x1b [ 243.899360][T14573] should_fail_ex+0x265/0x280 [ 243.899414][T14573] should_fail+0xb/0x20 [ 243.899447][T14573] should_fail_usercopy+0x1a/0x20 [ 243.899510][T14573] _copy_from_user+0x1c/0xb0 [ 243.899538][T14573] ___sys_sendmsg+0xc1/0x1d0 [ 243.899607][T14573] __x64_sys_sendmsg+0xd4/0x160 [ 243.899637][T14573] x64_sys_call+0x2999/0x2fb0 [ 243.899664][T14573] do_syscall_64+0xd0/0x1a0 [ 243.899691][T14573] ? clear_bhb_loop+0x25/0x80 [ 243.899720][T14573] ? clear_bhb_loop+0x25/0x80 [ 243.899748][T14573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.899775][T14573] RIP: 0033:0x7f10a742e969 [ 243.899793][T14573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.899816][T14573] RSP: 002b:00007f10a5a97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.899894][T14573] RAX: ffffffffffffffda RBX: 00007f10a7655fa0 RCX: 00007f10a742e969 [ 243.899911][T14573] RDX: 0000000000008004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 243.899927][T14573] RBP: 00007f10a5a97090 R08: 0000000000000000 R09: 0000000000000000 [ 243.899942][T14573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.899957][T14573] R13: 0000000000000000 R14: 00007f10a7655fa0 R15: 00007ffdf8392c78 [ 243.899980][T14573] [ 244.131460][ T9891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.151559][T14579] loop8: detected capacity change from 0 to 8192 [ 244.157026][T14587] loop7: detected capacity change from 0 to 128 [ 244.157574][T14587] vfat: Unknown parameter 'smackfsroot' [ 244.256781][T14592] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2651'. [ 244.309330][T14604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2647'. [ 244.378764][T14608] loop7: detected capacity change from 0 to 1024 [ 244.405919][T14608] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 244.417055][T14608] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 244.431798][T14612] tipc: Enabled bearer , priority 0 [ 244.440932][T14612] tipc: Disabling bearer [ 244.452097][T14608] JBD2: no valid journal superblock found [ 244.457962][T14608] EXT4-fs (loop7): Could not load journal inode [ 244.738600][T14638] loop2: detected capacity change from 0 to 512 [ 244.784990][T14638] EXT4-fs (loop2): too many log groups per flexible block group [ 244.792801][T14638] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 244.804405][T14638] EXT4-fs (loop2): mount failed [ 244.913814][T14657] dummy0: left allmulticast mode [ 244.919132][T14657] bridge0: port 3(dummy0) entered disabled state [ 244.959416][T14657] bridge_slave_0: left allmulticast mode [ 244.966076][T14657] bridge_slave_0: left promiscuous mode [ 244.971910][T14657] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.000333][T14657] bridge_slave_1: left allmulticast mode [ 245.006161][T14657] bridge_slave_1: left promiscuous mode [ 245.011894][T14657] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.028764][T14657] : (slave bond_slave_0): Releasing backup interface [ 245.038104][T14657] bond_slave_0: left allmulticast mode [ 245.061084][T14657] : (slave bond_slave_1): Releasing backup interface [ 245.074944][T14657] bond_slave_1: left allmulticast mode [ 245.104272][T14657] team0: Port device team_slave_0 removed [ 245.135326][T14657] team0: Port device team_slave_1 removed [ 245.188388][T14677] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2662'. [ 245.249365][T14696] loop8: detected capacity change from 0 to 128 [ 245.278248][T14701] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2667'. [ 245.299221][T14696] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 245.364273][T14696] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 245.385274][T14701] netlink: 'syz.4.2667': attribute type 1 has an invalid length. [ 245.394407][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2667'. [ 245.449804][T14720] loop0: detected capacity change from 0 to 1024 [ 245.456330][T14716] loop2: detected capacity change from 0 to 8192 [ 245.473867][T14720] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 245.485102][T14720] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 245.498747][T14720] JBD2: no valid journal superblock found [ 245.504800][T14720] EXT4-fs (loop0): Could not load journal inode [ 245.660697][T14745] netlink: 'syz.7.2673': attribute type 1 has an invalid length. [ 245.700347][T11284] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 245.867029][T14754] SELinux: syz.7.2676 (14754) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 245.918859][T14757] loop2: detected capacity change from 0 to 1024 [ 245.934665][T14757] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 245.945940][T14757] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 245.950874][T14766] loop0: detected capacity change from 0 to 2048 [ 246.013018][T14757] JBD2: no valid journal superblock found [ 246.019009][T14757] EXT4-fs (loop2): Could not load journal inode [ 246.057336][T14769] loop7: detected capacity change from 0 to 4096 [ 246.065232][T14766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.079879][T14769] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.090012][T14766] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.118054][T14777] loop8: detected capacity change from 0 to 2048 [ 246.204680][T14769] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.254423][T14777] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.420227][T14766] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2679: bg 0: block 345: padding at end of block bitmap is not set [ 246.445217][T14766] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 246.457959][T14766] EXT4-fs (loop0): This should not happen!! Data will be lost [ 246.457959][T14766] [ 246.583341][T13041] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.636129][T14795] netlink: 'syz.0.2688': attribute type 39 has an invalid length. [ 246.654415][T14793] __nla_validate_parse: 3 callbacks suppressed [ 246.654502][T14793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2687'. [ 246.672796][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 246.672814][ T29] audit: type=1326 audit(1746233352.031:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.2.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 246.703348][ T29] audit: type=1326 audit(1746233352.031:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6905d2e969 code=0x7ffc0000 [ 246.726959][ T29] audit: type=1326 audit(1746233352.031:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6905d2e969 code=0x7ffc0000 [ 246.750868][ T29] audit: type=1326 audit(1746233352.031:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6905d2e969 code=0x7ffc0000 [ 246.775096][ T29] audit: type=1326 audit(1746233352.061:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.2.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 246.799032][ T29] audit: type=1326 audit(1746233352.061:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.2.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 246.823179][ T29] audit: type=1326 audit(1746233352.061:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.2.2687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 246.849062][ T29] audit: type=1326 audit(1746233352.081:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6905d2e969 code=0x7ffc0000 [ 246.873052][ T29] audit: type=1326 audit(1746233352.081:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6905d2e969 code=0x7ffc0000 [ 246.896974][ T29] audit: type=1326 audit(1746233352.081:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6905d2e969 code=0x7ffc0000 [ 246.953464][ T9891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.965932][T11284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.997931][T14800] netlink: 'syz.7.2690': attribute type 4 has an invalid length. [ 247.005890][T14800] netlink: 17 bytes leftover after parsing attributes in process `syz.7.2690'. [ 247.035243][T14800] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2690'. [ 247.044462][T14800] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2690'. [ 247.091390][T14807] loop2: detected capacity change from 0 to 512 [ 247.144955][T14807] EXT4-fs (loop2): too many log groups per flexible block group [ 247.152915][T14807] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 247.159888][T14807] EXT4-fs (loop2): mount failed [ 247.197533][T14817] loop0: detected capacity change from 0 to 512 [ 247.204829][T14817] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 247.234847][T14814] loop8: detected capacity change from 0 to 1024 [ 247.275058][T14814] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 247.286131][T14814] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 247.351671][T14814] JBD2: no valid journal superblock found [ 247.357582][T14814] EXT4-fs (loop8): Could not load journal inode [ 247.365528][T14825] loop2: detected capacity change from 0 to 128 [ 247.423272][T14825] vfat: Unknown parameter 'smackfsroot' [ 247.436857][T14822] loop0: detected capacity change from 0 to 8192 [ 247.908205][T14832] tipc: Started in network mode [ 247.913502][T14832] tipc: Node identity 6a5f18b75af, cluster identity 4711 [ 247.920863][T14832] tipc: Enabled bearer , priority 0 [ 248.053653][T14834] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2702'. [ 248.119006][T14840] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2704'. [ 248.206398][T14846] loop2: detected capacity change from 0 to 2048 [ 248.243032][T14852] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2710'. [ 248.244265][T14846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.263884][T14852] netlink: 'syz.8.2710': attribute type 1 has an invalid length. [ 248.284876][T14831] tipc: Disabling bearer [ 248.300401][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2710'. [ 248.363632][T14846] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.455841][T14869] vlan2: entered allmulticast mode [ 248.462646][T14869] bond0: entered allmulticast mode [ 248.467915][T14869] bond_slave_0: entered allmulticast mode [ 248.473948][T14869] bond_slave_1: entered allmulticast mode [ 248.660256][T14885] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2715'. [ 248.677864][T14885] netlink: 'syz.0.2715': attribute type 1 has an invalid length. [ 248.686751][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2715'. [ 248.806910][T14893] loop0: detected capacity change from 0 to 2048 [ 248.868384][T14901] tipc: Enabled bearer , priority 0 [ 248.887175][T14893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.906309][T14900] tipc: Disabling bearer [ 249.024889][T14906] netlink: 'syz.8.2723': attribute type 1 has an invalid length. [ 249.158158][T14909] vlan2: entered allmulticast mode [ 249.298427][T14914] loop8: detected capacity change from 0 to 128 [ 249.322364][T14914] vfat: Unknown parameter 'smackfsroot' [ 249.390815][T14873] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2706: bg 0: block 345: padding at end of block bitmap is not set [ 249.438218][T14873] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 249.451026][T14873] EXT4-fs (loop2): This should not happen!! Data will be lost [ 249.451026][T14873] [ 249.730653][T13041] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.780158][T14924] netlink: 'syz.7.2729': attribute type 1 has an invalid length. [ 249.824398][T14929] loop0: detected capacity change from 0 to 8192 [ 249.843465][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.978968][T14939] loop7: detected capacity change from 0 to 512 [ 250.024065][T14939] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 250.073461][T14944] vlan0: entered allmulticast mode [ 250.560587][T14957] loop2: detected capacity change from 0 to 128 [ 250.615521][T14957] vfat: Unknown parameter 'smackfsroot' [ 250.747626][T14961] loop7: detected capacity change from 0 to 8192 [ 250.798062][T14971] bridge_slave_0: left allmulticast mode [ 250.803887][T14971] bridge_slave_0: left promiscuous mode [ 250.809658][T14971] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.856944][T14971] bridge_slave_1: left allmulticast mode [ 250.863054][T14971] bridge_slave_1: left promiscuous mode [ 250.868951][T14971] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.933285][T14978] loop8: detected capacity change from 0 to 2048 [ 250.940213][T14971] bond0: (slave bond_slave_0): Releasing backup interface [ 250.966216][T14971] bond0: (slave bond_slave_1): Releasing backup interface [ 250.974812][T14978] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.044513][T14971] team0: Port device team_slave_0 removed [ 251.054052][T14971] team0: Port device team_slave_1 removed [ 251.061162][T14971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.068772][T14971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.078205][T14971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.085815][T14971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.099016][T14978] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.200030][T14973] loop2: detected capacity change from 0 to 512 [ 251.218901][T14973] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 251.228251][T14973] EXT4-fs (loop2): orphan cleanup on readonly fs [ 251.236242][T14973] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2749: invalid indirect mapped block 256 (level 2) [ 251.251320][T14973] EXT4-fs (loop2): 2 truncates cleaned up [ 251.257856][T14973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 251.534440][T14978] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2748: bg 0: block 345: padding at end of block bitmap is not set [ 251.551072][T14978] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 251.565429][T14978] EXT4-fs (loop8): This should not happen!! Data will be lost [ 251.565429][T14978] [ 251.662225][T11284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.713686][T15010] tipc: Enabled bearer , priority 0 [ 251.732747][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.760881][T15015] loop2: detected capacity change from 0 to 128 [ 251.771088][T15015] vfat: Unknown parameter 'smackfsroot' [ 251.778774][T15010] tipc: Disabling bearer [ 251.785482][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 251.785499][ T29] audit: type=1326 audit(1746233357.141:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.7.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 251.882700][ T29] audit: type=1326 audit(1746233357.141:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.7.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 251.906513][ T29] audit: type=1326 audit(1746233357.171:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.7.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 251.921208][T15018] loop2: detected capacity change from 0 to 8192 [ 251.931515][ T29] audit: type=1326 audit(1746233357.171:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.7.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 251.961736][ T29] audit: type=1326 audit(1746233357.171:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.7.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 251.985432][ T29] audit: type=1326 audit(1746233357.171:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.7.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 252.009458][ T29] audit: type=1326 audit(1746233357.171:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.7.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 252.033056][ T29] audit: type=1326 audit(1746233357.171:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.7.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 252.056891][ T29] audit: type=1326 audit(1746233357.171:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.7.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 252.080409][ T29] audit: type=1326 audit(1746233357.171:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.7.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 252.137337][T15028] loop8: detected capacity change from 0 to 8192 [ 252.323423][T15036] loop0: detected capacity change from 0 to 2048 [ 252.380812][T15036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.435155][T15043] loop2: detected capacity change from 0 to 1024 [ 252.442965][T15043] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 252.454174][T15043] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 252.539546][T15043] JBD2: no valid journal superblock found [ 252.545451][T15043] EXT4-fs (loop2): Could not load journal inode [ 252.703963][T15049] __nla_validate_parse: 8 callbacks suppressed [ 252.703983][T15049] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2769'. [ 252.923361][T15051] loop7: detected capacity change from 0 to 512 [ 252.932416][T15051] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 252.940951][T15051] EXT4-fs (loop7): orphan cleanup on readonly fs [ 252.948761][T15051] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2770: invalid indirect mapped block 256 (level 2) [ 252.964856][T15051] EXT4-fs (loop7): 2 truncates cleaned up [ 252.977165][T15051] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 253.117013][T15067] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2775'. [ 253.128221][T15067] netlink: 'syz.8.2775': attribute type 1 has an invalid length. [ 253.162666][T13041] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.418636][T15103] loop8: detected capacity change from 0 to 1024 [ 253.430507][T15103] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 253.441566][T15103] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 253.473036][T15103] JBD2: no valid journal superblock found [ 253.479066][T15103] EXT4-fs (loop8): Could not load journal inode [ 253.486039][T15105] bond0: (slave bridge0): Releasing backup interface [ 253.495218][T15105] bridge0: left allmulticast mode [ 253.505963][T15105] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.513241][T15105] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.534459][T15105] bridge_slave_0: left allmulticast mode [ 253.540204][T15105] bridge_slave_0: left promiscuous mode [ 253.546031][T15105] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.555246][T15105] bridge_slave_1: left allmulticast mode [ 253.561018][T15105] bridge_slave_1: left promiscuous mode [ 253.566821][T15105] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.578569][T15105] bond0: (slave bond_slave_0): Releasing backup interface [ 253.590618][T15105] bond_slave_0: left allmulticast mode [ 253.598732][T15105] bond0: (slave bond_slave_1): Releasing backup interface [ 253.608024][T15105] bond_slave_1: left allmulticast mode [ 253.618076][T15105] team0: Port device team_slave_0 removed [ 253.628752][T15105] team0: Port device team_slave_1 removed [ 253.635269][ T9891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.636375][T15105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.652346][T15105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.663665][T15105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.671172][T15105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.723449][T15113] loop7: detected capacity change from 0 to 2048 [ 253.743814][T15115] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2790'. [ 253.756508][T15121] netlink: 'syz.0.2790': attribute type 1 has an invalid length. [ 253.765377][T15113] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.987932][T15119] loop8: detected capacity change from 0 to 512 [ 253.997619][T15119] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 254.006193][T15119] EXT4-fs (loop8): orphan cleanup on readonly fs [ 254.013328][T15119] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2792: invalid indirect mapped block 256 (level 2) [ 254.038772][T15119] EXT4-fs (loop8): 2 truncates cleaned up [ 254.045863][T15119] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.095041][T15137] loop0: detected capacity change from 0 to 8192 [ 254.239195][T15154] loop2: detected capacity change from 0 to 1024 [ 254.261265][T15154] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 254.272356][T15154] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 254.319366][T15154] JBD2: no valid journal superblock found [ 254.325232][T15154] EXT4-fs (loop2): Could not load journal inode [ 254.555431][T15161] vlan0: entered allmulticast mode [ 254.561724][ T9891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.678904][T11284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.752132][T15178] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2801'. [ 254.808867][T15182] tipc: Enabled bearer , priority 0 [ 254.877489][T15189] tipc: Disabling bearer [ 254.914889][T15191] vlan0: entered allmulticast mode [ 255.005841][T15193] SELinux: syz.8.2808 (15193) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 255.074697][T15199] loop0: detected capacity change from 0 to 2048 [ 255.135290][T15199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.199947][T15199] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.533194][T15232] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2816'. [ 255.588253][T15232] netlink: 'syz.8.2816': attribute type 1 has an invalid length. [ 255.597880][T15236] loop2: detected capacity change from 0 to 128 [ 255.627826][T15236] vfat: Unknown parameter 'smackfsroot' [ 256.154007][T15218] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2810: bg 0: block 345: padding at end of block bitmap is not set [ 256.252854][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2810'. [ 256.262105][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2810'. [ 256.279902][T15218] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 256.292640][T15218] EXT4-fs (loop0): This should not happen!! Data will be lost [ 256.292640][T15218] [ 256.355055][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2810'. [ 256.446773][T15304] loop2: detected capacity change from 0 to 512 [ 256.456409][T15304] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 256.530757][T15302] loop7: detected capacity change from 0 to 8192 [ 256.772403][T15333] netlink: 'syz.4.2838': attribute type 39 has an invalid length. [ 256.896156][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 256.896174][ T29] audit: type=1326 audit(1746233362.251:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.2.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 256.945018][ T29] audit: type=1326 audit(1746233362.291:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.2.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 256.969745][ T29] audit: type=1326 audit(1746233362.291:3873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.2.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 256.994090][ T29] audit: type=1326 audit(1746233362.291:3874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.2.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 257.018133][ T29] audit: type=1326 audit(1746233362.291:3875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.2.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 257.042093][ T29] audit: type=1326 audit(1746233362.291:3876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.2.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 257.065810][ T29] audit: type=1326 audit(1746233362.291:3877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.2.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 257.089844][ T29] audit: type=1326 audit(1746233362.291:3878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.2.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 257.113660][ T29] audit: type=1326 audit(1746233362.291:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.2.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 257.138126][ T29] audit: type=1326 audit(1746233362.291:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.2.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 257.232681][T15350] loop2: detected capacity change from 0 to 2048 [ 257.257939][T15267] Can't find ip_set type hash:ip,ma [ 257.301426][T15350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.331515][T15350] ext4 filesystem being mounted at /555/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.395147][T13041] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.539461][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2847'. [ 257.583746][T15390] vlan2: entered allmulticast mode [ 257.589102][T15390] bond0: entered allmulticast mode [ 257.634662][T15392] tipc: Enabled bearer , priority 0 [ 257.643363][T15392] tipc: Disabling bearer [ 257.756947][T15350] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2841: bg 0: block 345: padding at end of block bitmap is not set [ 257.776379][T15408] tipc: Enabled bearer , priority 0 [ 257.791900][T15350] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 257.804769][T15350] EXT4-fs (loop2): This should not happen!! Data will be lost [ 257.804769][T15350] [ 257.827780][T15413] loop0: detected capacity change from 0 to 8192 [ 257.843056][T15408] tipc: Disabling bearer [ 257.914770][T15418] SELinux: syz.4.2854 (15418) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 257.980109][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.993192][T15423] netlink: 'syz.7.2855': attribute type 39 has an invalid length. [ 258.032085][T15436] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2858'. [ 258.130863][T15442] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2859'. [ 258.188781][T15451] loop0: detected capacity change from 0 to 8192 [ 258.225242][T15462] tipc: Enabled bearer , priority 0 [ 258.301281][T15473] tipc: Disabling bearer [ 258.328983][T15477] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2866'. [ 258.410932][T15479] loop8: detected capacity change from 0 to 2048 [ 258.474974][T15479] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.487328][T15479] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.549959][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2874'. [ 258.568159][T15486] loop7: detected capacity change from 0 to 8192 [ 258.824411][T15532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2880'. [ 258.835521][T15479] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2867: bg 0: block 345: padding at end of block bitmap is not set [ 258.855739][T15479] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 258.868454][T15479] EXT4-fs (loop8): This should not happen!! Data will be lost [ 258.868454][T15479] [ 258.906400][T15538] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2883'. [ 258.947357][T11284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.008844][T15542] SELinux: syz.7.2886 (15542) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 259.090250][T15554] loop2: detected capacity change from 0 to 128 [ 259.106837][T15554] vfat: Unknown parameter 'smackfsroot' [ 259.150953][T15561] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2894'. [ 259.259430][T15567] loop7: detected capacity change from 0 to 2048 [ 259.289854][T15567] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.303560][T15567] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.350555][T15573] loop8: detected capacity change from 0 to 128 [ 259.359784][T15575] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2898'. [ 259.381516][T15573] vfat: Unknown parameter 'smackfsroot' [ 259.419324][T15577] loop2: detected capacity change from 0 to 512 [ 259.452943][T15577] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 259.565332][T15590] ip6erspan0: entered promiscuous mode [ 259.594122][T15585] SELinux: syz.8.2903 (15585) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 259.618425][T15567] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2896: bg 0: block 345: padding at end of block bitmap is not set [ 259.638156][T15567] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 259.650969][T15567] EXT4-fs (loop7): This should not happen!! Data will be lost [ 259.650969][T15567] [ 259.685191][T15598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2906'. [ 259.767151][ T9891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.839905][T15624] 9pnet_fd: Insufficient options for proto=fd [ 259.860110][T15622] netlink: 'syz.7.2910': attribute type 39 has an invalid length. [ 259.880657][T15617] netlink: 'syz.0.2912': attribute type 39 has an invalid length. [ 259.893821][T15624] 9pnet_fd: Insufficient options for proto=fd [ 259.988318][T15634] netlink: 'syz.0.2918': attribute type 21 has an invalid length. [ 259.997105][T15634] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2918'. [ 260.007486][T15632] SELinux: syz.7.2917 (15632) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 260.086226][T15647] loop2: detected capacity change from 0 to 2048 [ 260.115948][T15647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.130775][T15647] ext4 filesystem being mounted at /573/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.239404][T15670] loop0: detected capacity change from 0 to 128 [ 260.256654][T15670] vfat: Unknown parameter 'smackfsroot' [ 260.356405][T15675] netlink: 'syz.4.2927': attribute type 39 has an invalid length. [ 260.427408][T15647] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2921: bg 0: block 345: padding at end of block bitmap is not set [ 260.452358][T15647] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 260.464998][T15647] EXT4-fs (loop2): This should not happen!! Data will be lost [ 260.464998][T15647] [ 260.466786][T15683] loop7: detected capacity change from 0 to 512 [ 260.519548][T15683] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 260.619232][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.647353][T15697] loop2: detected capacity change from 0 to 256 [ 260.704340][T15703] loop0: detected capacity change from 0 to 128 [ 260.729197][T15703] vfat: Unknown parameter 'smackfsroot' [ 260.821439][T15719] netlink: 'syz.8.2942': attribute type 39 has an invalid length. [ 260.951482][T15735] SELinux: syz.8.2944 (15735) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 261.055153][T15744] syz.0.2950 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 261.071121][T15742] loop7: detected capacity change from 0 to 8192 [ 261.315786][T15762] loop2: detected capacity change from 0 to 128 [ 261.402505][T15762] vfat: Unknown parameter 'smackfsroot' [ 262.079902][T15800] loop7: detected capacity change from 0 to 512 [ 262.119528][T15800] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.140109][T15800] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.168099][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 262.168117][ T29] audit: type=1326 audit(1746233367.521:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15805 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 262.198172][ T29] audit: type=1326 audit(1746233367.521:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15805 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 262.222248][ T29] audit: type=1326 audit(1746233367.521:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15805 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 262.245969][ T29] audit: type=1326 audit(1746233367.521:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15805 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 262.269738][ T29] audit: type=1326 audit(1746233367.521:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15805 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 262.295098][ T29] audit: type=1326 audit(1746233367.521:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15805 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 262.318784][ T29] audit: type=1326 audit(1746233367.521:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15805 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 262.342525][ T29] audit: type=1326 audit(1746233367.521:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15805 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 262.366048][ T29] audit: type=1326 audit(1746233367.521:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15805 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 262.389772][ T29] audit: type=1326 audit(1746233367.531:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15805 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911551e969 code=0x7ffc0000 [ 262.426397][T15808] netlink: 'syz.4.2967': attribute type 4 has an invalid length. [ 262.447833][T15819] loop2: detected capacity change from 0 to 512 [ 262.457989][T15819] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 262.502574][T15820] loop8: detected capacity change from 0 to 2048 [ 262.538698][ T9891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.549381][T15820] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.585495][T15820] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 262.613022][T15825] loop2: detected capacity change from 0 to 8192 [ 262.619652][T15820] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 129 with error 28 [ 262.632198][T15820] EXT4-fs (loop8): This should not happen!! Data will be lost [ 262.632198][T15820] [ 262.641967][T15820] EXT4-fs (loop8): Total free blocks count 0 [ 262.648988][T15820] EXT4-fs (loop8): Free/Dirty block details [ 262.655024][T15820] EXT4-fs (loop8): free_blocks=2415919504 [ 262.660779][T15820] EXT4-fs (loop8): dirty_blocks=144 [ 262.666126][T15820] EXT4-fs (loop8): Block reservation details [ 262.672167][T15820] EXT4-fs (loop8): i_reserved_data_blocks=9 [ 262.761701][T11284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.840618][T15851] loop7: detected capacity change from 0 to 128 [ 262.923903][T15851] vfat: Unknown parameter 'smackfsroot' [ 262.977776][T15860] loop8: detected capacity change from 0 to 2048 [ 263.312369][T15873] xt_hashlimit: max too large, truncated to 1048576 [ 263.335289][T15860] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.375394][T15860] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.394800][T15877] tipc: Enabled bearer , priority 0 [ 263.403386][T15877] tipc: Disabling bearer [ 263.471380][T15882] xt_hashlimit: max too large, truncated to 1048576 [ 263.847447][T15900] __nla_validate_parse: 11 callbacks suppressed [ 263.847469][T15900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2995'. [ 264.103797][T15917] tipc: Enabled bearer , priority 0 [ 264.168567][T15927] tipc: Disabling bearer [ 264.190576][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2979'. [ 264.199770][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2979'. [ 264.210172][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2979'. [ 264.256624][T15884] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2979: bg 0: block 345: padding at end of block bitmap is not set [ 264.280935][T15884] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 264.293698][T15884] EXT4-fs (loop8): This should not happen!! Data will be lost [ 264.293698][T15884] [ 264.378652][T15936] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3006'. [ 264.381148][T15944] loop0: detected capacity change from 0 to 2048 [ 264.433334][T15944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.465420][T15944] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.517696][T15957] loop7: detected capacity change from 0 to 2048 [ 264.565144][T15957] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.579597][T15957] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.938161][T15944] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3007: bg 0: block 345: padding at end of block bitmap is not set [ 264.964689][T15944] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 264.977800][T15944] EXT4-fs (loop0): This should not happen!! Data will be lost [ 264.977800][T15944] [ 264.989622][T15957] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3010: bg 0: block 345: padding at end of block bitmap is not set [ 265.030402][T15957] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 265.043134][T15957] EXT4-fs (loop7): This should not happen!! Data will be lost [ 265.043134][T15957] [ 265.049358][T11284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.099741][T13041] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.175338][T15971] loop2: detected capacity change from 0 to 512 [ 265.186843][T15971] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 265.202679][T15971] EXT4-fs (loop2): orphan cleanup on readonly fs [ 265.210376][T15971] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3014: invalid indirect mapped block 256 (level 2) [ 265.224959][T15971] EXT4-fs (loop2): 2 truncates cleaned up [ 265.231238][T15976] loop0: detected capacity change from 0 to 512 [ 265.231776][T15971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.258577][ T9891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.275077][T15976] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 265.353728][T15986] 9pnet_fd: Insufficient options for proto=fd [ 265.456097][T15995] SELinux: syz.8.3023 (15995) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 265.513062][T16007] tipc: Enabled bearer , priority 0 [ 265.520476][T16009] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3026'. [ 265.554989][T16007] tipc: Disabling bearer [ 265.576200][T16009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3026'. [ 265.659463][T16022] loop8: detected capacity change from 0 to 8192 [ 265.668373][T16029] 9pnet_fd: Insufficient options for proto=fd [ 265.745104][T16035] netlink: 'syz.0.3036': attribute type 39 has an invalid length. [ 265.753565][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.808742][T16038] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3038'. [ 265.846022][T16042] SELinux: syz.0.3040 (16042) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 265.877639][T16044] SELinux: syz.4.3039 (16044) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 265.951835][T16048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3041'. [ 266.015684][T16052] tipc: Enabled bearer , priority 0 [ 266.028536][T16052] tipc: Disabling bearer [ 266.058056][T16063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3045'. [ 266.093253][T16070] 9pnet_fd: Insufficient options for proto=fd [ 266.244043][T16090] loop0: detected capacity change from 0 to 128 [ 266.258529][T16090] vfat: Unknown parameter 'smackfsroot' [ 266.357777][T16102] SELinux: syz.4.3054 (16102) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 266.517180][T16113] loop7: detected capacity change from 0 to 2048 [ 266.553048][T16113] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.582416][T16126] FAULT_INJECTION: forcing a failure. [ 266.582416][T16126] name failslab, interval 1, probability 0, space 0, times 0 [ 266.595317][T16126] CPU: 0 UID: 0 PID: 16126 Comm: syz.0.3063 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 266.595347][T16126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 266.595360][T16126] Call Trace: [ 266.595365][T16126] [ 266.595371][T16126] __dump_stack+0x1d/0x30 [ 266.595395][T16126] dump_stack_lvl+0xe8/0x140 [ 266.595415][T16126] dump_stack+0x15/0x1b [ 266.595457][T16126] should_fail_ex+0x265/0x280 [ 266.595487][T16126] should_failslab+0x8c/0xb0 [ 266.595525][T16126] kmem_cache_alloc_noprof+0x50/0x310 [ 266.595587][T16126] ? audit_log_start+0x365/0x6c0 [ 266.595620][T16126] audit_log_start+0x365/0x6c0 [ 266.595650][T16126] audit_seccomp+0x48/0x100 [ 266.595678][T16126] ? __seccomp_filter+0x68c/0x10d0 [ 266.595703][T16126] __seccomp_filter+0x69d/0x10d0 [ 266.595728][T16126] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 266.595788][T16126] ? vfs_write+0x75e/0x8d0 [ 266.595810][T16126] ? __rcu_read_unlock+0x4f/0x70 [ 266.595831][T16126] ? __fget_files+0x184/0x1c0 [ 266.595881][T16126] __secure_computing+0x82/0x150 [ 266.595905][T16126] syscall_trace_enter+0xcf/0x1e0 [ 266.595979][T16126] do_syscall_64+0xaa/0x1a0 [ 266.596002][T16126] ? clear_bhb_loop+0x25/0x80 [ 266.596022][T16126] ? clear_bhb_loop+0x25/0x80 [ 266.596088][T16126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.596113][T16126] RIP: 0033:0x7f10a742e969 [ 266.596130][T16126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.596222][T16126] RSP: 002b:00007f10a5a97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000024 [ 266.596319][T16126] RAX: ffffffffffffffda RBX: 00007f10a7655fa0 RCX: 00007f10a742e969 [ 266.596331][T16126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 266.596342][T16126] RBP: 00007f10a5a97090 R08: 0000000000000000 R09: 0000000000000000 [ 266.596355][T16126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.596366][T16126] R13: 0000000000000000 R14: 00007f10a7655fa0 R15: 00007ffdf8392c78 [ 266.596387][T16126] [ 266.597462][T16113] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.715177][T16133] loop8: detected capacity change from 0 to 2048 [ 266.757295][T16106] chnl_net:caif_netlink_parms(): no params data found [ 266.864839][T16133] GPT:first_usable_lbas don't match. [ 266.870214][T16133] GPT:34 != 290 [ 266.873816][T16133] GPT: Use GNU Parted to correct GPT errors. [ 266.879991][T16133] loop8: p1 p2 p3 [ 266.937213][T16106] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.944545][T16106] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.985611][T16142] netlink: 'syz.8.3066': attribute type 39 has an invalid length. [ 266.989898][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 266.995457][ T3721] udevd[3721]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 267.005721][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 267.015773][T16106] bridge_slave_0: entered allmulticast mode [ 267.040763][T16106] bridge_slave_0: entered promiscuous mode [ 267.049992][T16106] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.057212][T16106] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.071177][T16106] bridge_slave_1: entered allmulticast mode [ 267.084919][T16106] bridge_slave_1: entered promiscuous mode [ 267.114887][T16106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.126464][T16106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.171840][T16106] team0: Port device team_slave_0 added [ 267.180968][T16106] team0: Port device team_slave_1 added [ 267.222798][T16106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.229978][T16106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.244459][T16113] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3059: bg 0: block 345: padding at end of block bitmap is not set [ 267.255998][T16106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.272515][T16113] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 267.284313][T16106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.296163][T16113] EXT4-fs (loop7): This should not happen!! Data will be lost [ 267.296163][T16113] [ 267.303216][T16106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.339295][T16106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.401265][T16106] hsr_slave_0: entered promiscuous mode [ 267.411857][T16106] hsr_slave_1: entered promiscuous mode [ 267.426014][T16106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.431566][T16151] loop8: detected capacity change from 0 to 8192 [ 267.434372][T16106] Cannot create hsr debugfs directory [ 267.452701][ T9891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.576274][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 267.576307][ T29] audit: type=1326 audit(1746233372.931:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.7.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 267.625689][ T29] audit: type=1326 audit(1746233372.971:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.7.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 267.649390][ T29] audit: type=1326 audit(1746233372.971:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.7.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 267.673389][ T29] audit: type=1326 audit(1746233372.971:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.7.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 267.697216][ T29] audit: type=1326 audit(1746233372.971:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.7.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 267.720980][ T29] audit: type=1326 audit(1746233372.971:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.7.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 267.745099][ T29] audit: type=1326 audit(1746233372.971:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.7.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 267.769616][ T29] audit: type=1326 audit(1746233372.971:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.7.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 267.796101][ T29] audit: type=1326 audit(1746233372.971:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.7.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 267.822256][ T29] audit: type=1326 audit(1746233372.971:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.7.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557598e969 code=0x7ffc0000 [ 267.866763][T16106] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.935914][T16106] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.010899][T16179] loop0: detected capacity change from 0 to 2048 [ 268.021635][T16106] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.033904][T16181] SELinux: syz.4.3082 (16181) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 268.035370][T16179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.062679][T16179] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.104388][T16106] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.205443][T16106] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 268.221860][T16106] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 268.255568][T16106] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 268.276908][T16106] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 268.363358][T16106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.377405][T16106] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.395702][T16179] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3080: bg 0: block 345: padding at end of block bitmap is not set [ 268.411601][ T3393] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.418787][ T3393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.433988][T16179] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 268.446891][T16179] EXT4-fs (loop0): This should not happen!! Data will be lost [ 268.446891][T16179] [ 268.458646][ T3393] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.466092][ T3393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.571720][T13041] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.578872][T16106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.666376][T16106] veth0_vlan: entered promiscuous mode [ 268.675102][T16106] veth1_vlan: entered promiscuous mode [ 268.699130][T16106] veth0_macvtap: entered promiscuous mode [ 268.713472][T16106] veth1_macvtap: entered promiscuous mode [ 268.735048][T16106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.753558][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.761498][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.769484][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.781000][T16106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.790241][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.793663][T16106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.798208][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.806999][T16106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.807040][T16106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.807100][T16106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.841494][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.849347][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.857177][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.865014][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.872809][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.880626][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.888429][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.896252][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.904045][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.916024][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.923904][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.931687][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.940333][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.948503][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.956310][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.964339][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.972163][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.980005][ T10] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 268.990381][ T10] hid-generic 0000:0000:FFFFFFFC.0002: hidraw0: HID v0.08 Device [syz1] on syz0 [ 269.250332][T16240] loop2: detected capacity change from 0 to 2048 [ 269.273896][T16240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.302390][T16240] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.602665][T16267] dummy0: left allmulticast mode [ 269.607762][T16267] bridge0: port 3(dummy0) entered disabled state [ 269.624670][T16270] netlink: 'syz.0.3102': attribute type 39 has an invalid length. [ 269.648358][T16267] bridge_slave_0: left allmulticast mode [ 269.654406][T16267] bridge_slave_0: left promiscuous mode [ 269.660363][T16267] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.705687][T16267] bridge_slave_1: left allmulticast mode [ 269.711432][T16267] bridge_slave_1: left promiscuous mode [ 269.717448][T16267] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.738328][T16267] bond0: (slave bond_slave_0): Releasing backup interface [ 269.747447][T16267] bond_slave_0: left allmulticast mode [ 269.755811][T16267] bond0: (slave bond_slave_1): Releasing backup interface [ 269.766015][T16267] bond_slave_1: left allmulticast mode [ 269.778113][T16267] team0: Port device team_slave_0 removed [ 269.788684][T16267] team0: Port device team_slave_1 removed [ 269.826403][ T420] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 269.862133][ T420] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 68 with error 117 [ 269.875009][ T420] EXT4-fs (loop2): This should not happen!! Data will be lost [ 269.875009][ T420] [ 269.882688][T16276] __nla_validate_parse: 4 callbacks suppressed [ 269.882708][T16276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3100'. [ 269.900634][T16276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3100'. [ 269.961722][T16276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3100'. [ 270.066286][T16280] loop7: detected capacity change from 0 to 8192 [ 270.552246][T16302] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3116'. [ 270.603976][T16306] tipc: Enabled bearer , priority 0 [ 270.629828][T16306] tipc: Disabling bearer [ 270.786797][T16106] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.887233][T16315] netlink: 'syz.2.3122': attribute type 4 has an invalid length. [ 270.895081][T16315] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3122'. [ 270.964875][T16320] vlan2: entered allmulticast mode [ 271.199804][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3127'. [ 271.273909][T16331] loop0: detected capacity change from 0 to 2048 [ 271.334218][T16331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.385323][T16331] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.708970][T16333] loop8: detected capacity change from 0 to 512 [ 271.737641][T16333] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 271.769998][T16333] EXT4-fs (loop8): orphan cleanup on readonly fs [ 271.796501][T16333] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.3129: invalid indirect mapped block 256 (level 2) [ 271.842288][T16333] EXT4-fs (loop8): 2 truncates cleaned up [ 271.848593][T16333] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 271.883410][T16331] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3128: bg 0: block 345: padding at end of block bitmap is not set [ 271.938309][T16348] loop2: detected capacity change from 0 to 8192 [ 271.942228][T16331] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 271.957473][T16331] EXT4-fs (loop0): This should not happen!! Data will be lost [ 271.957473][T16331] [ 272.031215][T13041] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.150088][T16346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3132'. [ 272.159146][T16346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3132'. [ 272.182695][T16361] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3138'. [ 272.192437][T11284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.194982][T16346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3132'. [ 272.315597][T16372] netlink: 'syz.8.3143': attribute type 4 has an invalid length. [ 272.653767][T16386] tipc: Enabled bearer , priority 0 [ 272.783712][T16389] tipc: Disabling bearer [ 273.130675][T16388] loop7: detected capacity change from 0 to 512 [ 273.179495][T16388] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 273.201989][T16388] EXT4-fs (loop7): orphan cleanup on readonly fs [ 273.216600][T16388] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3149: invalid indirect mapped block 256 (level 2) [ 273.231013][T16388] EXT4-fs (loop7): 2 truncates cleaned up [ 273.238038][T16388] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 273.330243][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 273.330333][ T29] audit: type=1326 audit(1746233378.681:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16412 comm="syz.8.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3429e7e969 code=0x7ffc0000 [ 273.365483][ T29] audit: type=1326 audit(1746233378.681:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16412 comm="syz.8.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3429e7e969 code=0x7ffc0000 [ 273.389319][ T29] audit: type=1326 audit(1746233378.681:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16412 comm="syz.8.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f3429e7e969 code=0x7ffc0000 [ 273.413694][ T29] audit: type=1326 audit(1746233378.681:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16412 comm="syz.8.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3429e7e969 code=0x7ffc0000 [ 273.453873][ T29] audit: type=1326 audit(1746233378.811:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.0.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a742e969 code=0x7ffc0000 [ 273.477840][ T29] audit: type=1326 audit(1746233378.811:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.0.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a742e969 code=0x7ffc0000 [ 273.510031][ T29] audit: type=1326 audit(1746233378.861:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.0.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f10a742e969 code=0x7ffc0000 [ 273.534161][ T29] audit: type=1326 audit(1746233378.861:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.0.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a742e969 code=0x7ffc0000 [ 273.559485][ T29] audit: type=1326 audit(1746233378.911:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.0.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f10a742e969 code=0x7ffc0000 [ 273.583419][ T29] audit: type=1326 audit(1746233378.911:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.0.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a742e969 code=0x7ffc0000 [ 273.649911][T16428] vlan2: entered allmulticast mode [ 273.675178][ T9891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.687039][T16432] loop8: detected capacity change from 0 to 512 [ 273.700549][T16430] tipc: Started in network mode [ 273.705667][T16430] tipc: Node identity 4e58d31fd5ed, cluster identity 4711 [ 273.712943][T16430] tipc: Enabled bearer , priority 0 [ 273.724086][T16432] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 273.734957][T16436] netlink: 'syz.0.3169': attribute type 4 has an invalid length. [ 273.821253][T16439] tipc: Disabling bearer [ 273.970901][T16468] SELinux: syz.8.3178 (16468) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 274.196916][T16489] loop7: detected capacity change from 0 to 2048 [ 274.275847][T16489] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.299877][T16489] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.360656][T16505] tipc: Enabled bearer , priority 0 [ 274.389545][T16505] tipc: Disabling bearer [ 274.402662][T16507] SELinux: syz.4.3192 (16507) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 274.449671][T16510] loop2: detected capacity change from 0 to 128 [ 274.456630][T16510] vfat: Unknown parameter 'smackfsroot' [ 274.579360][T16512] loop8: detected capacity change from 0 to 8192 [ 274.666349][T16489] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3185: bg 0: block 345: padding at end of block bitmap is not set [ 274.687633][T16522] tipc: Enabled bearer , priority 0 [ 274.697696][T16518] netlink: 'syz.2.3196': attribute type 39 has an invalid length. [ 274.710551][T16489] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 274.723483][T16489] EXT4-fs (loop7): This should not happen!! Data will be lost [ 274.723483][T16489] [ 274.801148][T16527] tipc: Disabling bearer [ 274.827291][ T9891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.878066][T16537] loop0: detected capacity change from 0 to 512 [ 274.890283][T16537] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 274.949838][T16546] loop0: detected capacity change from 0 to 128 [ 274.962887][T16546] vfat: Unknown parameter 'smackfsroot' [ 274.993732][T16548] vlan2: entered allmulticast mode [ 274.999281][T16548] bond0: entered allmulticast mode [ 275.004489][T16548] bond_slave_0: entered allmulticast mode [ 275.011046][T16548] bond_slave_1: entered allmulticast mode [ 275.201557][T16566] loop2: detected capacity change from 0 to 2048 [ 275.239303][T16566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.268532][T16572] tipc: Enabled bearer , priority 0 [ 275.277497][T16572] tipc: Disabling bearer [ 275.283947][T16566] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.463558][T16581] __nla_validate_parse: 5 callbacks suppressed [ 275.463576][T16581] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3220'. [ 275.523974][T16566] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3215: bg 0: block 345: padding at end of block bitmap is not set [ 275.555836][T16584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.565674][T16566] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 275.578421][T16566] EXT4-fs (loop2): This should not happen!! Data will be lost [ 275.578421][T16566] [ 275.585743][T16584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.603450][T16586] loop7: detected capacity change from 0 to 128 [ 275.610230][T16586] vfat: Unknown parameter 'smackfsroot' [ 275.724658][T16106] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.829277][T16602] loop7: detected capacity change from 0 to 512 [ 275.844241][T16598] loop8: detected capacity change from 0 to 2048 [ 275.857376][T16602] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 275.908268][T16598] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.937668][T16598] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.956744][T16607] vlan2: entered allmulticast mode [ 275.961081][T16609] loop0: detected capacity change from 0 to 2048 [ 275.961995][T16607] bond0: entered allmulticast mode [ 275.962011][T16607] bond_slave_0: entered allmulticast mode [ 275.980578][T16607] bond_slave_1: entered allmulticast mode [ 276.015525][T16609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.054798][T16603] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 276.083326][T16603] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 276.237331][T16618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3233'. [ 276.472321][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3235'. [ 276.795046][T13041] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.834602][T16629] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3228'. [ 276.843665][T16629] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3228'. [ 276.942475][T16629] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3228'. [ 277.009935][T16615] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3228: bg 0: block 345: padding at end of block bitmap is not set [ 277.098388][T16615] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 277.111671][T16615] EXT4-fs (loop8): This should not happen!! Data will be lost [ 277.111671][T16615] [ 277.272659][T16636] loop7: detected capacity change from 0 to 128 [ 277.290720][T16636] vfat: Unknown parameter 'smackfsroot' [ 277.513381][T16651] SELinux: syz.0.3243 (16651) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 277.574177][T11284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.602900][T16657] loop7: detected capacity change from 0 to 128 [ 277.609899][T16657] vfat: Unknown parameter 'smackfsroot' [ 277.855880][T16691] SELinux: syz.0.3254 (16691) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 277.905253][T16695] loop0: detected capacity change from 0 to 128 [ 277.912337][T16695] vfat: Unknown parameter 'smackfsroot' [ 277.948827][T16697] loop7: detected capacity change from 0 to 2048 [ 277.973842][T16697] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.986368][T16697] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.285191][T16714] SELinux: syz.0.3263 (16714) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 278.379067][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 278.379084][ T29] audit: type=1326 audit(1746233383.731:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16715 comm="syz.8.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3429e7e969 code=0x7ffc0000 [ 278.410791][ T29] audit: type=1326 audit(1746233383.731:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16715 comm="syz.8.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3429e7e969 code=0x7ffc0000 [ 278.438541][ T29] audit: type=1326 audit(1746233383.791:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16715 comm="syz.8.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f3429e7e969 code=0x7ffc0000 [ 278.463190][ T29] audit: type=1326 audit(1746233383.791:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16715 comm="syz.8.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3429e7e969 code=0x7ffc0000 [ 278.488057][ T29] audit: type=1326 audit(1746233383.791:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16715 comm="syz.8.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3429e7e969 code=0x7ffc0000 [ 278.574578][T16722] netlink: 'syz.8.3266': attribute type 39 has an invalid length. [ 278.600365][T16720] loop0: detected capacity change from 0 to 8192 [ 278.722105][T16705] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3257: bg 0: block 345: padding at end of block bitmap is not set [ 278.779874][T16705] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 278.794116][T16705] EXT4-fs (loop7): This should not happen!! Data will be lost [ 278.794116][T16705] [ 278.805762][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3257'. [ 278.815532][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3257'. [ 278.845429][T16738] tipc: Enabling of bearer rejected, failed to enable media [ 278.866513][T16739] tipc: Enabled bearer , priority 0 [ 278.878974][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3257'. [ 278.988638][T16751] tipc: Disabling bearer [ 279.060680][ T29] audit: type=1326 audit(1746233384.411:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.4.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6905d2e969 code=0x7ffc0000 [ 279.084855][ T29] audit: type=1326 audit(1746233384.411:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.4.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6905d2e969 code=0x7ffc0000 [ 279.109220][ T29] audit: type=1326 audit(1746233384.411:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.4.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f6905d2e969 code=0x7ffc0000 [ 279.133800][ T29] audit: type=1326 audit(1746233384.411:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.4.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6905d2e969 code=0x7ffc0000 [ 279.157470][ T29] audit: type=1326 audit(1746233384.411:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.4.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6905d2e969 code=0x7ffc0000 [ 279.190173][T16766] netlink: 'syz.8.3278': attribute type 39 has an invalid length. [ 279.339212][ T9891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.354345][T16774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3277'. [ 279.363942][T16773] loop8: detected capacity change from 0 to 2048 [ 279.389020][T16777] loop7: detected capacity change from 0 to 128 [ 279.397250][T16777] vfat: Unknown parameter 'smackfsroot' [ 279.425531][T16773] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.493990][T16773] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.686695][T16773] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3280: bg 0: block 345: padding at end of block bitmap is not set [ 279.716170][T16773] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 279.728954][T16773] EXT4-fs (loop8): This should not happen!! Data will be lost [ 279.728954][T16773] [ 279.814145][T16803] SELinux: syz.7.3286 (16803) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 279.846873][T11284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.963957][T16820] tipc: Enabling of bearer rejected, failed to enable media [ 279.991675][T16821] vlan2: entered allmulticast mode [ 280.209880][T16834] netlink: 'syz.8.3298': attribute type 39 has an invalid length. [ 280.522686][T16872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3305'. [ 280.786330][T16889] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3314'. [ 281.030348][T16898] netlink: 'syz.4.3318': attribute type 39 has an invalid length. [ 281.256073][T16920] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3322'. [ 281.441061][T16914] loop0: detected capacity change from 0 to 512 [ 281.488002][T16926] vlan2: entered allmulticast mode [ 281.569227][T16914] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 281.605869][T16914] EXT4-fs (loop0): orphan cleanup on readonly fs [ 281.628846][T16914] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3326: invalid indirect mapped block 256 (level 2) [ 281.635201][T16929] tipc: Enabled bearer , priority 0 [ 281.652484][T16914] EXT4-fs (loop0): 2 truncates cleaned up [ 281.672854][T16914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 281.749087][T16936] tipc: Disabling bearer [ 281.826608][T16940] netlink: 'syz.7.3335': attribute type 39 has an invalid length. [ 281.896177][T16946] loop2: detected capacity change from 0 to 8192 [ 282.100446][T13041] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.164473][T16964] loop0: detected capacity change from 0 to 2048 [ 282.181070][T16966] SELinux: syz.2.3346 (16966) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 282.217674][T16964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.245784][T16964] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.267847][T16971] dummy0: left allmulticast mode [ 282.273096][T16971] bridge0: port 3(dummy0) entered disabled state [ 282.322492][T16971] bridge_slave_0: left allmulticast mode [ 282.328224][T16971] bridge_slave_0: left promiscuous mode [ 282.334270][T16971] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.345772][T16971] bridge_slave_1: left allmulticast mode [ 282.351630][T16971] bridge_slave_1: left promiscuous mode [ 282.357370][T16971] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.412294][T16971] bond0: (slave bond_slave_0): Releasing backup interface [ 282.436996][T16971] bond_slave_0: left allmulticast mode [ 282.453261][T16971] bond0: (slave bond_slave_1): Releasing backup interface [ 282.472062][T16971] bond_slave_1: left allmulticast mode [ 282.483349][T16971] team0: Port device team_slave_0 removed [ 282.506792][T16971] team0: Port device team_slave_1 removed [ 282.703248][T16964] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3345: bg 0: block 345: padding at end of block bitmap is not set [ 282.750735][T16964] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 282.763473][T16964] EXT4-fs (loop0): This should not happen!! Data will be lost [ 282.763473][T16964] [ 282.795945][T16992] vlan2: entered allmulticast mode [ 282.838101][T16988] loop7: detected capacity change from 0 to 8192 [ 282.868144][T16994] netlink: 'syz.4.3357': attribute type 4 has an invalid length. [ 282.876015][T16994] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3357'. [ 282.936774][T16998] SELinux: syz.8.3358 (16998) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 282.977291][T13041] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.263693][T17017] loop7: detected capacity change from 0 to 2048 [ 283.297560][T17017] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.331251][T17021] vlan2: entered allmulticast mode [ 283.499969][T17025] loop8: detected capacity change from 0 to 8192 [ 283.762840][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 283.762859][ T29] audit: type=1326 audit(1746233389.121:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17040 comm="syz.0.3386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a742e969 code=0x7ffc0000 [ 283.801054][T17043] tipc: Enabled bearer , priority 0 [ 283.809901][ T29] audit: type=1326 audit(1746233389.121:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17040 comm="syz.0.3386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a742e969 code=0x7ffc0000 [ 283.833581][ T29] audit: type=1326 audit(1746233389.151:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17040 comm="syz.0.3386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10a742e969 code=0x7ffc0000 [ 283.857444][ T29] audit: type=1326 audit(1746233389.151:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17040 comm="syz.0.3386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a742e969 code=0x7ffc0000 [ 283.881217][ T29] audit: type=1326 audit(1746233389.151:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17040 comm="syz.0.3386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10a742e969 code=0x7ffc0000 [ 283.905002][ T29] audit: type=1326 audit(1746233389.151:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17040 comm="syz.0.3386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a742e969 code=0x7ffc0000 [ 283.928897][ T29] audit: type=1326 audit(1746233389.151:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17040 comm="syz.0.3386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10a742e969 code=0x7ffc0000 [ 283.952755][ T29] audit: type=1326 audit(1746233389.151:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17040 comm="syz.0.3386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a742e969 code=0x7ffc0000 [ 283.976710][ T29] audit: type=1326 audit(1746233389.151:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17040 comm="syz.0.3386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f10a742e969 code=0x7ffc0000 [ 284.000259][ T29] audit: type=1326 audit(1746233389.151:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17040 comm="syz.0.3386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a742e969 code=0x7ffc0000 [ 284.026697][T17046] tipc: Disabling bearer [ 284.033209][T17039] SELinux: syz.8.3376 (17039) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 284.127464][ T9891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.128261][T17056] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3381'. [ 284.422220][T17074] tipc: Enabled bearer , priority 0 [ 284.438481][T17075] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3382'. [ 284.451500][T17071] tipc: Disabling bearer [ 284.471692][T17078] loop8: detected capacity change from 0 to 128 [ 284.498534][T17078] vfat: Unknown parameter 'smackfsroot' [ 284.565585][T17083] tipc: Enabled bearer , priority 0 [ 284.593891][T17085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.603256][T17085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.636315][T17086] tipc: Disabling bearer [ 284.714485][T17088] loop8: detected capacity change from 0 to 2048 [ 284.744403][T17088] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.197825][T17108] tipc: Enabled bearer , priority 0 [ 285.210010][T17104] tipc: Disabling bearer [ 285.228698][T17099] loop0: detected capacity change from 0 to 8192 [ 285.307119][T17111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.326651][T17111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.367789][T17115] netlink: 'syz.2.3405': attribute type 4 has an invalid length. [ 285.375758][T17115] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3405'. [ 285.582135][T17125] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3408'. [ 285.647274][T11284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.897134][T17132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.926921][T17132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.340618][T17148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3415'. [ 286.559582][T17161] SELinux: syz.8.3421 (17161) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 286.582064][T17163] loop2: detected capacity change from 0 to 128 [ 286.589328][T17163] vfat: Unknown parameter 'smackfsroot' [ 286.630188][T17165] loop8: detected capacity change from 0 to 8192 [ 286.699843][T17165] ================================================================== [ 286.707966][T17165] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 286.715099][T17165] [ 286.717421][T17165] write to 0xffff8881366eb35a of 2 bytes by task 17167 on cpu 1: [ 286.725241][T17165] fat16_ent_put+0x28/0x60 [ 286.729709][T17165] fat_ent_write+0x69/0xe0 [ 286.734178][T17165] fat_chain_add+0x15b/0x3f0 [ 286.738782][T17165] fat_get_block+0x46c/0x5e0 [ 286.743508][T17165] __block_write_begin_int+0x419/0xf70 [ 286.749008][T17165] cont_write_begin+0x5a3/0x8e0 [ 286.753902][T17165] fat_write_begin+0x4f/0xe0 [ 286.759048][T17165] generic_perform_write+0x181/0x490 [ 286.764456][T17165] __generic_file_write_iter+0x9e/0x120 [ 286.770103][T17165] generic_file_write_iter+0x8d/0x2f0 [ 286.775634][T17165] do_iter_readv_writev+0x41e/0x4c0 [ 286.781144][T17165] vfs_writev+0x2c9/0x870 [ 286.785606][T17165] __se_sys_pwritev2+0xfc/0x1c0 [ 286.790582][T17165] __x64_sys_pwritev2+0x67/0x80 [ 286.795592][T17165] x64_sys_call+0x1cea/0x2fb0 [ 286.800373][T17165] do_syscall_64+0xd0/0x1a0 [ 286.804906][T17165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.810836][T17165] [ 286.813164][T17165] read to 0xffff8881366eb200 of 512 bytes by task 17165 on cpu 0: [ 286.821067][T17165] fat_mirror_bhs+0x1df/0x320 [ 286.825853][T17165] fat_alloc_clusters+0x98b/0xa80 [ 286.830907][T17165] fat_get_block+0x258/0x5e0 [ 286.835537][T17165] __block_write_begin_int+0x419/0xf70 [ 286.841199][T17165] cont_write_begin+0x5a3/0x8e0 [ 286.846074][T17165] fat_write_begin+0x4f/0xe0 [ 286.850735][T17165] cont_write_begin+0x198/0x8e0 [ 286.855652][T17165] fat_write_begin+0x4f/0xe0 [ 286.860255][T17165] generic_cont_expand_simple+0xad/0x150 [ 286.865995][T17165] fat_cont_expand+0x3e/0x170 [ 286.870762][T17165] fat_setattr+0x2a5/0x8a0 [ 286.875203][T17165] notify_change+0x806/0x890 [ 286.879829][T17165] do_ftruncate+0x327/0x430 [ 286.884367][T17165] __x64_sys_ftruncate+0x68/0xc0 [ 286.889327][T17165] x64_sys_call+0xd65/0x2fb0 [ 286.893931][T17165] do_syscall_64+0xd0/0x1a0 [ 286.898448][T17165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.904378][T17165] [ 286.906721][T17165] Reported by Kernel Concurrency Sanitizer on: [ 286.912968][T17165] CPU: 0 UID: 0 PID: 17165 Comm: syz.8.3423 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 286.926179][T17165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 286.936251][T17165] ==================================================================