last executing test programs: 3m54.524252405s ago: executing program 32 (id=1550): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) (rerun: 32) write$tun(r1, &(0x7f0000000600)={@void, @val={0x1, 0x3, 0xffff, 0x9, 0xfeff, 0xff0c}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x5, 0x2c, 0x68, 0x0, 0x9, 0x11, 0x0, @remote, @multicast2}, {0x4e20, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x7b8dd026, 0x1ff}}}}}, 0x36) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m38.905421152s ago: executing program 33 (id=1770): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = msgget$private(0x0, 0x0) futex(&(0x7f0000000300), 0x2, 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)=0x2, 0x2) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) msgsnd(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="030000"], 0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgctl$IPC_INFO(r2, 0x3, &(0x7f00000002c0)=""/14) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0xf, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f00000003c0), 0xff, 0x52e, &(0x7f0000000f00)="$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") 3m17.23861217s ago: executing program 34 (id=2092): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf250800000018000280140003801000018004000300080001000f0000000c00018008000100", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 2m36.413202972s ago: executing program 3 (id=2828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {@in=@remote, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0xe7}, {0x8, 0x0, 0x0, 0x1}, {}, 0x0, 0x2, 0xa, 0x4, 0xff, 0x6f}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x4000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m36.318412343s ago: executing program 3 (id=2829): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096", 0xe3}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666d", 0x23}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3dc5", 0xf4}, {&(0x7f0000000200)="057322e1", 0x4}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46", 0x5e}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d", 0x2f}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000a80)="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", 0x119, 0x30008095, 0x0, 0x0) 2m36.185096765s ago: executing program 3 (id=2830): r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r6, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r9}, 0x10) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r10, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000600)=""/6, 0x6, 0x21, 0x9, 0x0, 0x7, 0xc08}}, 0x120) read(r10, &(0x7f0000000240)=""/82, 0x52) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r12, &(0x7f0000000140)='./file1\x00', r12, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 2m36.042448807s ago: executing program 3 (id=2834): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001780)={&(0x7f0000001080)='mm_page_free\x00', r1}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r4 = getuid() stat(&(0x7f0000002a40)='./file0\x00', &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000002d00)={0x80, &(0x7f0000002b00)=0xffffffffffffffff, &(0x7f0000002b40)=0x0, &(0x7f0000002b80), {0x32}, &(0x7f0000002bc0)=""/109, 0x6d, &(0x7f0000002c40)=""/110, &(0x7f0000002cc0)=[0xffffffffffffffff], 0x1, {r3}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000002d80)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee00}}, './file0\x00'}) lstat(&(0x7f0000002dc0)='./file0\x00', &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = eventfd(0x9) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000002e80)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r12 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002ec0), 0xa000, 0x0) r13 = accept4$vsock_stream(r3, &(0x7f0000002f00)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0xe9c2ec2b91f5ec78) r14 = socket$inet(0x2, 0x1, 0xd) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002f40)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'}) r16 = epoll_create1(0x80000) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000004940)=0x0) r18 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r18, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r18, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, 0x10) r19 = fcntl$getown(r2, 0x9) getresgid(&(0x7f0000000c40), &(0x7f0000000140), &(0x7f0000000240)=0x0) r21 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r20, @ANYBLOB="00006b746769643d0092", @ANYRES8, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004a80)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000480)="def4d083ce9f11016a0cc677989d23fa8e0d3dfbd66a76ef2d70b6787f5c48d258c644582bd7bb19b262e8cfba858317c201dd943b7c208afcc1", 0x3a}, {&(0x7f0000000580)="fd4713e9a9727bf946d9e982d0", 0xd}, {&(0x7f0000000800)="6e0d6f6b10a9b26eb0448fca8b59091cb4014a7490f10662dce65cef4189fcdb4fb8b058a810089194094d5c864e595abf304fe2f4c14f75a8ee3f887395a6b8cf8fdc810fa59c105dea48a1fe1d809553565643e638c4639a6ba53609028088cdbae22c7536283c2291b86ac4f079b35d0685ed17da66e24a73f3f2e6b5469811ab7eef532608becc6d788a69a16ab4611ca237f0cba2cc9ab4591117ee2adf71b81679b3b49e009e405c956677c47fb471258f457f14dc7afc32a5a1e2df869e6116f1c827ba19c3dd55f9142de5c2b8dde23abf03b93d7eed34dcd6e4c4c4953146718778163ee0630c8a7f6fc11dd69d4e567b8ee68e08", 0xf9}, {&(0x7f0000000680)="cb91884205b9", 0x6}], 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r21, @ANYRES32=r14, @ANYRES32=r11, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0xc8, 0x8001}}, {{&(0x7f0000001000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000012c0)=[{&(0x7f00000011c0)="b1c2325799d0d3590a4e4bb99a7a8b0ecae11e526c94f330d75acf5bf54d33c458418c054d42f95980d7d2edaa23d25ec4464fb8ed44edada56245d2a54dae8b572b8f3754a07e8bdc783758e5ceaa95eb4920b1a86b82016bc1c8b38e6f484dfe8df2d28a6272313e39f175926e6050f051192ed301151c66f3574c38ec5e6874832bacc7a60e21b0a19db453d24a8bc52dbdd34b1dfaee9c3c0b9eccea586125c8b06c5108643b405c4a555366e7c2e6b2d9f0dc21e77c33a149aea39c93141dda8851f6c96934df785cd65f2beca2104ce59e0ccb2d09812b010b8592d670b3b45e54", 0xe4}], 0x1, 0x0, 0x0, 0x200048d5}}, {{&(0x7f0000001300)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001380)="2c2153b401419f7603a5882042488a6a8b9e93b8f493989c0443e8854e053fa6c17dd4c93d75aed9c21aa9688a1c8c4a8f4cb78bf06e2b47350a28086a9d17aabcf869fbd4f61da0699643ee1117c01c0a531d234d95aa42b21609b82b04eeba58bc4bc9959b85bb7cc9a24ca1f90c8047dd1227eaa3ef9eb61b647b1ca5ce094ff9d29d08a478b2005c8251937c380e955439ceb0fd71df546f349d5fa50c73d1846cf682d1bffd56b90436e72cc057b075defbd57d31ae6da6a97fb882b3bb8c4bb632ccf674e327aeef89c3ed9c98c50e6cd03e849b39806a590f159efec284494fe640e5662379aab196b8b7918928ab8f08e25d", 0xf6}], 0x1, &(0x7f0000001600)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x10}}, {{&(0x7f0000001640)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f00000016c0)="68c27270a310ce12823ada1ca3", 0xd}, {&(0x7f0000000c80)="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", 0x250}, {&(0x7f00000018c0)="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", 0x1000}], 0x3, &(0x7f0000004c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="000000001800000000000000010000000100fbff824e18", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="38000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r10, @ANYRES32=r11, @ANYRESHEX=r0, @ANYRESDEC, @ANYRES32=r1, @ANYRES32=r0, @ANYRESDEC=r4, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32, @ANYRES32=r12, @ANYBLOB="0000000000240000000018210001000000010000141108ebf6a0e6ff02e3f82e8c48d341308612c89ad9ce8c19171cbc1eddd9dea5c00c7e1b7ebd3e5ea6aa84a390b4bcc4c4c0042010e7aacda09277a8e07690daab8ece83142aa5b32d20695a6f3fe7be09aa9b7e72cb8ffa9d55c76fc5397807ac854f3c8af9050d05f52c3fee4138c95a0d3949ab2ae1d4cf186c670000000000000000626051baa6", @ANYRES32=r2, @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="d0056e5ab8d43671d57177123ed8e9103b9e4704bdf62352b15b722b432301688e1f3d4c74d338016feaf4b1aa73fd1d20715163d5ccc86d4263c78905a2c8581831c0b1652fc8d6f24a9f99f70a5253a1d17cac1e599c58ab2caa7996bcc3429dc4d992fccb5acf7ff3b9ac9aed8e48f07da7e679acb47ce340cbff1ddd1ff28a567592c105b99881d7b875dedee698a8d0e2fb9608ebe4466dfc5a2c0878727d89f26d6eaa55e7a4a4a69dd934b6bb59a22076741d5404aafcf7cf885018e645b6417501c3993a7ccbf939c49f39e7354eb48ac53b2d2017", @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r13, @ANYBLOB="137204a899f6e53eb84efb927af51db9e36ebf41b20b65ff44024ba2d66ad99cd946000e18a8260532aa9ca996ea734415ff962ebffc19eea9f92caa37c617ed505f4d20c204b011f721ef8a1aef0a28a23db13fcda111a75dad56a60c3fe1d42c948278a8b95439df5c97c22f7d1cec0eabf0daeb", @ANYRES32=r0, @ANYRES32=r16, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000010000000000000000100000001000000"], 0x160, 0x20000080}}, {{&(0x7f0000003100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003240)=[{&(0x7f0000003180)="267a6c68e9f5565a6c879827676263f251e0f5335c6c43b488f9cfca86d81bdfa43316d3ee867f1246f987ecf7f3c7c384356c59fadbb8033b9adce804cf683a6e5688a441fa3d1e3793b7011d6915d704c1b984301399a31b41755a4c3df1a9768d68876fd065f9944afaf4284f6083aef25d653d71fc886852372511b1278930531023e41838bf230a4806b09595791add1997747655e5e7b160ca", 0x9c}], 0x1, 0x0, 0x0, 0x80}}, {{&(0x7f0000003280)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004680)=[{&(0x7f0000003300)="79911be6fb77614081b17317b11a7377347c7cb3f94ed2ed7718b06eb82367f50a1aeadaa70bcf008d0506e487dce245fd4072b1395a1b958237f9dba3a8bd281a26c684508b74614117d81b73ead1fd9da1b4895d461a2ed673ec93a6cee3d2aab26d1ea70c2b9171b56651542c7ca5a78aa8098405d55d817dcd55003771e28d9f386d44144e4e333ba539c956f5062e12c2e75ef35df3aa72130865bdb5ae0c01dfc5009270e5431305db", 0xac}, {&(0x7f00000033c0)="c32db8da8827e87cdf1540fec50d2d62a9d0a532a61194c4d2f354332bf809330ac8662a9436187dc95d82825a23bebd438bb4afaf6dd38ef536b4e5e04f9a09490dd95552700f30e614017e6a38db0f5de5fcdcc19a89f1275e3b6a78704176bd479f97", 0x64}, {&(0x7f0000003440)="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", 0x1000}, {&(0x7f0000004440)="77bd4444c316dbb12864e1205769a5a91860449ae764af5cc65a5d4b903b3022fa258ab00bba32527e925fa7b3bd791c9895574c131645e81be5fc1877c4409d6013163468ed0b0ffc77e3e1a3bfd235a6467571480e953e44b77709d3fc511378a4e3a59137e4066e0169deb5aec554ceedeff91ac24697555b5ebacf48393b621a49", 0x83}, {&(0x7f0000004500)="51df768d25c3d12f8069d19c47e801c876c7239a22625c71458130698e6ef8cebb91758e7b62c2a1cedea0dbb483b2849980f63e38e0e08144b25e851b0913ad057952e82bdbd2c5f4609148ed2f190fb3446d4e5d75e211feb759006ea580db969e817e5ec0ae61cbc0bc7b1c5b9a345089b796c713e6e355256d9a981480e3b5acadc9b24fefcf57e72fdf4cf6ec13ab", 0x91}, {&(0x7f00000045c0)="640b98604d636e63f9997bb83cf30a6c16ebe0371d1e800f8c6c78b6c1413c3f1082b9e4766dddd8c3dcaf118658c8e8fbae64cd9b633b65ebd0a8f29d19b7b2388a67f7d70358588b8d6c0c3c5bf592f702388f3bb4b699f890fa9296ebd134568d271e387cde8a8758ddc34740308d4c805696f5f83091f69d460bb9a7aadf67746e78bbe62fb947d36b17b4ba6df26635f3cf10ccd249cb3cf6b52c762fbabc6ecb9d27cd5b5dca0615000f5225354f625c3338b973", 0xb7}], 0x6, 0x0, 0x0, 0x1}}, {{&(0x7f0000004700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000004900)=[{&(0x7f0000004780)="d6f9ee297d1d5bfac326dbd2f0364f69ca450c450e149f7ce1be6fd9e0d8f00c32d48d47362141e162ab25770d51ca217fd39cf26fe3592a88c85213ef2d7fde90c29cc866fe73340056742d76bf", 0x4e}, {&(0x7f0000000900)="c9a318b7230dd46880ac8fd56e596d4baa69b2731f66f7304113ea196ee2693f439af05113217fa9aee683a4c57d99d38ff30da1f0649cf372f11c6902b653dd873d69b236da4049034b2ce5147e30dc094aa13bd01136d79b6e22ab63262ca6c4449634550b47c65e8a521bb61e8ec10a3440ae612da42b8fe10056f871e4fb3a3144e28871b5ef5c74dbbb9a779898711d91f1f6ba4a57e4c95b9864ae83ef1fab966f9ad4bd06239f2f3e554cd0a9bf58e94513a30fcdc658433119e86cb0336b34abae87ea69bbf5976465c4cbcc8d", 0xd1}], 0x2, &(0x7f0000000a00)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001400000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r17, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRESHEX=r6, @ANYRES32=r1, @ANYRES32=r18, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r19, @ANYRES32=0x0, @ANYRES32=r20, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0], 0xd8, 0x2000c000}}], 0x7, 0x28c0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r22 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r22, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) r23 = syz_clone(0x28000000, &(0x7f00000000c0)="4a1f3fbe3f30f57c42a882beeca8730d4c16d5fd9e2eb2d2e5b48b5171cd", 0x1e, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000380)="4e1c18cb3eb88d09f9cc75057bcfd02317f7bba0fc7c25ae599ad6fab58d0ce442754622df3e3c69fa46bf690cc689668bf7af30e282c46a2629bc0c762ae9934014582e596ae15c98d4cdd49db53ca53b08d3259136317a0b96f127ab2408801fd11a5d92bc9d4c35734515ea04cd988570f8a1542bf902095ac1e31f3ee5a282d5e98de20741249bf218069f45fcc51090a9befd973e33e13e2dc259d430f65299946dd1641b635e1e353fa75b9b9d977f02a83a174f2a03639b8a522649ba40fdaf7b84012060fc53d44474f09efbc04ebd4e25cd5518") perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfb, 0x82, 0x8, 0xaa081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1fffffff, 0x2, 0x0, 0x40, 0x0, 0x8}, r23, 0x0, 0xffffffffffffffff, 0x0) 2m35.686927282s ago: executing program 3 (id=2836): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x7, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) 2m35.191169939s ago: executing program 3 (id=2842): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x2b, "43720738300000000200000000000000476f8eb2940a25f03e1bdba33298b631376f55617a34d392dc70aa"}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x4000) 2m35.10115995s ago: executing program 35 (id=2842): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x2b, "43720738300000000200000000000000476f8eb2940a25f03e1bdba33298b631376f55617a34d392dc70aa"}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x4000) 2m25.618467895s ago: executing program 7 (id=2986): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[], 0x0, 0x6fe, &(0x7f0000001340)="$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") mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x66820, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000540)={'bond0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) umount2(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0xb, 0x0, 0x1, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=0x0) syz_clone3(&(0x7f00000004c0)={0x20002800, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300), {0x12}, &(0x7f0000000340)=""/15, 0xf, &(0x7f0000000380)=""/80, &(0x7f0000000440)=[r4, 0xffffffffffffffff], 0x2}, 0x58) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x3c, 0x18, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @private, {[@timestamp_addr={0x44, 0x4, 0x61, 0x1, 0x7}]}}}}}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$sock_bt_hci(r6, 0x800448d4, 0x0) socket$inet6(0x10, 0x3, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) 2m25.487378747s ago: executing program 7 (id=2990): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x1a, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r3, r0, 0x0) read(r4, &(0x7f00000000c0)=""/226, 0xe2) 2m25.039275313s ago: executing program 7 (id=2994): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r6 = open(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x2, 0xc, &(0x7f0000000b80)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r3, @ANYRESHEX=r1, @ANYBLOB="80a359468fb650e3986933caa2ec496dae381f0e03b8e0c00e66b3fa34492ba8fb4a25b380666af99e08419dc1e1a46f613b25f5bebc13a9a90eda82efa05379c840f28c6ce1985ce6d98a30e1771f3c92b3f40dd201c80e6d621d253c529e4953540dedf2d12baa62d1604b1b744bd61e5c20ed8675d8a531641250dd710a18ea724edffb84d3403257da92fa75b7c98f1b05f59faa2aa7b7ad44bb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x21, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) getpid() sendmsg$nl_route(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r9, @ANYBLOB="080003"], 0x80}}, 0x8000) 2m24.878782355s ago: executing program 7 (id=2997): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r2, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000000)=@delchain={0x24, 0x65, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff3}, {0xffff, 0xc}, {0xfff3, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x18) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m24.49654195s ago: executing program 7 (id=3004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {@in=@remote, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0xe7}, {0x8, 0x0, 0x0, 0x1}, {}, 0x0, 0x2, 0xa, 0x4, 0xff, 0x6f}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x4000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m23.347295706s ago: executing program 7 (id=3014): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) flock(r3, 0x5) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x7ffffffe, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x400000, 0x100000000000000) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) unshare(0x62040200) io_setup(0xfff, &(0x7f0000000000)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300), 0x10002, 0x0) 2m23.346940986s ago: executing program 36 (id=3014): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) flock(r3, 0x5) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x7ffffffe, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x400000, 0x100000000000000) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) unshare(0x62040200) io_setup(0xfff, &(0x7f0000000000)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300), 0x10002, 0x0) 2m13.111148471s ago: executing program 8 (id=3159): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 2m13.030718063s ago: executing program 8 (id=3163): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, r0, 0x0, 0x46) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) close(r0) 2m12.698818997s ago: executing program 8 (id=3166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fcntl$getown(r5, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) listen(0xffffffffffffffff, 0x100101) r7 = socket(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r7, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r7, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) recvmmsg(r7, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='fsi_master_acf_copro_command\x00', r8, 0x0, 0x401}, 0x18) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) fcntl$dupfd(r9, 0x8bbb50fa959811f6, r3) eventfd2(0x3, 0x80001) 2m12.623243678s ago: executing program 4 (id=3167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = socket(0x2, 0x80805, 0x0) fstatfs(r1, &(0x7f0000000480)=""/104) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000540), 0xcca8, &(0x7f0000000a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@directio}], [{@fowner_eq}, {@subj_role={'subj_role', 0x3d, '-'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'wireguard\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@euid_lt={'euid<', r5}}, {@pcr={'pcr', 0x3d, 0x7}}, {@dont_hash}, {@fsmagic={'fsmagic', 0x3d, 0x5}}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="ff030000002700189d3413ae0e01a560b4426d4b859a91a09516bee75a6b4e6736b8fcf9953490ca2242790ea6d30012d17865de89372909676e696342f474445a794e3ebb48e80000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="03000000000000000300"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000002c0)='sched_switch\x00', r2}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 2m12.622651738s ago: executing program 4 (id=3168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x748) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) 2m12.596050869s ago: executing program 4 (id=3170): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x5) 2m12.548346359s ago: executing program 4 (id=3172): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x101091, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000400)={r0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r6}, 0x18) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc) write$tun(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001780)={&(0x7f0000001080)='mm_page_free\x00', r8}, 0x18) 2m12.46180287s ago: executing program 8 (id=3173): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r8}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$sock(r5, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x11, 0x20000000) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000180)={0x0, 0x3ff, 0x4, 0x2}) 2m12.4610806s ago: executing program 4 (id=3174): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = fsmount(r0, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f00000003c0)='./file0\x00') readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/198, 0xc6) 2m12.170624984s ago: executing program 8 (id=3179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = socket(0x2, 0x80805, 0x0) fstatfs(r1, &(0x7f0000000480)=""/104) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000540), 0xcca8, &(0x7f0000000a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@directio}], [{@fowner_eq}, {@subj_role={'subj_role', 0x3d, '-'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'wireguard\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@euid_lt={'euid<', r5}}, {@pcr={'pcr', 0x3d, 0x7}}, {@dont_hash}, {@fsmagic={'fsmagic', 0x3d, 0x5}}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="ff030000002700189d3413ae0e01a560b4426d4b859a91a09516bee75a6b4e6736b8fcf9953490ca2242790ea6d30012d17865de89372909676e696342f474445a794e3ebb48e80000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="03000000000000000300"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000002c0)='sched_switch\x00', r2}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 2m12.119338075s ago: executing program 4 (id=3181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x20050800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000010000000be2e510f0000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) msgget$private(0x0, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x7c25d99f}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x773241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={&(0x7f0000000580), 0xc, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[], 0x3f4}}, 0x4040091) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRESDEC=r7], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) close(r7) 2m12.119016575s ago: executing program 37 (id=3181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x20050800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000010000000be2e510f0000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) msgget$private(0x0, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x7c25d99f}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x773241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={&(0x7f0000000580), 0xc, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[], 0x3f4}}, 0x4040091) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRESDEC=r7], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) close(r7) 2m11.829169808s ago: executing program 8 (id=3189): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x60000008}) 2m11.624476171s ago: executing program 38 (id=3189): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x60000008}) 2m5.295790635s ago: executing program 0 (id=3255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='kfree\x00', r1}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r4, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000c700640600000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='fscache_cookie\x00', 0xffffffffffffffff, 0x0, 0x1e}, 0x18) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000500)={0x5, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580)={r6}, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x0, 0x80000000}}, './file0\x00'}) r8 = socket$inet(0x2, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000003c0)={0x64, 0x2, 0x5, 0x7fff, 0x0}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000480)={r10, 0xf1, 0x10, 0x8000000000000000, 0xfffffffffffffffc}, &(0x7f00000004c0)=0x18) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, 0x0, 0x0) 2m5.122804108s ago: executing program 0 (id=3258): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[], 0x0, 0x6fe, &(0x7f0000001340)="$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") mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x66820, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000540)={'bond0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) umount2(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0xb, 0x0, 0x1, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x3c, 0x18, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @private, {[@timestamp_addr={0x44, 0x4, 0x61, 0x1, 0x7}]}}}}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$sock_bt_hci(r5, 0x800448d4, 0x0) socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='rxrpc_improper_term\x00', r3, 0x0, 0x81}, 0x18) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) 2m4.401761947s ago: executing program 0 (id=3263): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) 2m4.264259189s ago: executing program 0 (id=3268): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r8}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$sock(r5, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x11, 0x20000000) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000180)={0x0, 0x3ff, 0x4, 0x2}) 2m3.891319684s ago: executing program 0 (id=3280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000680003806400008008000340000000"], 0x118}}, 0x0) 2m2.585246381s ago: executing program 0 (id=3304): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r8}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000180)={0x0, 0x3ff, 0x4, 0x2}) 2m2.563234752s ago: executing program 39 (id=3304): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r8}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000180)={0x0, 0x3ff, 0x4, 0x2}) 3.869404508s ago: executing program 5 (id=4095): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) 3.81497414s ago: executing program 5 (id=4096): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000540)="9247ec88f1ebc08258477743f1c7538f19403e7dfc85a0e0010d9c8176302af95c7075d819fa21d5cefce441b83a2c759b2f0a0482dcc3d96039cb3dbbf4c647234d851c64d3685e20b1f018a70d41ea912f5a003876dbeb1f20d6183ff286a04924818896a53b0a41aae78eaadfed76f1fc0950edb84940268019434ae1b849212f8eadd0ac14a1d77336ccf52c126a27624c6a11430e800096e3da644c3d8ad20d4349f38c681c6675d87de8b3b516c37ab08b0b4958bb6eadd65ff06e48567926ef", &(0x7f00000007c0)="271064685e9d5cc6d3ccb2a780361e56e0a4d0f25688baac0594dceec97e945865beaa0b712c667eb5ee6c65d04173f7e8ca69a9019c987611bd3f6356afccd336cf88fd3b122824db4860e5ecbf0931a8ab8da4f566b6118b66180a729d18ffc84bf51bdd47514c851284e42b2ae92be6246b79e3f5f9da4fa942e5097a25d000dfbfb406379577c77fdcba6f14d684c937eebfb09c343e190c86df4508c8787945bb4864f691fae1a8cc44b2a91a456c7e32a8b0b43a308fd1f740c5a6d6977f60dbc0fe4a23e8809ae25f49db543ae5ad78b4"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0], &(0x7f00000003c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) getresgid(&(0x7f0000000c40)=0x0, &(0x7f0000000140), &(0x7f0000000240)=0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES8, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000300)='GPL\x00', 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r8, 0x0, 0x8000000000}, 0x18) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c80)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYRESOCT=r6, @ANYBLOB="f994b2c0b83f7c0d4f119c649318e2b2468bf9b5744fc31c8589b7bafb32aeef3f024a25fcb4c7ed692e66df2332f655e5135666b4b752a4bbec9cd4722d92a62eaef3e12895b966a82f0ed4d859f96bf44a0bde1f2bc12f7f12b987d27e3beaee0a682c13304e62dd6076143fbff9f6ade123b835b5dd44fcb193b081223c96db8f2150393fe387824feeb57667843a59c7c94361009607217f6503a16488cd334dc55c418d69587a5357c9db27bbf43e19411dcca43b1a3b7b17e968ee67a52b01014548839970df9aa7feb93ee930a4e7677caeaebd99065f68cdd243b9794f7cc5d9b305f1d9469698b8ec03b65c4e914dfd9370616a44e44cbc556bbb7ca7bef9a56c761cf44d86208d2a4ab34e0128235f9164541de4c2476859c02a4ddaa8d764c7b75d431c1b6c921f486f38c14c459318891de453df06e4c7d7e80c185fc3e272fd0f0e1268c3fbc4e176e820559d5e81fcbccaca118dac309e2dc51e9bca42fc760c66ff716941427f83cfc6ddd4e7c16c960d0de9d1a27abe74e76312b2652b2d9ea8aea6b33048f733f9d63ee5d11d0c75b210808b01dd9a42cd9a3fb4884c92a94295c674ccb9b2f0eee53dc062744156b44e96309e1a28acce7822446c07f78a6085b55f0de3423e10e8100a7c6a1983783094a0df943006690c5f577c523278f488c50f0501105cc5ff2fc2cea12b7e37958efb8f49e6e55f299243f717d8dde09dec9400f785fa8d73e8849f7b03f57cd00e846ab013ca4e306172feb4cc4a019598ed7de0e87e77b8b2236679b5ded306bbc77dc2da4cdc04364911b9788c5749818992b2cd8daafc6ede81b5252415155b482bf6c9c26f7dd216559efe0a0bdb677521c41351735017513e91c09391f0b72b6474f06ec2d11002d19b8859ff3b74c8f5d571135afaba79661c7ed159944a7b265dda9e62a7c9200e66d6721ee21f54645ad6063718a61dd4b30ec128544e4d474af59ddef94e69d493c3a43415c5aa6f5e131f59af9cdb7921e43c87111965e12f1fd819a0096144bb4ea006c81f491646186a6030d6a2b87de93a9a73eec8b06989de9013c58c035c0b84f98aed57d6b704db23786aaf109c53f2185bb5d6fdef5e2b268f742dcc231574d516780c3ea999436f3698dd20ad71655060fe66bfc19961cef47e8bd66c6b8f24699f73b38178379a6d5133dc811ae3d03b953ddffd6e493569f5144af7d11a719b35e97275a917c498a032a7baf21beece23cfcfe1ef602c1c287b18f6ee04afac5c494aace329300f17a41a5ab86dadde42588fccbe7e2cbabe9ceb642c8de3c157454008d3c3beb84528a20a22a03d2f70cb8503889c24d3e2e81a4abf75c199be908fc7cec563bcce352b4029d1b11de768252ed2fb826c620106a7c08cea2ec549aed86319af5885da7e503101b186532027b089e6059fe55eef4a272bcf60e8ba82635978c3cdd3270145b2bfd28fba8b72ff63d25445bcd7b70826b378cebbc2b9402e6f13369af198e5a78ea56ab757a06eaf0250ce8d1530532566ee156f0367d01d5f61fdb64c2d01eba224b2642ebd9a66d7602db1494ab45efa80bdd0953465f8fcbc1ded958f4eed4eea7f1fa0998540f847250a9ee77304f3b187bca1b0b7606718de3f8ff5cdd4c20a6b74da0c25f9c02d6758285d92e60fb62e68d40a5c59687a9a983f51118841a23f09833b09ca434190ce9bc6a0142e7ca4a591909854fbec3b242179dadd506578c522047f36919773be9fd1b49a280d25e5dc3d97412df63ce6c81e8578192134a9eba68977c6c17879934155c250e3d0dbb77bfeb6c1feabbdb912fe0c4f801dae2f05770038721237a7bac4e9e7d598392ae9851ebd82f02036f89b44aec591349cf1d819470f1d98deace786ad56c4b3cd9eb9d90f3326714692198dbfd9dcdd1f6df1aeae72268abaa83885e42c110a3be5c175894fcbddc1e59ea777563693ce8493901e8b314abab8a5c3c365628c5d4933c9af2ee0032a4c59d95453afed7b6249192f5b976a15fb605df82baadf285c845d932e7f9a35aa7875b74b4b6c47d278a68ed26faee237222cfadcd8287cf9e5218edbe1c37555b9bc03fd9f7374737ff9801815b73c1768df8dfdc2c210cfe8a866a0ae18d8f9892147064f7e75a8fb156de7b4d9d22d4a125cdb797ae9f37a4d357e06a01b9e64f6ff80539c61ba039adb94e194d703d174cde93ead3df7d33c63f4414762e8e4969a04bc005f58bc80a129e4f227ddb9282fdc8adbe27555f2c8a094f8162fdee83734a9e4da7e28a0deaf18846090b9455d20c2975f82c76a717c464e8bff5bf85874e79d7c3a4994cacf0ca294ca0c51204512f84c0eb202a4552622e3a05f33682d1cba2dccf935197ebcf5337e71bfc76ac3b3554b80a87b2c12e39717e60281ab90d89cc2c25cbdc1e0c8e5e90873f6741ce0a1adcb7462abbf043e302571167afc78c10239dd69b3e580aae959ad6e8bb940242cd3e6125f57a4ac0aec2ae9f9729dce36c9a8d6cdf9d7766be099d7766e2488d202648f087ff42ae4b58cb59be5fcb5f3bdbe8ec64ca167bcb39272a425e52cfa0ffe8617b8020db1e122d946af61b1bd2d64d3d7b3e01816820ca3c0e9983df699e977de10ad10ad56d34a638576826cec1bb3401928396bf12ecb0810615fd835e99e8a6cd1965e9d09c57acef29cd783ffdd84b3ee0950e842cef0ad118701590617baf0439b2f0ebb17b179afea2527fa11c1ed04cfca270d892ce0e959e7a509693fef02874d0c3199a447e22047f92e1ba1b7cc8bd09cca2f92b5ccbe5e384cac889ea1ae83917fca2c08ea65343eea0094f67abde3f3e8d679065ac2f4cbe90b49b710cc03c2ae011e7935a36d460242a9c96d9f0c67e55693d99af953935cd755682f81eee198e522e3b6f601789136ffb7622c4d10af698ec461f59b144c996f8ac2f62079b79012189a58acf390179bcef51a76906f209c08bf319a66930582ef8bdaa238ca13f23e5f41390b07d02bb7e2da5abfb3aec3dd6f6afcb92299b9e135c79d62f1ae1fa4711c6372107d7f1e43d568d36bf204280ce96f14e6f41ecb16d6ede683468af00d694382fa30fcac172054583d97a28d5c243f17ef9ba6ba0433aeb25f423311bb67818784b882c44f93419269515b3ba765e7b26baa61f042cce6c9f53f1630320608f3021cb92b326cbbd5b1c5dc2555f81836e24026b7da1b1d175c15f2343427bb2ae567c83eeb8f3ec38a18c4d1ce812316c12f548c6185850fe991e76c765dbcb0511eb71e4d188a62d80d02038463c176db3df604f69251be272a650685642f787eff7ff034ab50cee84249533cc62c9205f06e407a0007a07a68923ad7f6fa433d61ff5a65f7bb3c0f408216c731439d9b10501fe1c690e7754e93bf936228bb47e9e65b48f27a30d495d404d06b2b62f92836822bf5b78bacb1a265daca16d4e8bea8ffe42d58f98a4430232e03032df9d940a9bdc47727a3a11d180fc8115bcb30b4cff37025dc7e67529471949d6a260e25545bae304a58e31f4dd77ee8e790f05e4ff992b52997e5ec28b734600e0bbd0cfcc6627a76ec633e8b0f7b201348a42e2b86a4422ba088f6dc8d1bccc4942556cac6389b6f5c2e60a7f2167b513163e721183221503f7c47b32bd496085cdabc59cdd1aa092c0416ec69b8a1ac76703370c2da863994a130c0c87a301884c7b790bd386efecf06bb7ff6a90c2fd5aeb9dcdf8768ecf70e412d332b89571a93c92edb54d853223224380dc8aad5d49bc7b24b2fd63f500312f5b52e777455b773a852696c32c0e7ad6e5d7c5fbc7995f62b9ca28626ab49b961977431aad96aad34d98666230d7c838f65680f0bfe2590228418842ad6667f8d830c8134f48411ea9691d2178a9e0cc4b0d407ade7a62c6829c4819b3d5c0c2c374793cfdcafbb7526e779396f22d6fa92fab75b3f076a231d1bbbb80d8ff09bb04f9310aeef5e325f3457a16dd39ab1440ea3517c16eaa65d08cb04c0b769070cd9c9e7fc935329eefffb178f56ac79ba33c899241505eec588a65bce092a6be582ef84ec9d270e8cdff1e24f87d565e884a515804c06a220fbfbf91693d88a011ac0ce5f2a3b1b616597517dde7bb78aefdbda75d1b1174766b7b0612436a89ccf3f8612ca9fbd459deefd69b50a985ae4a7f574d5a7a854a23754740a3be9348a0f64ace7d5712ca342008e3e83915791b76e0cd8c4132b94c376638f934bc1a906ab1b4e4572e914fffa796a2613efabc7c91ddbe05adc11c1a7ad5ea3dd30dc3600d61d28585ee14f2e4ddfc2e6f64d1b7b8d84ae9fa37fe0037da04505fe9528b1347fb027e894435e5a2ba7ff63c2aa5e4063be52a38411d609c0680b45e178c95fa16a45558e5223e8e0054186f5c159d75be34dbca32893fc7c7e63ad1a42d3563111cc5140fe93bf0d9539e6069537291ac8aeb2ce0a926b45636381b4483a3bd717cddbbb6a5727773acaa17c6cf231464b534e83b6d6cdc491a68c20f838b4312b7fe8f16fe3b57710a0613e7bb5f6453b6198cbd7829e9a76d3138afd2bbd2b6565e0c3a1075b308a329341b9e51366c4b5f89490390fd06bb7bce1e8d201d606a06803e8e5a887c8a1136b7eda46e20190a2c0544ffd8c5fdb41671f1c80918332c44843828f5bcd005a8f99b096cc49c5fae407fb780741595b27f8f5e53bb8872609a2ee80012fab6e0ea126d6c5a2353f6dbf19c4dab82a0be5f69fe2524d55e3759c9c74158419e04d8f60708b0a940ad62a907ff50c3c8819c49d0893d0093435dc97b5d377105e647681dbc0552ee80cf90c22afa8458879164426884c27e20a70786605f7a7712405c550257e74d5a6c02b0f917e47a46a646885847039524a9a462c793e4bda54b91d4eba20f0078f4d3eecdfe2f62250c267521d54c74189ae260a74005e57b9a07e78c4ce8560dbbcb89b33bb8b4c540f180f4e82251b8fe60e188a87f5a798bc5ea3b3ed4e061fb44909df30647052f190a4e6a0462e90bdbe050825bac0e85d93f12839d7d5fc9db88ccb45028a69f345986c3d76693de59639fc9899eb129604ceaa4fe31ce97f067d144cf15474b9bc751b388c493e673883ebeda8d6d2ae147ac3ad2a66a51d49fb18f2b5f6174d657e98e369765905776f42db038aa3945221b633738815385a38fbd975a68615aa018ce83dc32b6a5437caae0c0732d757a7e5daf0acf4e07939ce113d88eaee6566bb6bd30328caa90b15d2053d66c33bc368d12cdd7bdd97c3aaddeb651c28104e6086723106220c4c8118c9fcb887eb811bcb07954c1b196c6dd781139ff4dc568f91a941cb33e42fd6fe5c08b846405f5ba1d0a9d166b4d3a93114169fd17190cf33d63f760369c1197f91a2eb08e8d6e048381205135c587bdb3945be141abe578d199a7603f8e917fdd843444f06ab5c22360bf976f466a4b3557bd4e498dad54bb8e704ce288e45b5605dd24e009f76acda4c9d8d65c5e3c62e0ff5ef2fa5fdf57173aa27ada5c8184c448fc7e431c85dde4d7d547d7eb19b362a82997a8eda3e597d2b03b95b68a7478347adec70a4c127ab83452f2ef0f5baf2fed2baaaf53abe654990558ebee8f18a184b5ef0715075aa2db8499e18525a1e0203cccf94720562b913936b3aba3b50dc9e03d1a38e6f7e2a1245bbf4c7a14313fcae73ce43ae1106c5811f631549a619644501d404665002f64375ae1da3c76c21cbc5cf95f41a4318922e11f40b69d0bd1f2bb0bf"], 0x10) socket$xdp(0x2c, 0x3, 0x0) unshare(0x60000000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400"], 0x110}}, 0x0) fchown(r5, 0x0, r7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r12 = timerfd_create(0x7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x21) timerfd_gettime(r12, &(0x7f0000000000)) r13 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r13, 0x0, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000200), &(0x7f0000000440)='system_u:object_r:qemu_device_t:s0\x00', 0x23, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) 3.319045236s ago: executing program 1 (id=4117): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000001f80)=r6, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfd20, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002d000b02d25a806f8c6394f9031a04000a740100053503000000000000800c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f0000000080)=ANY=[], 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) chdir(&(0x7f0000000100)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.775278943s ago: executing program 1 (id=4126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48080}, 0x4000) 2.774908013s ago: executing program 1 (id=4127): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x749, &(0x7f00000003c0)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x4, 0x700000000000000}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.774480493s ago: executing program 1 (id=4128): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x109240, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a1150004000200142603600e12080005007a010401a800160020000340ffc60000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbacefc46fa8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d164edbb57a5025ccca9e00360db79826353d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9410000", 0xd8}], 0x1}, 0x0) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$selinux_validatetrans(r6, 0x0, 0x89) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r2}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.746694097s ago: executing program 1 (id=4175): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='kfree\x00', r0}, 0x18) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) 1.696689008s ago: executing program 1 (id=4176): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x20000, 0x128, 0x20}, 0x18) r1 = fspick(r0, &(0x7f0000000080)='./file0\x00', 0x1) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x40, &(0x7f0000000140)={[{@nofavordynmods}, {@subsystem='rlimit'}], [{@fowner_eq}]}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000180)={@id={0x2, 0x0, @c}}) syz_usb_connect$cdc_ecm(0x0, 0x58, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x1, 0x58, 0x70, 0xb9, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0xd, {{0x7, 0x24, 0x6, 0x0, 0x0, "2bb0"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x10, 0x4, 0xc}}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfd, 0x0, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x40, 0x5, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x80, 0x6, 0x4}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x40, 0x2, 0x4, 0xff, 0x7}, 0xcf, &(0x7f0000000280)={0x5, 0xf, 0xcf, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "3390c0101804c4b63c0d76e25cd16f05"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "9c31b0d414006dd95ee4da65325cd5f1"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x15, 0x3, 0x3, 0x1000, 0x1}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x91, 0x10, 0xa, "76697c30838024d8334f3cb614b9a60d886c30db5b59e6ed4bffb7f553ac04c7c3cf66497a8386045e4a0f06af3ef00d58c06e21458b5fdae35f1ea369b7b49342a2f3ca0429e5e21f82253d46400ed468a346585391083a9a6c4751017355e954da89536d347033a12b82c88f8cc00df3ae1fd7c974e1a2a1717649f4f6dd5a115278bd85fcad00ad2d8f8c056e"}]}, 0x4, [{0x5b, &(0x7f0000000380)=@string={0x5b, 0x3, "d152759f0e1fef5efff4fec1ff8a7f3c549482ba4af6552ccf1f79226db0c711f2c89190576b496fab7964b5e7ccee3bf8001838763d3d5b2ee826d8537932eba0da4fd3762b5023d4ad4a66956d10f15b775ab5ff63ab810d"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44e}}, {0x6b, &(0x7f0000000440)=@string={0x6b, 0x3, "167f56e57ac060885f21b1c0f5fb4640ca322d8d633f839b8a328aca44c8c4139499f47c22f1d17f58978dce35bc86a6e9d39265ae923fcd0de6a31b137e7b06f6f0d68e6c2ae8a1ed6f0a602953d18e832dfb2a55bcdf2a302fbf054e604b32a8c6f4ef656541b117"}}, {0x46, &(0x7f00000004c0)=@string={0x46, 0x3, "5a8ab56c068edcf1315271f055e0e18bdecdb07bb31febc028aa532895b45e7ab53243ba734b5d7c8d10861a6bd54d4c729f85615b8e04dcd7bd4b1f6fb03dbc9947d594"}}]}) syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0xf0, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x8, 0x1, 0x7}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x200, 0x2, 0xc, 0x80, 0x8, 0xf}, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x2009}}, {0xc, &(0x7f00000006c0)=@string={0xc, 0x3, "06a9fd4458eb4f7f3f84"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x446}}, {0x46, &(0x7f0000000740)=@string={0x46, 0x3, "2f20ba92ed17574479ce03b28755935dd135477aeab976e8a1be3910adb15497389e9d0247616d0178d1951d0c7071277fb8be50dd6171ce52ac587bccf4765a3e2b9be5"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x3817}}, {0x10, &(0x7f0000000840)=@string={0x10, 0x3, "5715afff4df5cf71b0e5c57030f6"}}]}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x24000001) syz_usb_connect(0x0, 0x596, &(0x7f0000000a40)={{0x12, 0x1, 0x110, 0xdd, 0x87, 0xcb, 0x40, 0x1b3d, 0x931b, 0xf45f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x584, 0x2, 0x1f, 0x5, 0x30, 0xe, [{{0x9, 0x4, 0xa8, 0x2, 0xb, 0x17, 0xd0, 0xe4, 0x0, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "d204da"}, {0x5, 0x24, 0x0, 0x59}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2919, 0x1b38, 0x5}, {0x6, 0x24, 0x1a, 0x3, 0x22}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x2}, @mdlm_detail={0x7, 0x24, 0x13, 0x2c, "1d8697"}, @country_functional={0xa, 0x24, 0x7, 0x3, 0xc547, [0xc, 0x80]}, @mbim_extended={0x8, 0x24, 0x1c, 0x4105, 0x1, 0x5}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "0ad3e9bc2f"}, {0x5, 0x24, 0x0, 0x8e}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x8000, 0x80, 0xec}, {0x6, 0x24, 0x1a, 0x3, 0xc}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0xa, 0xa, 0x9, 0x9, 0x2}, @country_functional={0x10, 0x24, 0x7, 0xfc, 0x0, [0x2, 0x1, 0x91, 0x40, 0xb]}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x4}]}], [{{0x9, 0x5, 0x6, 0x0, 0x10, 0x10, 0xf7, 0x24, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x1}, @generic={0xd9, 0xc, "6445e357fa59252cfc1eb13d74cb3faa934d1fa92d98f6a6ee12d4724d5811e70ae336d6fc80c783fd7dd751da6bedec4b434a7be4dc2da62a5565ab2b738f996ff6121bc91d2973cafd21c6605039e7089ce94cf36b01b50233ac0f7f2525994343242dd435b50e478b6c53957d7a2b05158fc0d981d8ea5e02629c539cea7b7e4d6b44b07d48dbae2f1d948d2bbdf29f73f673f38fe5e8b0fcdf89caeee25eb62e039b67d194f305ef99283b55c4b2fbe75a304b064b42bfa41036db6ed3d146e121cbac9ad22c6d28c5a324361e90f918708b6d58ec"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x3, 0x2, 0xd7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x7}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x7, 0x0, 0x5, [@generic={0xb7, 0x8, "f8171a83e2e97ebbed305e91d6ea28f41999713dc9cb5661021feda75030e88ee560cabc5499fa2238e7114108e32bbb2d1f8d6975ae16104399bcaeac344d90af37a5bb1b77f0ca2f8019138f4998735efdfaa1fdfd62cea4e0f39617a698cde7e99431c376a9c94aa985c9ad96e8295cf550ab118e401e937fcf03d6ace936f441a71dc485e807a9e8db0f887828858f02ededb0432b1ab07e5db9f4ba8fabbfb1d8eb708ac8382ce9918144886569271a7424fc"}, @generic={0xc4, 0x2, "dc6429c5a4c728ad129136652d1121163bc3ed702360d382b7838176328551f81018d4731d8afe736aa9337be0672332d41ae4db7b959f44c5290e02ad6f19ad78814f805589d504b0d0b8c7f40304f213c7bbdbdb6f15dc07157ad99e6dd35c1694bb4138439fd5bf714573d7913bff6118f3711c37c73c1b1df7a00f39ecacf5d077fe779b7145a3554166a844e7213ccdbd87c2526ed945eabbc751467963c831a00f4849ed0cffb3650251ef72bc3d40db110c1769677884f054b7fc1b4728c1"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x2, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x9780}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x1}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xf8, 0xc2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x1}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x80, 0x3, 0xae}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x83, 0xf4, 0x3, [@generic={0xba, 0x11, "f6e6151a4e5970a82db978d2c5d5a14534585700d7eb26e21c648bbd4a3a818513b86360b684f0f83fa3a4cb263cdbc96b02619bbcd866f804ff72e3ef0dcc552bd843fabb38dda4c956ed51d79e2a1ba1cf8cd6901650da0cb2d2b9c8c5f32774dfe064d0bc0a261ece3fa4012f6ef411b666cec877ae8fbe64be319755a12e5d4e6b668ad635245163b033a2ecb20435f8ab86e8e73a3a5aae80ba5bbff3ce5f11578959d0f1296df1a9cd46bdced20ff2a871f003286f"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x2, 0xd, 0xa3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x1ff}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0x0, 0xc, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa5, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x9, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xff, 0x6}]}}, {{0x9, 0x5, 0x85, 0x8, 0x40, 0x1, 0x1f, 0x43, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x4}, @generic={0x4c, 0x23, "d719d0430af0a8080b0e8f1470769ab614f6459f0ac67741bd80a76c46d9937be833c8f1e16d5a2b6d5771eb0a1fee7b07cef15c4e7831dd8b4e6b9cfce90f9cc82d1caa21f5bce54512"}]}}]}}, {{0x9, 0x4, 0xbb, 0xe, 0x7, 0x2b, 0x0, 0x97, 0xc0, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "d8f2fe39e4"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6, 0xfff, 0xfe}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}]}, @uac_as], [{{0x9, 0x5, 0xf, 0x8, 0x420, 0xdf, 0x95, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x55b}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x5, 0x1, 0x7}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0xfd, 0x74, 0x4}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x44, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x7}, @generic={0xb, 0x22, "c22655ba01c5351ec6"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x9, 0x0, 0x8, [@generic={0x47, 0x16, "f579262804ca15d45a773361991dd93b8e8e7db6f8bb26113f2fb909736fe93dab871b693e93254ce05ee107de9ac33b17b79794e63a025c736845da7fcbbd3c45a7ebff70"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x488}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x8, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x8}]}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x1, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x7f}]}}]}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000001000)={0xa, 0x6, 0x300, 0x6, 0x25, 0xf5, 0x10, 0x2}, 0xc, &(0x7f0000001040)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x1, 0x8}]}, 0x1, [{0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0xc01}}]}) pipe2$9p(&(0x7f0000001180)={0xffffffffffffffff}, 0x80880) getresuid(&(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001280)={0x0, 0x0}, &(0x7f00000012c0)=0xc) mount$9p_fd(0x0, &(0x7f0000001100)='./file0\x00', &(0x7f0000001140), 0x101000, &(0x7f0000001300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}, {@msize={'msize', 0x3d, 0x7}}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@access_client}], [{@subj_role={'subj_role', 0x3d, '\x1c-gT\xb6\xcc}\xaa\xcbY\x98u\xd7\xfa\xf9\xbb'}}, {@euid_lt={'euid<', r6}}]}}) fallocate(r4, 0xa, 0xd41, 0x2) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001400), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000001580)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001540)={&(0x7f0000001440)={0xc8, r7, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x46}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x563}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3a969109}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffd0}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x700}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24000050}, 0x1004) r8 = syz_open_dev$vcsn(&(0x7f00000015c0), 0x3, 0x0) io_uring_enter(r8, 0x7e21, 0x9dda, 0x10, &(0x7f0000001600)={[0xd7cb]}, 0x8) gettid() r9 = socket$pppl2tp(0x18, 0x1, 0x1) io_uring_enter(r8, 0x7fb6, 0x305f, 0x2, &(0x7f0000001640)={[0x4000000]}, 0x8) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001780)={0x1, &(0x7f0000001740)=[{0x8, 0x2, 0x6, 0x6}]}) quotactl_fd$Q_GETFMT(r4, 0xffffffff80000400, 0xffffffffffffffff, &(0x7f00000017c0)) signalfd(r9, &(0x7f0000001800)={[0x4]}, 0x8) rename(&(0x7f0000001840)='./file0\x00', &(0x7f0000001880)='./file0\x00') ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000018c0)) 940.881847ms ago: executing program 2 (id=4214): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 940.345487ms ago: executing program 2 (id=4215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x20}, 0x18) creat(&(0x7f0000000000)='./bus\x00', 0x8) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_user(r3, &(0x7f0000000280)={'system_u:object_r:device_t:s0', 0x20, 'staff_u\x00'}, 0x26) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r4, 0x0, 0x800000000000000}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd, 0x2}, 0x8012, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 899.834698ms ago: executing program 2 (id=4216): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='kfree\x00', r0}, 0x18) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) 878.974308ms ago: executing program 2 (id=4217): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) open(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) getpid() sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r7, @ANYBLOB="080003"], 0x80}}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 857.088728ms ago: executing program 2 (id=4218): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 6) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) 751.19112ms ago: executing program 5 (id=4221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="010001"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 671.356571ms ago: executing program 5 (id=4224): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000500)={0x200000, 0x200003, 0x0, 0x2, 0x3, 0xffffffff}) setrlimit(0x40000000000008, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000000) 635.454682ms ago: executing program 5 (id=4226): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0], 0x30}}], 0x1, 0x4000000) 593.116452ms ago: executing program 5 (id=4227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x20}, 0x18) creat(&(0x7f0000000000)='./bus\x00', 0x8) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_user(r3, &(0x7f0000000280)={'system_u:object_r:device_t:s0', 0x20, 'staff_u\x00'}, 0x26) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r4, 0x0, 0x800000000000000}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd, 0x2}, 0x8012, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 371.228925ms ago: executing program 6 (id=4235): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000001980)="$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") socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000002c0)='kmem_cache_free\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16], 0x48) mq_open(0x0, 0x42, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="9f7501001800000000c8fc8b0a0c1d3a45000000030000000a00f5ffffffff11058000000d0000000200000604000000070000000500000007000000070000000100000f0100000001000000ff7f00009ac1bc69e5100000000000000e0200000001000000000000005f00c94ffd660515033d6a98fee983e9b641ca70adc746aae0a7615819b3ef5121b7df22d4c2fa2de65341870acc2338"], &(0x7f0000000280), 0x6f, 0x0, 0x1, 0x8000, 0x0, @void, @value}, 0x28) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 370.987745ms ago: executing program 9 (id=4236): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) readv(r0, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/175, 0xaf}], 0x1) 370.390065ms ago: executing program 6 (id=4237): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r5 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) r6 = open$dir(&(0x7f0000000180)='./file0\x00', 0x300, 0x584a023625830115) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000080)='\x00', &(0x7f0000000140)='./file0\x00', r6) io_setup(0x60a, &(0x7f0000000240)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r9}, &(0x7f0000004000), &(0x7f0000004040)}, 0x3b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r10, 0x0, 0x8000000000000}, 0x18) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="176777fe7df506ec30c03b000000", @ANYRES16=r8, @ANYBLOB="5953fdfffffffddbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000200000072000000"], 0x28}}, 0x0) io_destroy(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 212.776247ms ago: executing program 9 (id=4238): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x492082) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000002c0)={0xec, 0x0, 'client0\x00', 0x80000001, "f2e58d5ab89e586d", "aa0a3b9a7db0c9e07252af85b6bf85b9dba1af1738498b392f853937b66b66b5", 0xffff, 0x3}) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/116, 0x74, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x800004}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000280), &(0x7f0000000580)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x50, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) lgetxattr(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='sched_switch\x00'}, 0x18) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000000800)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRES8], 0x1, 0x2fb, &(0x7f0000000380)="$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") setuid(0xee01) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x8000}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 159.117898ms ago: executing program 6 (id=4239): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) open(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) getpid() sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r7, @ANYBLOB="080003"], 0x80}}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 140.239618ms ago: executing program 6 (id=4240): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) (async) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000180)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}], [{@fowner_lt={'fowner<', r0}}, {@obj_type}]}, 0x1, 0x521, &(0x7f0000000640)="$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") (async) r3 = semget$private(0x0, 0x4000, 0x709) semtimedop(r3, &(0x7f0000000000)=[{0x4, 0x9, 0x800}], 0x1, 0x0) (async) semop(r3, &(0x7f0000000240)=[{0x0, 0x0, 0x1000}], 0x1) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000340)='%pB \x00'}, 0x20) close_range(r4, r5, 0x2) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x14069, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000002c0)={r7, 0xa9ac}, &(0x7f0000000300)=0x8) (async) prctl$PR_MCE_KILL(0x23, 0x3, 0x7fffffffeffe) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000088000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r9}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4c0000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a1000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB], 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x6]}, &(0x7f0000000080)=0x6) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x7, 0x5, 0x2, 0x5, 0x0, 0x7, 0x1, 0x1, 0x40, 0x6, 0x7, 0x5, 0x81, 0x1c}, 0xe) 139.868578ms ago: executing program 9 (id=4241): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='kfree\x00', r0}, 0x18) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) 83.023269ms ago: executing program 9 (id=4242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x2a309, 0x1000, 0x0, 0xfffffffe}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000380)={0x2000000, 0x0, &(0x7f0000000340)=[{&(0x7f0000000c00)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) memfd_create(&(0x7f0000000040)='kfree\x00', 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getdents(r7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000100)={0x9, 0xd000001, 0x0, 0xfffffffffffffffc, 0x401, 0x0, 0x200, 0x7}, 0x0, 0x0, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r9, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xfffe, r8, &(0x7f00000001c0)='m', 0x1, 0x100000000, 0x0, 0x3}]) io_uring_setup(0x1d7e, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x200040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000280)='kfree\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) 82.366099ms ago: executing program 6 (id=4243): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x0, 0x1, 0x83fffc, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa05009078010000004700000000000000001100000a010101ac1e000144670101ac1414bb4e090000443c0001e0000001000000000000000000000000ac14140000000085b3e10e9608b3c0888c3b9e0000000000000000060000000000000000ac1e0001"], 0x0) fsetxattr(r1, &(0x7f0000000400)=@random={'osx.', '/dev/sg#\x00'}, &(0x7f0000000500)='\x00', 0x1, 0x7) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x1, 0x6, 0x5, {{0x21, 0x4, 0x2, 0x2, 0x84, 0x67, 0x0, 0x1, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x22}, {[@ssrr={0x89, 0xf, 0x2e, [@empty, @loopback, @private=0xa010102]}, @end, @ssrr={0x89, 0x7, 0x53, [@rand_addr=0x64010102]}, @end, @timestamp_prespec={0x44, 0x3c, 0x27, 0x3, 0x8, [{@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x5}, {@multicast1, 0x6}, {@multicast2, 0x6}, {@loopback, 0xffffd86d}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x6}]}, @cipso={0x86, 0x19, 0xfffffffffffffffc, [{0x0, 0xe, "06268bd8e8c5f4bca29b6754"}, {0x1, 0x5, "e8d4ff"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', r2, 0x20, 0x7800, 0x8, 0x8, {{0x1f, 0x4, 0x2, 0x7, 0x7c, 0x65, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0xd9, [@broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @timestamp={0x44, 0x28, 0xcb, 0x0, 0x7, [0x1000, 0x6f, 0x0, 0x3, 0x2e6a8afb, 0x1, 0x14, 0x7fffffff, 0x0]}, @cipso={0x86, 0x11, 0x3, [{0x0, 0xb, "11b7ead68d69d8b677"}]}, @timestamp={0x44, 0x18, 0x9, 0x0, 0x3, [0x5, 0x58, 0xd9, 0x2, 0x39]}]}}}}}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) sync() ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r4, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/136, 0x88}], 0x1, 0x1, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) iopl(0x3) r6 = fsmount(r4, 0x1, 0x2) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) r7 = shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x2000) r8 = dup(r0) shmdt(r7) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000080)={'wlan1\x00', @random="8a18bad7ced2"}) r9 = syz_open_dev$sg(&(0x7f0000000000), 0xfff, 0x2201) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f0000000040)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\t\x00'], 0x20) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00'/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x814) 31.137399ms ago: executing program 9 (id=4244): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000001500000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0xa26}, 0x18) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x19560c0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x4}, 0xfffffffffffffde1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75}, 0x1f) listen(r7, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r7, r7, 0xf00000000000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r9, r8, 0x0, 0x3a) accept4$nfc_llcp(r5, &(0x7f00000001c0), &(0x7f0000000280)=0x60, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x14) r11 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r12, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r10, 0xffffffff80000902, r12, 0x0) 2.22259ms ago: executing program 6 (id=4245): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) 1.74019ms ago: executing program 9 (id=4246): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xc813, @private1, 0xc4}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0x800, @dev={0xfe, 0x80, '\x00', 0x24}, 0x124}, @in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, 0x7}]}, &(0x7f00000001c0)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) write$selinux_access(0xffffffffffffffff, 0x0, 0x56) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32, @ANYBLOB="20000000280e0400280012800b0001006d61637365630000180002800500030008"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) mknod$loop(0x0, 0x100000000000600d, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xc813, @private1, 0xc4}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0x800, @dev={0xfe, 0x80, '\x00', 0x24}, 0x124}, @in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, 0x7}]}, &(0x7f00000001c0)=0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) (async) write$selinux_access(0xffffffffffffffff, 0x0, 0x56) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32, @ANYBLOB="20000000280e0400280012800b0001006d61637365630000180002800500030008"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) (async) 0s ago: executing program 2 (id=4247): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000740)={0x0, 0x0, 0x10}, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) (fail_nth: 3) kernel console output (not intermixed with test programs): 265.219715][T15697] JBD2: no valid journal superblock found [ 265.225508][T15697] EXT4-fs (loop9): Could not load journal inode [ 265.239469][T15701] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 265.256365][ T29] audit: type=1326 audit(1746582841.539:17027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15700 comm="syz.5.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c726ce969 code=0x7ffc0000 [ 265.281535][T15708] bridge0: entered promiscuous mode [ 265.299576][T15708] macvlan2: entered promiscuous mode [ 265.318715][T15708] bridge0: port 3(macvlan2) entered blocking state [ 265.325352][T15708] bridge0: port 3(macvlan2) entered disabled state [ 265.336077][ T29] audit: type=1326 audit(1746582841.539:17028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15700 comm="syz.5.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c726ce969 code=0x7ffc0000 [ 265.359827][ T29] audit: type=1326 audit(1746582841.539:17029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15700 comm="syz.5.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c726ce969 code=0x7ffc0000 [ 265.383462][ T29] audit: type=1326 audit(1746582841.539:17030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15700 comm="syz.5.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c726ce969 code=0x7ffc0000 [ 265.407097][ T29] audit: type=1326 audit(1746582841.539:17031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15700 comm="syz.5.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c726ce969 code=0x7ffc0000 [ 265.416215][T15708] macvlan2: entered allmulticast mode [ 265.430688][ T29] audit: type=1326 audit(1746582841.539:17032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15700 comm="syz.5.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c726ce969 code=0x7ffc0000 [ 265.436010][T15708] bridge0: entered allmulticast mode [ 265.459576][ T29] audit: type=1326 audit(1746582841.539:17033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15700 comm="syz.5.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5c726ce969 code=0x7ffc0000 [ 265.488484][ T29] audit: type=1326 audit(1746582841.539:17034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15700 comm="syz.5.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c726ce969 code=0x7ffc0000 [ 265.512239][ T29] audit: type=1326 audit(1746582841.539:17035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15700 comm="syz.5.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5c726ce969 code=0x7ffc0000 [ 265.536688][T15708] macvlan2: left allmulticast mode [ 265.541878][T15708] bridge0: left allmulticast mode [ 265.556626][T15708] bridge0: left promiscuous mode [ 265.573168][T15714] program syz.9.3536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.582900][T15714] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 265.593546][T15714] Cannot find set identified by id 0 to match [ 265.708973][T15721] loop9: detected capacity change from 0 to 8192 [ 265.748616][T15732] loop5: detected capacity change from 0 to 256 [ 265.757309][T15721] program syz.9.3538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.767809][T15732] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 265.804321][T15735] loop1: detected capacity change from 0 to 1024 [ 265.820403][T15737] FAULT_INJECTION: forcing a failure. [ 265.820403][T15737] name failslab, interval 1, probability 0, space 0, times 0 [ 265.833151][T15737] CPU: 1 UID: 0 PID: 15737 Comm: syz.2.3543 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 265.833217][T15737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 265.833234][T15737] Call Trace: [ 265.833244][T15737] [ 265.833253][T15737] __dump_stack+0x1d/0x30 [ 265.833280][T15737] dump_stack_lvl+0xe8/0x140 [ 265.833304][T15737] dump_stack+0x15/0x1b [ 265.833325][T15737] should_fail_ex+0x265/0x280 [ 265.833381][T15737] should_failslab+0x8c/0xb0 [ 265.833409][T15737] kmem_cache_alloc_node_noprof+0x57/0x320 [ 265.833447][T15737] ? __alloc_skb+0x101/0x320 [ 265.833560][T15737] __alloc_skb+0x101/0x320 [ 265.833591][T15737] ? audit_log_start+0x365/0x6c0 [ 265.833620][T15737] audit_log_start+0x380/0x6c0 [ 265.833652][T15737] audit_seccomp+0x48/0x100 [ 265.833730][T15737] ? __seccomp_filter+0x68c/0x10d0 [ 265.833750][T15737] __seccomp_filter+0x69d/0x10d0 [ 265.833775][T15737] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 265.833809][T15737] ? vfs_write+0x75e/0x8d0 [ 265.833900][T15737] ? __rcu_read_unlock+0x4f/0x70 [ 265.833998][T15737] ? __fget_files+0x184/0x1c0 [ 265.834110][T15737] __secure_computing+0x82/0x150 [ 265.834138][T15737] syscall_trace_enter+0xcf/0x1e0 [ 265.834168][T15737] do_syscall_64+0xaa/0x1a0 [ 265.834221][T15737] ? clear_bhb_loop+0x25/0x80 [ 265.834248][T15737] ? clear_bhb_loop+0x25/0x80 [ 265.834289][T15737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.834316][T15737] RIP: 0033:0x7f4cff80e969 [ 265.834335][T15737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.834358][T15737] RSP: 002b:00007f4cfde77038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 265.834381][T15737] RAX: ffffffffffffffda RBX: 00007f4cffa35fa0 RCX: 00007f4cff80e969 [ 265.834418][T15737] RDX: 0000000000000006 RSI: 087abbe8d1cc6ad9 RDI: 0000200000952000 [ 265.834434][T15737] RBP: 00007f4cfde77090 R08: 0000000000000000 R09: 0000000000000000 [ 265.834450][T15737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.834466][T15737] R13: 0000000000000000 R14: 00007f4cffa35fa0 R15: 00007ffed2d0b758 [ 265.834494][T15737] [ 266.054684][T15735] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 266.065750][T15735] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 266.154027][T15735] JBD2: no valid journal superblock found [ 266.159899][T15735] EXT4-fs (loop1): Could not load journal inode [ 266.205956][T15757] loop6: detected capacity change from 0 to 1024 [ 266.233613][T15766] loop1: detected capacity change from 0 to 512 [ 266.240509][T15757] EXT4-fs: Ignoring removed nobh option [ 266.246282][T15757] EXT4-fs: Ignoring removed bh option [ 266.270824][T15766] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 266.280048][T15766] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 266.295724][T15768] No source specified [ 266.305453][T15766] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 266.324292][T15766] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 266.332678][T15766] System zones: 0-2, 18-18, 34-34 [ 266.345149][T15757] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.365282][T15766] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 266.396591][T15766] EXT4-fs (loop1): 1 truncate cleaned up [ 266.402891][T15766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.555769][ T9216] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.630885][T15797] macvlan2: entered promiscuous mode [ 266.636354][T15797] bridge0: entered promiscuous mode [ 266.656189][T15797] bridge0: port 8(macvlan2) entered blocking state [ 266.662867][T15797] bridge0: port 8(macvlan2) entered disabled state [ 266.708773][T15766] sd 0:0:1:0: device reset [ 266.719747][T15797] macvlan2: entered allmulticast mode [ 266.725192][T15797] bridge0: entered allmulticast mode [ 266.754498][T15797] macvlan2: left allmulticast mode [ 266.759719][T15797] bridge0: left allmulticast mode [ 266.801400][T14511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.811247][T15797] bridge0: left promiscuous mode [ 266.923070][T15836] xt_hashlimit: size too large, truncated to 1048576 [ 266.941670][T15830] loop5: detected capacity change from 0 to 256 [ 266.987812][T15838] bridge0: entered promiscuous mode [ 266.998336][T15838] macvlan2: entered promiscuous mode [ 267.004970][T15838] bridge0: port 3(macvlan2) entered blocking state [ 267.011623][T15838] bridge0: port 3(macvlan2) entered disabled state [ 267.024839][T15838] macvlan2: entered allmulticast mode [ 267.030525][T15838] bridge0: entered allmulticast mode [ 267.048839][T15838] macvlan2: left allmulticast mode [ 267.054011][T15838] bridge0: left allmulticast mode [ 267.072477][T15847] program syz.6.3563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.082674][T15838] bridge0: left promiscuous mode [ 267.100633][T15847] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 267.151008][T15847] Cannot find set identified by id 0 to match [ 267.190636][T15847] __nla_validate_parse: 3 callbacks suppressed [ 267.190658][T15847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3563'. [ 267.272069][T15859] bridge0: entered promiscuous mode [ 267.297619][T15859] macvlan2: entered promiscuous mode [ 267.325409][T15870] loop6: detected capacity change from 0 to 164 [ 267.334235][T15859] bridge0: port 3(macvlan2) entered blocking state [ 267.340929][T15859] bridge0: port 3(macvlan2) entered disabled state [ 267.348635][T15867] loop1: detected capacity change from 0 to 1024 [ 267.355853][T15870] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 267.370062][T15867] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 267.381055][T15867] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 267.402127][T15859] macvlan2: entered allmulticast mode [ 267.407594][T15859] bridge0: entered allmulticast mode [ 267.413709][T15859] macvlan2: left allmulticast mode [ 267.418955][T15859] bridge0: left allmulticast mode [ 267.422583][T15867] JBD2: no valid journal superblock found [ 267.428667][T15859] bridge0: left promiscuous mode [ 267.429898][T15867] EXT4-fs (loop1): Could not load journal inode [ 267.451143][T15870] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 267.483307][T15870] rock: directory entry would overflow storage [ 267.489579][T15870] rock: sig=0x4f50, size=4, remaining=3 [ 267.495212][T15870] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 267.569574][T15887] loop2: detected capacity change from 0 to 2048 [ 267.599906][T15887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.614738][T15894] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3575'. [ 267.642204][T15894] bond1: entered promiscuous mode [ 267.647388][T15894] bond1: entered allmulticast mode [ 267.653910][T15894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.689884][T15901] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3578'. [ 267.714972][T15899] loop6: detected capacity change from 0 to 512 [ 267.717935][T15903] siw: device registration error -23 [ 267.724324][T15899] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.3577: corrupted in-inode xattr: invalid ea_ino [ 267.752856][T15887] FAULT_INJECTION: forcing a failure. [ 267.752856][T15887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.758478][T15899] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3577: couldn't read orphan inode 15 (err -117) [ 267.766042][T15887] CPU: 0 UID: 0 PID: 15887 Comm: syz.2.3569 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 267.766111][T15887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 267.766156][T15887] Call Trace: [ 267.766164][T15887] [ 267.766174][T15887] __dump_stack+0x1d/0x30 [ 267.766202][T15887] dump_stack_lvl+0xe8/0x140 [ 267.766227][T15887] dump_stack+0x15/0x1b [ 267.766291][T15887] should_fail_ex+0x265/0x280 [ 267.766380][T15887] should_fail+0xb/0x20 [ 267.766437][T15887] should_fail_usercopy+0x1a/0x20 [ 267.766461][T15887] _copy_from_user+0x1c/0xb0 [ 267.766489][T15887] __sys_bpf+0x178/0x790 [ 267.766553][T15887] __x64_sys_bpf+0x41/0x50 [ 267.766585][T15887] x64_sys_call+0x2478/0x2fb0 [ 267.766613][T15887] do_syscall_64+0xd0/0x1a0 [ 267.766642][T15887] ? clear_bhb_loop+0x25/0x80 [ 267.766677][T15887] ? clear_bhb_loop+0x25/0x80 [ 267.766722][T15887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.766749][T15887] RIP: 0033:0x7f4cff80e969 [ 267.766768][T15887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.766792][T15887] RSP: 002b:00007f4cfde77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 267.766862][T15887] RAX: ffffffffffffffda RBX: 00007f4cffa35fa0 RCX: 00007f4cff80e969 [ 267.766955][T15887] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 267.766970][T15887] RBP: 00007f4cfde77090 R08: 0000000000000000 R09: 0000000000000000 [ 267.766986][T15887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.767002][T15887] R13: 0000000000000000 R14: 00007f4cffa35fa0 R15: 00007ffed2d0b758 [ 267.767026][T15887] [ 267.947987][T15899] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.976463][ T9216] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.034218][T15911] macvlan2: entered promiscuous mode [ 268.039786][T15911] bridge0: entered promiscuous mode [ 268.045633][T15911] bridge0: port 8(macvlan2) entered blocking state [ 268.052312][T15911] bridge0: port 8(macvlan2) entered disabled state [ 268.059284][T15911] macvlan2: entered allmulticast mode [ 268.064702][T15911] bridge0: entered allmulticast mode [ 268.070744][T13048] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.080672][T15911] macvlan2: left allmulticast mode [ 268.085901][T15911] bridge0: left allmulticast mode [ 268.093305][T15911] bridge0: left promiscuous mode [ 268.104395][T15910] bridge0: entered promiscuous mode [ 268.109878][T15910] macvlan2: entered promiscuous mode [ 268.118149][T15910] bridge0: port 3(macvlan2) entered blocking state [ 268.124781][T15910] bridge0: port 3(macvlan2) entered disabled state [ 268.131615][T15910] macvlan2: entered allmulticast mode [ 268.137063][T15910] bridge0: entered allmulticast mode [ 268.142737][T15910] macvlan2: left allmulticast mode [ 268.147933][T15910] bridge0: left allmulticast mode [ 268.153768][T15910] bridge0: left promiscuous mode [ 268.248214][T15929] program syz.6.3590 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.257887][T15929] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 268.268451][T15929] Cannot find set identified by id 0 to match [ 268.276458][T15929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3590'. [ 268.299445][T15927] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 268.317055][T15927] bond1: entered promiscuous mode [ 268.322149][T15927] bond1: entered allmulticast mode [ 268.327633][T15927] 8021q: adding VLAN 0 to HW filter on device bond1 [ 268.402441][T15942] loop5: detected capacity change from 0 to 164 [ 268.417580][T15942] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 268.443032][T15944] macvlan2: entered promiscuous mode [ 268.448486][T15944] bridge0: entered promiscuous mode [ 268.454260][T15944] bridge0: port 8(macvlan2) entered blocking state [ 268.460850][T15944] bridge0: port 8(macvlan2) entered disabled state [ 268.467846][T15944] macvlan2: entered allmulticast mode [ 268.473291][T15944] bridge0: entered allmulticast mode [ 268.479165][T15944] macvlan2: left allmulticast mode [ 268.484348][T15944] bridge0: left allmulticast mode [ 268.490987][T15944] bridge0: left promiscuous mode [ 268.516879][T15942] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 268.538530][T15942] rock: directory entry would overflow storage [ 268.544785][T15942] rock: sig=0x4f50, size=4, remaining=3 [ 268.550577][T15942] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 268.577107][T15951] loop1: detected capacity change from 0 to 764 [ 268.591045][T15954] loop2: detected capacity change from 0 to 1024 [ 268.598639][T15954] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 268.609769][T15954] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 268.615352][T15951] rock: directory entry would overflow storage [ 268.624871][T15954] JBD2: no valid journal superblock found [ 268.625573][T15951] rock: sig=0x4654, size=5, remaining=4 [ 268.631327][T15954] EXT4-fs (loop2): Could not load journal inode [ 268.656283][T15951] FAULT_INJECTION: forcing a failure. [ 268.656283][T15951] name failslab, interval 1, probability 0, space 0, times 0 [ 268.669040][T15951] CPU: 1 UID: 0 PID: 15951 Comm: syz.1.3600 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 268.669091][T15951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 268.669104][T15951] Call Trace: [ 268.669113][T15951] [ 268.669122][T15951] __dump_stack+0x1d/0x30 [ 268.669218][T15951] dump_stack_lvl+0xe8/0x140 [ 268.669243][T15951] dump_stack+0x15/0x1b [ 268.669264][T15951] should_fail_ex+0x265/0x280 [ 268.669329][T15951] ? __pfx_isofs_iget5_test+0x10/0x10 [ 268.669365][T15951] should_failslab+0x8c/0xb0 [ 268.669450][T15951] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 268.669594][T15951] ? isofs_alloc_inode+0x34/0x50 [ 268.669685][T15951] ? __pfx_isofs_iget5_test+0x10/0x10 [ 268.669716][T15951] ? __pfx_isofs_alloc_inode+0x10/0x10 [ 268.669799][T15951] isofs_alloc_inode+0x34/0x50 [ 268.669878][T15951] alloc_inode+0x3d/0x170 [ 268.669940][T15951] ? __pfx_isofs_iget5_set+0x10/0x10 [ 268.669972][T15951] iget5_locked+0x4a/0xa0 [ 268.670001][T15951] __isofs_iget+0xe0/0x10a0 [ 268.670029][T15951] ? _raw_spin_unlock+0x26/0x50 [ 268.670072][T15951] ? finish_task_switch+0xad/0x2b0 [ 268.670173][T15951] ? __schedule+0x6a2/0xb20 [ 268.670204][T15951] ? schedule+0x5f/0xd0 [ 268.670240][T15951] ? __pfx_bit_wait_io+0x10/0x10 [ 268.670268][T15951] ? schedule+0x5f/0xd0 [ 268.670300][T15951] isofs_get_blocks+0x185/0x490 [ 268.670333][T15951] ? __pfx_wake_bit_function+0x10/0x10 [ 268.670426][T15951] isofs_bread+0x5b/0x100 [ 268.670456][T15951] isofs_lookup+0x18c/0x8f0 [ 268.670482][T15951] ? __d_lookup+0x316/0x340 [ 268.670506][T15951] ? __pfx_isofs_lookup+0x10/0x10 [ 268.670564][T15951] path_openat+0xcf0/0x2170 [ 268.670601][T15951] do_filp_open+0x109/0x230 [ 268.670637][T15951] do_sys_openat2+0xa6/0x110 [ 268.670663][T15951] __x64_sys_open+0xe6/0x110 [ 268.670755][T15951] x64_sys_call+0x14d4/0x2fb0 [ 268.670781][T15951] do_syscall_64+0xd0/0x1a0 [ 268.670808][T15951] ? clear_bhb_loop+0x25/0x80 [ 268.670834][T15951] ? clear_bhb_loop+0x25/0x80 [ 268.670861][T15951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.670953][T15951] RIP: 0033:0x7f670555e969 [ 268.670973][T15951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.670995][T15951] RSP: 002b:00007f6703bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 268.671013][T15951] RAX: ffffffffffffffda RBX: 00007f6705785fa0 RCX: 00007f670555e969 [ 268.671025][T15951] RDX: 0000000000000000 RSI: 000000000000a942 RDI: 0000200000000080 [ 268.671087][T15951] RBP: 00007f6703bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 268.671100][T15951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 268.671112][T15951] R13: 0000000000000000 R14: 00007f6705785fa0 R15: 00007ffd3a0652d8 [ 268.671128][T15951] [ 269.002411][T15959] FAULT_INJECTION: forcing a failure. [ 269.002411][T15959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.015711][T15959] CPU: 0 UID: 0 PID: 15959 Comm: syz.2.3603 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 269.015793][T15959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 269.015808][T15959] Call Trace: [ 269.015816][T15959] [ 269.015826][T15959] __dump_stack+0x1d/0x30 [ 269.015852][T15959] dump_stack_lvl+0xe8/0x140 [ 269.015920][T15959] dump_stack+0x15/0x1b [ 269.015936][T15959] should_fail_ex+0x265/0x280 [ 269.015973][T15959] should_fail+0xb/0x20 [ 269.016016][T15959] should_fail_usercopy+0x1a/0x20 [ 269.016038][T15959] _copy_to_user+0x20/0xa0 [ 269.016063][T15959] simple_read_from_buffer+0xb5/0x130 [ 269.016092][T15959] proc_fail_nth_read+0x100/0x140 [ 269.016149][T15959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.016176][T15959] vfs_read+0x19d/0x6f0 [ 269.016242][T15959] ? __rcu_read_unlock+0x4f/0x70 [ 269.016262][T15959] ? __fget_files+0x184/0x1c0 [ 269.016291][T15959] ? do_mkdirat+0x39a/0x3f0 [ 269.016362][T15959] ksys_read+0xda/0x1a0 [ 269.016394][T15959] __x64_sys_read+0x40/0x50 [ 269.016441][T15959] x64_sys_call+0x2d77/0x2fb0 [ 269.016461][T15959] do_syscall_64+0xd0/0x1a0 [ 269.016488][T15959] ? clear_bhb_loop+0x25/0x80 [ 269.016727][T15959] ? clear_bhb_loop+0x25/0x80 [ 269.016754][T15959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.016838][T15959] RIP: 0033:0x7f4cff80d37c [ 269.016856][T15959] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 269.016878][T15959] RSP: 002b:00007f4cfde77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 269.016901][T15959] RAX: ffffffffffffffda RBX: 00007f4cffa35fa0 RCX: 00007f4cff80d37c [ 269.016928][T15959] RDX: 000000000000000f RSI: 00007f4cfde770a0 RDI: 0000000000000006 [ 269.016942][T15959] RBP: 00007f4cfde77090 R08: 0000000000000000 R09: 0000000000000000 [ 269.016957][T15959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.016973][T15959] R13: 0000000000000000 R14: 00007f4cffa35fa0 R15: 00007ffed2d0b758 [ 269.016996][T15959] [ 269.251635][T15967] FAULT_INJECTION: forcing a failure. [ 269.251635][T15967] name failslab, interval 1, probability 0, space 0, times 0 [ 269.264418][T15967] CPU: 0 UID: 0 PID: 15967 Comm: syz.9.3607 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 269.264523][T15967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 269.264541][T15967] Call Trace: [ 269.264590][T15967] [ 269.264599][T15967] __dump_stack+0x1d/0x30 [ 269.264626][T15967] dump_stack_lvl+0xe8/0x140 [ 269.264651][T15967] dump_stack+0x15/0x1b [ 269.264686][T15967] should_fail_ex+0x265/0x280 [ 269.264727][T15967] should_failslab+0x8c/0xb0 [ 269.264764][T15967] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 269.264791][T15967] ? p9_client_create+0x59/0xbc0 [ 269.264901][T15967] ? p9_client_create+0x207/0xbc0 [ 269.264936][T15967] ? should_failslab+0x8c/0xb0 [ 269.264994][T15967] kstrdup+0x3e/0xd0 [ 269.265016][T15967] p9_client_create+0x207/0xbc0 [ 269.265064][T15967] v9fs_session_init+0xf7/0xde0 [ 269.265104][T15967] ? __rcu_read_unlock+0x4f/0x70 [ 269.265129][T15967] ? should_fail_ex+0xdb/0x280 [ 269.265220][T15967] ? v9fs_mount+0x51/0x590 [ 269.265251][T15967] ? should_failslab+0x8c/0xb0 [ 269.265339][T15967] ? __kmalloc_cache_noprof+0x189/0x320 [ 269.265384][T15967] v9fs_mount+0x67/0x590 [ 269.265489][T15967] ? __pfx_v9fs_mount+0x10/0x10 [ 269.265511][T15967] legacy_get_tree+0x75/0xd0 [ 269.265572][T15967] vfs_get_tree+0x54/0x1d0 [ 269.265604][T15967] do_new_mount+0x207/0x680 [ 269.265636][T15967] path_mount+0x4a4/0xb20 [ 269.265691][T15967] ? user_path_at+0x109/0x130 [ 269.265716][T15967] __se_sys_mount+0x28f/0x2e0 [ 269.265747][T15967] ? fput+0x8f/0xc0 [ 269.265829][T15967] __x64_sys_mount+0x67/0x80 [ 269.265860][T15967] x64_sys_call+0xd36/0x2fb0 [ 269.265894][T15967] do_syscall_64+0xd0/0x1a0 [ 269.265920][T15967] ? clear_bhb_loop+0x25/0x80 [ 269.265947][T15967] ? clear_bhb_loop+0x25/0x80 [ 269.266010][T15967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.266074][T15967] RIP: 0033:0x7fc877e4e969 [ 269.266093][T15967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.266116][T15967] RSP: 002b:00007fc8764b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 269.266139][T15967] RAX: ffffffffffffffda RBX: 00007fc878075fa0 RCX: 00007fc877e4e969 [ 269.266204][T15967] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000000000000000 [ 269.266220][T15967] RBP: 00007fc8764b7090 R08: 0000200000000300 R09: 0000000000000000 [ 269.266236][T15967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.266323][T15967] R13: 0000000000000000 R14: 00007fc878075fa0 R15: 00007ffd063145c8 [ 269.266344][T15967] [ 269.578622][T15977] Cannot find set identified by id 0 to match [ 269.585932][T15977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3612'. [ 269.613332][T15985] loop9: detected capacity change from 0 to 164 [ 269.631345][T15985] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 269.663953][T15985] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 269.677039][T15985] rock: directory entry would overflow storage [ 269.683249][T15985] rock: sig=0x4f50, size=4, remaining=3 [ 269.688984][T15985] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 269.708723][T15995] loop2: detected capacity change from 0 to 128 [ 269.761060][T16003] bridge0: entered promiscuous mode [ 269.768381][T16003] macvlan2: entered promiscuous mode [ 269.774955][T16003] bridge0: port 3(macvlan2) entered blocking state [ 269.781635][T16003] bridge0: port 3(macvlan2) entered disabled state [ 269.790266][T16003] macvlan2: entered allmulticast mode [ 269.795688][T16003] bridge0: entered allmulticast mode [ 269.804125][T16003] macvlan2: left allmulticast mode [ 269.809381][T16003] bridge0: left allmulticast mode [ 269.819953][T16003] bridge0: left promiscuous mode [ 269.904557][T16014] loop9: detected capacity change from 0 to 164 [ 269.922555][T16014] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 269.932386][T16014] netlink: 65047 bytes leftover after parsing attributes in process `syz.9.3627'. [ 269.980530][T16021] loop6: detected capacity change from 0 to 1024 [ 269.996154][T16021] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 270.012397][T16021] JBD2: no valid journal superblock found [ 270.018389][T16021] EXT4-fs (loop6): Could not load journal inode [ 270.122945][T16043] siw: device registration error -23 [ 270.316468][T16054] netlink: 'syz.5.3645': attribute type 27 has an invalid length. [ 270.351056][T16056] FAULT_INJECTION: forcing a failure. [ 270.351056][T16056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.364292][T16056] CPU: 0 UID: 0 PID: 16056 Comm: syz.2.3646 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 270.364328][T16056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 270.364344][T16056] Call Trace: [ 270.364349][T16056] [ 270.364357][T16056] __dump_stack+0x1d/0x30 [ 270.364378][T16056] dump_stack_lvl+0xe8/0x140 [ 270.364396][T16056] dump_stack+0x15/0x1b [ 270.364415][T16056] should_fail_ex+0x265/0x280 [ 270.364509][T16056] should_fail+0xb/0x20 [ 270.364607][T16056] should_fail_usercopy+0x1a/0x20 [ 270.364706][T16056] _copy_from_user+0x1c/0xb0 [ 270.364732][T16056] ___sys_sendmsg+0xc1/0x1d0 [ 270.364843][T16056] __sys_sendmmsg+0x178/0x300 [ 270.364875][T16056] __x64_sys_sendmmsg+0x57/0x70 [ 270.364893][T16056] x64_sys_call+0x2f2f/0x2fb0 [ 270.364916][T16056] do_syscall_64+0xd0/0x1a0 [ 270.364940][T16056] ? clear_bhb_loop+0x25/0x80 [ 270.365049][T16056] ? clear_bhb_loop+0x25/0x80 [ 270.365075][T16056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.365095][T16056] RIP: 0033:0x7f4cff80e969 [ 270.365110][T16056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.365132][T16056] RSP: 002b:00007f4cfde77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 270.365155][T16056] RAX: ffffffffffffffda RBX: 00007f4cffa35fa0 RCX: 00007f4cff80e969 [ 270.365170][T16056] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000003 [ 270.365185][T16056] RBP: 00007f4cfde77090 R08: 0000000000000000 R09: 0000000000000000 [ 270.365266][T16056] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.365280][T16056] R13: 0000000000000000 R14: 00007f4cffa35fa0 R15: 00007ffed2d0b758 [ 270.365298][T16056] [ 270.599296][T16054] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.606641][T16054] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.614320][ T29] kauditd_printk_skb: 391 callbacks suppressed [ 270.614337][ T29] audit: type=1326 audit(1746582846.889:17425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16060 comm="syz.2.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cff80e969 code=0x7ffc0000 [ 270.675510][ T29] audit: type=1326 audit(1746582846.889:17426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16060 comm="syz.2.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cff80e969 code=0x7ffc0000 [ 270.701053][T16061] FAULT_INJECTION: forcing a failure. [ 270.701053][T16061] name failslab, interval 1, probability 0, space 0, times 0 [ 270.713741][T16061] CPU: 0 UID: 0 PID: 16061 Comm: syz.2.3648 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 270.713769][T16061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 270.713781][T16061] Call Trace: [ 270.713842][T16061] [ 270.713853][T16061] __dump_stack+0x1d/0x30 [ 270.713881][T16061] dump_stack_lvl+0xe8/0x140 [ 270.713906][T16061] dump_stack+0x15/0x1b [ 270.713929][T16061] should_fail_ex+0x265/0x280 [ 270.714146][T16061] should_failslab+0x8c/0xb0 [ 270.714185][T16061] kmem_cache_alloc_noprof+0x50/0x310 [ 270.714228][T16061] ? audit_log_start+0x365/0x6c0 [ 270.714281][T16061] audit_log_start+0x365/0x6c0 [ 270.714322][T16061] audit_seccomp+0x48/0x100 [ 270.714345][T16061] ? __seccomp_filter+0x68c/0x10d0 [ 270.714442][T16061] __seccomp_filter+0x69d/0x10d0 [ 270.714477][T16061] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 270.714536][T16061] ? vfs_write+0x75e/0x8d0 [ 270.714568][T16061] ? __rcu_read_unlock+0x4f/0x70 [ 270.714596][T16061] ? __fget_files+0x184/0x1c0 [ 270.714704][T16061] __secure_computing+0x82/0x150 [ 270.714726][T16061] syscall_trace_enter+0xcf/0x1e0 [ 270.714757][T16061] do_syscall_64+0xaa/0x1a0 [ 270.714790][T16061] ? clear_bhb_loop+0x25/0x80 [ 270.714819][T16061] ? clear_bhb_loop+0x25/0x80 [ 270.714847][T16061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.714910][T16061] RIP: 0033:0x7f4cff80e969 [ 270.714931][T16061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.714969][T16061] RSP: 002b:00007f4cfde77038 EFLAGS: 00000246 ORIG_RAX: 000000000000010d [ 270.714994][T16061] RAX: ffffffffffffffda RBX: 00007f4cffa35fa0 RCX: 00007f4cff80e969 [ 270.715011][T16061] RDX: 0000000000000005 RSI: 0000200000000000 RDI: 0000000000000006 [ 270.715054][T16061] RBP: 00007f4cfde77090 R08: 0000000000000000 R09: 0000000000000000 [ 270.715071][T16061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.715086][T16061] R13: 0000000000000000 R14: 00007f4cffa35fa0 R15: 00007ffed2d0b758 [ 270.715111][T16061] [ 270.715121][T16061] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 [ 270.929539][T16061] audit: out of memory in audit_log_start [ 270.935355][ T29] audit: type=1326 audit(1746582846.949:17427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16060 comm="syz.2.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cff80e969 code=0x7ffc0000 [ 270.959031][ T29] audit: type=1326 audit(1746582846.949:17428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16060 comm="syz.2.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cff80e969 code=0x7ffc0000 [ 270.982693][ T29] audit: type=1326 audit(1746582846.949:17429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16060 comm="syz.2.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cff80e969 code=0x7ffc0000 [ 271.006475][ T29] audit: type=1326 audit(1746582846.979:17430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16060 comm="syz.2.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cff80e969 code=0x7ffc0000 [ 271.030084][ T29] audit: type=1326 audit(1746582846.979:17431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16060 comm="syz.2.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cff80e969 code=0x7ffc0000 [ 271.053963][ T29] audit: type=1326 audit(1746582846.979:17432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16060 comm="syz.2.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cff80e969 code=0x7ffc0000 [ 271.187662][T16054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.198137][T16054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.243808][T16071] program syz.6.3653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.253661][T16071] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 271.264646][T16071] Cannot find set identified by id 0 to match [ 271.282846][T16054] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.292053][T16054] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.301121][T16054] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.310050][T16054] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.319677][T16074] FAULT_INJECTION: forcing a failure. [ 271.319677][T16074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.332965][T16074] CPU: 1 UID: 0 PID: 16074 Comm: gtp Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 271.333003][T16074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 271.333020][T16074] Call Trace: [ 271.333108][T16074] [ 271.333118][T16074] __dump_stack+0x1d/0x30 [ 271.333146][T16074] dump_stack_lvl+0xe8/0x140 [ 271.333175][T16074] dump_stack+0x15/0x1b [ 271.333194][T16074] should_fail_ex+0x265/0x280 [ 271.333277][T16074] should_fail+0xb/0x20 [ 271.333348][T16074] should_fail_usercopy+0x1a/0x20 [ 271.333373][T16074] _copy_from_user+0x1c/0xb0 [ 271.333401][T16074] ___sys_sendmsg+0xc1/0x1d0 [ 271.333454][T16074] __sys_sendmmsg+0x178/0x300 [ 271.333533][T16074] __x64_sys_sendmmsg+0x57/0x70 [ 271.333559][T16074] x64_sys_call+0x2f2f/0x2fb0 [ 271.333618][T16074] do_syscall_64+0xd0/0x1a0 [ 271.333646][T16074] ? clear_bhb_loop+0x25/0x80 [ 271.333670][T16074] ? clear_bhb_loop+0x25/0x80 [ 271.333709][T16074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.333736][T16074] RIP: 0033:0x7f4cff80e969 [ 271.333755][T16074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.333773][T16074] RSP: 002b:00007f4cfde77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 271.333791][T16074] RAX: ffffffffffffffda RBX: 00007f4cffa35fa0 RCX: 00007f4cff80e969 [ 271.333804][T16074] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000005 [ 271.333820][T16074] RBP: 00007f4cfde77090 R08: 0000000000000000 R09: 0000000000000000 [ 271.333894][T16074] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.333911][T16074] R13: 0000000000000000 R14: 00007f4cffa35fa0 R15: 00007ffed2d0b758 [ 271.333935][T16074] [ 271.515093][T16054] bond1: left promiscuous mode [ 271.519978][T16054] bond1: left allmulticast mode [ 271.549064][T16057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.569208][T16057] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.589149][T16057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.856694][T16096] No source specified [ 271.913800][T16100] No source specified [ 272.114463][T16112] loop5: detected capacity change from 0 to 128 [ 272.222362][T16116] FAULT_INJECTION: forcing a failure. [ 272.222362][T16116] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 272.235695][T16116] CPU: 0 UID: 0 PID: 16116 Comm: syz.5.3671 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 272.235777][T16116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 272.235794][T16116] Call Trace: [ 272.235803][T16116] [ 272.235814][T16116] __dump_stack+0x1d/0x30 [ 272.235842][T16116] dump_stack_lvl+0xe8/0x140 [ 272.235868][T16116] dump_stack+0x15/0x1b [ 272.235890][T16116] should_fail_ex+0x265/0x280 [ 272.235957][T16116] should_fail_alloc_page+0xf2/0x100 [ 272.236024][T16116] __alloc_frozen_pages_noprof+0xff/0x360 [ 272.236062][T16116] alloc_pages_mpol+0xb3/0x250 [ 272.236092][T16116] alloc_pages_noprof+0x90/0x130 [ 272.236122][T16116] pte_alloc_one+0x2a/0x110 [ 272.236169][T16116] __pte_alloc+0x32/0x290 [ 272.236207][T16116] ? mas_state_walk+0x574/0x650 [ 272.236234][T16116] handle_mm_fault+0x1d74/0x2ae0 [ 272.236274][T16116] ? mas_walk+0xf2/0x120 [ 272.236304][T16116] do_user_addr_fault+0x636/0x1090 [ 272.236414][T16116] exc_page_fault+0x54/0xc0 [ 272.236456][T16116] asm_exc_page_fault+0x26/0x30 [ 272.236481][T16116] RIP: 0033:0x7f5c72590d66 [ 272.236499][T16116] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 272.236619][T16116] RSP: 002b:00007f5c70d364a0 EFLAGS: 00010246 [ 272.236714][T16116] RAX: 0000000000000001 RBX: 00007f5c70d36540 RCX: 0000000000000101 [ 272.236728][T16116] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f5c70d365e0 [ 272.236745][T16116] RBP: 0000000000000102 R08: 00007f5c68917000 R09: 0000000000000000 [ 272.236760][T16116] R10: 0000000000000000 R11: 00007f5c70d36550 R12: 0000000000000001 [ 272.236777][T16116] R13: 00007f5c7276bfc0 R14: 0000000000000000 R15: 00007f5c70d365e0 [ 272.236801][T16116] [ 272.414814][T16116] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 272.426212][T16118] loop2: detected capacity change from 0 to 128 [ 272.449584][T16116] loop5: detected capacity change from 0 to 1024 [ 272.467379][T16116] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 272.501274][T16116] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 272.535808][T16123] No source specified [ 272.559226][T16116] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 272.561652][T16126] loop6: detected capacity change from 0 to 512 [ 272.575149][T16126] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 272.584279][T16126] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 272.608127][T16116] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 2: comm syz.5.3671: lblock 2 mapped to illegal pblock 2 (length 1) [ 272.625605][T16116] EXT4-fs (loop5): Remounting filesystem read-only [ 272.639182][T16126] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 272.653407][T16130] FAULT_INJECTION: forcing a failure. [ 272.653407][T16130] name failslab, interval 1, probability 0, space 0, times 0 [ 272.666164][T16130] CPU: 1 UID: 0 PID: 16130 Comm: syz.2.3676 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 272.666193][T16130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 272.666205][T16130] Call Trace: [ 272.666213][T16130] [ 272.666241][T16130] __dump_stack+0x1d/0x30 [ 272.666261][T16130] dump_stack_lvl+0xe8/0x140 [ 272.666360][T16130] dump_stack+0x15/0x1b [ 272.666381][T16130] should_fail_ex+0x265/0x280 [ 272.666419][T16130] should_failslab+0x8c/0xb0 [ 272.666462][T16130] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 272.666514][T16130] ? sidtab_sid2str_get+0xa0/0x130 [ 272.666546][T16130] kmemdup_noprof+0x2b/0x70 [ 272.666564][T16130] sidtab_sid2str_get+0xa0/0x130 [ 272.666604][T16130] security_sid_to_context_core+0x1eb/0x2e0 [ 272.666639][T16130] security_sid_to_context+0x27/0x40 [ 272.666664][T16130] selinux_lsmprop_to_secctx+0x67/0xf0 [ 272.666736][T16130] security_lsmprop_to_secctx+0x43/0x80 [ 272.666789][T16130] audit_log_task_context+0x77/0x190 [ 272.666827][T16130] audit_log_task+0xf4/0x250 [ 272.666863][T16130] audit_seccomp+0x61/0x100 [ 272.666893][T16130] ? __seccomp_filter+0x68c/0x10d0 [ 272.666919][T16130] __seccomp_filter+0x69d/0x10d0 [ 272.667042][T16130] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 272.667111][T16130] ? vfs_write+0x75e/0x8d0 [ 272.667201][T16130] ? __rcu_read_unlock+0x4f/0x70 [ 272.667222][T16130] ? __fget_files+0x184/0x1c0 [ 272.667281][T16130] __secure_computing+0x82/0x150 [ 272.667307][T16130] syscall_trace_enter+0xcf/0x1e0 [ 272.667337][T16130] do_syscall_64+0xaa/0x1a0 [ 272.667358][T16130] ? clear_bhb_loop+0x25/0x80 [ 272.667379][T16130] ? clear_bhb_loop+0x25/0x80 [ 272.667452][T16130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.667478][T16130] RIP: 0033:0x7f4cff80e969 [ 272.667497][T16130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.667593][T16130] RSP: 002b:00007f4cfde77038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 272.667616][T16130] RAX: ffffffffffffffda RBX: 00007f4cffa35fa0 RCX: 00007f4cff80e969 [ 272.667632][T16130] RDX: 0000000000000001 RSI: 0000000000004000 RDI: 0000200000000000 [ 272.667662][T16130] RBP: 00007f4cfde77090 R08: 0000000000000000 R09: 0000000000000000 [ 272.667678][T16130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.667693][T16130] R13: 0000000000000000 R14: 00007f4cffa35fa0 R15: 00007ffed2d0b758 [ 272.667714][T16130] [ 272.668233][T16116] EXT4-fs (loop5): 1 orphan inode deleted [ 272.676230][T16126] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 272.724401][T16116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.837203][T16126] System zones: 0-2, 18-18 [ 272.842377][T16116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.861304][T16126] , 34-34 [ 272.938692][T16132] loop2: detected capacity change from 0 to 1024 [ 272.941192][T16132] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 272.943175][T16126] [ 272.955160][T16132] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 272.976819][T16132] JBD2: no valid journal superblock found [ 272.985447][T16126] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 272.990427][T16132] EXT4-fs (loop2): Could not load journal inode [ 273.014597][T16126] EXT4-fs (loop6): 1 truncate cleaned up [ 273.020994][T16126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.245762][T16145] sd 0:0:1:0: device reset [ 273.251416][T16143] loop2: detected capacity change from 0 to 128 [ 273.346523][T16148] No source specified [ 273.370513][T16150] program syz.5.3684 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.385932][ T9216] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.399804][T16152] loop1: detected capacity change from 0 to 512 [ 273.408773][T16150] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 273.425702][T16156] loop6: detected capacity change from 0 to 256 [ 273.433199][T16150] Cannot find set identified by id 0 to match [ 273.439442][T16152] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 273.448584][T16152] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 273.464590][T16150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3684'. [ 273.494065][T16152] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 273.509907][T16156] netlink: 'syz.6.3687': attribute type 2 has an invalid length. [ 273.517759][T16156] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.3687'. [ 273.552416][T16152] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 273.585572][T16152] System zones: 0-2, 18-18, 34-34 [ 273.640565][T16152] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 273.696065][T16152] EXT4-fs (loop1): 1 truncate cleaned up [ 273.702161][T16152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.760924][T16168] loop6: detected capacity change from 0 to 1024 [ 273.782580][T16168] EXT4-fs: Ignoring removed nobh option [ 273.788342][T16168] EXT4-fs: Ignoring removed bh option [ 273.853560][T16168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.938054][T16178] loop5: detected capacity change from 0 to 128 [ 274.022038][T16179] sd 0:0:1:0: device reset [ 274.031158][ T9216] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.074093][T16183] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3697'. [ 274.100314][T14511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.113322][T16185] No source specified [ 274.171176][T16189] bridge0: entered promiscuous mode [ 274.192559][T16189] macvlan2: entered promiscuous mode [ 274.201873][T16189] bridge0: port 3(macvlan2) entered blocking state [ 274.208592][T16189] bridge0: port 3(macvlan2) entered disabled state [ 274.237070][T16189] macvlan2: entered allmulticast mode [ 274.242531][T16189] bridge0: entered allmulticast mode [ 274.255771][T16189] macvlan2: left allmulticast mode [ 274.261104][T16189] bridge0: left allmulticast mode [ 274.267066][T16189] bridge0: left promiscuous mode [ 274.362023][T16203] loop1: detected capacity change from 0 to 1024 [ 274.384795][T16203] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 274.396220][T16206] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 274.403994][T16203] JBD2: no valid journal superblock found [ 274.409781][T16203] EXT4-fs (loop1): Could not load journal inode [ 274.463465][T16212] FAULT_INJECTION: forcing a failure. [ 274.463465][T16212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.476620][T16212] CPU: 0 UID: 0 PID: 16212 Comm: syz.6.3709 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 274.476674][T16212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 274.476691][T16212] Call Trace: [ 274.476699][T16212] [ 274.476783][T16212] __dump_stack+0x1d/0x30 [ 274.476812][T16212] dump_stack_lvl+0xe8/0x140 [ 274.476835][T16212] dump_stack+0x15/0x1b [ 274.476852][T16212] should_fail_ex+0x265/0x280 [ 274.476894][T16212] should_fail+0xb/0x20 [ 274.477011][T16212] should_fail_usercopy+0x1a/0x20 [ 274.477036][T16212] _copy_from_user+0x1c/0xb0 [ 274.477176][T16212] ____sys_sendmsg+0x1c5/0x4e0 [ 274.477209][T16212] ___sys_sendmsg+0x17b/0x1d0 [ 274.477253][T16212] __x64_sys_sendmsg+0xd4/0x160 [ 274.477341][T16212] x64_sys_call+0x2999/0x2fb0 [ 274.477363][T16212] do_syscall_64+0xd0/0x1a0 [ 274.477385][T16212] ? clear_bhb_loop+0x25/0x80 [ 274.477413][T16212] ? clear_bhb_loop+0x25/0x80 [ 274.477435][T16212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.477471][T16212] RIP: 0033:0x7fda9edce969 [ 274.477491][T16212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.477515][T16212] RSP: 002b:00007fda9d437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.477539][T16212] RAX: ffffffffffffffda RBX: 00007fda9eff5fa0 RCX: 00007fda9edce969 [ 274.477555][T16212] RDX: 0000000020000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 274.477572][T16212] RBP: 00007fda9d437090 R08: 0000000000000000 R09: 0000000000000000 [ 274.477589][T16212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.477605][T16212] R13: 0000000000000000 R14: 00007fda9eff5fa0 R15: 00007fff768566a8 [ 274.477630][T16212] [ 274.672707][T16214] Cannot find set identified by id 0 to match [ 274.697082][T16216] netlink: 'syz.6.3711': attribute type 3 has an invalid length. [ 274.709550][T16214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3710'. [ 274.753327][T16218] loop5: detected capacity change from 0 to 164 [ 274.763440][T16218] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 274.783911][T16218] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.3712'. [ 274.830283][T16223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3715'. [ 274.886678][T16228] vhci_hcd: invalid port number 224 [ 275.008822][T16236] loop1: detected capacity change from 0 to 1024 [ 275.020291][T16236] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 275.035072][T16236] JBD2: no valid journal superblock found [ 275.040924][T16236] EXT4-fs (loop1): Could not load journal inode [ 275.168651][T16251] loop6: detected capacity change from 0 to 2048 [ 275.219341][T16258] FAULT_INJECTION: forcing a failure. [ 275.219341][T16258] name failslab, interval 1, probability 0, space 0, times 0 [ 275.232128][T16258] CPU: 1 UID: 0 PID: 16258 Comm: +}[@ Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 275.232167][T16258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 275.232184][T16258] Call Trace: [ 275.232191][T16258] [ 275.232200][T16258] __dump_stack+0x1d/0x30 [ 275.232224][T16258] dump_stack_lvl+0xe8/0x140 [ 275.232246][T16258] dump_stack+0x15/0x1b [ 275.232267][T16258] should_fail_ex+0x265/0x280 [ 275.232299][T16258] should_failslab+0x8c/0xb0 [ 275.232336][T16258] kmem_cache_alloc_noprof+0x50/0x310 [ 275.232372][T16258] ? __mpol_dup+0x42/0x1b0 [ 275.232393][T16258] __mpol_dup+0x42/0x1b0 [ 275.232414][T16258] mbind_range+0x1e8/0x440 [ 275.232447][T16258] __se_sys_set_mempolicy_home_node+0x351/0x530 [ 275.232484][T16258] __x64_sys_set_mempolicy_home_node+0x55/0x70 [ 275.232519][T16258] x64_sys_call+0x117c/0x2fb0 [ 275.232547][T16258] do_syscall_64+0xd0/0x1a0 [ 275.232576][T16258] ? clear_bhb_loop+0x25/0x80 [ 275.232597][T16258] ? clear_bhb_loop+0x25/0x80 [ 275.232617][T16258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.232637][T16258] RIP: 0033:0x7fda9edce969 [ 275.232651][T16258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.232675][T16258] RSP: 002b:00007fda9d437038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2 [ 275.232699][T16258] RAX: ffffffffffffffda RBX: 00007fda9eff5fa0 RCX: 00007fda9edce969 [ 275.232716][T16258] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffc000 [ 275.232732][T16258] RBP: 00007fda9d437090 R08: 0000000000000000 R09: 0000000000000000 [ 275.232748][T16258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.232763][T16258] R13: 0000000000000000 R14: 00007fda9eff5fa0 R15: 00007fff768566a8 [ 275.232789][T16258] [ 275.442851][T16261] loop6: detected capacity change from 0 to 2048 [ 275.558970][T16263] loop6: detected capacity change from 0 to 164 [ 275.574010][T16263] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 275.610855][T16266] loop5: detected capacity change from 0 to 512 [ 275.616922][T16265] loop1: detected capacity change from 0 to 512 [ 275.624641][ T29] kauditd_printk_skb: 364 callbacks suppressed [ 275.624659][ T29] audit: type=1326 audit(1746582851.889:17794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.1.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f670555e56b code=0x7ffc0000 [ 275.634006][T16266] EXT4-fs: Ignoring removed orlov option [ 275.678779][T16263] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 275.684767][ T29] audit: type=1326 audit(1746582851.939:17795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.1.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f670555d5ca code=0x7ffc0000 [ 275.700117][T16263] rock: directory entry would overflow storage [ 275.710481][ T29] audit: type=1326 audit(1746582851.939:17796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.1.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f670555d5ca code=0x7ffc0000 [ 275.716673][T16263] rock: sig=0x4f50, size=4, remaining=3 [ 275.740064][ T29] audit: type=1326 audit(1746582851.939:17797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.1.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f670555d1d7 code=0x7ffc0000 [ 275.745605][T16263] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 275.769327][ T29] audit: type=1326 audit(1746582851.939:17798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.1.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f670556010a code=0x7ffc0000 [ 275.800583][ T29] audit: type=1326 audit(1746582851.949:17799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16262 comm="syz.6.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9edce969 code=0x7ffc0000 [ 275.824245][ T29] audit: type=1326 audit(1746582851.949:17800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16262 comm="syz.6.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9edce969 code=0x7ffc0000 [ 275.847984][ T29] audit: type=1326 audit(1746582851.949:17801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16262 comm="syz.6.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda9edce969 code=0x7ffc0000 [ 275.871696][ T29] audit: type=1326 audit(1746582851.949:17802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16262 comm="syz.6.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9edce969 code=0x7ffc0000 [ 275.895503][ T29] audit: type=1326 audit(1746582851.949:17803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16262 comm="syz.6.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda9edce969 code=0x7ffc0000 [ 275.929916][T16265] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 275.938211][T16266] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 275.946953][T16265] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3732: invalid indirect mapped block 2683928664 (level 1) [ 275.964771][T16265] EXT4-fs (loop1): Remounting filesystem read-only [ 275.974030][T16265] EXT4-fs (loop1): 1 truncate cleaned up [ 276.011928][T16265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.023964][T16266] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3730: bg 0: block 248: padding at end of block bitmap is not set [ 276.042761][T16272] bridge0: entered promiscuous mode [ 276.049309][T16272] macvlan2: entered promiscuous mode [ 276.055718][T16272] bridge0: port 3(macvlan2) entered blocking state [ 276.062413][T16272] bridge0: port 3(macvlan2) entered disabled state [ 276.069521][T16266] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3730: Failed to acquire dquot type 1 [ 276.104292][T16266] EXT4-fs (loop5): 1 truncate cleaned up [ 276.110569][T16272] macvlan2: entered allmulticast mode [ 276.116084][T16272] bridge0: entered allmulticast mode [ 276.143133][T16266] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.166615][T14511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.177369][T16266] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 276.190622][T16272] macvlan2: left allmulticast mode [ 276.195836][T16272] bridge0: left allmulticast mode [ 276.201064][T16278] FAULT_INJECTION: forcing a failure. [ 276.201064][T16278] name failslab, interval 1, probability 0, space 0, times 0 [ 276.201712][T16272] bridge0: left promiscuous mode [ 276.214243][T16278] CPU: 0 UID: 0 PID: 16278 Comm: syz.6.3737 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 276.214278][T16278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 276.214321][T16278] Call Trace: [ 276.214331][T16278] [ 276.214342][T16278] __dump_stack+0x1d/0x30 [ 276.214372][T16278] dump_stack_lvl+0xe8/0x140 [ 276.214396][T16278] dump_stack+0x15/0x1b [ 276.214418][T16278] should_fail_ex+0x265/0x280 [ 276.214476][T16278] should_failslab+0x8c/0xb0 [ 276.214514][T16278] __kvmalloc_node_noprof+0x126/0x4d0 [ 276.214541][T16278] ? bpf_test_run_xdp_live+0xed/0xfd0 [ 276.214607][T16278] bpf_test_run_xdp_live+0xed/0xfd0 [ 276.214647][T16278] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 276.214683][T16278] ? __pfx_autoremove_wake_function+0x10/0x10 [ 276.214743][T16278] ? synchronize_rcu+0x45/0x320 [ 276.214781][T16278] ? 0xffffffffa0003a00 [ 276.214799][T16278] ? 0xffffffffa0003a00 [ 276.214816][T16278] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 276.214849][T16278] ? 0xffffffffa0003a00 [ 276.214880][T16278] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 276.214938][T16278] bpf_prog_test_run_xdp+0x4f5/0x8f0 [ 276.214981][T16278] ? __rcu_read_unlock+0x4f/0x70 [ 276.215022][T16278] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 276.215136][T16278] bpf_prog_test_run+0x207/0x390 [ 276.215177][T16278] __sys_bpf+0x3dc/0x790 [ 276.215238][T16278] __x64_sys_bpf+0x41/0x50 [ 276.215307][T16278] x64_sys_call+0x2478/0x2fb0 [ 276.215334][T16278] do_syscall_64+0xd0/0x1a0 [ 276.215452][T16278] ? clear_bhb_loop+0x25/0x80 [ 276.215474][T16278] ? clear_bhb_loop+0x25/0x80 [ 276.215502][T16278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.215553][T16278] RIP: 0033:0x7fda9edce969 [ 276.215574][T16278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.215658][T16278] RSP: 002b:00007fda9d437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 276.215683][T16278] RAX: ffffffffffffffda RBX: 00007fda9eff5fa0 RCX: 00007fda9edce969 [ 276.215700][T16278] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 276.215768][T16278] RBP: 00007fda9d437090 R08: 0000000000000000 R09: 0000000000000000 [ 276.215785][T16278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.215801][T16278] R13: 0000000000000000 R14: 00007fda9eff5fa0 R15: 00007fff768566a8 [ 276.215827][T16278] [ 276.564294][T16296] loop1: detected capacity change from 0 to 164 [ 276.568984][T16292] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3741'. [ 276.572397][T13888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.579606][T16292] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3741'. [ 276.597999][T11107] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:38: Failed to release dquot type 1 [ 276.638117][T16296] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 276.660033][T16298] macvlan2: entered promiscuous mode [ 276.665392][T16298] bridge0: entered promiscuous mode [ 276.678128][T16298] bridge0: port 8(macvlan2) entered blocking state [ 276.684741][T16298] bridge0: port 8(macvlan2) entered disabled state [ 276.693716][T16298] macvlan2: entered allmulticast mode [ 276.699191][T16298] bridge0: entered allmulticast mode [ 276.720632][T16298] macvlan2: left allmulticast mode [ 276.725843][T16298] bridge0: left allmulticast mode [ 276.743885][T16298] bridge0: left promiscuous mode [ 276.778639][T16308] Cannot find set identified by id 0 to match [ 276.786235][T16303] loop9: detected capacity change from 0 to 164 [ 276.786691][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3747'. [ 276.826587][T16303] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 276.845557][T16303] netlink: 65047 bytes leftover after parsing attributes in process `syz.9.3746'. [ 276.920804][T16316] macvlan2: entered promiscuous mode [ 276.926357][T16316] bridge0: entered promiscuous mode [ 276.971206][T16316] bridge0: port 8(macvlan2) entered blocking state [ 276.977880][T16316] bridge0: port 8(macvlan2) entered disabled state [ 276.987660][T16316] macvlan2: entered allmulticast mode [ 276.993129][T16316] bridge0: entered allmulticast mode [ 277.007586][T16316] macvlan2: left allmulticast mode [ 277.012817][T16316] bridge0: left allmulticast mode [ 277.020486][T16316] bridge0: left promiscuous mode [ 277.128089][T16328] loop1: detected capacity change from 0 to 512 [ 277.130134][T16326] loop6: detected capacity change from 0 to 256 [ 277.137452][T16328] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 277.150034][T16328] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 277.167829][T16328] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 277.185241][T16328] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 277.193442][T16330] loop9: detected capacity change from 0 to 164 [ 277.200010][T16328] System zones: 0-2, 18-18, 34-34 [ 277.205879][T16328] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 277.228779][T16328] EXT4-fs (loop1): 1 truncate cleaned up [ 277.234884][T16328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.258789][T16330] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 277.322004][T16333] loop6: detected capacity change from 0 to 512 [ 277.355864][T16333] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 277.365010][T16333] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 277.426967][T16328] sd 0:0:1:0: device reset [ 277.432409][T16333] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 277.463952][T16333] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 277.497979][T16333] System zones: 0-2, 18-18, 34-34 [ 277.536662][T16333] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 277.559077][T16333] EXT4-fs (loop6): 1 truncate cleaned up [ 277.573980][T14511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.576666][T16333] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.640396][T16341] loop9: detected capacity change from 0 to 8192 [ 277.667785][T16345] program syz.1.3762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.680485][T16338] program syz.9.3760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.686230][T16345] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 277.711787][T16345] Cannot find set identified by id 0 to match [ 278.003524][T16351] sd 0:0:1:0: device reset [ 278.195579][T16359] bridge0: entered promiscuous mode [ 278.220495][T16359] macvlan2: entered promiscuous mode [ 278.232062][T16359] bridge0: port 3(macvlan2) entered blocking state [ 278.239257][T16359] bridge0: port 3(macvlan2) entered disabled state [ 278.246113][T16359] macvlan2: entered allmulticast mode [ 278.251519][T16359] bridge0: entered allmulticast mode [ 278.252146][ T9216] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.289010][T16359] macvlan2: left allmulticast mode [ 278.294218][T16359] bridge0: left allmulticast mode [ 278.320722][T16365] loop6: detected capacity change from 0 to 256 [ 278.336886][T16359] bridge0: left promiscuous mode [ 278.352257][T16365] FAULT_INJECTION: forcing a failure. [ 278.352257][T16365] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 278.365633][T16365] CPU: 1 UID: 0 PID: 16365 Comm: syz.6.3769 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 278.365678][T16365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 278.365690][T16365] Call Trace: [ 278.365697][T16365] [ 278.365705][T16365] __dump_stack+0x1d/0x30 [ 278.365770][T16365] dump_stack_lvl+0xe8/0x140 [ 278.365856][T16365] dump_stack+0x15/0x1b [ 278.365928][T16365] should_fail_ex+0x265/0x280 [ 278.365973][T16365] should_fail_alloc_page+0xf2/0x100 [ 278.366014][T16365] __alloc_frozen_pages_noprof+0xff/0x360 [ 278.366054][T16365] alloc_pages_mpol+0xb3/0x250 [ 278.366156][T16365] folio_alloc_noprof+0x97/0x150 [ 278.366200][T16365] filemap_alloc_folio_noprof+0x66/0x210 [ 278.366238][T16365] __filemap_get_folio+0x28f/0x650 [ 278.366262][T16365] ? __mark_inode_dirty+0x1ac/0x760 [ 278.366410][T16365] cont_write_begin+0x56f/0x8e0 [ 278.366447][T16365] ? generic_write_end+0x134/0x150 [ 278.366536][T16365] fat_write_begin+0x4f/0xe0 [ 278.366560][T16365] ? __pfx_fat_get_block+0x10/0x10 [ 278.366594][T16365] cont_write_begin+0x198/0x8e0 [ 278.366624][T16365] fat_write_begin+0x4f/0xe0 [ 278.366641][T16365] ? __pfx_fat_get_block+0x10/0x10 [ 278.366691][T16365] generic_cont_expand_simple+0xad/0x150 [ 278.366847][T16365] fat_cont_expand+0x3e/0x170 [ 278.366884][T16365] fat_fallocate+0x177/0x1c0 [ 278.366940][T16365] vfs_fallocate+0x410/0x450 [ 278.366967][T16365] __x64_sys_fallocate+0x7a/0xd0 [ 278.367068][T16365] x64_sys_call+0x2b88/0x2fb0 [ 278.367103][T16365] do_syscall_64+0xd0/0x1a0 [ 278.367132][T16365] ? clear_bhb_loop+0x25/0x80 [ 278.367160][T16365] ? clear_bhb_loop+0x25/0x80 [ 278.367187][T16365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.367262][T16365] RIP: 0033:0x7fda9edce969 [ 278.367277][T16365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.367295][T16365] RSP: 002b:00007fda9d437038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 278.367312][T16365] RAX: ffffffffffffffda RBX: 00007fda9eff5fa0 RCX: 00007fda9edce969 [ 278.367397][T16365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 278.367415][T16365] RBP: 00007fda9d437090 R08: 0000000000000000 R09: 0000000000000000 [ 278.367431][T16365] R10: 00000000001000f4 R11: 0000000000000246 R12: 0000000000000001 [ 278.367524][T16365] R13: 0000000000000000 R14: 00007fda9eff5fa0 R15: 00007fff768566a8 [ 278.367598][T16365] [ 278.736071][T11083] bio_check_eod: 23 callbacks suppressed [ 278.736089][T11083] kworker/u8:16: attempt to access beyond end of device [ 278.736089][T11083] loop6: rw=1, sector=256, nr_sectors = 16 limit=256 [ 278.974735][T16394] macvlan2: entered promiscuous mode [ 278.980228][T16394] bridge0: entered promiscuous mode [ 279.004491][T16394] bridge0: port 8(macvlan2) entered blocking state [ 279.011251][T16394] bridge0: port 8(macvlan2) entered disabled state [ 279.021630][T16394] macvlan2: entered allmulticast mode [ 279.027094][T16394] bridge0: entered allmulticast mode [ 279.034944][T16394] macvlan2: left allmulticast mode [ 279.040260][T16394] bridge0: left allmulticast mode [ 279.051648][T16394] bridge0: left promiscuous mode [ 279.254718][T16404] __nla_validate_parse: 3 callbacks suppressed [ 279.254743][T16404] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 279.291421][T16404] bond1: entered promiscuous mode [ 279.296924][T16404] bond1: entered allmulticast mode [ 279.313142][T16404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.653180][T16434] loop2: detected capacity change from 0 to 164 [ 279.671981][T16435] program syz.9.3800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.691713][T16434] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 279.706029][T16435] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 279.722813][T16438] Cannot find set identified by id 0 to match [ 279.730231][T16438] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3800'. [ 279.744430][T16434] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3799'. [ 279.769809][T16440] netlink: 'syz.6.3802': attribute type 7 has an invalid length. [ 279.777863][T16440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3802'. [ 279.834296][T16444] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3804'. [ 279.899081][T16440] infiniband syz2: set down [ 279.903776][T16440] infiniband syz2: added veth0_to_bond [ 279.943149][T16451] loop2: detected capacity change from 0 to 512 [ 279.957362][T16440] RDS/IB: syz2: added [ 279.969934][T16440] smc: adding ib device syz2 with port count 1 [ 279.986567][T16440] smc: ib device syz2 port 1 has pnetid [ 280.016297][T16451] EXT4-fs (loop2): orphan cleanup on readonly fs [ 280.029113][T16451] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3807: bad orphan inode 13 [ 280.081547][T16451] ext4_test_bit(bit=12, block=18) = 1 [ 280.087037][T16451] is_bad_inode(inode)=0 [ 280.091307][T16451] NEXT_ORPHAN(inode)=2130706432 [ 280.096311][T16451] max_ino=32 [ 280.099522][T16451] i_nlink=1 [ 280.141381][T16451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 280.219797][T13048] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.358275][T16465] program syz.9.3813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.377897][T16465] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 280.399552][T16465] Cannot find set identified by id 0 to match [ 280.421279][T16465] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3813'. [ 280.515827][T16472] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3816'. [ 280.694095][T16481] loop6: detected capacity change from 0 to 1024 [ 280.750807][T16467] loop2: detected capacity change from 0 to 8192 [ 280.766040][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3821'. [ 280.828274][T16467] program syz.2.3815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.028948][ T29] kauditd_printk_skb: 451 callbacks suppressed [ 281.028966][ T29] audit: type=1400 audit(1746582857.309:18252): avc: denied { relabelfrom } for pid=16497 comm="syz.6.3825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 281.058888][ T29] audit: type=1400 audit(1746582857.309:18253): avc: denied { relabelto } for pid=16497 comm="syz.6.3825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 281.694210][T16507] program syz.2.3827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.706072][T16507] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 281.729495][T16507] Cannot find set identified by id 0 to match [ 281.740080][T16507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3827'. [ 281.820772][ T29] audit: type=1326 audit(1746582858.089:18254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.6.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9edce969 code=0x7ffc0000 [ 281.844553][ T29] audit: type=1326 audit(1746582858.099:18255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.6.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9edce969 code=0x7ffc0000 [ 281.868349][ T29] audit: type=1326 audit(1746582858.099:18256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.6.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fda9edce969 code=0x7ffc0000 [ 281.893294][ T29] audit: type=1326 audit(1746582858.099:18257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.6.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9edce969 code=0x7ffc0000 [ 281.917044][ T29] audit: type=1326 audit(1746582858.099:18258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.6.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9edce969 code=0x7ffc0000 [ 281.960446][ T29] audit: type=1326 audit(1746582858.129:18259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16515 comm="syz.2.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cff80e969 code=0x7ffc0000 [ 281.984209][ T29] audit: type=1326 audit(1746582858.129:18260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16515 comm="syz.2.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cff80e969 code=0x7ffc0000 [ 282.007834][ T29] audit: type=1326 audit(1746582858.129:18261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16515 comm="syz.2.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cff80e969 code=0x7ffc0000 [ 282.037556][T16517] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 282.062463][T16517] bond2: entered promiscuous mode [ 282.067695][T16517] bond2: entered allmulticast mode [ 282.073470][T16517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 282.103676][T16520] FAULT_INJECTION: forcing a failure. [ 282.103676][T16520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.116845][T16520] CPU: 0 UID: 0 PID: 16520 Comm: syz.1.3833 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 282.116931][T16520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 282.116965][T16520] Call Trace: [ 282.116972][T16520] [ 282.116980][T16520] __dump_stack+0x1d/0x30 [ 282.117001][T16520] dump_stack_lvl+0xe8/0x140 [ 282.117023][T16520] dump_stack+0x15/0x1b [ 282.117104][T16520] should_fail_ex+0x265/0x280 [ 282.117168][T16520] should_fail+0xb/0x20 [ 282.117241][T16520] should_fail_usercopy+0x1a/0x20 [ 282.117260][T16520] _copy_to_user+0x20/0xa0 [ 282.117282][T16520] simple_read_from_buffer+0xb5/0x130 [ 282.117307][T16520] proc_fail_nth_read+0x100/0x140 [ 282.117344][T16520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.117368][T16520] vfs_read+0x19d/0x6f0 [ 282.117392][T16520] ? __rcu_read_unlock+0x4f/0x70 [ 282.117485][T16520] ? __fget_files+0x184/0x1c0 [ 282.117515][T16520] ksys_read+0xda/0x1a0 [ 282.117541][T16520] __x64_sys_read+0x40/0x50 [ 282.117566][T16520] x64_sys_call+0x2d77/0x2fb0 [ 282.117609][T16520] do_syscall_64+0xd0/0x1a0 [ 282.117631][T16520] ? clear_bhb_loop+0x25/0x80 [ 282.117673][T16520] ? clear_bhb_loop+0x25/0x80 [ 282.117729][T16520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.117750][T16520] RIP: 0033:0x7f670555d37c [ 282.117766][T16520] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 282.117832][T16520] RSP: 002b:00007f6703bc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 282.117851][T16520] RAX: ffffffffffffffda RBX: 00007f6705785fa0 RCX: 00007f670555d37c [ 282.117863][T16520] RDX: 000000000000000f RSI: 00007f6703bc70a0 RDI: 0000000000000004 [ 282.117879][T16520] RBP: 00007f6703bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 282.117891][T16520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.117934][T16520] R13: 0000000000000000 R14: 00007f6705785fa0 R15: 00007ffd3a0652d8 [ 282.117960][T16520] [ 282.328198][T16525] geneve2: entered promiscuous mode [ 282.333479][T16525] geneve2: entered allmulticast mode [ 282.387200][T16531] loop6: detected capacity change from 0 to 512 [ 282.394742][T16531] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 282.403973][T16531] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 282.414067][T16531] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 282.427130][T16531] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 282.435406][T16531] System zones: 0-2, 18-18, 34-34 [ 282.441323][T16531] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 282.457467][T16531] EXT4-fs (loop6): 1 truncate cleaned up [ 282.463810][T16531] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.514822][T16531] sd 0:0:1:0: device reset [ 282.582320][ T9216] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.609505][T16535] loop6: detected capacity change from 0 to 1024 [ 282.803805][T16545] GUP no longer grows the stack in syz.6.3842 (16545): 200000004000-20000000a000 (200000002000) [ 282.814445][T16545] CPU: 1 UID: 0 PID: 16545 Comm: syz.6.3842 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 282.814512][T16545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 282.814530][T16545] Call Trace: [ 282.814539][T16545] [ 282.814550][T16545] __dump_stack+0x1d/0x30 [ 282.814578][T16545] dump_stack_lvl+0xe8/0x140 [ 282.814670][T16545] dump_stack+0x15/0x1b [ 282.814693][T16545] __get_user_pages+0x1758/0x1d20 [ 282.814784][T16545] ? __rcu_read_unlock+0x4f/0x70 [ 282.814815][T16545] get_user_pages_remote+0x1dc/0x7a0 [ 282.814864][T16545] __access_remote_vm+0x156/0x570 [ 282.814908][T16545] access_remote_vm+0x32/0x40 [ 282.815001][T16545] proc_pid_cmdline_read+0x30f/0x6a0 [ 282.815041][T16545] vfs_readv+0x3e6/0x670 [ 282.815082][T16545] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 282.815119][T16545] __x64_sys_preadv+0xfd/0x1c0 [ 282.815213][T16545] x64_sys_call+0x1503/0x2fb0 [ 282.815321][T16545] do_syscall_64+0xd0/0x1a0 [ 282.815349][T16545] ? clear_bhb_loop+0x25/0x80 [ 282.815379][T16545] ? clear_bhb_loop+0x25/0x80 [ 282.815409][T16545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.815468][T16545] RIP: 0033:0x7fda9edce969 [ 282.815487][T16545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.815512][T16545] RSP: 002b:00007fda9d437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 282.815534][T16545] RAX: ffffffffffffffda RBX: 00007fda9eff5fa0 RCX: 00007fda9edce969 [ 282.815547][T16545] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 000000000000000d [ 282.815564][T16545] RBP: 00007fda9ee50ab1 R08: 00000000fffffff9 R09: 0000000000000000 [ 282.815580][T16545] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000 [ 282.815596][T16545] R13: 0000000000000000 R14: 00007fda9eff5fa0 R15: 00007fff768566a8 [ 282.815667][T16545] [ 283.009369][T16548] loop5: detected capacity change from 0 to 128 [ 283.021531][T16546] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 283.029533][T16546] FAT-fs (loop5): Filesystem has been set read-only [ 283.072002][T16546] syz.5.3843: attempt to access beyond end of device [ 283.072002][T16546] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 283.083958][T16553] xt_limit: Overflow, try lower: 65536/2147483648 [ 283.089586][T16546] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 283.100167][T16546] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 283.112204][T16546] syz.5.3843: attempt to access beyond end of device [ 283.112204][T16546] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 283.130654][T16546] syz.5.3843: attempt to access beyond end of device [ 283.130654][T16546] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 283.144260][T16547] syz.5.3843: attempt to access beyond end of device [ 283.144260][T16547] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 283.160500][T16547] syz.5.3843: attempt to access beyond end of device [ 283.160500][T16547] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 283.180455][T16546] syz.5.3843: attempt to access beyond end of device [ 283.180455][T16546] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 283.193868][T16546] syz.5.3843: attempt to access beyond end of device [ 283.193868][T16546] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 283.212509][T16546] syz.5.3843: attempt to access beyond end of device [ 283.212509][T16546] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 283.246144][T16546] syz.5.3843: attempt to access beyond end of device [ 283.246144][T16546] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 283.280279][T16558] loop6: detected capacity change from 0 to 164 [ 283.371966][T16561] loop1: detected capacity change from 0 to 512 [ 283.379636][T16561] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 283.388862][T16561] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 283.436113][T16561] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 283.590040][T16561] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 283.616132][T16561] System zones: 0-2, 18-18, 34-34 [ 283.626508][T16561] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 283.671897][T16561] EXT4-fs (loop1): 1 truncate cleaned up [ 283.686613][T16561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.702187][T16564] bond2: entered promiscuous mode [ 283.707273][T16564] bond2: entered allmulticast mode [ 283.906110][T16564] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.952264][T16561] sd 0:0:1:0: device reset [ 284.045917][T14511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.061645][T16578] loop5: detected capacity change from 0 to 1024 [ 284.139754][T16584] loop6: detected capacity change from 0 to 1024 [ 284.193171][T16593] serio: Serial port ptm0 [ 284.201323][T16584] EXT4-fs: Ignoring removed oldalloc option [ 284.204143][T16588] bridge0: entered promiscuous mode [ 284.216234][T16584] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 284.223001][T16588] macvlan2: entered promiscuous mode [ 284.232111][T16588] bridge0: port 3(macvlan2) entered blocking state [ 284.238787][T16588] bridge0: port 3(macvlan2) entered disabled state [ 284.251264][T16594] loop2: detected capacity change from 0 to 512 [ 284.255780][T16588] macvlan2: entered allmulticast mode [ 284.258833][T16584] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.263015][T16588] bridge0: entered allmulticast mode [ 284.281430][T16588] macvlan2: left allmulticast mode [ 284.286681][T16588] bridge0: left allmulticast mode [ 284.286819][T16594] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4624: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 284.305262][T16594] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 284.325784][T16588] bridge0: left promiscuous mode [ 284.414430][ T9216] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.427408][T16600] loop1: detected capacity change from 0 to 1024 [ 284.440542][T16604] __nla_validate_parse: 3 callbacks suppressed [ 284.440564][T16604] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3865'. [ 284.479876][T16600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.542800][T16610] loop5: detected capacity change from 0 to 512 [ 284.567942][T14511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.593250][T16610] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 284.602476][T16610] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 284.622074][T16617] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3871'. [ 284.632060][T16610] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 284.651399][T16610] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 284.659638][T16610] System zones: 0-2, 18-18, 34-34 [ 284.665264][T16610] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 284.685412][T16610] EXT4-fs (loop5): 1 truncate cleaned up [ 284.693796][T16610] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.715714][T16619] loop1: detected capacity change from 0 to 2048 [ 284.770444][T16610] sd 0:0:1:0: device reset [ 284.801510][T16619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.814748][T13888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.824431][T16619] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.858414][T14511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.165149][T16638] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3877'. [ 362.177516][T16640] bridge0: entered promiscuous mode [ 362.182835][T16640] macvlan2: entered promiscuous mode [ 362.189871][T16640] bridge0: port 3(macvlan2) entered blocking state [ 362.196515][T16640] bridge0: port 3(macvlan2) entered disabled state [ 362.203991][T16640] macvlan2: entered allmulticast mode [ 362.209434][T16640] bridge0: entered allmulticast mode [ 362.215736][T16642] loop6: detected capacity change from 0 to 128 [ 362.223203][T16640] macvlan2: left allmulticast mode [ 362.228441][T16640] bridge0: left allmulticast mode [ 362.234299][T16640] bridge0: left promiscuous mode [ 362.256872][T16642] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 362.271769][T16642] ext4 filesystem being mounted at /439/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.305696][T16649] loop9: detected capacity change from 0 to 1024 [ 362.329717][ T9216] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 362.350216][T16649] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.385757][T16662] loop5: detected capacity change from 0 to 1024 [ 362.402565][T13409] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.412424][T16662] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 362.418615][T16670] loop1: detected capacity change from 0 to 512 [ 362.423449][T16662] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 362.444294][T16668] loop2: detected capacity change from 0 to 512 [ 362.450704][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 362.450718][ T29] audit: type=1326 audit(1746582938.719:18531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="syz.2.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cff80e969 code=0x7ffc0000 [ 362.459175][T16670] EXT4-fs (loop1): orphan cleanup on readonly fs [ 362.480570][ T29] audit: type=1326 audit(1746582938.719:18532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="syz.2.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4cff80e969 code=0x7ffc0000 [ 362.490987][T16670] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.3889: bad orphan inode 13 [ 362.510566][ T29] audit: type=1326 audit(1746582938.719:18533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="syz.2.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4cff80e9a3 code=0x7ffc0000 [ 362.524164][T16670] ext4_test_bit(bit=12, block=18) = 1 [ 362.544006][ T29] audit: type=1326 audit(1746582938.719:18534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="syz.2.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4cff80d41f code=0x7ffc0000 [ 362.544043][ T29] audit: type=1326 audit(1746582938.719:18535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="syz.2.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4cff80e9f7 code=0x7ffc0000 [ 362.549417][T16670] is_bad_inode(inode)=0 [ 362.572879][ T29] audit: type=1326 audit(1746582938.719:18536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="syz.2.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4cff80d2d0 code=0x7ffc0000 [ 362.572916][ T29] audit: type=1326 audit(1746582938.719:18537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="syz.2.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4cff80e56b code=0x7ffc0000 [ 362.596390][T16670] NEXT_ORPHAN(inode)=2130706432 [ 362.602189][ T29] audit: type=1326 audit(1746582938.879:18538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="syz.2.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4cff80d5ca code=0x7ffc0000 [ 362.624045][T16670] max_ino=32 [ 362.624057][T16670] i_nlink=1 [ 362.647515][ T29] audit: type=1326 audit(1746582938.879:18539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="syz.2.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4cff80d5ca code=0x7ffc0000 [ 362.657997][T16662] JBD2: no valid journal superblock found [ 362.675758][ T29] audit: type=1326 audit(1746582938.879:18540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16667 comm="syz.2.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4cff80d1d7 code=0x7ffc0000 [ 362.710979][T16673] loop6: detected capacity change from 0 to 512 [ 362.711881][T16662] EXT4-fs (loop5): Could not load journal inode [ 362.738374][T16668] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 362.743614][T16674] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3891'. [ 362.748046][T16668] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 362.784078][T16670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 362.786650][T16662] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 362.800662][T16678] loop9: detected capacity change from 0 to 512 [ 362.806883][T16668] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 362.824451][T16678] EXT4-fs (loop9): orphan cleanup on readonly fs [ 362.834308][T16678] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.3890: bad orphan inode 13 [ 362.844916][T16678] ext4_test_bit(bit=12, block=18) = 1 [ 362.850380][T16678] is_bad_inode(inode)=0 [ 362.854587][T16678] NEXT_ORPHAN(inode)=2130706432 [ 362.859519][T16678] max_ino=32 [ 362.862734][T16678] i_nlink=1 [ 362.863482][T16668] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 362.870870][T16678] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 362.905459][T16684] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3893'. [ 362.909114][T16668] System zones: 0-2, 18-18, 34-34 [ 362.914616][T16684] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3893'. [ 362.921189][T16670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.937092][T16678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.945570][T16678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.955542][T16670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.988841][T16687] macvlan2: entered promiscuous mode [ 362.994212][T16687] bridge0: entered promiscuous mode [ 363.004697][T16670] EXT4-fs error (device loop1): ext4_lookup:1793: inode #2: comm syz.1.3889: deleted inode referenced: 12 [ 363.016972][T16668] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 363.018398][T16687] bridge0: port 8(macvlan2) entered blocking state [ 363.038022][T16687] bridge0: port 8(macvlan2) entered disabled state [ 363.045446][T16670] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 363.055586][T16687] macvlan2: entered allmulticast mode [ 363.061037][T16687] bridge0: entered allmulticast mode [ 363.067561][T16687] macvlan2: left allmulticast mode [ 363.072714][T16687] bridge0: left allmulticast mode [ 363.078100][T16689] EXT4-fs error (device loop9): ext4_lookup:1793: inode #2: comm syz.9.3890: deleted inode referenced: 12 [ 363.089720][T16687] bridge0: left promiscuous mode [ 363.104827][T16668] EXT4-fs (loop2): 1 truncate cleaned up [ 363.113789][T16670] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3889: bg 0: block 248: padding at end of block bitmap is not set [ 363.134336][T16668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.156694][T16670] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.3889: Failed to acquire dquot type 1 [ 363.197565][T16670] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 363.228997][T16689] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 363.330371][T16668] sd 0:0:1:0: device reset [ 363.368462][T16689] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3890: bg 0: block 248: padding at end of block bitmap is not set [ 363.405111][T13048] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.433943][T16689] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.3890: Failed to acquire dquot type 1 [ 363.477637][T16711] siw: device registration error -23 [ 363.483954][T16689] EXT4-fs warning (device loop9): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 363.508787][T16713] loop2: detected capacity change from 0 to 164 [ 363.527092][T16713] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 363.567646][T16716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3904'. [ 363.576780][T16716] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3904'. [ 363.653245][T16718] loop2: detected capacity change from 0 to 512 [ 363.670827][T16718] EXT4-fs (loop2): orphan cleanup on readonly fs [ 363.686483][T16718] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3905: bad orphan inode 13 [ 363.724714][T16718] ext4_test_bit(bit=12, block=18) = 1 [ 363.730252][T16718] is_bad_inode(inode)=0 [ 363.734434][T16718] NEXT_ORPHAN(inode)=2130706432 [ 363.739350][T16718] max_ino=32 [ 363.742592][T16718] i_nlink=1 [ 363.767516][T16718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 363.829279][T16721] loop5: detected capacity change from 0 to 512 [ 363.839558][T14511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.841994][T16718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.857634][T16718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.878470][T16718] EXT4-fs error (device loop2): ext4_lookup:1793: inode #2: comm syz.2.3905: deleted inode referenced: 12 [ 363.893742][T16724] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 363.905237][T16718] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 363.916307][T16721] EXT4-fs (loop5): orphan cleanup on readonly fs [ 363.919221][T16718] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3905: bg 0: block 248: padding at end of block bitmap is not set [ 363.928706][T16724] bond1: entered promiscuous mode [ 363.942010][T16724] bond1: entered allmulticast mode [ 363.947564][T16724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.954221][T16721] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3906: bad orphan inode 13 [ 363.966507][T16721] ext4_test_bit(bit=12, block=18) = 1 [ 363.971946][T16721] is_bad_inode(inode)=0 [ 363.976144][T16721] NEXT_ORPHAN(inode)=2130706432 [ 363.981016][T16721] max_ino=32 [ 363.984229][T16721] i_nlink=1 [ 363.988014][T16721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 364.000789][T16718] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.3905: Failed to acquire dquot type 1 [ 364.013394][T16718] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 364.052855][T16721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.063857][T16721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.080974][T16721] EXT4-fs error (device loop5): ext4_lookup:1793: inode #2: comm syz.5.3906: deleted inode referenced: 12 [ 364.094109][T16721] EXT4-fs error (device loop5): ext4_lookup:1793: inode #2: comm syz.5.3906: deleted inode referenced: 12 [ 364.109334][T16721] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 364.137661][T16721] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3906: bg 0: block 248: padding at end of block bitmap is not set [ 364.158953][T16721] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3906: Failed to acquire dquot type 1 [ 364.195505][T16721] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 364.239389][T16739] syzkaller0: entered promiscuous mode [ 364.244932][T16739] syzkaller0: entered allmulticast mode [ 364.475786][T16745] bridge0: entered promiscuous mode [ 364.481239][T16745] macvlan2: entered promiscuous mode [ 364.488600][T16745] bridge0: port 3(macvlan2) entered blocking state [ 364.495230][T16745] bridge0: port 3(macvlan2) entered disabled state [ 364.502000][T16745] macvlan2: entered allmulticast mode [ 364.507487][T16745] bridge0: entered allmulticast mode [ 364.513242][T16745] macvlan2: left allmulticast mode [ 364.518481][T16745] bridge0: left allmulticast mode [ 364.524203][T16745] bridge0: left promiscuous mode [ 364.568880][T13048] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.600778][T16749] loop2: detected capacity change from 0 to 164 [ 364.608503][T16749] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 364.684265][T16753] loop1: detected capacity change from 0 to 1024 [ 364.695670][T16753] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 364.744778][T16755] bridge0: entered promiscuous mode [ 364.758805][T16755] macvlan2: entered promiscuous mode [ 364.770234][T16757] loop1: detected capacity change from 0 to 512 [ 364.779124][T16755] bridge0: port 3(macvlan2) entered blocking state [ 364.785871][T16755] bridge0: port 3(macvlan2) entered disabled state [ 364.802505][T16757] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 364.822219][T16755] macvlan2: entered allmulticast mode [ 364.827781][T16755] bridge0: entered allmulticast mode [ 364.836345][T13888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.849525][T16757] EXT4-fs (loop1): 1 truncate cleaned up [ 364.857062][T16755] macvlan2: left allmulticast mode [ 364.862244][T16755] bridge0: left allmulticast mode [ 364.870473][T16757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.883822][T16755] bridge0: left promiscuous mode [ 364.919062][T13409] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.938651][T14511] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.044066][T16764] program syz.2.3924 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 365.054895][T16764] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 365.067348][T16764] Cannot find set identified by id 0 to match [ 365.074507][T16764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3924'. [ 365.150987][T16768] loop2: detected capacity change from 0 to 2048 [ 365.170128][T16768] EXT4-fs: Ignoring removed bh option [ 365.182412][T16770] loop6: detected capacity change from 0 to 512 [ 365.204198][T16770] EXT4-fs: Ignoring removed nobh option [ 365.219849][T16770] ext4: Unknown parameter 'fsname' [ 365.228005][T16772] bridge0: entered promiscuous mode [ 365.233279][T16772] macvlan2: entered promiscuous mode [ 365.242914][T16768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.270301][T16772] bridge0: port 3(macvlan2) entered blocking state [ 365.277043][T16772] bridge0: port 3(macvlan2) entered disabled state [ 365.284322][T16768] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 365.305793][T16772] macvlan2: entered allmulticast mode [ 365.311310][T16772] bridge0: entered allmulticast mode [ 365.325332][T16772] macvlan2: left allmulticast mode [ 365.330546][T16772] bridge0: left allmulticast mode [ 365.338914][T16772] bridge0: left promiscuous mode [ 365.345211][T13048] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.361109][T16784] netlink: 'syz.9.3929': attribute type 1 has an invalid length. [ 365.369006][T16784] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3929'. [ 365.386841][T16784] loop9: detected capacity change from 0 to 512 [ 365.393856][T16784] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 365.407411][T16791] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3933'. [ 365.463512][T16796] SELinux: syz.2.3931 (16796) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 365.725675][T16845] FAULT_INJECTION: forcing a failure. [ 365.725675][T16845] name failslab, interval 1, probability 0, space 0, times 0 [ 365.738462][T16845] CPU: 1 UID: 0 PID: 16845 Comm: syz.2.3957 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 365.738498][T16845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 365.738515][T16845] Call Trace: [ 365.738524][T16845] [ 365.738533][T16845] __dump_stack+0x1d/0x30 [ 365.738624][T16845] dump_stack_lvl+0xe8/0x140 [ 365.738650][T16845] dump_stack+0x15/0x1b [ 365.738673][T16845] should_fail_ex+0x265/0x280 [ 365.738716][T16845] should_failslab+0x8c/0xb0 [ 365.738831][T16845] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 365.738923][T16845] ? sidtab_sid2str_get+0xa0/0x130 [ 365.738950][T16845] ? skb_put+0xa9/0xf0 [ 365.739097][T16845] kmemdup_noprof+0x2b/0x70 [ 365.739121][T16845] sidtab_sid2str_get+0xa0/0x130 [ 365.739159][T16845] security_sid_to_context_core+0x1eb/0x2e0 [ 365.739196][T16845] security_sid_to_context+0x27/0x40 [ 365.739267][T16845] avc_audit_post_callback+0x9d/0x520 [ 365.739318][T16845] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 365.739393][T16845] common_lsm_audit+0x1b8/0x230 [ 365.739424][T16845] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 365.739532][T16845] slow_avc_audit+0x104/0x140 [ 365.739659][T16845] avc_has_perm+0x128/0x150 [ 365.739701][T16845] selinux_bpf+0xa3/0xc0 [ 365.739769][T16845] security_bpf+0x52/0x90 [ 365.739802][T16845] __sys_bpf+0x1bf/0x790 [ 365.739846][T16845] __x64_sys_bpf+0x41/0x50 [ 365.739937][T16845] x64_sys_call+0x2478/0x2fb0 [ 365.739964][T16845] do_syscall_64+0xd0/0x1a0 [ 365.739991][T16845] ? clear_bhb_loop+0x25/0x80 [ 365.740011][T16845] ? clear_bhb_loop+0x25/0x80 [ 365.740054][T16845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.740082][T16845] RIP: 0033:0x7f4cff80e969 [ 365.740107][T16845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.740148][T16845] RSP: 002b:00007f4cfde77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 365.740172][T16845] RAX: ffffffffffffffda RBX: 00007f4cffa35fa0 RCX: 00007f4cff80e969 [ 365.740189][T16845] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 365.740224][T16845] RBP: 00007f4cfde77090 R08: 0000000000000000 R09: 0000000000000000 [ 365.740236][T16845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.740330][T16845] R13: 0000000000000001 R14: 00007f4cffa35fa0 R15: 00007ffed2d0b758 [ 365.740432][T16845] [ 366.287642][T16883] binfmt_misc: register: failed to install interpreter file ./file2 [ 366.937634][T16930] binfmt_misc: register: failed to install interpreter file ./file2 [ 367.351922][T16951] binfmt_misc: register: failed to install interpreter file ./file2 [ 367.463611][ T29] kauditd_printk_skb: 645 callbacks suppressed [ 367.463628][ T29] audit: type=1400 audit(1746582943.739:19178): avc: denied { read write } for pid=13888 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 367.494609][ T29] audit: type=1400 audit(1746582943.749:19179): avc: denied { map_create } for pid=16957 comm="syz.5.4009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 367.513948][ T29] audit: type=1400 audit(1746582943.749:19180): avc: denied { prog_load } for pid=16957 comm="syz.5.4009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 367.533312][ T29] audit: type=1400 audit(1746582943.749:19181): avc: denied { create } for pid=16957 comm="syz.5.4009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 367.570123][ T29] audit: type=1400 audit(1746582943.849:19182): avc: denied { mounton } for pid=16957 comm="syz.5.4009" path="/154/file0" dev="tmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 367.597368][ T29] audit: type=1400 audit(1746582943.879:19183): avc: denied { map_create } for pid=16957 comm="syz.5.4009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 367.620573][ T29] audit: type=1400 audit(1746582943.899:19184): avc: denied { prog_load } for pid=16957 comm="syz.5.4009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 367.650342][ T29] audit: type=1400 audit(1746582943.929:19185): avc: denied { read } for pid=16957 comm="syz.5.4009" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=0 [ 367.724992][ T29] audit: type=1400 audit(1746582943.999:19186): avc: denied { read write } for pid=14511 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 367.757358][T16961] Cannot find set identified by id 0 to match [ 367.762652][ T29] audit: type=1400 audit(1746582944.029:19187): avc: denied { create } for pid=16960 comm="syz.1.4010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 368.228118][T16997] SELinux: syz.2.4027 (16997) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 368.282590][T17001] SELinux: syz.9.4029 (17001) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 368.603521][T17031] Cannot find set identified by id 0 to match [ 368.688015][T17042] FAULT_INJECTION: forcing a failure. [ 368.688015][T17042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.701244][T17042] CPU: 0 UID: 0 PID: 17042 Comm: syz.1.4048 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 368.701363][T17042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 368.701380][T17042] Call Trace: [ 368.701389][T17042] [ 368.701399][T17042] __dump_stack+0x1d/0x30 [ 368.701426][T17042] dump_stack_lvl+0xe8/0x140 [ 368.701451][T17042] dump_stack+0x15/0x1b [ 368.701473][T17042] should_fail_ex+0x265/0x280 [ 368.701590][T17042] should_fail+0xb/0x20 [ 368.701653][T17042] should_fail_usercopy+0x1a/0x20 [ 368.701678][T17042] _copy_from_iter+0xcf/0xdd0 [ 368.701702][T17042] ? __build_skb_around+0x1a0/0x200 [ 368.701738][T17042] ? __alloc_skb+0x223/0x320 [ 368.701786][T17042] netlink_sendmsg+0x471/0x6b0 [ 368.701832][T17042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.701874][T17042] __sock_sendmsg+0x142/0x180 [ 368.701920][T17042] sock_write_iter+0x165/0x1b0 [ 368.701955][T17042] ? __pfx_sock_write_iter+0x10/0x10 [ 368.701982][T17042] vfs_write+0x49d/0x8d0 [ 368.702010][T17042] ksys_write+0xda/0x1a0 [ 368.702114][T17042] __x64_sys_write+0x40/0x50 [ 368.702147][T17042] x64_sys_call+0x2cdd/0x2fb0 [ 368.702176][T17042] do_syscall_64+0xd0/0x1a0 [ 368.702210][T17042] ? clear_bhb_loop+0x25/0x80 [ 368.702243][T17042] ? clear_bhb_loop+0x25/0x80 [ 368.702268][T17042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.702296][T17042] RIP: 0033:0x7f670555e969 [ 368.702344][T17042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.702368][T17042] RSP: 002b:00007f6703bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 368.702458][T17042] RAX: ffffffffffffffda RBX: 00007f6705785fa0 RCX: 00007f670555e969 [ 368.702475][T17042] RDX: 0000000000000026 RSI: 0000200000000140 RDI: 0000000000000003 [ 368.702491][T17042] RBP: 00007f6703bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 368.702507][T17042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.702523][T17042] R13: 0000000000000000 R14: 00007f6705785fa0 R15: 00007ffd3a0652d8 [ 368.702569][T17042] [ 368.967794][T17045] FAULT_INJECTION: forcing a failure. [ 368.967794][T17045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.980974][T17045] CPU: 1 UID: 0 PID: 17045 Comm: syz.9.4049 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 368.981002][T17045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 368.981013][T17045] Call Trace: [ 368.981020][T17045] [ 368.981098][T17045] __dump_stack+0x1d/0x30 [ 368.981124][T17045] dump_stack_lvl+0xe8/0x140 [ 368.981148][T17045] dump_stack+0x15/0x1b [ 368.981245][T17045] should_fail_ex+0x265/0x280 [ 368.981296][T17045] should_fail+0xb/0x20 [ 368.981387][T17045] should_fail_usercopy+0x1a/0x20 [ 368.981409][T17045] _copy_from_user+0x1c/0xb0 [ 368.981432][T17045] kstrtouint_from_user+0x69/0xf0 [ 368.981542][T17045] ? avc_policy_seqno+0x15/0x30 [ 368.981585][T17045] proc_fail_nth_write+0x50/0x160 [ 368.981617][T17045] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 368.981643][T17045] vfs_write+0x266/0x8d0 [ 368.981723][T17045] ? vfs_read+0x47f/0x6f0 [ 368.981751][T17045] ? __rcu_read_unlock+0x4f/0x70 [ 368.981833][T17045] ? __fget_files+0x184/0x1c0 [ 368.981877][T17045] ksys_write+0xda/0x1a0 [ 368.981943][T17045] __x64_sys_write+0x40/0x50 [ 368.981967][T17045] x64_sys_call+0x2cdd/0x2fb0 [ 368.981992][T17045] do_syscall_64+0xd0/0x1a0 [ 368.982019][T17045] ? clear_bhb_loop+0x25/0x80 [ 368.982099][T17045] ? clear_bhb_loop+0x25/0x80 [ 368.982125][T17045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.982184][T17045] RIP: 0033:0x7fc877e4d41f [ 368.982207][T17045] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 368.982224][T17045] RSP: 002b:00007fc8764b7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 368.982249][T17045] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc877e4d41f [ 368.982262][T17045] RDX: 0000000000000001 RSI: 00007fc8764b70a0 RDI: 0000000000000005 [ 368.982277][T17045] RBP: 00007fc8764b7090 R08: 0000000000000000 R09: 0000000000000000 [ 368.982321][T17045] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 368.982336][T17045] R13: 0000000000000000 R14: 00007fc878075fa0 R15: 00007ffd063145c8 [ 368.982359][T17045] [ 369.445714][T17088] FAULT_INJECTION: forcing a failure. [ 369.445714][T17088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.458962][T17088] CPU: 1 UID: 0 PID: 17088 Comm: syz.6.4068 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 369.459007][T17088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 369.459024][T17088] Call Trace: [ 369.459031][T17088] [ 369.459040][T17088] __dump_stack+0x1d/0x30 [ 369.459079][T17088] dump_stack_lvl+0xe8/0x140 [ 369.459096][T17088] dump_stack+0x15/0x1b [ 369.459112][T17088] should_fail_ex+0x265/0x280 [ 369.459149][T17088] should_fail+0xb/0x20 [ 369.459220][T17088] should_fail_usercopy+0x1a/0x20 [ 369.459238][T17088] _copy_from_user+0x1c/0xb0 [ 369.459335][T17088] kstrtouint_from_user+0x69/0xf0 [ 369.459373][T17088] ? avc_policy_seqno+0x15/0x30 [ 369.459415][T17088] proc_fail_nth_write+0x50/0x160 [ 369.459450][T17088] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 369.459474][T17088] vfs_write+0x266/0x8d0 [ 369.459502][T17088] ? vfs_read+0x47f/0x6f0 [ 369.459530][T17088] ? __rcu_read_unlock+0x4f/0x70 [ 369.459551][T17088] ? __fget_files+0x184/0x1c0 [ 369.459683][T17088] ksys_write+0xda/0x1a0 [ 369.459715][T17088] __x64_sys_write+0x40/0x50 [ 369.459746][T17088] x64_sys_call+0x2cdd/0x2fb0 [ 369.459766][T17088] do_syscall_64+0xd0/0x1a0 [ 369.459843][T17088] ? clear_bhb_loop+0x25/0x80 [ 369.459867][T17088] ? clear_bhb_loop+0x25/0x80 [ 369.459892][T17088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.459920][T17088] RIP: 0033:0x7fda9edcd41f [ 369.459996][T17088] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 369.460017][T17088] RSP: 002b:00007fda9d437030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 369.460035][T17088] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda9edcd41f [ 369.460049][T17088] RDX: 0000000000000001 RSI: 00007fda9d4370a0 RDI: 0000000000000003 [ 369.460064][T17088] RBP: 00007fda9d437090 R08: 0000000000000000 R09: 0000000000000000 [ 369.460078][T17088] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 369.460109][T17088] R13: 0000000000000000 R14: 00007fda9eff5fa0 R15: 00007fff768566a8 [ 369.460131][T17088] [ 369.722639][T17095] SELinux: syz.1.4072 (17095) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 369.738694][T17097] SELinux: syz.6.4071 (17097) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 370.930607][T17201] binfmt_misc: register: failed to install interpreter file ./file2 [ 371.288371][T17207] Cannot find set identified by id 0 to match [ 371.379520][T17217] SELinux: syz.2.4124 (17217) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 371.556791][T17230] netlink: 'syz.1.4128': attribute type 4 has an invalid length. [ 371.564597][T17230] netlink: 'syz.1.4128': attribute type 3 has an invalid length. [ 371.572386][T17230] __nla_validate_parse: 1 callbacks suppressed [ 371.572401][T17230] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4128'. [ 372.075688][T17300] FAULT_INJECTION: forcing a failure. [ 372.075688][T17300] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 372.089025][T17300] CPU: 1 UID: 0 PID: 17300 Comm: syz.9.4162 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 372.089092][T17300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 372.089110][T17300] Call Trace: [ 372.089118][T17300] [ 372.089128][T17300] __dump_stack+0x1d/0x30 [ 372.089156][T17300] dump_stack_lvl+0xe8/0x140 [ 372.089181][T17300] dump_stack+0x15/0x1b [ 372.089198][T17300] should_fail_ex+0x265/0x280 [ 372.089317][T17300] should_fail_alloc_page+0xf2/0x100 [ 372.089355][T17300] __alloc_frozen_pages_noprof+0xff/0x360 [ 372.089398][T17300] alloc_pages_mpol+0xb3/0x250 [ 372.089419][T17300] vma_alloc_folio_noprof+0x1aa/0x300 [ 372.089524][T17300] handle_mm_fault+0x1056/0x2ae0 [ 372.089561][T17300] ? __rcu_read_lock+0x37/0x50 [ 372.089596][T17300] __get_user_pages+0xde2/0x1d20 [ 372.089646][T17300] __gup_longterm_locked+0x9c9/0x1010 [ 372.089738][T17300] ? __import_iovec+0x428/0x540 [ 372.089835][T17300] ? should_fail_ex+0xdb/0x280 [ 372.089876][T17300] pin_user_pages_remote+0x7e/0xb0 [ 372.089974][T17300] process_vm_rw+0x484/0x950 [ 372.090013][T17300] __x64_sys_process_vm_writev+0x78/0x90 [ 372.090141][T17300] x64_sys_call+0xe80/0x2fb0 [ 372.090162][T17300] do_syscall_64+0xd0/0x1a0 [ 372.090182][T17300] ? clear_bhb_loop+0x25/0x80 [ 372.090207][T17300] ? clear_bhb_loop+0x25/0x80 [ 372.090234][T17300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.090278][T17300] RIP: 0033:0x7fc877e4e969 [ 372.090294][T17300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.090397][T17300] RSP: 002b:00007fc8764b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 372.090422][T17300] RAX: ffffffffffffffda RBX: 00007fc878075fa0 RCX: 00007fc877e4e969 [ 372.090468][T17300] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 00000000000001eb [ 372.090480][T17300] RBP: 00007fc8764b7090 R08: 0000000000000001 R09: 0000000000000000 [ 372.090491][T17300] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000002 [ 372.090503][T17300] R13: 0000000000000000 R14: 00007fc878075fa0 R15: 00007ffd063145c8 [ 372.090548][T17300] [ 372.400852][T17313] FAULT_INJECTION: forcing a failure. [ 372.400852][T17313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.414126][T17313] CPU: 1 UID: 0 PID: 17313 Comm: syz.9.4168 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 372.414160][T17313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 372.414176][T17313] Call Trace: [ 372.414252][T17313] [ 372.414260][T17313] __dump_stack+0x1d/0x30 [ 372.414288][T17313] dump_stack_lvl+0xe8/0x140 [ 372.414351][T17313] dump_stack+0x15/0x1b [ 372.414372][T17313] should_fail_ex+0x265/0x280 [ 372.414446][T17313] should_fail+0xb/0x20 [ 372.414547][T17313] should_fail_usercopy+0x1a/0x20 [ 372.414570][T17313] _copy_from_iter+0xcf/0xdd0 [ 372.414592][T17313] ? kernel_fpu_begin_mask+0x1ff/0x270 [ 372.414624][T17313] ? kernel_fpu_end+0x85/0xd0 [ 372.414686][T17313] ? blake2s_update+0x134/0x160 [ 372.414711][T17313] write_pool_user+0x7c/0x1e0 [ 372.414796][T17313] ? import_ubuf+0xe8/0x120 [ 372.414823][T17313] ? __pfx_random_ioctl+0x10/0x10 [ 372.414860][T17313] random_ioctl+0x2cc/0x400 [ 372.414899][T17313] __se_sys_ioctl+0xcb/0x140 [ 372.414951][T17313] __x64_sys_ioctl+0x43/0x50 [ 372.414976][T17313] x64_sys_call+0x19a8/0x2fb0 [ 372.415002][T17313] do_syscall_64+0xd0/0x1a0 [ 372.415030][T17313] ? clear_bhb_loop+0x25/0x80 [ 372.415129][T17313] ? clear_bhb_loop+0x25/0x80 [ 372.415179][T17313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.415209][T17313] RIP: 0033:0x7fc877e4e969 [ 372.415226][T17313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.415249][T17313] RSP: 002b:00007fc8764b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.415273][T17313] RAX: ffffffffffffffda RBX: 00007fc878075fa0 RCX: 00007fc877e4e969 [ 372.415289][T17313] RDX: 000020000000fec0 RSI: 0000000040085203 RDI: 0000000000000003 [ 372.415356][T17313] RBP: 00007fc8764b7090 R08: 0000000000000000 R09: 0000000000000000 [ 372.415371][T17313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.415386][T17313] R13: 0000000000000000 R14: 00007fc878075fa0 R15: 00007ffd063145c8 [ 372.415489][T17313] [ 372.486709][ T29] kauditd_printk_skb: 1141 callbacks suppressed [ 372.486744][ T29] audit: type=1400 audit(1746582948.759:20329): avc: denied { read write } for pid=9216 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 372.653207][ T29] audit: type=1400 audit(1746582948.799:20330): avc: denied { read write } for pid=13409 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 372.677626][ T29] audit: type=1400 audit(1746582948.819:20331): avc: denied { read write } for pid=14511 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 372.702217][ T29] audit: type=1400 audit(1746582948.829:20332): avc: denied { map_create } for pid=17323 comm="syz.6.4173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 372.721596][ T29] audit: type=1400 audit(1746582948.829:20333): avc: denied { prog_load } for pid=17323 comm="syz.6.4173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 372.740998][ T29] audit: type=1400 audit(1746582948.829:20334): avc: denied { map_create } for pid=17323 comm="syz.6.4173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 372.760603][ T29] audit: type=1400 audit(1746582948.829:20335): avc: denied { prog_load } for pid=17323 comm="syz.6.4173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 372.779840][ T29] audit: type=1400 audit(1746582948.839:20336): avc: denied { module_request } for pid=17323 comm="syz.6.4173" kmod="block-major-0-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 372.802186][ T29] audit: type=1400 audit(1746582948.839:20337): avc: denied { module_request } for pid=17323 comm="syz.6.4173" kmod="block-major-0-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 372.824533][ T29] audit: type=1400 audit(1746582948.839:20338): avc: denied { module_request } for pid=17323 comm="syz.6.4173" kmod="block-major-0-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 372.932920][T17357] binfmt_misc: register: failed to install interpreter file ./file2 [ 373.010978][T17369] Cannot find set identified by id 0 to match [ 373.142017][T17387] SELinux: syz.9.4203 (17387) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 373.359252][T17412] SELinux: syz.2.4215 (17412) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 373.741987][T17443] SELinux: syz.5.4227 (17443) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 374.225628][T17476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17476 comm=syz.6.4243 [ 374.287606][T17483] ================================================================== [ 374.295739][T17483] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 374.302443][T17483] [ 374.304778][T17483] write to 0xffff88810491f310 of 8 bytes by task 17479 on cpu 0: [ 374.312509][T17483] call_rcu+0x3b/0x3e0 [ 374.316606][T17483] mas_wmb_replace+0xc6b/0x14a0 [ 374.321473][T17483] mas_wr_store_entry+0x17ae/0x2b60 [ 374.326679][T17483] mas_store_prealloc+0x74d/0x9e0 [ 374.331708][T17483] vma_iter_store_new+0x1c5/0x200 [ 374.336753][T17483] vma_complete+0x125/0x570 [ 374.341269][T17483] __split_vma+0x594/0x610 [ 374.345704][T17483] vma_modify+0x1a4/0x210 [ 374.350053][T17483] vma_modify_flags+0x101/0x130 [ 374.354918][T17483] mprotect_fixup+0x2cc/0x570 [ 374.359616][T17483] do_mprotect_pkey+0x6d6/0x980 [ 374.364473][T17483] __x64_sys_mprotect+0x48/0x60 [ 374.369345][T17483] x64_sys_call+0x2794/0x2fb0 [ 374.374030][T17483] do_syscall_64+0xd0/0x1a0 [ 374.378543][T17483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.384445][T17483] [ 374.386770][T17483] read to 0xffff88810491f310 of 8 bytes by task 17483 on cpu 1: [ 374.394405][T17483] mas_state_walk+0x2f5/0x650 [ 374.399092][T17483] mas_walk+0x30/0x120 [ 374.403162][T17483] lock_vma_under_rcu+0xa2/0x2f0 [ 374.408116][T17483] do_user_addr_fault+0x233/0x1090 [ 374.413243][T17483] exc_page_fault+0x54/0xc0 [ 374.417774][T17483] asm_exc_page_fault+0x26/0x30 [ 374.422628][T17483] [ 374.424992][T17483] value changed: 0x00007fc8778bffff -> 0xffffffff855c9c30 [ 374.432101][T17483] [ 374.434425][T17483] Reported by Kernel Concurrency Sanitizer on: [ 374.440577][T17483] CPU: 1 UID: 0 PID: 17483 Comm: syz.9.4246 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 374.453086][T17483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 374.463150][T17483] ================================================================== [ 374.480721][T17489] ref_tracker: memory allocation failure, unreliable refcount tracker.