last executing test programs: 1m2.555596434s ago: executing program 2 (id=291): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000010100000000b58104a7baaf442a7c345a2bd890e6ed14a6709e9431f4f0b9ec867faaa6648743d7351078170b428b02b9a97d2f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x1c, 0x0, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0, 0x52}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) unshare(0x20040400) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={r4, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x8, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}, @empty, 0x40, 0x31, 0x8, 0x1000}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x260, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, &(0x7f00000004c0), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x34}, [0xff, 0xffffffff, 0xff000000], [0xffffff00, 0xffffffff, 0x0, 0xff000000], 'caif0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x3a, 0x0, 0x3, 0x28}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x6c, 0x7, 0x1, 0x9, 0x7f, @remote, @private0, @local, [0x0, 0x0, 0xff, 0xffffffff], [0x0, 0xff, 0xff], [0xffffff00, 0xffff00, 0x0, 0xff000000], 0x24, 0xa4}}, @common=@ah={{0x30}, {[0x4d2, 0x4d6], 0x6, 0xb, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_batadv\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) 1m2.523198765s ago: executing program 2 (id=292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x254}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x1200) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) utimes(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="60000000100001042cbd70000000000000000000", @ANYRES32=r9, @ANYBLOB="0000000014310000400012800b000100697036746e6c00003000028005000600ee40000027000200fc02000000000000000000000000000106000f00000000000500050000000000a26e114d09e94f1da6cac4a7ad9aa9b3281dcd5b89e6b66d8052b0fb3a795a41923530967aac2471f882c73b11a211853aea6b0ebffce39fca57e617c96a0de6b107c2a820ebb7e72169da944659a31e0a5a54f18773aa9214db4b81da0b9e4d84b46f4e0d45394eb6b9ee4df9cee072d6d2763af875437fdc745d4010ececa9872147fdd95811357441b59b8aef613c3740ea2ae66e579e1f99d762724db7f2e7b469395e2649a99b019329998eb8f4b2b19bf71b5a554802ec1170bcdffa71bdf0b08c09ada71db537685cfe97eb37823cab4bc6ce0f67dd308b278307a8771f051baba831348e44caadae79c2e2fb103bd8c222d6554ab1f4fb32713fe01758807615f8389e3e1046c5d4"], 0x60}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0000001000010400"/20, @ANYRES32=r9, @ANYBLOB="8750a754ac0000007c0012800b000100697036746e6c00106c000280140002000000000000000000000000000000000114000200fe8000000000000000000000000000aa14000300fe8000000000000000000000000000bb08bc550973263549f22c1ac3a5d5", @ANYRES32=r9, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 1m1.61612973s ago: executing program 2 (id=308): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) sendmmsg(r0, &(0x7f00000053c0)=[{{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'virt_wifi0\x00'}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000140)="099354ca762e9f4cf59718e6f09de10278a53748246a7d1fc4d6ac353d8eec5ddc348566af70437104d5d4ef897fecc135cc3a13b748a4e85cbf827f079ad2da77f29d08beb9d9bf71e3fb81e0bc9c5b7bb82e92", 0x54}, {&(0x7f00000001c0)="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", 0xe00}, {0x0}], 0x3, &(0x7f0000001680)}}], 0x1, 0x20040004) semtimedop(0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 1m1.56249055s ago: executing program 2 (id=310): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) prctl$PR_SET_NAME(0xf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_clone(0x1800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) kcmp(r0, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 1m1.377800263s ago: executing program 2 (id=315): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000010100000000b58104a7baaf442a7c345a2bd890e6ed14a6709e9431f4f0b9ec867faaa6648743d7351078170b428b02b9a97d2f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x1c, 0x0, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0, 0x52}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) unshare(0x20040400) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={r4, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x8, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}, @empty, 0x40, 0x31, 0x8, 0x1000}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x260, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, &(0x7f00000004c0), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x34}, [0xff, 0xffffffff, 0xff000000], [0xffffff00, 0xffffffff, 0x0, 0xff000000], 'caif0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x3a, 0x0, 0x3, 0x28}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x6c, 0x7, 0x1, 0x9, 0x7f, @remote, @private0, @local, [0x0, 0x0, 0xff, 0xffffffff], [0x0, 0xff, 0xff], [0xffffff00, 0xffff00, 0x0, 0xff000000], 0x24, 0xa4}}, @common=@ah={{0x30}, {[0x4d2, 0x4d6], 0x6, 0xb, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_batadv\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) 1m1.098221248s ago: executing program 2 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xc6}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x84}}, 0x24008000) 1m1.097888098s ago: executing program 32 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xc6}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x84}}, 0x24008000) 54.290949449s ago: executing program 3 (id=392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32], 0x254}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x1200) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) utimes(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="60000000100001042cbd70000000000000000000", @ANYRES32=r9, @ANYBLOB="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"], 0x60}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0000001000010400"/20, @ANYRES32=r9, @ANYBLOB="8750a754ac0000007c0012800b000100697036746e6c00106c000280140002000000000000000000000000000000000114000200fe8000000000000000000000000000aa14000300fe8000000000000000000000000000bb08bc550973263549f22c1ac3a5d5", @ANYRES32=r9, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 53.346030085s ago: executing program 3 (id=400): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x4, 0x0, 0x3, 0x6, 0x0, 0x20, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 52.41815464s ago: executing program 3 (id=403): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r5 = syz_io_uring_setup(0x1d82, &(0x7f00000000c0)={0x0, 0xa9ee, 0x20, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = msgget(0x0, 0x424) msgsnd(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000000000000b980ec876340fc3fed252d5982d097bd99c2c71754e195212721933cb2af565ba5c4f7a755a430fa6a3059ae0fe9ed4259c100000000000000b0dcafefcd0809f4ac7a01724bfeaf09493d648386fbe12fdd369519b1fb9311df402404379be0d1315a47f672a643b3cd14e656d3e610277116c76a80a364f5cde17c7d2034ea7dd817c70dd5eb062b49c62041520cc90dc84a25675159edb38ec28be9d385bde2234a6f81ef937697954c7e5600431bdbf7f04f520609b8151b164aae47dc2d8671103f5b4d169e2c478ac9afa135fdb9dff7a38c4889737cc14d92d1a7d2bfa194e103b7272e87ea9c"], 0xf2, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20, 0x4000}) clock_nanosleep(0x2, 0x1, 0x0, 0xfffffffffffffffe) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 51.545463054s ago: executing program 3 (id=411): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) prctl$PR_SET_NAME(0xf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_clone(0x1800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) kcmp(r0, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 51.503365345s ago: executing program 3 (id=412): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rename(&(0x7f0000000040)='./file1\x00', 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, 0x0) creat(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000200)=r3}, 0x20) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x2, 0x300) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f00000002c0)=[{0x0}], 0x1, 0x35, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) 51.23835586s ago: executing program 3 (id=419): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0xd733043595a52279}, "a8e0930a1a884884", "74743275e5fc20c3ab14916504a8ca92", '\x00', "3e6a808941a488cc"}, 0x28) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 51.21159688s ago: executing program 33 (id=419): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0xd733043595a52279}, "a8e0930a1a884884", "74743275e5fc20c3ab14916504a8ca92", '\x00', "3e6a808941a488cc"}, 0x28) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 35.775121233s ago: executing program 6 (id=574): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a3000000000140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 35.728838174s ago: executing program 6 (id=577): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x4, 0x0, 0x3, 0x6, 0x0, 0x20, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 34.821151689s ago: executing program 6 (id=586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES32=r0], 0xa0}, 0x1, 0x0, 0x0, 0x400c881}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRESHEX=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000000000000000007020000f8ffffffb703000008000000b70400000000000085000000010000009500"/65], &(0x7f0000000100)='GPL\x00', 0x1400, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xfff1, 0xffff}, {0x1b6dd91e85e94ce1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@delchain={0x24, 0x2e, 0x3, 0x0, 0x3, {0x0, 0x0, 0x0, r7, {0xfff2, 0x7}, {0xfff3, 0xffff}, {0x7, 0xe}}}, 0x24}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000090000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="00000000000001000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r8}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffefffff}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 34.679701761s ago: executing program 6 (id=589): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r2, &(0x7f0000009a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001cc0)=""/101, 0x65}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/188, 0xbc}], 0x4}, 0x8}], 0x3, 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x564, &(0x7f0000000c00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xaa039, 0x0, 0xfe, 0x0, &(0x7f0000000240)) ftruncate(0xffffffffffffffff, 0x201f) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') lsetxattr$security_selinux(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0/../file0\x00', &(0x7f0000000100), &(0x7f00000001c0)='system_u:object_r:checkpolicy_exec_t:s0\x00', 0x28, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='scsi_eh_wakeup\x00', r3, 0x0, 0x1}, 0x18) getsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f00000002c0), &(0x7f0000000300)=0x4) msync(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x6, 0x594, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x571b, 0x4, @perf_bp={0x0}, 0x4c58, 0x5, 0x0, 0x1, 0x6, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r5, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 33.947400223s ago: executing program 6 (id=598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x281c2, 0x120) fcntl$setlease(r4, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000100)='./file1\x00', 0x3) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x212e, 0x100, 0x3, 0x3de}, &(0x7f0000000040), &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000080)={0x3920e, r8, 0x2, 0x20000000, 0x2}) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000200)=[r6], 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe98, 0x30, 0x25, 0x70bd27, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x2}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x7}, {}, {0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x400000}, {}, {}, {0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0xb4d0}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {0x8}, {}, {}, {}, {0x0, 0x2}, {0x400}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x16e}, {}, {}, {}, {0x0, 0x5}], [{0x2}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r11, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 33.420301582s ago: executing program 6 (id=604): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 33.419159512s ago: executing program 34 (id=604): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") 32.3107137s ago: executing program 1 (id=616): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 32.137241993s ago: executing program 1 (id=620): syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) 32.120811683s ago: executing program 1 (id=621): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000690000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x1200) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="60000000100001042cbd70000000000000000000", @ANYRES32=r6, @ANYBLOB="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"], 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 31.244032247s ago: executing program 1 (id=627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x4, 0x0, 0x3, 0x6, 0x0, 0x20, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 30.843581874s ago: executing program 1 (id=633): syz_usb_connect(0x3, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="12011e14a30133083a0812b551810102030109021200010202a02c0904ba0200ffffff7b"], 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 30.581778129s ago: executing program 1 (id=638): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, 0x26, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r3}, 0x10) lgetxattr(0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x4, 0x0, 0x2000, 0x10, 0x0}) read$usbfs(r8, &(0x7f0000000380)=""/139, 0x8b) io_setup(0x8f0, &(0x7f0000002400)=0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x680, 0x0) io_submit(r9, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2040000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 30.50737632s ago: executing program 35 (id=638): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, 0x26, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r3}, 0x10) lgetxattr(0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x4, 0x0, 0x2000, 0x10, 0x0}) read$usbfs(r8, &(0x7f0000000380)=""/139, 0x8b) io_setup(0x8f0, &(0x7f0000002400)=0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x680, 0x0) io_submit(r9, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2040000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 29.176725451s ago: executing program 5 (id=647): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) 29.111505612s ago: executing program 5 (id=650): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rename(&(0x7f0000000040)='./file1\x00', 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, 0x0) creat(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000200)=r3}, 0x20) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x2, 0x300) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) 29.047950293s ago: executing program 5 (id=652): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000500000081f00200000007000000984e49f27686", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000006000000000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0xfd, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xd}, 0x4, 0x2, 0x0, 0x6, 0x8, 0x20002, 0x2b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x1, 0x4) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2], 0x48) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/reserved_size', 0x169a82, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r6, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='sched_move_numa\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) fallocate(r4, 0x0, 0x0, 0x1000f4) io_submit(0x0, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r5}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r4, 0x0, 0x0, 0xffffffffffffffff}]) 28.943314465s ago: executing program 5 (id=653): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x4, 0x0, 0x3, 0x6, 0x0, 0x20, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 28.542936862s ago: executing program 5 (id=654): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)='6', 0x1}], 0x1) 28.195336768s ago: executing program 5 (id=659): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x5}, 0x18) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 28.142080238s ago: executing program 36 (id=659): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x5}, 0x18) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 3.046330759s ago: executing program 9 (id=914): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rename(&(0x7f0000000040)='./file1\x00', 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, 0x0) creat(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000200)=r3}, 0x20) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x2, 0x300) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) 2.721010005s ago: executing program 9 (id=915): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x103940) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) 2.640319766s ago: executing program 9 (id=916): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x5}, 0x18) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 2.611512507s ago: executing program 7 (id=918): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x4}, 0x50) close(r4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r7 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1f, 0x0, &(0x7f00000001c0)) getsockopt$inet_tcp_buf(r7, 0x6, 0xe, &(0x7f0000000180)=""/89, &(0x7f0000000040)=0x59) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) 2.312257472s ago: executing program 9 (id=923): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x1200) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) utimes(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) r6 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="8750a754ac0000007c0012800b000100697036746e6c00106c000280140002000000000000000000000000000000000114000200fe8000000000000000000000000000aa14000300fe8000000000000000000000000000bb08bc550973263549f22c1ac3a5d5", @ANYRES32=r7, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 2.122747935s ago: executing program 8 (id=930): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) 2.121834655s ago: executing program 7 (id=931): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000580)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '>\x00', 0x28, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @private1}}}}}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x677, &(0x7f0000000c00)="$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") open(&(0x7f0000000080)='./file0\x00', 0x25a40, 0x80) 2.105423525s ago: executing program 8 (id=932): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000580)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '>\x00', 0x28, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @private1}}}}}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x677, &(0x7f0000000c00)="$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") open(&(0x7f0000000080)='./file0\x00', 0x25a40, 0x80) 1.997897687s ago: executing program 8 (id=933): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @empty}]}}]}, 0x5c}}, 0x4040004) 1.968210287s ago: executing program 7 (id=934): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x10}, {0x6, 0xe}}}, 0x24}}, 0x54) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 7) 1.682903922s ago: executing program 7 (id=936): r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xff, 0x1b1, &(0x7f0000001bc0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="340002001800290200000000000000000200000180000000000000001800098008000000190200000000000000abdafa8562b0552cfc4667344c123ab7f4efd20dffdf08d8ae80e3900b5ccbf1e17715389eee7d17b886c363bf62bcb35e05f0f233895bff6396c3ee91e2e5060d706b1dafe5dd4ee653ed4c8d79349382394efe3767acc71fceca6c57163488645378b75bc7d3a458bd53a4b0b4", @ANYRES32=0x0, @ANYBLOB="080001000000000004004e80"], 0x34}}, 0x84054) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014002000b7030000000011008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r8}, 0x10) clock_adjtime(0x0, &(0x7f0000000200)={0x564e984b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8000000}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', r1, 0x4000, r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) r9 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r9, &(0x7f0000000440)={'#! ', './file0'}, 0xb) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x90) execveat(r0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x1000) 1.669160122s ago: executing program 8 (id=937): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x185080) creat(&(0x7f0000000040)='./file0\x00', 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) (fail_nth: 7) 1.406084566s ago: executing program 9 (id=938): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="0b3666d813c789d12b1fc7f157e85b95f4d88a7c8e502dec15e6f546bfe42086e60a59d0cd75f880ea2ec805c0ecbe133a94976273ae1f7497de49ac8006847f2908a62abefe"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r6, 0x40043311, &(0x7f0000000100)) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000fc0)={0x1b, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r9, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240000a0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20000000005e02, 0x20000000007ff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f0000000180)={0x44, @time={0xe4, 0xfff}, 0x5, {0x3e, 0xb7}, 0x83, 0x0, 0x13}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigtimedwait(0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESDEC=r5], 0x122}}, 0x4008010) 1.22021436s ago: executing program 4 (id=939): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rename(&(0x7f0000000040)='./file1\x00', 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, 0x0) creat(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000200)=r3}, 0x20) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x2, 0x300) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) 1.142690251s ago: executing program 4 (id=940): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x4}, 0x50) close(r4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r7 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1f, 0x0, &(0x7f00000001c0)) getsockopt$inet_tcp_buf(r7, 0x6, 0xe, &(0x7f0000000180)=""/89, &(0x7f0000000040)=0x59) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) 998.109913ms ago: executing program 7 (id=941): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x185080) creat(&(0x7f0000000040)='./file0\x00', 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r7}, 0x10) r8 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x1c}], 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) 952.199474ms ago: executing program 4 (id=942): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) 899.750414ms ago: executing program 4 (id=943): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x1c, 0x0, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0, 0x52}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) unshare(0x20040400) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={r4, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x8, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}, @empty, 0x40, 0x31, 0x8, 0x1000}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x260, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, &(0x7f00000004c0), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x34}, [0xff, 0xffffffff, 0xff000000], [0xffffff00, 0xffffffff, 0x0, 0xff000000], 'caif0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x3a, 0x0, 0x3, 0x28}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x6c, 0x7, 0x1, 0x9, 0x7f, @remote, @private0, @local, [0x0, 0x0, 0xff, 0xffffffff], [0x0, 0xff, 0xff], [0xffffff00, 0xffff00, 0x0, 0xff000000], 0x24, 0xa4}}, @common=@ah={{0x30}, {[0x4d2, 0x4d6], 0x6, 0xb, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_batadv\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) 869.185796ms ago: executing program 4 (id=944): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000690000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x1200) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="60000000100001042cbd70000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000014310000400012800b000100697036746e6c00003000028005000600ee40000027000200fc02000000000000000000000000000106000f00000000000500050000000000a26e114d09e94f1da6cac4a7ad9aa9b3281dcd5b89e6b66d8052b0fb3a795a41923530967aac2471f882c73b11a211853aea6b0ebffce39fca57e617c96a0de6b107c2a820ebb7e72169da944659a31e0a5a54f18773aa9214db4b81da0b9e4d84b46f4e0d45394eb6b9ee4df9cee072d6d2763af875437fdc745d4010ececa9872147fdd95811357441b59b8aef613c3740ea2ae66e579e1f99d762724db7f2e7b469395e2649a99b019329998eb8f4b2b19bf71b5a554802ec1170bcdffa71bdf0b08c09ada71db537685cfe97eb37823cab4bc6ce0f67dd308b278307a8771f051baba831348e44caadae79c2e2fb103bd8c222d6554ab1f4fb32713fe01758807615f8389e3e1046c5d4"], 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 728.214028ms ago: executing program 8 (id=945): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000400000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) personality(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000500ffffffffffffffe300000018110000", @ANYRES8=r2, @ANYRES16=r2], 0x0, 0x200, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x100}, 0x18) socket$inet6_sctp(0xa, 0xef4ae0b1b02acda2, 0x84) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010300000000000000000100"], 0x30}}, 0x40) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x43403d05, 0x0) 727.747068ms ago: executing program 8 (id=946): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x1200) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 646.180499ms ago: executing program 9 (id=948): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) read(r1, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x2bf, @tick=0x5, 0x0, {}, 0x0, 0x0, 0x4}) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) pidfd_send_signal(r2, 0x33, &(0x7f00000007c0)={0x30, 0x18, 0x9}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000480)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) syz_open_procfs(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x6a, 0x3, 0x0, &(0x7f0000000180)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400860877e25d210b00000800000001", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r7}, 0x10) pause() r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="0bba70b35acb93b95d95a22e8168cec35b134841d9ce907f326ae66613a8c8f3c3bc1ae8295c08aca37c3ad8363dcbc7091b73679a29943e50f5613051a46e21094fa8975085acaecddfb2295a9035b3354a9cf8c1422773755cc9c1bf968627c5c0378b6a722275f1fd27b30b72238b279e9615b2c771d1ca25260d9fbe648e0c84", @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x1d}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10) 480.917882ms ago: executing program 0 (id=952): perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x8}, 0x4e58, 0x5, 0x0, 0x4, 0x87, 0x9, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x2, 0xa}, {0x2}], 0x10, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x10, &(0x7f0000000000)=r6, 0x8) r7 = dup(r2) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r8 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newqdisc={0x48, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, {0x5}, {0x10, 0xfff1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x48}}, 0x4014) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r10) stat(&(0x7f0000001c40)='./file0\x00', 0x0) 419.378093ms ago: executing program 0 (id=953): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x2000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) dup(0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x5608) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x28440, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040814}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x8}, {}, {0xfff2, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2c, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0xfffffffffffffedf, 0x1, {0x0, 0xffff}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xffe0}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}]}, 0x60}}, 0x400c084) 401.713953ms ago: executing program 0 (id=954): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) 388.106553ms ago: executing program 0 (id=955): r0 = syz_pidfd_open(0x0, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x7, &(0x7f0000000440)=[{0x3a80, 0x28, 0x8, 0x2}, {0x1ff, 0xc7, 0x0, 0xc6}, {0xfffa, 0xe0, 0x6, 0x3}, {0x6, 0x0, 0x2, 0xffffffff}, {0x101, 0xa6, 0xb3, 0xffff}, {0x7, 0x7, 0x69, 0x3ff}, {0xdd, 0x80, 0x2, 0xc}]}) r2 = open(0x0, 0x145982, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x2c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000dc0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "64cedd3a39123f"}) ioctl$BTRFS_IOC_INO_LOOKUP(r9, 0xd0009412, &(0x7f0000001ec0)={r10, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0x2}, 0x18) gettid() timer_create(0x1, 0x0, &(0x7f0000000080)=0x0) timer_delete(r11) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x64, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xe}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xfa}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x10040047}, 0x2400c854) r12 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) setns(r12, 0x20000000) 368.884263ms ago: executing program 0 (id=956): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x677, &(0x7f0000000c00)="$eJzs3UtvG9fdx/HfUNT1AYwHbREYhmOd2A0goy5NUrECwV2UHQ6lSUkOMUMV0ipwYykwTDmt7QK1Nqk2vQDtG+gumyz6Igp0nXXfQJcFgnZXoBsWc+NFnBFp3ew234+Q8HDOf+b85+I5GpFzRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJZdL5crlppue2fX5LPrvtc6pT5e2rzuxoW7U9uVrPA/LS3pejzp+neG1e+E/7utm/G7m1oKX5Z09H/v/P/DbxcL6fynJHQWet0Fvnh19PRRr7f//Gyt9a2zzHcpJjJRYYa5tpy2G3huq7blGDfwzObGRvn+diMwDbfpBHtB12kZ23cKXc83a/ZdU9ncXDdOac/baW/Va00nnfjh96vl8ob5aDHZ/fc/KgX2tttsuu2tKCasDmMWB0eIU2sZc/Ckt78+LckwqDJLUHVaULVcrVYq1Wpl48Hmgw/L5eLEhPIJmogYHrRvz87HVbqgMzdwfoWw//+bJTW1pLZ2tCuT+WOrLl+eWjn1ibT/f/++c2q7o/1/2stfH1bfUNT/34rf3crr/3NyMTLRDFk1Vs70s/280Csd6akeqaee9vX8Ypa7enEZXu7PllSUXAXy5KqlmrbkyCRTjDa1oQ2V9bG21VAgo4ZcNeUo0J4CdeWoFe0TX45q6sqTL6M12boro4o2tal1GTkqaU+edtTWluqq6V/9fv9AT6Ltvn5KjkqDKrMEFQfH4GRQXv//08/jOV6v/8f/nsGxM0MM8Mb1k+v/fHNZE1cvLyMAAAAAAHDRrOiv71b02f27kvpquE2n/KbTAgAAAAAAFyj65P9m+DIflt6VlXP937/63AAAAAAAwMWwonvsLEkr0Zf6reGdULN8CSDz5gAAAAAAAPB2iT7/v7Ug9aOh1VZlvdb1PwAAAAAA+C/w25Ex9ovpGLv99GP9gqSgs2j9+R+L8uet487ud63DWlhTO0xiJr4B0G3csIqKB+qNxutdkBS9s52bVjI+cDIIphUP7Ct9fTBtrH/LP5HAwlz654uMBK4djSSwUUze6fd6L455L2n38VFBUU3cykrDbTol22s+rKhWu1boOrvdXzx78kvJH6znwZPefumTz3qPo1yOw0nHh2Een4+lU5iWy8tovIXonousNV5WI23yd+3WihW1W07Xf061w8JoQ7Ot/691O465vRK/rhyle0DWr5JCpRTtsuHaR6NDWMMsKifXPGtH5GSxFGVxJ465s3Ynfknzi/fC0vfmpGppch/4o1lUR7OYvi2sf05siylZhMfCepjFX8IF5WSx/npZTOwRAHhTDoa9UDSI+eQY+yf73Yyz3HLymnuWm967/3C8lZd/7Mc3HM5JRfUXk+6ln9+vKDyjr8VhC/Eo7sUbGWf0ctKvLCnnjF4+R+8WtvWn4TOQkqfVJDXFQRb/7vf7DytRu3840at+Ec7wRW67QbM6F27C+y8PfxYNgB/6dP/T/WfV6vpG+YNy+UFV89FqJC/0PQCADNOfsTMesTTszwZ99weDq+rHf38/Lo31u98afKWgpE/0mXp6rHvpIwRWs9tdGfkawr3Jq9YwNvqtYzy2onu5V3VRXzoSWx3EziudZfz3hWHs+mXvBgAArtTtKf3wyf4/69r9XnrdvXYj87p7vC8/+YTgvNjKFW8JAAC+ORz/a2ul+xvL993Ox5XNzUqtu+0Y37N/bHy3vuUYt911fHu71t5yTMf3up7tNU3H16JbdwIT7HQ6nt81Dc83HS9wd6Mnv5vk0e+B06q1u64ddJpOLXCM7bW7Nbtr6m5gm87Oj5pusO340cxBx7HdhmvXuq7XNoG3LNspGRM4zkigW3faXbfhhsW26fhuq+bvmZ94zZ2WY+pOYPtup+vFC0zbctsNz29Fiy2pf9qDDgEA+MZ48ero6aNeb//5KYVjxYX0+2hJ1VcZwQtZC3zDqwgAAE6glwYAAAAAAAAAAAAAAAAAAAAA4O03y/1/pxbSmwLTKfPKCJYGU35+baYlWxpO+fKv58rwDIXCySnJSLv96bN/FReKWTHLYWFBUi/d/KMxx1MTm8uYK6+wOtOaKi4UL34bLktZR8KlFX5wMH4cTsSElZlVi4OtWjz/P4eswrMvc6qmH1GL49tw4bQVHC8UJT1fOMcuuNrzEICr958AAAD//7gMOck=") open(&(0x7f0000000080)='./file0\x00', 0x25a40, 0x80) 354.488114ms ago: executing program 0 (id=957): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x25dfdbfd, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x2, 0x1}}}}]}]}, 0x48}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x16, &(0x7f00000007c0)=ANY=[@ANYRESDEC], 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfff}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xd000, 0x11, 0x0, 0x27) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1bc10000040000000000000000000400001aa800812e3558104a98a21a7b7a8bbcd082065f1cfb91d0ad7140daad5b3a44ade7fba618dad5b25efebb3116080000000000000006fdcc3c19155a6bd51a72cefe77097961fd", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r9, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r11, &(0x7f0000000340)={&(0x7f0000000200)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000080)="918fe4b65444ab35f36ca90e5619aee18c3ab2fe", 0x14}, {&(0x7f0000000580)="76898a27a7e60ca1cc2720fe64912e592acdacd40d09ccb4fa529710bcc30d54350801469727e27769225d8c1de0cfac46d165a07cdc83cf8c85cd7668af8917810b8fb0326576685cdd6948e36fb778939e8ff8e2d3a43158acb04ea8015d5a9e30d1e7fde75af69b7c090301601655952863f05d1cf2f72959cb2c8e87ddd9af180ee8a470368893d5ffb2b47c5acee998c98f3e62313f2f20262063878153661b12d81113bc5571d0c3ed60a906a360ffc99911611be0", 0xb8}, {&(0x7f0000000700)="69ea9dfdee145cb50736fc963954e8f0f8b706a71ae947ff671a8d1fba47304f48a3efa333f90c66f75650a6ba11374797c50956e977680a803772b2aab7ae4ef7734667ed958b970b19aa04a51b9a444a3e5c86c406c729708ddd5ecac7c866e1250eb1dff0b14fc6418f7f3805061eff0669169073e13962960cb457d6dae7b0d5891769b4ec62bb25f1b66a36f5a9ac328e895353d14aa9c40656fa7c69a50ca80c05c0f8e1a8", 0xa8}, {&(0x7f0000000a00)="e5922856776323419d2e439273fe7b5f8505ad3c83c4a5f1206923fd54e47eedb773fdb6bda261ccc3a18cdd50f3fced8f875f77e3797ef208bca3c0c62883046301d698e9defe6ccc3a74cbccd7f5ff8fd78203fa135c625be8776a5d63fd9924cb7f3074fac10600c6e7e9d3f318e33b86a8f0a339ec0ec126fd341586d91fad694f84c1357ebcc76d43085ce53110501f5fc6c61bba80ae3aa480421882ddd5ad8fbda70e9778dd3fed3692d45c27771bdb047320522f17c9ca0de5eee94dcb02d492faef80a5ec", 0xc9}, {&(0x7f0000000b00)="acff4733f6925cc58c7f0e8bab9bcf445b1d1da43cc8e966bf9e041a344c5c209570113fa097f670a7a79c3847ffddddf8f28fd1a823219c67099ed7652f8da5b6b6e1ed7edfe5c06634273095d33645d80b255ed6ef280bc8a1a5759d663a899ed1c102bd43f8cb2c2552eae344ad1b8d83587356ec65c9c0c7e8366a9b5b32b8a9fb2735bbae87e691e05cc66a6b45b3c9bf4ff62b548c06fc7473b7f110db5bba80f0914d254a5c03829ee0afdff6d278644e6bce5ca8a258b647dcaabec6c354e80b5fdd8a75a524bc00102d8956e06df9ee65c1f023b326c4c1240f396e1953799dbdc5a8382792ab9466f29ba33ec9", 0xf2}, {&(0x7f0000000940)="cb03cbfc2b26f94a0010ca74007c0907123223db9ddf23d8e63498e9034feeee08c9a35c528964742203d9c4938fd04ff477385e32e56c07c9d7f32caf1b16e5bb313bbbe50422fd4ec7064d85cfee9c6feb877e8c184fb655e1dd6cf745602583", 0x61}, {&(0x7f0000000c00)="6c9d3ec109b470a76f17dab6adc910bb9e2abcde52529d44c3c3776cf438a2775fb4db3e3716f8c5528aae6dd2550bd668d3eef6637d040ad973e0ba5e1125ea09d37d8a09fdde442e294455a468d750aced94dcdbee65c0d9a837638e04e2edbed045406c8d30e9ce66f3d6cb463f21214abf04806a85ee46584c0c35757454a391883b84f9552dd56d89c5e8c4eb36108820a99b7997d217ed9d683cf61d33e899ac5b4edb6f9657ac0b790abba605e939e81f473526504e1f29725697f458", 0xc0}, {&(0x7f0000000cc0)="911cee907e1b14a00d4dce8fbf17d2389e19a246f24670657ddeb21f46f5abc2acf5006ac789d79331c0bfa55b0d141bebc75bacf537d39af07001e677fe310477e8478edcb42b3cf281487382cef848d9904d0f8dc41354a2a01388aec0b85e083a73e80e5603630e6365e04a1398fcdb1b150eea552332d18f6fbc147440381e840933baebc7f1bf9f1e785a123a6850c14ed5ea698dff347eaf3179f6228bfb17648c3681dc", 0xa7}], 0x8, &(0x7f0000000140)=[{0x30, 0x110, 0x5, "b34142bcdf3b9506060a57b55a5fb2232fea6e8d08babd5b0634"}], 0x30}, 0x94) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="a80100002100010027bd7000fedbdf2502"], 0x1a8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000050) 3.840479ms ago: executing program 7 (id=958): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r3, 0x3, 0x3, &(0x7f00000010c0)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x3938700}) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) keyctl$read(0xb, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r6, 0xffffffffffffffff, 0x0, 0x40001) sendfile(r6, r5, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 0s ago: executing program 4 (id=959): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rename(&(0x7f0000000040)='./file1\x00', 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, 0x0) creat(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000200)=r3}, 0x20) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x2, 0x300) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) kernel console output (not intermixed with test programs): ity change from 0 to 512 [ 74.630117][ T5545] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 74.659554][ T5545] EXT4-fs (loop1): failed to open journal device unknown-block(4,3) -6 [ 74.715091][ T5554] loop1: detected capacity change from 0 to 512 [ 74.734824][ T5554] EXT4-fs (loop1): too many log groups per flexible block group [ 74.742535][ T5554] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 74.752759][ T5554] EXT4-fs (loop1): mount failed [ 74.836547][ T5562] FAULT_INJECTION: forcing a failure. [ 74.836547][ T5562] name failslab, interval 1, probability 0, space 0, times 0 [ 74.849414][ T5562] CPU: 1 UID: 0 PID: 5562 Comm: syz.1.530 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 74.849444][ T5562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.849496][ T5562] Call Trace: [ 74.849501][ T5562] [ 74.849507][ T5562] __dump_stack+0x1d/0x30 [ 74.849526][ T5562] dump_stack_lvl+0xe8/0x140 [ 74.849574][ T5562] dump_stack+0x15/0x1b [ 74.849590][ T5562] should_fail_ex+0x265/0x280 [ 74.849632][ T5562] should_failslab+0x8c/0xb0 [ 74.849652][ T5562] kmem_cache_alloc_noprof+0x50/0x310 [ 74.849676][ T5562] ? skb_clone+0x151/0x1f0 [ 74.849694][ T5562] skb_clone+0x151/0x1f0 [ 74.849745][ T5562] nfnetlink_rcv+0x305/0x1690 [ 74.849775][ T5562] ? __kfree_skb+0x109/0x150 [ 74.849812][ T5562] ? nlmon_xmit+0x4f/0x60 [ 74.849832][ T5562] ? nlmon_xmit+0x4f/0x60 [ 74.849850][ T5562] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 74.849913][ T5562] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 74.849929][ T5562] ? __dev_queue_xmit+0x182/0x1fb0 [ 74.849946][ T5562] ? ref_tracker_free+0x37d/0x3e0 [ 74.850061][ T5562] netlink_unicast+0x5a8/0x680 [ 74.850093][ T5562] netlink_sendmsg+0x58b/0x6b0 [ 74.850116][ T5562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.850137][ T5562] __sock_sendmsg+0x142/0x180 [ 74.850239][ T5562] ____sys_sendmsg+0x31e/0x4e0 [ 74.850260][ T5562] ___sys_sendmsg+0x17b/0x1d0 [ 74.850300][ T5562] __x64_sys_sendmsg+0xd4/0x160 [ 74.850322][ T5562] x64_sys_call+0x2999/0x2fb0 [ 74.850344][ T5562] do_syscall_64+0xd2/0x200 [ 74.850381][ T5562] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.850431][ T5562] ? clear_bhb_loop+0x40/0x90 [ 74.850454][ T5562] ? clear_bhb_loop+0x40/0x90 [ 74.850475][ T5562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.850494][ T5562] RIP: 0033:0x7f6fc31ce9a9 [ 74.850509][ T5562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.850528][ T5562] RSP: 002b:00007f6fc1837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.850580][ T5562] RAX: ffffffffffffffda RBX: 00007f6fc33f5fa0 RCX: 00007f6fc31ce9a9 [ 74.850594][ T5562] RDX: 0000000020000050 RSI: 00002000000000c0 RDI: 0000000000000005 [ 74.850607][ T5562] RBP: 00007f6fc1837090 R08: 0000000000000000 R09: 0000000000000000 [ 74.850620][ T5562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.850632][ T5562] R13: 0000000000000000 R14: 00007f6fc33f5fa0 R15: 00007ffd334a7b58 [ 74.850650][ T5562] [ 75.147028][ T5568] loop1: detected capacity change from 0 to 512 [ 75.189297][ T4426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.199064][ T5568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.327489][ T5572] loop4: detected capacity change from 0 to 512 [ 75.356884][ T5572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.496820][ T5584] loop6: detected capacity change from 0 to 512 [ 75.519408][ T5584] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.541478][ T5584] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 75.541663][ T5588] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 75.541663][ T5588] program syz.5.537 not setting count and/or reply_len properly [ 75.570399][ T5588] FAULT_INJECTION: forcing a failure. [ 75.570399][ T5588] name failslab, interval 1, probability 0, space 0, times 0 [ 75.583166][ T5588] CPU: 0 UID: 0 PID: 5588 Comm: syz.5.537 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 75.583238][ T5588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.583295][ T5588] Call Trace: [ 75.583300][ T5588] [ 75.583366][ T5588] __dump_stack+0x1d/0x30 [ 75.583386][ T5588] dump_stack_lvl+0xe8/0x140 [ 75.583403][ T5588] dump_stack+0x15/0x1b [ 75.583421][ T5588] should_fail_ex+0x265/0x280 [ 75.583593][ T5588] should_failslab+0x8c/0xb0 [ 75.583612][ T5588] __kmalloc_noprof+0xa5/0x3e0 [ 75.583687][ T5588] ? bio_kmalloc+0x41/0x50 [ 75.583712][ T5588] bio_kmalloc+0x41/0x50 [ 75.583735][ T5588] blk_rq_map_user_iov+0x58a/0x14a0 [ 75.583855][ T5588] blk_rq_map_user_io+0x18f/0x260 [ 75.583884][ T5588] ? _raw_spin_unlock+0x26/0x50 [ 75.583905][ T5588] ? finish_task_switch+0xad/0x2b0 [ 75.583985][ T5588] ? __schedule+0x6a8/0xb30 [ 75.584005][ T5588] ? __cond_resched+0x4e/0x90 [ 75.584157][ T5588] ? sg_link_reserve+0x117/0x140 [ 75.584192][ T5588] sg_common_write+0xb06/0xc30 [ 75.584281][ T5588] sg_write+0x6b5/0x750 [ 75.584314][ T5588] ? __pfx_sg_write+0x10/0x10 [ 75.584337][ T5588] vfs_write+0x266/0x8e0 [ 75.584398][ T5588] ? __rcu_read_unlock+0x4f/0x70 [ 75.584416][ T5588] ? __fget_files+0x184/0x1c0 [ 75.584433][ T5588] ksys_write+0xda/0x1a0 [ 75.584477][ T5588] __x64_sys_write+0x40/0x50 [ 75.584504][ T5588] x64_sys_call+0x2cdd/0x2fb0 [ 75.584585][ T5588] do_syscall_64+0xd2/0x200 [ 75.584601][ T5588] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.584624][ T5588] ? clear_bhb_loop+0x40/0x90 [ 75.584642][ T5588] ? clear_bhb_loop+0x40/0x90 [ 75.584661][ T5588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.584739][ T5588] RIP: 0033:0x7f1c91c1e9a9 [ 75.584752][ T5588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.584767][ T5588] RSP: 002b:00007f1c9027f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.584785][ T5588] RAX: ffffffffffffffda RBX: 00007f1c91e45fa0 RCX: 00007f1c91c1e9a9 [ 75.584796][ T5588] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 0000000000000004 [ 75.584806][ T5588] RBP: 00007f1c9027f090 R08: 0000000000000000 R09: 0000000000000000 [ 75.584816][ T5588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.584900][ T5588] R13: 0000000000000000 R14: 00007f1c91e45fa0 R15: 00007ffc780ff2d8 [ 75.584916][ T5588] [ 75.891010][ T5591] loop5: detected capacity change from 0 to 512 [ 75.898084][ T4913] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.910307][ T5591] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 75.957414][ T5596] loop6: detected capacity change from 0 to 128 [ 75.963848][ T5591] EXT4-fs (loop5): failed to open journal device unknown-block(4,3) -6 [ 76.191638][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.202336][ T5600] netlink: 12 bytes leftover after parsing attributes in process `syz.6.541'. [ 76.284022][ T5606] loop1: detected capacity change from 0 to 512 [ 76.315181][ T5606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.331328][ T5606] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.350764][ T5606] 9pnet_virtio: no channels available for device syz [ 76.365393][ T5606] netlink: 'syz.1.543': attribute type 34 has an invalid length. [ 76.369266][ T5610] loop5: detected capacity change from 0 to 128 [ 76.569515][ T5626] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 76.569515][ T5626] program syz.1.543 not setting count and/or reply_len properly [ 76.628315][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.654958][ T5628] loop5: detected capacity change from 0 to 128 [ 76.817665][ T5630] loop5: detected capacity change from 0 to 512 [ 76.854647][ T5630] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.983832][ T5637] loop4: detected capacity change from 0 to 512 [ 76.994030][ T5637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.012186][ T5637] FAULT_INJECTION: forcing a failure. [ 77.012186][ T5637] name failslab, interval 1, probability 0, space 0, times 0 [ 77.024853][ T5637] CPU: 1 UID: 0 PID: 5637 Comm: +}[@ Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 77.024882][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.024893][ T5637] Call Trace: [ 77.024900][ T5637] [ 77.024907][ T5637] __dump_stack+0x1d/0x30 [ 77.024929][ T5637] dump_stack_lvl+0xe8/0x140 [ 77.025008][ T5637] dump_stack+0x15/0x1b [ 77.025026][ T5637] should_fail_ex+0x265/0x280 [ 77.025059][ T5637] ? alloc_fs_context+0x44/0x4e0 [ 77.025086][ T5637] should_failslab+0x8c/0xb0 [ 77.025187][ T5637] __kmalloc_cache_noprof+0x4c/0x320 [ 77.025286][ T5637] alloc_fs_context+0x44/0x4e0 [ 77.025311][ T5637] ? security_capable+0x83/0x90 [ 77.025346][ T5637] fs_context_for_reconfigure+0x42/0x50 [ 77.025377][ T5637] path_mount+0x9ec/0xb20 [ 77.025411][ T5637] ? user_path_at+0x109/0x130 [ 77.025436][ T5637] __se_sys_mount+0x28f/0x2e0 [ 77.025464][ T5637] ? fput+0x8f/0xc0 [ 77.025486][ T5637] __x64_sys_mount+0x67/0x80 [ 77.025575][ T5637] x64_sys_call+0xd36/0x2fb0 [ 77.025610][ T5637] do_syscall_64+0xd2/0x200 [ 77.025628][ T5637] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 77.025655][ T5637] ? clear_bhb_loop+0x40/0x90 [ 77.025674][ T5637] ? clear_bhb_loop+0x40/0x90 [ 77.025692][ T5637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.025711][ T5637] RIP: 0033:0x7fc630a0e9a9 [ 77.025725][ T5637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.025740][ T5637] RSP: 002b:00007fc62f06f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.025768][ T5637] RAX: ffffffffffffffda RBX: 00007fc630c35fa0 RCX: 00007fc630a0e9a9 [ 77.025844][ T5637] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 77.025856][ T5637] RBP: 00007fc62f06f090 R08: 0000000000000000 R09: 0000000000000000 [ 77.025873][ T5637] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 77.025883][ T5637] R13: 0000000000000000 R14: 00007fc630c35fa0 R15: 00007ffc03b164f8 [ 77.025976][ T5637] [ 77.278797][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.290274][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.361293][ T5647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.550'. [ 77.411638][ T5664] loop6: detected capacity change from 0 to 512 [ 77.427696][ T5664] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.457056][ T5670] netlink: 44 bytes leftover after parsing attributes in process `syz.1.550'. [ 77.495459][ T5674] netlink: 36 bytes leftover after parsing attributes in process `syz.4.551'. [ 77.649579][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 77.649594][ T29] audit: type=1400 audit(1753680272.413:2658): avc: denied { name_bind } for pid=5686 comm="syz.0.554" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 77.696912][ T4426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.173131][ T5743] x_tables: duplicate underflow at hook 2 [ 78.286698][ T5754] loop5: detected capacity change from 0 to 128 [ 78.322753][ T29] audit: type=1326 audit(1753680273.083:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc31ce9a9 code=0x7ffc0000 [ 78.343230][ T5761] netlink: 'syz.4.560': attribute type 1 has an invalid length. [ 78.346993][ T29] audit: type=1326 audit(1753680273.083:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc31ce9a9 code=0x7ffc0000 [ 78.413809][ T29] audit: type=1326 audit(1753680273.123:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fc31ce9a9 code=0x7ffc0000 [ 78.437356][ T29] audit: type=1326 audit(1753680273.123:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc31ce9a9 code=0x7ffc0000 [ 78.437435][ T5761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.467467][ T29] audit: type=1326 audit(1753680273.123:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc31ce9a9 code=0x7ffc0000 [ 78.476905][ T5772] loop1: detected capacity change from 0 to 512 [ 78.490925][ T29] audit: type=1326 audit(1753680273.123:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fc31ce9a9 code=0x7ffc0000 [ 78.520472][ T29] audit: type=1326 audit(1753680273.123:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc31ce9a9 code=0x7ffc0000 [ 78.544041][ T29] audit: type=1326 audit(1753680273.123:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc31ce9a9 code=0x7ffc0000 [ 78.557491][ C1] hrtimer: interrupt took 27033 ns [ 78.569554][ T29] audit: type=1400 audit(1753680273.293:2667): avc: denied { getopt } for pid=5774 comm="syz.0.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.587428][ T5772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.592610][ T5778] __nla_validate_parse: 3 callbacks suppressed [ 78.592623][ T5778] netlink: 44 bytes leftover after parsing attributes in process `syz.5.564'. [ 78.633387][ T4913] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.643755][ T5755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.651003][ T5755] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 78.663108][ T5755] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 78.691825][ T5781] loop6: detected capacity change from 0 to 1024 [ 78.693084][ T5761] gretap1: entered promiscuous mode [ 78.805842][ T5761] bond1: (slave gretap1): making interface the new active one [ 78.814311][ T5761] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 78.914727][ T5781] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.958476][ T5785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.569'. [ 78.997814][ T5781] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.567: Allocating blocks 497-513 which overlap fs metadata [ 79.062320][ T5781] EXT4-fs (loop6): pa ffff8881071c48c0: logic 256, phys. 369, len 9 [ 79.070551][ T5781] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 79.095049][ T5781] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 79.141720][ T4913] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.193158][ T5791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.571'. [ 79.320092][ T5797] netlink: 24 bytes leftover after parsing attributes in process `syz.5.572'. [ 79.412806][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.413385][ T5804] x_tables: duplicate underflow at hook 2 [ 79.486774][ T5812] loop5: detected capacity change from 0 to 512 [ 79.518017][ T5816] loop1: detected capacity change from 0 to 512 [ 79.532001][ T5814] loop6: detected capacity change from 0 to 512 [ 79.540619][ T5812] EXT4-fs (loop5): too many log groups per flexible block group [ 79.548625][ T5812] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 79.551204][ T5818] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5818 comm=syz.0.576 [ 79.568662][ T5814] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 79.579039][ T5812] EXT4-fs (loop5): mount failed [ 79.585955][ T5816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.600913][ T5814] EXT4-fs (loop6): 1 truncate cleaned up [ 79.634470][ T5814] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.640716][ T5824] x_tables: duplicate underflow at hook 2 [ 79.657826][ T5826] loop5: detected capacity change from 0 to 512 [ 79.769731][ T5826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.991656][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.581'. [ 80.080626][ T5842] macvlan1: entered promiscuous mode [ 80.087471][ T5842] ipvlan0: entered promiscuous mode [ 80.093829][ T5842] ipvlan0: left promiscuous mode [ 80.102896][ T5842] macvlan1: left promiscuous mode [ 80.403054][ T4913] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.413343][ T5850] x_tables: duplicate underflow at hook 2 [ 80.436183][ T5852] netlink: 24 bytes leftover after parsing attributes in process `syz.6.586'. [ 80.482170][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.638380][ T5857] loop6: detected capacity change from 0 to 512 [ 80.668844][ T5857] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.675912][ T5866] loop1: detected capacity change from 0 to 512 [ 80.698576][ T5866] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.717346][ T4426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.726587][ T5857] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.746057][ T5857] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.589: corrupted inode contents [ 80.762273][ T5866] EXT4-fs (loop1): 1 truncate cleaned up [ 80.774753][ T5866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.788488][ T5857] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.589: mark_inode_dirty error [ 80.901055][ T5857] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.589: corrupted inode contents [ 80.947694][ T5857] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.589: mark_inode_dirty error [ 80.956066][ T5875] loop5: detected capacity change from 0 to 128 [ 81.178346][ T5854] Set syz1 is full, maxelem 65536 reached [ 81.208962][ T5855] Set syz1 is full, maxelem 65536 reached [ 81.261274][ T5883] x_tables: duplicate underflow at hook 2 [ 81.384938][ T5881] bridge0: port 3(syz_tun) entered disabled state [ 81.424603][ T5881] syz_tun (unregistering): left allmulticast mode [ 81.431137][ T5881] syz_tun (unregistering): left promiscuous mode [ 81.437510][ T5881] bridge0: port 3(syz_tun) entered disabled state [ 81.584951][ T5890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.600'. [ 81.696440][ T5881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.730462][ T5896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.603'. [ 81.748875][ T3335] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.846633][ T3335] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.918484][ T3335] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.986621][ T5910] loop5: detected capacity change from 0 to 128 [ 81.996459][ T3335] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.099413][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.131847][ T3335] bridge_slave_1: left allmulticast mode [ 82.137556][ T3335] bridge_slave_1: left promiscuous mode [ 82.143283][ T3335] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.164982][ T3335] bridge_slave_0: left allmulticast mode [ 82.170720][ T3335] bridge_slave_0: left promiscuous mode [ 82.176656][ T3335] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.257768][ T3335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.268916][ T3335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.278910][ T3335] bond0 (unregistering): Released all slaves [ 82.315178][ T5921] bridge0: port 3(syz_tun) entered disabled state [ 82.323877][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.331101][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.345177][ T5921] batman_adv: batadv0: Interface deactivated: dummy0 [ 82.378165][ T5921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.388277][ T5921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.419822][ T5921] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.428804][ T5921] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.437787][ T5921] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.446699][ T5921] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.459839][ T5921] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.468735][ T5921] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.477766][ T5921] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.486783][ T5921] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.510002][ T3335] hsr_slave_0: left promiscuous mode [ 82.516585][ T3335] hsr_slave_1: left promiscuous mode [ 82.522346][ T3335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.529903][ T3335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.540298][ T3335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.540395][ T5927] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5927 comm=syz.1.611 [ 82.548072][ T3335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.567718][ T5927] FAULT_INJECTION: forcing a failure. [ 82.567718][ T5927] name failslab, interval 1, probability 0, space 0, times 0 [ 82.580602][ T5927] CPU: 1 UID: 0 PID: 5927 Comm: syz.1.611 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 82.580633][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 82.580688][ T5927] Call Trace: [ 82.580695][ T5927] [ 82.580702][ T5927] __dump_stack+0x1d/0x30 [ 82.580763][ T5927] dump_stack_lvl+0xe8/0x140 [ 82.580779][ T5927] dump_stack+0x15/0x1b [ 82.580793][ T5927] should_fail_ex+0x265/0x280 [ 82.580890][ T5927] should_failslab+0x8c/0xb0 [ 82.580909][ T5927] kmem_cache_alloc_node_noprof+0x57/0x320 [ 82.581020][ T5927] ? __alloc_skb+0x101/0x320 [ 82.581046][ T5927] __alloc_skb+0x101/0x320 [ 82.581069][ T5927] ? audit_log_start+0x365/0x6c0 [ 82.581162][ T5927] audit_log_start+0x380/0x6c0 [ 82.581230][ T5927] ? __rcu_read_unlock+0x4f/0x70 [ 82.581251][ T5927] audit_log_common_recv_msg+0xbe/0x190 [ 82.581327][ T5927] audit_receive+0x149d/0x2180 [ 82.581415][ T5927] ? __netlink_lookup+0x266/0x2a0 [ 82.581436][ T5927] netlink_unicast+0x5a8/0x680 [ 82.581463][ T5927] netlink_sendmsg+0x58b/0x6b0 [ 82.581481][ T5927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.581536][ T5927] __sock_sendmsg+0x142/0x180 [ 82.581560][ T5927] ____sys_sendmsg+0x31e/0x4e0 [ 82.581577][ T5927] ___sys_sendmsg+0x17b/0x1d0 [ 82.581639][ T5927] __x64_sys_sendmsg+0xd4/0x160 [ 82.581657][ T5927] x64_sys_call+0x2999/0x2fb0 [ 82.581676][ T5927] do_syscall_64+0xd2/0x200 [ 82.581742][ T5927] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 82.581765][ T5927] ? clear_bhb_loop+0x40/0x90 [ 82.581784][ T5927] ? clear_bhb_loop+0x40/0x90 [ 82.581802][ T5927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.581901][ T5927] RIP: 0033:0x7f6fc31ce9a9 [ 82.581913][ T5927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.581929][ T5927] RSP: 002b:00007f6fc1837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.581975][ T5927] RAX: ffffffffffffffda RBX: 00007f6fc33f5fa0 RCX: 00007f6fc31ce9a9 [ 82.581986][ T5927] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000007 [ 82.581996][ T5927] RBP: 00007f6fc1837090 R08: 0000000000000000 R09: 0000000000000000 [ 82.582006][ T5927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.582016][ T5927] R13: 0000000000000000 R14: 00007f6fc33f5fa0 R15: 00007ffd334a7b58 [ 82.582031][ T5927] [ 82.828829][ T5929] netlink: 24 bytes leftover after parsing attributes in process `syz.4.612'. [ 82.845083][ T3335] veth1_macvtap: left promiscuous mode [ 82.850890][ T3335] veth0_macvtap: left promiscuous mode [ 82.856692][ T3335] veth1_vlan: left promiscuous mode [ 82.861920][ T3335] veth0_vlan: left promiscuous mode [ 82.884511][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 82.884523][ T29] audit: type=1400 audit(1753680277.653:2863): avc: denied { create } for pid=5932 comm="syz.0.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.917977][ T5940] loop1: detected capacity change from 0 to 512 [ 82.935315][ T5940] EXT4-fs (loop1): too many log groups per flexible block group [ 82.943022][ T5940] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 82.960165][ T29] audit: type=1400 audit(1753680277.673:2864): avc: denied { ioctl } for pid=5932 comm="syz.0.614" path="socket:[12740]" dev="sockfs" ino=12740 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.968734][ T5940] EXT4-fs (loop1): mount failed [ 82.984979][ T29] audit: type=1400 audit(1753680277.673:2865): avc: denied { setopt } for pid=5932 comm="syz.0.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.009749][ T29] audit: type=1400 audit(1753680277.673:2866): avc: denied { write } for pid=5932 comm="syz.0.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.063175][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.619'. [ 83.144112][ T3335] team0 (unregistering): Port device team_slave_1 removed [ 83.157317][ T3335] team0 (unregistering): Port device team_slave_0 removed [ 83.200798][ T5901] chnl_net:caif_netlink_parms(): no params data found [ 83.234838][ T29] audit: type=1400 audit(1753680278.003:2867): avc: denied { read open } for pid=5961 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.260471][ T29] audit: type=1400 audit(1753680278.003:2868): avc: denied { getattr } for pid=5961 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.292027][ T5973] loop4: detected capacity change from 0 to 512 [ 83.304984][ T5973] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.319132][ T5973] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.329057][ T5973] EXT4-fs (loop4): inodes count not valid: 0 vs 32 [ 83.360398][ T29] audit: type=1400 audit(1753680278.033:2869): avc: denied { add_name } for pid=5958 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.383233][ T29] audit: type=1400 audit(1753680278.033:2870): avc: denied { create } for pid=5958 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.405728][ T29] audit: type=1400 audit(1753680278.033:2871): avc: denied { write } for pid=5958 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth9.link" dev="tmpfs" ino=4908 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.432082][ T29] audit: type=1400 audit(1753680278.033:2872): avc: denied { append } for pid=5958 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" dev="tmpfs" ino=4908 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.480226][ T5978] loop4: detected capacity change from 0 to 736 [ 83.503518][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.510772][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.544379][ T5901] bridge_slave_0: entered allmulticast mode [ 83.551492][ T5901] bridge_slave_0: entered promiscuous mode [ 83.559492][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.566711][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.574589][ T5901] bridge_slave_1: entered allmulticast mode [ 83.590599][ T5901] bridge_slave_1: entered promiscuous mode [ 83.631222][ T5983] loop4: detected capacity change from 0 to 512 [ 83.647198][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.657843][ T5983] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.661287][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.698955][ T5983] EXT4-fs (loop4): 1 truncate cleaned up [ 83.705533][ T5983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.730726][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.788713][ T5901] team0: Port device team_slave_0 added [ 83.803242][ T5901] team0: Port device team_slave_1 added [ 83.833291][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.840366][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.866483][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.922844][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.929949][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.956409][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.997565][ T6004] loop1: detected capacity change from 0 to 512 [ 83.999343][ T6006] loop5: detected capacity change from 0 to 764 [ 84.016397][ T6007] loop4: detected capacity change from 0 to 128 [ 84.038282][ T6004] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.065351][ T6004] EXT4-fs (loop1): 1 truncate cleaned up [ 84.096035][ T6004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.150219][ T5901] hsr_slave_0: entered promiscuous mode [ 84.191709][ T5901] hsr_slave_1: entered promiscuous mode [ 84.202404][ T6014] loop5: detected capacity change from 0 to 512 [ 84.281190][ T6014] EXT4-fs (loop5): too many log groups per flexible block group [ 84.288997][ T6014] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 84.297573][ T5901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.305432][ T5901] Cannot create hsr debugfs directory [ 84.346775][ T6014] EXT4-fs (loop5): mount failed [ 84.380539][ T3304] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /149/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 84.434358][ T6028] syz.0.634 (6028): attempted to duplicate a private mapping with mremap. This is not supported. [ 84.446108][ T3304] EXT4-fs (loop1): Remounting filesystem read-only [ 84.455960][ T6032] loop4: detected capacity change from 0 to 128 [ 84.528754][ T5901] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 84.556391][ T3304] syz_tun (unregistering): left allmulticast mode [ 84.562923][ T3304] syz_tun (unregistering): left promiscuous mode [ 84.569365][ T3304] bridge0: port 3(syz_tun) entered disabled state [ 84.580917][ T5901] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 84.603594][ T5901] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 84.616520][ T5901] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 84.624513][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.658368][ T6051] loop4: detected capacity change from 0 to 128 [ 84.703159][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.744635][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.760919][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.768044][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.816285][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.823860][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.879664][ T6074] loop4: detected capacity change from 0 to 512 [ 84.896625][ T5901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.907037][ T5901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.922285][ T6074] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.940726][ T6074] EXT4-fs (loop4): 1 truncate cleaned up [ 84.954665][ T6074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.130566][ T3335] bridge_slave_1: left allmulticast mode [ 85.136286][ T3335] bridge_slave_1: left promiscuous mode [ 85.142082][ T3335] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.644205][ T3335] bridge_slave_0: left allmulticast mode [ 85.650159][ T3335] bridge_slave_0: left promiscuous mode [ 85.655996][ T3335] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.806268][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.827660][ T3335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.837358][ T3335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.853394][ T3335] bond0 (unregistering): Released all slaves [ 85.879757][ T6109] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6109 comm=syz.4.644 [ 85.908683][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.957256][ T3335] hsr_slave_0: left promiscuous mode [ 85.963072][ T3335] hsr_slave_1: left promiscuous mode [ 85.973673][ T3335] batman_adv: batadv0: Removing interface: dummy0 [ 86.007359][ T3335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.024149][ T3335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.060639][ T6119] loop5: detected capacity change from 0 to 128 [ 86.101309][ T3335] team0 (unregistering): Port device team_slave_1 removed [ 86.126233][ T3335] team0 (unregistering): Port device team_slave_0 removed [ 86.185501][ T6133] loop5: detected capacity change from 0 to 128 [ 86.279447][ T6127] infiniband syz!: set down [ 86.284100][ T6127] infiniband syz!: added team_slave_0 [ 86.299750][ T6063] chnl_net:caif_netlink_parms(): no params data found [ 86.315138][ T6127] RDS/IB: syz!: added [ 86.323363][ T6127] smc: adding ib device syz! with port count 1 [ 86.329352][ T6150] loop5: detected capacity change from 0 to 512 [ 86.330027][ T6127] smc: ib device syz! port 1 has pnetid [ 86.368965][ T6150] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 86.413775][ T6150] EXT4-fs (loop5): 1 truncate cleaned up [ 86.432749][ T6150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.437362][ T5901] veth0_vlan: entered promiscuous mode [ 86.495223][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.502335][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.528116][ T6063] bridge_slave_0: entered allmulticast mode [ 86.535410][ T6063] bridge_slave_0: entered promiscuous mode [ 86.545356][ T5901] veth1_vlan: entered promiscuous mode [ 86.567002][ T5901] veth0_macvtap: entered promiscuous mode [ 86.574310][ T5901] veth1_macvtap: entered promiscuous mode [ 86.584812][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.593884][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.602220][ T5901] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.610996][ T5901] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.619903][ T5901] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.628894][ T5901] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.650372][ T6063] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.654605][ T4426] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /51/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 86.657774][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.682130][ T4426] EXT4-fs (loop5): Remounting filesystem read-only [ 86.687401][ T6063] bridge_slave_1: entered allmulticast mode [ 86.702189][ T6063] bridge_slave_1: entered promiscuous mode [ 86.717207][ T6170] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.739405][ T6170] bridge0: port 3(syz_tun) entered disabled state [ 86.748007][ T6170] syz_tun (unregistering): left allmulticast mode [ 86.754645][ T6170] syz_tun (unregistering): left promiscuous mode [ 86.761236][ T6170] bridge0: port 3(syz_tun) entered disabled state [ 86.784709][ T6063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.803225][ T6063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.825897][ T6175] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6175 comm=syz.0.655 [ 86.853023][ T6063] team0: Port device team_slave_0 added [ 86.874038][ T6063] team0: Port device team_slave_1 added [ 86.885418][ T6185] loop7: detected capacity change from 0 to 128 [ 86.901327][ T6063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.908529][ T6063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.934722][ T6063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.962303][ T6184] loop4: detected capacity change from 0 to 8192 [ 86.979757][ T6063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.986904][ T6063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.012907][ T6063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.117008][ T6200] x_tables: duplicate underflow at hook 2 [ 87.155067][ T6204] loop4: detected capacity change from 0 to 128 [ 87.191920][ T51] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.239971][ T6063] hsr_slave_0: entered promiscuous mode [ 87.261000][ T6063] hsr_slave_1: entered promiscuous mode [ 87.283301][ T51] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.321435][ T6215] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 87.371105][ T6230] loop7: detected capacity change from 0 to 512 [ 87.382933][ T51] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.396961][ T6230] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.448096][ T51] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.664964][ T6063] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 87.687503][ T6063] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 87.714468][ T51] bridge_slave_1: left allmulticast mode [ 87.720149][ T51] bridge_slave_1: left promiscuous mode [ 87.725870][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.736343][ T51] bridge_slave_0: left allmulticast mode [ 87.742001][ T51] bridge_slave_0: left promiscuous mode [ 87.747684][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.856161][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.865960][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.877834][ T51] bond0 (unregistering): Released all slaves [ 87.886951][ T6063] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 87.896145][ T6063] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 87.915513][ T6207] chnl_net:caif_netlink_parms(): no params data found [ 88.116268][ T51] hsr_slave_0: left promiscuous mode [ 88.150386][ T51] hsr_slave_1: left promiscuous mode [ 88.167480][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.175212][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.208794][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.216260][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.256607][ T51] veth1_macvtap: left promiscuous mode [ 88.262243][ T51] veth0_macvtap: left promiscuous mode [ 88.268165][ T51] veth1_vlan: left promiscuous mode [ 88.273586][ T51] veth0_vlan: left promiscuous mode [ 88.296823][ T5901] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.406861][ T51] team0 (unregistering): Port device team_slave_1 removed [ 88.418013][ T51] team0 (unregistering): Port device team_slave_0 removed [ 88.470690][ T6207] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.477859][ T6207] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.493652][ T6207] bridge_slave_0: entered allmulticast mode [ 88.503969][ T6207] bridge_slave_0: entered promiscuous mode [ 88.522533][ T6207] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.529698][ T6207] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.547129][ T6207] bridge_slave_1: entered allmulticast mode [ 88.563353][ T6207] bridge_slave_1: entered promiscuous mode [ 88.645147][ T6063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.655822][ T6063] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.816068][ T6207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.843205][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.850310][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.869774][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.876870][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.902500][ T6063] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.912966][ T6063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.927465][ T6207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.994569][ T6207] team0: Port device team_slave_0 added [ 89.001999][ T6207] team0: Port device team_slave_1 added [ 89.037105][ T6063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.077144][ T6207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.084208][ T6207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.110295][ T6207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.155494][ T6207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.162478][ T6207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.188683][ T6207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.215049][ T6338] smc: net device bond0 applied user defined pnetid SYZ0 [ 89.222436][ T6338] smc: net device bond0 erased user defined pnetid SYZ0 [ 89.260692][ T6338] __nla_validate_parse: 1 callbacks suppressed [ 89.260711][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.671'. [ 89.300484][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 89.300500][ T29] audit: type=1400 audit(1753680284.063:3106): avc: denied { create } for pid=6347 comm="syz.7.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.352579][ T6355] loop4: detected capacity change from 0 to 512 [ 89.355780][ T6207] hsr_slave_0: entered promiscuous mode [ 89.385039][ T6207] hsr_slave_1: entered promiscuous mode [ 89.401499][ T6207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.401645][ T29] audit: type=1400 audit(1753680284.133:3107): avc: denied { read } for pid=6347 comm="syz.7.672" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 89.421281][ T6207] Cannot create hsr debugfs directory [ 89.432247][ T29] audit: type=1400 audit(1753680284.133:3108): avc: denied { open } for pid=6347 comm="syz.7.672" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 89.442902][ T6063] veth0_vlan: entered promiscuous mode [ 89.461282][ T29] audit: type=1400 audit(1753680284.133:3109): avc: denied { ioctl } for pid=6347 comm="syz.7.672" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 89.492207][ T29] audit: type=1326 audit(1753680284.233:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.7.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f486e9a9 code=0x7ffc0000 [ 89.515802][ T29] audit: type=1326 audit(1753680284.233:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.7.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fc2f486e9a9 code=0x7ffc0000 [ 89.539128][ T29] audit: type=1326 audit(1753680284.233:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.7.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f486e9a9 code=0x7ffc0000 [ 89.562687][ T29] audit: type=1326 audit(1753680284.233:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.7.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fc2f486e9a9 code=0x7ffc0000 [ 89.586121][ T29] audit: type=1326 audit(1753680284.233:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.7.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f486e9a9 code=0x7ffc0000 [ 89.609448][ T29] audit: type=1326 audit(1753680284.233:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.7.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2f486e9a9 code=0x7ffc0000 [ 89.623535][ T6367] netlink: 'syz.0.670': attribute type 21 has an invalid length. [ 89.647717][ T6063] veth1_vlan: entered promiscuous mode [ 89.704849][ T6355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.721637][ T6063] veth0_macvtap: entered promiscuous mode [ 89.778669][ T6344] netlink: 'syz.0.670': attribute type 16 has an invalid length. [ 89.786536][ T6344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.670'. [ 89.818649][ T6063] veth1_macvtap: entered promiscuous mode [ 89.860124][ T6063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.881636][ T6207] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 89.893374][ T6063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.911225][ T6207] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 89.927500][ T6063] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.936274][ T6063] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.945194][ T6063] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.954172][ T6063] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.979172][ T6207] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 89.989296][ T6207] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 90.273198][ T6207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.307225][ T6207] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.344934][ T3442] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.352322][ T3442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.368963][ T3442] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.376195][ T3442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.460237][ T6207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.537066][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.571765][ T6207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.604586][ T6438] loop4: detected capacity change from 0 to 512 [ 90.908864][ T6207] veth0_vlan: entered promiscuous mode [ 90.915919][ T6463] loop7: detected capacity change from 0 to 128 [ 90.950962][ T6207] veth1_vlan: entered promiscuous mode [ 91.024449][ T6207] veth0_macvtap: entered promiscuous mode [ 91.032645][ T6207] veth1_macvtap: entered promiscuous mode [ 91.085829][ T6207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.121018][ T6207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.130616][ T6207] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.139566][ T6207] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.148407][ T6207] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.157207][ T6207] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.300420][ T6486] loop9: detected capacity change from 0 to 1024 [ 91.315988][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.7.686'. [ 91.406133][ T6500] netlink: 44 bytes leftover after parsing attributes in process `syz.7.686'. [ 91.447951][ T6508] FAULT_INJECTION: forcing a failure. [ 91.447951][ T6508] name failslab, interval 1, probability 0, space 0, times 0 [ 91.460838][ T6508] CPU: 1 UID: 0 PID: 6508 Comm: syz.8.688 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 91.460864][ T6508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.460876][ T6508] Call Trace: [ 91.460889][ T6508] [ 91.460897][ T6508] __dump_stack+0x1d/0x30 [ 91.460917][ T6508] dump_stack_lvl+0xe8/0x140 [ 91.460935][ T6508] dump_stack+0x15/0x1b [ 91.460953][ T6508] should_fail_ex+0x265/0x280 [ 91.460982][ T6508] should_failslab+0x8c/0xb0 [ 91.461041][ T6508] kmem_cache_alloc_noprof+0x50/0x310 [ 91.461103][ T6508] ? security_file_alloc+0x32/0x100 [ 91.461122][ T6508] security_file_alloc+0x32/0x100 [ 91.461191][ T6508] init_file+0x5c/0x1d0 [ 91.461215][ T6508] alloc_empty_file+0x8b/0x200 [ 91.461240][ T6508] alloc_file_pseudo+0xc6/0x160 [ 91.461332][ T6508] __shmem_file_setup+0x1de/0x210 [ 91.461372][ T6508] shmem_file_setup+0x3b/0x50 [ 91.461480][ T6508] __se_sys_memfd_create+0x2c3/0x590 [ 91.461514][ T6508] __x64_sys_memfd_create+0x31/0x40 [ 91.461546][ T6508] x64_sys_call+0x122f/0x2fb0 [ 91.461571][ T6508] do_syscall_64+0xd2/0x200 [ 91.461652][ T6508] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 91.461812][ T6508] ? clear_bhb_loop+0x40/0x90 [ 91.461857][ T6508] ? clear_bhb_loop+0x40/0x90 [ 91.461881][ T6508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.461904][ T6508] RIP: 0033:0x7f75fd6ee9a9 [ 91.461942][ T6508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.461962][ T6508] RSP: 002b:00007f75fbd4ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 91.461982][ T6508] RAX: ffffffffffffffda RBX: 0000000000000446 RCX: 00007f75fd6ee9a9 [ 91.461996][ T6508] RDX: 00007f75fbd4eef0 RSI: 0000000000000000 RDI: 00007f75fd7716fc [ 91.462009][ T6508] RBP: 0000200000000d40 R08: 00007f75fbd4ebb7 R09: 00007f75fbd4ee40 [ 91.462073][ T6508] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 91.462086][ T6508] R13: 00007f75fbd4eef0 R14: 00007f75fbd4eeb0 R15: 0000200000000480 [ 91.462167][ T6508] [ 91.833882][ T6514] loop9: detected capacity change from 0 to 8192 [ 92.300447][ T6566] FAULT_INJECTION: forcing a failure. [ 92.300447][ T6566] name failslab, interval 1, probability 0, space 0, times 0 [ 92.313237][ T6566] CPU: 1 UID: 0 PID: 6566 Comm: syz.7.696 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 92.313294][ T6566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.313307][ T6566] Call Trace: [ 92.313313][ T6566] [ 92.313335][ T6566] __dump_stack+0x1d/0x30 [ 92.313385][ T6566] dump_stack_lvl+0xe8/0x140 [ 92.313409][ T6566] dump_stack+0x15/0x1b [ 92.313426][ T6566] should_fail_ex+0x265/0x280 [ 92.313470][ T6566] ? garp_init_applicant+0x94/0x2d0 [ 92.313506][ T6566] should_failslab+0x8c/0xb0 [ 92.313525][ T6566] __kmalloc_cache_noprof+0x4c/0x320 [ 92.313550][ T6566] ? __list_add_valid_or_report+0x38/0xe0 [ 92.313644][ T6566] garp_init_applicant+0x94/0x2d0 [ 92.313673][ T6566] vlan_gvrp_init_applicant+0x1c/0x30 [ 92.313696][ T6566] register_vlan_dev+0xfb/0x480 [ 92.313780][ T6566] vlan_newlink+0x32a/0x370 [ 92.313800][ T6566] ? __pfx_vlan_newlink+0x10/0x10 [ 92.313870][ T6566] rtnl_newlink_create+0x1b9/0x620 [ 92.313895][ T6566] ? security_capable+0x83/0x90 [ 92.313922][ T6566] ? netlink_ns_capable+0x86/0xa0 [ 92.313954][ T6566] rtnl_newlink+0xf29/0x12d0 [ 92.314035][ T6566] ? __kfree_skb+0x109/0x150 [ 92.314119][ T6566] ? __kfree_skb+0x109/0x150 [ 92.314228][ T6566] ? __traceiter_kmem_cache_free+0x38/0x60 [ 92.314258][ T6566] ? __kfree_skb+0x109/0x150 [ 92.314288][ T6566] ? __rcu_read_unlock+0x4f/0x70 [ 92.314337][ T6566] ? avc_has_perm_noaudit+0x1b1/0x200 [ 92.314448][ T6566] ? selinux_capable+0x1f9/0x270 [ 92.314482][ T6566] ? security_capable+0x83/0x90 [ 92.314510][ T6566] ? ns_capable+0x7d/0xb0 [ 92.314529][ T6566] ? __pfx_rtnl_newlink+0x10/0x10 [ 92.314552][ T6566] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 92.314583][ T6566] netlink_rcv_skb+0x123/0x220 [ 92.314616][ T6566] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 92.314642][ T6566] rtnetlink_rcv+0x1c/0x30 [ 92.314716][ T6566] netlink_unicast+0x5a8/0x680 [ 92.314749][ T6566] netlink_sendmsg+0x58b/0x6b0 [ 92.314771][ T6566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.314793][ T6566] __sock_sendmsg+0x142/0x180 [ 92.314823][ T6566] ____sys_sendmsg+0x31e/0x4e0 [ 92.314846][ T6566] ___sys_sendmsg+0x17b/0x1d0 [ 92.314877][ T6566] __x64_sys_sendmsg+0xd4/0x160 [ 92.314901][ T6566] x64_sys_call+0x2999/0x2fb0 [ 92.314924][ T6566] do_syscall_64+0xd2/0x200 [ 92.314991][ T6566] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 92.315018][ T6566] ? clear_bhb_loop+0x40/0x90 [ 92.315040][ T6566] ? clear_bhb_loop+0x40/0x90 [ 92.315140][ T6566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.315163][ T6566] RIP: 0033:0x7fc2f486e9a9 [ 92.315179][ T6566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.315262][ T6566] RSP: 002b:00007fc2f2ed7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.315282][ T6566] RAX: ffffffffffffffda RBX: 00007fc2f4a95fa0 RCX: 00007fc2f486e9a9 [ 92.315339][ T6566] RDX: 0000000008000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 92.315352][ T6566] RBP: 00007fc2f2ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 92.315363][ T6566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.315376][ T6566] R13: 0000000000000000 R14: 00007fc2f4a95fa0 R15: 00007ffff339a878 [ 92.315393][ T6566] [ 92.850776][ T6592] loop8: detected capacity change from 0 to 1024 [ 92.857853][ T6583] loop9: detected capacity change from 0 to 2048 [ 92.976075][ T6592] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.702: Allocating blocks 497-513 which overlap fs metadata [ 92.990625][ T6592] EXT4-fs (loop8): pa ffff8881071c48c0: logic 256, phys. 369, len 9 [ 92.998695][ T6592] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 93.009647][ T6592] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 93.106664][ T6608] loop7: detected capacity change from 0 to 512 [ 93.149537][ T6613] loop9: detected capacity change from 0 to 512 [ 93.266677][ T6621] loop8: detected capacity change from 0 to 512 [ 93.286547][ T6621] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.611604][ T6647] netlink: 36 bytes leftover after parsing attributes in process `syz.0.708'. [ 93.653048][ T6650] loop8: detected capacity change from 0 to 512 [ 94.465808][ T6698] vlan2: entered promiscuous mode [ 94.470969][ T6698] vlan2: entered allmulticast mode [ 94.476267][ T6698] hsr_slave_1: entered allmulticast mode [ 94.530538][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.7.710'. [ 94.672138][ T6709] loop7: detected capacity change from 0 to 512 [ 94.707292][ T6709] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 94.754894][ T6709] EXT4-fs (loop7): 1 truncate cleaned up [ 94.803090][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 94.803105][ T29] audit: type=1400 audit(1753680289.563:3453): avc: denied { write } for pid=6726 comm="syz.0.718" name="file0" dev="tmpfs" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.831989][ T29] audit: type=1400 audit(1753680289.563:3454): avc: denied { open } for pid=6726 comm="syz.0.718" path="/148/file0" dev="tmpfs" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.860451][ T6738] loop8: detected capacity change from 0 to 512 [ 94.923035][ T6738] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.927115][ T6743] vlan2: entered promiscuous mode [ 94.938679][ T6743] vlan2: entered allmulticast mode [ 94.943814][ T6743] hsr_slave_1: entered allmulticast mode [ 94.985259][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 95.290309][ T6762] loop8: detected capacity change from 0 to 1024 [ 95.313565][ T29] audit: type=1400 audit(1753680290.003:3455): avc: denied { create } for pid=6754 comm="syz.0.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.333413][ T29] audit: type=1400 audit(1753680290.013:3456): avc: denied { setopt } for pid=6754 comm="syz.0.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.353130][ T29] audit: type=1400 audit(1753680290.013:3457): avc: denied { bind } for pid=6754 comm="syz.0.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.372550][ T29] audit: type=1400 audit(1753680290.013:3458): avc: denied { listen } for pid=6754 comm="syz.0.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.392206][ T29] audit: type=1400 audit(1753680290.023:3459): avc: denied { connect } for pid=6754 comm="syz.0.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.472102][ T6757] loop4: detected capacity change from 0 to 8192 [ 95.497079][ T6762] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.723: Allocating blocks 497-513 which overlap fs metadata [ 95.544040][ T6762] EXT4-fs (loop8): pa ffff888100766540: logic 256, phys. 369, len 9 [ 95.552284][ T6762] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 95.605907][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.9.725'. [ 95.617013][ T6774] loop4: detected capacity change from 0 to 1024 [ 95.629639][ T6762] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 95.687075][ T6774] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.724: Allocating blocks 497-513 which overlap fs metadata [ 95.728570][ T6774] EXT4-fs (loop4): pa ffff8881007665b0: logic 256, phys. 369, len 9 [ 95.731267][ T6779] netlink: 36 bytes leftover after parsing attributes in process `syz.9.725'. [ 95.736792][ T6774] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 95.738099][ T6774] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, [ 95.755720][ T29] audit: type=1400 audit(1753680290.483:3460): avc: denied { connect } for pid=6783 comm="syz.7.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.755747][ T29] audit: type=1400 audit(1753680290.483:3461): avc: denied { write } for pid=6783 comm="syz.7.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.763370][ T6774] inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 95.812828][ T6790] netlink: 44 bytes leftover after parsing attributes in process `syz.9.725'. [ 95.833124][ T6791] loop7: detected capacity change from 0 to 128 [ 95.923052][ T6799] loop4: detected capacity change from 0 to 128 [ 95.936711][ T6796] loop8: detected capacity change from 0 to 512 [ 95.975754][ T6796] EXT4-fs (loop8): too many log groups per flexible block group [ 95.983590][ T6796] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 95.991705][ T6796] EXT4-fs (loop8): mount failed [ 96.028525][ T6810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.736'. [ 96.081730][ T6818] loop8: detected capacity change from 0 to 512 [ 96.090759][ T6818] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 96.111050][ T6824] netlink: 36 bytes leftover after parsing attributes in process `syz.4.736'. [ 96.123290][ T6818] EXT4-fs (loop8): 1 truncate cleaned up [ 96.130054][ T6818] EXT4-fs mount: 24 callbacks suppressed [ 96.130068][ T6818] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.157781][ T6824] netlink: 44 bytes leftover after parsing attributes in process `syz.4.736'. [ 96.842769][ T6856] loop7: detected capacity change from 0 to 1024 [ 96.902322][ T6856] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.948302][ T6856] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.740: Allocating blocks 497-513 which overlap fs metadata [ 96.963927][ T6856] EXT4-fs (loop7): pa ffff8881071c4930: logic 256, phys. 369, len 9 [ 96.971937][ T6856] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 96.982914][ T6856] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 96.998933][ T6862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.741'. [ 97.008038][ T6862] tmpfs: Bad value for 'mpol' [ 97.036818][ T5901] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.149212][ T6063] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.160184][ T6868] loop7: detected capacity change from 0 to 128 [ 97.179680][ T6850] Set syz1 is full, maxelem 65536 reached [ 97.270221][ T6879] netlink: 84 bytes leftover after parsing attributes in process `syz.0.741'. [ 97.806757][ T6898] loop4: detected capacity change from 0 to 1024 [ 97.826400][ T6898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.840320][ T6898] FAULT_INJECTION: forcing a failure. [ 97.840320][ T6898] name failslab, interval 1, probability 0, space 0, times 0 [ 97.853078][ T6898] CPU: 0 UID: 0 PID: 6898 Comm: wÞ¡ÿ Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 97.853106][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.853168][ T6898] Call Trace: [ 97.853173][ T6898] [ 97.853180][ T6898] __dump_stack+0x1d/0x30 [ 97.853200][ T6898] dump_stack_lvl+0xe8/0x140 [ 97.853251][ T6898] dump_stack+0x15/0x1b [ 97.853268][ T6898] should_fail_ex+0x265/0x280 [ 97.853308][ T6898] should_failslab+0x8c/0xb0 [ 97.853329][ T6898] kmem_cache_alloc_noprof+0x50/0x310 [ 97.853379][ T6898] ? __es_insert_extent+0x508/0xee0 [ 97.853458][ T6898] __es_insert_extent+0x508/0xee0 [ 97.853477][ T6898] ? kick_pool+0x267/0x2d0 [ 97.853513][ T6898] ? __rcu_read_unlock+0x34/0x70 [ 97.853533][ T6898] ? should_fail_ex+0xdb/0x280 [ 97.853600][ T6898] ext4_es_insert_extent+0x435/0x1c10 [ 97.853620][ T6898] ? ext4_find_extent+0x16b/0x7a0 [ 97.853656][ T6898] ext4_ext_map_blocks+0x172b/0x38a0 [ 97.853688][ T6898] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 97.853717][ T6898] ? _raw_spin_unlock+0x26/0x50 [ 97.853750][ T6898] ? finish_task_switch+0xad/0x2b0 [ 97.853804][ T6898] ? __schedule+0x6a8/0xb30 [ 97.853828][ T6898] ? schedule+0x5f/0xd0 [ 97.853857][ T6898] ext4_map_query_blocks+0xa8/0x480 [ 97.853939][ T6898] ext4_map_blocks+0x3a1/0xd70 [ 97.853975][ T6898] ? __ext4_journal_start_sb+0x131/0x300 [ 97.854005][ T6898] ext4_iomap_begin+0x93a/0xe00 [ 97.854073][ T6898] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 97.854096][ T6898] iomap_iter+0x335/0x730 [ 97.854121][ T6898] ? should_failslab+0x8c/0xb0 [ 97.854145][ T6898] __iomap_dio_rw+0x708/0x1250 [ 97.854217][ T6898] ? ext4_xattr_security_get+0x32/0x40 [ 97.854247][ T6898] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 97.854289][ T6898] ? ext4_journal_check_start+0x11a/0x1b0 [ 97.854318][ T6898] iomap_dio_rw+0x40/0x90 [ 97.854386][ T6898] ext4_file_write_iter+0xad9/0xf00 [ 97.854415][ T6898] do_iter_readv_writev+0x421/0x4c0 [ 97.854449][ T6898] vfs_writev+0x2df/0x8b0 [ 97.854546][ T6898] __se_sys_pwritev2+0xfc/0x1c0 [ 97.854565][ T6898] __x64_sys_pwritev2+0x67/0x80 [ 97.854587][ T6898] x64_sys_call+0x1cea/0x2fb0 [ 97.854644][ T6898] do_syscall_64+0xd2/0x200 [ 97.854663][ T6898] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 97.854689][ T6898] ? clear_bhb_loop+0x40/0x90 [ 97.854757][ T6898] ? clear_bhb_loop+0x40/0x90 [ 97.854780][ T6898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.854833][ T6898] RIP: 0033:0x7fc630a0e9a9 [ 97.854849][ T6898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.854867][ T6898] RSP: 002b:00007fc62f06f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 97.855007][ T6898] RAX: ffffffffffffffda RBX: 00007fc630c35fa0 RCX: 00007fc630a0e9a9 [ 97.855020][ T6898] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 97.855031][ T6898] RBP: 00007fc62f06f090 R08: 0000000000000000 R09: 0000000000000003 [ 97.855042][ T6898] R10: 0000000000007c00 R11: 0000000000000246 R12: 0000000000000001 [ 97.855052][ T6898] R13: 0000000000000000 R14: 00007fc630c35fa0 R15: 00007ffc03b164f8 [ 97.855069][ T6898] [ 98.201284][ T6898] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 98.221309][ T29] audit: type=1400 audit(1753680292.983:3462): avc: denied { write } for pid=6903 comm="syz.8.750" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 98.265606][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.362373][ T6912] loop4: detected capacity change from 0 to 8192 [ 98.421138][ T6918] loop8: detected capacity change from 0 to 1024 [ 98.427787][ T6915] loop9: detected capacity change from 0 to 512 [ 98.626693][ T6918] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.648426][ T6915] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.820564][ T6918] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.754: Allocating blocks 497-513 which overlap fs metadata [ 98.837911][ T6915] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.882835][ T6915] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.912876][ T6918] EXT4-fs (loop8): pa ffff888100766690: logic 256, phys. 369, len 9 [ 98.921191][ T6918] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 98.970232][ T6935] loop4: detected capacity change from 0 to 1024 [ 99.012277][ T6935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.053707][ T6918] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 99.190459][ T6935] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 99.215062][ T6063] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.254400][ T6952] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6952 comm=syz.0.760 [ 99.468928][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.533926][ T6949] Set syz1 is full, maxelem 65536 reached [ 99.560267][ T6980] __nla_validate_parse: 2 callbacks suppressed [ 99.560282][ T6980] netlink: 24 bytes leftover after parsing attributes in process `syz.7.763'. [ 99.640266][ T6984] netlink: 32 bytes leftover after parsing attributes in process `syz.7.764'. [ 99.699330][ T6991] loop7: detected capacity change from 0 to 512 [ 99.711152][ T6991] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.059314][ T6999] loop9: detected capacity change from 0 to 8192 [ 100.130253][ T7002] ALSA: seq fatal error: cannot create timer (-22) [ 100.138076][ T29] audit: type=1326 audit(1753680294.903:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.9.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a5dce9a9 code=0x7ffc0000 [ 100.168572][ T29] audit: type=1326 audit(1753680294.933:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.9.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55a5dce9a9 code=0x7ffc0000 [ 100.192483][ T29] audit: type=1326 audit(1753680294.933:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.9.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a5dce9a9 code=0x7ffc0000 [ 100.216202][ T29] audit: type=1326 audit(1753680294.933:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.9.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55a5dce9a9 code=0x7ffc0000 [ 100.239649][ T29] audit: type=1326 audit(1753680294.933:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.9.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a5dce9a9 code=0x7ffc0000 [ 100.263111][ T29] audit: type=1326 audit(1753680294.933:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.9.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a5dce9a9 code=0x7ffc0000 [ 100.286601][ T29] audit: type=1326 audit(1753680294.933:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.9.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f55a5dce9a9 code=0x7ffc0000 [ 100.310291][ T29] audit: type=1400 audit(1753680294.933:3470): avc: denied { write } for pid=7001 comm="syz.9.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.329658][ T29] audit: type=1400 audit(1753680294.933:3471): avc: denied { name_connect } for pid=7001 comm="syz.9.767" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 100.351153][ T29] audit: type=1326 audit(1753680294.933:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.9.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a5dce9a9 code=0x7ffc0000 [ 100.393887][ T7005] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 100.408870][ T7008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.769'. [ 100.423385][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.771'. [ 100.437590][ T7011] vlan2: entered promiscuous mode [ 100.442901][ T7011] vlan2: entered allmulticast mode [ 100.448087][ T7011] hsr_slave_1: entered allmulticast mode [ 100.455437][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.9.770'. [ 100.474347][ T7013] netlink: 36 bytes leftover after parsing attributes in process `syz.0.769'. [ 100.507376][ T7013] netlink: 44 bytes leftover after parsing attributes in process `syz.0.769'. [ 100.509765][ T7016] netlink: 36 bytes leftover after parsing attributes in process `syz.4.771'. [ 100.534767][ T7018] netlink: 300 bytes leftover after parsing attributes in process `syz.9.773'. [ 100.548182][ T7016] netlink: 44 bytes leftover after parsing attributes in process `syz.4.771'. [ 100.774648][ T7032] loop8: detected capacity change from 0 to 8192 [ 100.823002][ T5901] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.276961][ T7051] netlink: 'syz.4.781': attribute type 8 has an invalid length. [ 101.290165][ T7051] loop4: detected capacity change from 0 to 512 [ 101.297380][ T7051] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.304108][ T7051] EXT4-fs: test_dummy_encryption option not supported [ 101.408258][ T7057] netlink: 'syz.9.784': attribute type 15 has an invalid length. [ 101.416212][ T7057] netlink: 'syz.9.784': attribute type 7 has an invalid length. [ 101.696547][ T7079] hsr_slave_1 (unregistering): left promiscuous mode [ 101.716447][ T7081] loop7: detected capacity change from 0 to 512 [ 101.723392][ T7081] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 101.743665][ T7081] EXT4-fs (loop7): 1 truncate cleaned up [ 101.749742][ T7081] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.375021][ T7122] geneve2: entered promiscuous mode [ 102.380260][ T7122] geneve2: entered allmulticast mode [ 102.484099][ T7129] loop9: detected capacity change from 0 to 512 [ 102.528711][ T7129] EXT4-fs (loop9): too many log groups per flexible block group [ 102.536450][ T7129] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 102.546117][ T7129] EXT4-fs (loop9): mount failed [ 102.705155][ T7146] netlink: 'syz.9.806': attribute type 1 has an invalid length. [ 102.759930][ T7153] x_tables: duplicate underflow at hook 2 [ 102.790846][ T7155] loop9: detected capacity change from 0 to 128 [ 102.908236][ T7158] loop9: detected capacity change from 0 to 512 [ 102.957121][ T7158] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.339014][ T7166] loop4: detected capacity change from 0 to 8192 [ 103.424244][ T7151] Set syz1 is full, maxelem 65536 reached [ 103.483230][ T7169] loop4: detected capacity change from 0 to 164 [ 103.494303][ T7169] Unable to read rock-ridge attributes [ 103.522288][ T7169] Unable to read rock-ridge attributes [ 103.552833][ T5901] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.625723][ T7172] loop4: detected capacity change from 0 to 512 [ 103.684887][ T7172] EXT4-fs (loop4): too many log groups per flexible block group [ 103.692706][ T7172] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 103.700519][ T7172] EXT4-fs (loop4): mount failed [ 103.764138][ T7190] vlan3: entered promiscuous mode [ 103.769308][ T7190] vlan3: entered allmulticast mode [ 103.774513][ T7190] hsr_slave_1: entered allmulticast mode [ 103.849235][ T6207] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.892374][ T7198] loop4: detected capacity change from 0 to 512 [ 103.899299][ T7199] loop9: detected capacity change from 0 to 512 [ 103.909037][ T7198] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.923254][ T7198] EXT4-fs (loop4): 1 truncate cleaned up [ 103.931970][ T7198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.946583][ T7199] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.529365][ T7226] loop8: detected capacity change from 0 to 512 [ 104.583225][ T7226] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.834985][ T7242] __nla_validate_parse: 18 callbacks suppressed [ 104.835002][ T7242] netlink: 300 bytes leftover after parsing attributes in process `syz.7.824'. [ 104.937949][ T7246] netlink: 24 bytes leftover after parsing attributes in process `syz.0.825'. [ 104.948929][ T7248] netlink: 36 bytes leftover after parsing attributes in process `syz.7.824'. [ 105.367717][ T6207] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.477057][ T7280] x_tables: duplicate underflow at hook 2 [ 105.667235][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.702727][ T7301] loop4: detected capacity change from 0 to 512 [ 105.711022][ T6063] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.732818][ T7301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.809837][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 105.809852][ T29] audit: type=1400 audit(1753680300.573:3710): avc: denied { read } for pid=7312 comm="syz.8.833" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 105.843385][ T7315] netlink: 28 bytes leftover after parsing attributes in process `syz.8.833'. [ 105.854361][ T29] audit: type=1400 audit(1753680300.623:3711): avc: denied { ioctl } for pid=7312 comm="syz.8.833" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 105.904960][ T7322] loop8: detected capacity change from 0 to 128 [ 105.921280][ T7324] netlink: 12 bytes leftover after parsing attributes in process `syz.7.835'. [ 106.003775][ T3335] kworker/u8:6: attempt to access beyond end of device [ 106.003775][ T3335] loop8: rw=2049, sector=897, nr_sectors = 96 limit=128 [ 106.029215][ T3335] kworker/u8:6: attempt to access beyond end of device [ 106.029215][ T3335] loop8: rw=1, sector=993, nr_sectors = 48 limit=128 [ 106.115797][ T29] audit: type=1400 audit(1753680300.883:3712): avc: denied { create } for pid=7337 comm="syz.8.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.261614][ T7333] bridge0: port 3(syz_tun) entered disabled state [ 106.270417][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.277806][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.317343][ T7333] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 106.657038][ T29] audit: type=1400 audit(1753680301.363:3713): avc: denied { read } for pid=7337 comm="syz.8.838" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 106.680763][ T29] audit: type=1400 audit(1753680301.363:3714): avc: denied { open } for pid=7337 comm="syz.8.838" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 106.804291][ T7358] loop7: detected capacity change from 0 to 512 [ 106.819240][ T7358] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.865457][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.889441][ T7372] x_tables: duplicate underflow at hook 2 [ 106.990068][ T7386] loop9: detected capacity change from 0 to 512 [ 107.003231][ T7381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.846'. [ 107.030112][ T29] audit: type=1400 audit(1753680301.763:3715): avc: denied { remount } for pid=7379 comm="syz.4.846" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 107.078936][ T7386] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.080208][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.849'. [ 107.116823][ T7386] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.147865][ T7386] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.847: corrupted xattr block 19: overlapping e_value [ 107.162714][ T7386] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 107.173379][ T7405] netlink: 44 bytes leftover after parsing attributes in process `syz.0.849'. [ 107.193835][ T7408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.850'. [ 107.206117][ T7386] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.847: corrupted xattr block 19: overlapping e_value [ 107.224915][ T7386] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 107.243808][ T7386] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.847: corrupted xattr block 19: overlapping e_value [ 107.267690][ T29] audit: type=1400 audit(1753680302.013:3716): avc: denied { read } for pid=7385 comm="syz.9.847" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.289841][ T29] audit: type=1326 audit(1753680302.033:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7413 comm="syz.8.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fd6ee9a9 code=0x7ffc0000 [ 107.313483][ T29] audit: type=1326 audit(1753680302.033:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7413 comm="syz.8.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fd6ee9a9 code=0x7ffc0000 [ 107.337026][ T29] audit: type=1326 audit(1753680302.033:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7413 comm="syz.8.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f75fd6ee9a9 code=0x7ffc0000 [ 107.365100][ T7416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.850'. [ 107.385132][ T7386] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 107.394786][ T7410] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.847: corrupted xattr block 19: overlapping e_value [ 107.413586][ T7410] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 107.431874][ T7410] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.847: corrupted xattr block 19: overlapping e_value [ 107.455472][ T7386] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.847: corrupted xattr block 19: overlapping e_value [ 107.470078][ T7386] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 107.508864][ T7410] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 107.518128][ T7410] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.847: corrupted xattr block 19: overlapping e_value [ 107.536343][ T7386] EXT4-fs error (device loop9): ext4_xattr_block_find:1869: inode #15: comm syz.9.847: corrupted xattr block 19: overlapping e_value [ 107.552389][ T7423] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.847: corrupted xattr block 19: overlapping e_value [ 107.567758][ T7423] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 107.603710][ T7423] EXT4-fs error (device loop9): ext4_xattr_block_find:1869: inode #15: comm syz.9.847: corrupted xattr block 19: overlapping e_value [ 107.664876][ T7410] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 107.767698][ T7439] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 107.807695][ T6207] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.886453][ T7448] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.903677][ T5901] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.969897][ T7460] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7460 comm=syz.9.859 [ 108.046693][ T7464] loop7: detected capacity change from 0 to 512 [ 108.127308][ T7464] EXT4-fs (loop7): too many log groups per flexible block group [ 108.135081][ T7464] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 108.143652][ T7464] EXT4-fs (loop7): mount failed [ 108.197398][ T7475] loop4: detected capacity change from 0 to 8192 [ 108.241067][ T7490] loop7: detected capacity change from 0 to 512 [ 108.282708][ T7490] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.585139][ T7510] FAULT_INJECTION: forcing a failure. [ 108.585139][ T7510] name failslab, interval 1, probability 0, space 0, times 0 [ 108.598332][ T7510] CPU: 1 UID: 0 PID: 7510 Comm: syz.9.868 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 108.598363][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.598376][ T7510] Call Trace: [ 108.598382][ T7510] [ 108.598389][ T7510] __dump_stack+0x1d/0x30 [ 108.598411][ T7510] dump_stack_lvl+0xe8/0x140 [ 108.598455][ T7510] dump_stack+0x15/0x1b [ 108.598470][ T7510] should_fail_ex+0x265/0x280 [ 108.598498][ T7510] should_failslab+0x8c/0xb0 [ 108.598558][ T7510] kmem_cache_alloc_node_noprof+0x57/0x320 [ 108.598607][ T7510] ? __alloc_skb+0x101/0x320 [ 108.598639][ T7510] __alloc_skb+0x101/0x320 [ 108.598671][ T7510] tipc_get_err_tlv+0x35/0xb0 [ 108.598725][ T7510] tipc_nl_compat_recv+0x6c0/0x800 [ 108.598824][ T7510] ? __pfx___tipc_nl_bearer_disable+0x10/0x10 [ 108.598856][ T7510] ? __pfx_tipc_nl_compat_bearer_disable+0x10/0x10 [ 108.598885][ T7510] genl_family_rcv_msg_doit+0x143/0x1b0 [ 108.598916][ T7510] genl_rcv_msg+0x422/0x460 [ 108.599026][ T7510] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 108.599051][ T7510] netlink_rcv_skb+0x123/0x220 [ 108.599153][ T7510] ? __pfx_genl_rcv_msg+0x10/0x10 [ 108.599209][ T7510] genl_rcv+0x28/0x40 [ 108.599228][ T7510] netlink_unicast+0x5a8/0x680 [ 108.599258][ T7510] netlink_sendmsg+0x58b/0x6b0 [ 108.599278][ T7510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.599296][ T7510] __sock_sendmsg+0x142/0x180 [ 108.599400][ T7510] ____sys_sendmsg+0x31e/0x4e0 [ 108.599423][ T7510] ___sys_sendmsg+0x17b/0x1d0 [ 108.599454][ T7510] __x64_sys_sendmsg+0xd4/0x160 [ 108.599475][ T7510] x64_sys_call+0x2999/0x2fb0 [ 108.599495][ T7510] do_syscall_64+0xd2/0x200 [ 108.599542][ T7510] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 108.599626][ T7510] ? clear_bhb_loop+0x40/0x90 [ 108.599647][ T7510] ? clear_bhb_loop+0x40/0x90 [ 108.599741][ T7510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.599832][ T7510] RIP: 0033:0x7f55a5dce9a9 [ 108.599848][ T7510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.599867][ T7510] RSP: 002b:00007f55a4437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.599939][ T7510] RAX: ffffffffffffffda RBX: 00007f55a5ff5fa0 RCX: 00007f55a5dce9a9 [ 108.599953][ T7510] RDX: 0000000000008840 RSI: 0000200000000200 RDI: 0000000000000005 [ 108.599966][ T7510] RBP: 00007f55a4437090 R08: 0000000000000000 R09: 0000000000000000 [ 108.599979][ T7510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.599992][ T7510] R13: 0000000000000000 R14: 00007f55a5ff5fa0 R15: 00007fff0fa8ede8 [ 108.600045][ T7510] [ 108.865967][ T7510] loop9: detected capacity change from 0 to 512 [ 108.881256][ T7455] Set syz1 is full, maxelem 65536 reached [ 108.905309][ T7462] Set syz1 is full, maxelem 65536 reached [ 108.915394][ T7510] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.868: bg 0: block 248: padding at end of block bitmap is not set [ 108.987317][ T7510] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.868: Failed to acquire dquot type 1 [ 109.007786][ T7510] EXT4-fs (loop9): 1 truncate cleaned up [ 109.013858][ T7530] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7530 comm=syz.4.872 [ 109.048133][ T7510] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.060966][ T7510] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.110304][ T6207] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.173598][ T7555] x_tables: duplicate underflow at hook 2 [ 109.290279][ T7553] loop9: detected capacity change from 0 to 8192 [ 109.401896][ T5901] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.440626][ T7579] 9pnet_fd: Insufficient options for proto=fd [ 109.571159][ T7616] loop7: detected capacity change from 0 to 1024 [ 109.584706][ T7616] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.603878][ T7616] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm wÞ¡ÿ: Allocating blocks 497-513 which overlap fs metadata [ 109.619603][ T7616] EXT4-fs (loop7): pa ffff8881071c4930: logic 256, phys. 369, len 9 [ 109.627777][ T7616] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 109.639232][ T7616] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 109.671914][ T5901] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.694036][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.701668][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.709137][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.723913][ T7636] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 109.736076][ T7636] 9pnet_fd: Insufficient options for proto=fd [ 109.742852][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.750460][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.758029][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.765456][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.772868][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.780760][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.788305][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.795731][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.803299][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.810786][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.818330][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.825793][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.833501][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.840896][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.848423][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.855944][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.863479][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.871038][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.878723][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.886164][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.893858][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.901492][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.908936][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.916690][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.924293][ T6416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.932610][ T6416] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz1] on syz0 [ 109.983602][ T7669] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7669 comm=syz.7.885 [ 110.011546][ T7672] FAULT_INJECTION: forcing a failure. [ 110.011546][ T7672] name failslab, interval 1, probability 0, space 0, times 0 [ 110.024407][ T7672] CPU: 1 UID: 0 PID: 7672 Comm: syz.8.886 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 110.024438][ T7672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.024451][ T7672] Call Trace: [ 110.024458][ T7672] [ 110.024466][ T7672] __dump_stack+0x1d/0x30 [ 110.024558][ T7672] dump_stack_lvl+0xe8/0x140 [ 110.024575][ T7672] dump_stack+0x15/0x1b [ 110.024592][ T7672] should_fail_ex+0x265/0x280 [ 110.024704][ T7672] should_failslab+0x8c/0xb0 [ 110.024725][ T7672] kmem_cache_alloc_node_noprof+0x57/0x320 [ 110.024754][ T7672] ? alloc_vmap_area+0x231/0xe50 [ 110.024785][ T7672] alloc_vmap_area+0x231/0xe50 [ 110.024868][ T7672] ? should_failslab+0x8c/0xb0 [ 110.024887][ T7672] ? __kmalloc_cache_node_noprof+0x18a/0x320 [ 110.024917][ T7672] __get_vm_area_node+0x173/0x1d0 [ 110.025007][ T7672] get_vm_area+0x65/0xa0 [ 110.025030][ T7672] ? arena_map_alloc+0x1e6/0x370 [ 110.025050][ T7672] arena_map_alloc+0x1e6/0x370 [ 110.025124][ T7672] map_create+0x840/0xb90 [ 110.025194][ T7672] ? security_bpf+0x2b/0x90 [ 110.025216][ T7672] __sys_bpf+0x5ab/0x790 [ 110.025253][ T7672] __x64_sys_bpf+0x41/0x50 [ 110.025280][ T7672] x64_sys_call+0x2478/0x2fb0 [ 110.025299][ T7672] do_syscall_64+0xd2/0x200 [ 110.025366][ T7672] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 110.025394][ T7672] ? clear_bhb_loop+0x40/0x90 [ 110.025417][ T7672] ? clear_bhb_loop+0x40/0x90 [ 110.025460][ T7672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.025554][ T7672] RIP: 0033:0x7f75fd6ee9a9 [ 110.025571][ T7672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.025638][ T7672] RSP: 002b:00007f75fbd4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.025658][ T7672] RAX: ffffffffffffffda RBX: 00007f75fd915fa0 RCX: 00007f75fd6ee9a9 [ 110.025671][ T7672] RDX: 0000000000000050 RSI: 0000200000000480 RDI: 0000000000000000 [ 110.025685][ T7672] RBP: 00007f75fbd4f090 R08: 0000000000000000 R09: 0000000000000000 [ 110.025698][ T7672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.025711][ T7672] R13: 0000000000000000 R14: 00007f75fd915fa0 R15: 00007ffc028e0068 [ 110.025730][ T7672] [ 110.087107][ T7666] fido_id[7666]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 110.147932][ T7673] loop9: detected capacity change from 0 to 1024 [ 110.199632][ T7678] x_tables: duplicate underflow at hook 2 [ 110.237630][ T7681] loop7: detected capacity change from 0 to 512 [ 110.299611][ T7673] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.353914][ T7691] loop8: detected capacity change from 0 to 1024 [ 110.372180][ T7681] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.385806][ T7695] loop4: detected capacity change from 0 to 1024 [ 110.392246][ T7691] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.395649][ T7681] EXT4-fs (loop7): shut down requested (1) [ 110.401431][ T7691] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.422714][ T7691] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 110.469301][ T7695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.473603][ T7691] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 2: comm syz.8.892: lblock 2 mapped to illegal pblock 2 (length 1) [ 110.500030][ T7714] __nla_validate_parse: 5 callbacks suppressed [ 110.500047][ T7714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.894'. [ 110.515695][ T7695] FAULT_INJECTION: forcing a failure. [ 110.515695][ T7695] name failslab, interval 1, probability 0, space 0, times 0 [ 110.523293][ T6207] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.528755][ T7695] CPU: 1 UID: 0 PID: 7695 Comm: wÞ¡ÿ Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 110.528782][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.528795][ T7695] Call Trace: [ 110.528802][ T7695] [ 110.528810][ T7695] __dump_stack+0x1d/0x30 [ 110.528893][ T7695] dump_stack_lvl+0xe8/0x140 [ 110.528924][ T7695] dump_stack+0x15/0x1b [ 110.528941][ T7695] should_fail_ex+0x265/0x280 [ 110.528972][ T7695] should_failslab+0x8c/0xb0 [ 110.528994][ T7695] kmem_cache_alloc_noprof+0x50/0x310 [ 110.529021][ T7695] ? __es_insert_extent+0x508/0xee0 [ 110.529052][ T7695] __es_insert_extent+0x508/0xee0 [ 110.529073][ T7695] ? kick_pool+0x267/0x2d0 [ 110.529099][ T7695] ? __rcu_read_unlock+0x34/0x70 [ 110.529120][ T7695] ? should_fail_ex+0xdb/0x280 [ 110.529150][ T7695] ext4_es_insert_extent+0x435/0x1c10 [ 110.529240][ T7695] ? ext4_find_extent+0x16b/0x7a0 [ 110.529280][ T7695] ext4_ext_map_blocks+0x172b/0x38a0 [ 110.529316][ T7695] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 110.529346][ T7695] ? _raw_spin_unlock+0x26/0x50 [ 110.529419][ T7695] ? finish_task_switch+0xad/0x2b0 [ 110.529474][ T7695] ? __schedule+0x6a8/0xb30 [ 110.529543][ T7695] ? schedule+0x5f/0xd0 [ 110.529575][ T7695] ext4_map_query_blocks+0xa8/0x480 [ 110.529597][ T7695] ext4_map_blocks+0x3a1/0xd70 [ 110.529635][ T7695] ? __ext4_journal_start_sb+0x131/0x300 [ 110.529723][ T7695] ext4_iomap_begin+0x93a/0xe00 [ 110.529807][ T7695] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 110.529828][ T7695] iomap_iter+0x335/0x730 [ 110.529852][ T7695] ? should_failslab+0x8c/0xb0 [ 110.529874][ T7695] __iomap_dio_rw+0x708/0x1250 [ 110.529929][ T7695] ? ext4_xattr_security_get+0x32/0x40 [ 110.530047][ T7695] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 110.530150][ T7695] ? ext4_journal_check_start+0x11a/0x1b0 [ 110.530179][ T7695] iomap_dio_rw+0x40/0x90 [ 110.530207][ T7695] ext4_file_write_iter+0xad9/0xf00 [ 110.530252][ T7695] do_iter_readv_writev+0x421/0x4c0 [ 110.530294][ T7695] vfs_writev+0x2df/0x8b0 [ 110.530402][ T7695] __se_sys_pwritev2+0xfc/0x1c0 [ 110.530423][ T7695] __x64_sys_pwritev2+0x67/0x80 [ 110.530443][ T7695] x64_sys_call+0x1cea/0x2fb0 [ 110.530465][ T7695] do_syscall_64+0xd2/0x200 [ 110.530484][ T7695] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 110.530571][ T7695] ? clear_bhb_loop+0x40/0x90 [ 110.530591][ T7695] ? clear_bhb_loop+0x40/0x90 [ 110.530613][ T7695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.530645][ T7695] RIP: 0033:0x7fc630a0e9a9 [ 110.530659][ T7695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.530675][ T7695] RSP: 002b:00007fc62f06f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 110.530693][ T7695] RAX: ffffffffffffffda RBX: 00007fc630c35fa0 RCX: 00007fc630a0e9a9 [ 110.530705][ T7695] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000006 [ 110.530718][ T7695] RBP: 00007fc62f06f090 R08: 0000000000000000 R09: 0000000000000003 [ 110.530730][ T7695] R10: 0000000000007c00 R11: 0000000000000246 R12: 0000000000000001 [ 110.530797][ T7695] R13: 0000000000000000 R14: 00007fc630c35fa0 R15: 00007ffc03b164f8 [ 110.530815][ T7695] [ 110.542716][ T7695] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm wÞ¡ÿ: Allocating blocks 497-513 which overlap fs metadata [ 110.553498][ T7691] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 48: comm syz.8.892: lblock 0 mapped to illegal pblock 48 (length 1) [ 110.574339][ T7695] EXT4-fs (loop4): pa ffff888100766690: logic 256, phys. 369, len 9 [ 110.576660][ T7691] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.892: Failed to acquire dquot type 0 [ 110.579536][ T7695] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, [ 110.594293][ T7695] free 0, pa_free 1 [ 110.599934][ T5901] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.607308][ T7691] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 110.643515][ T7695] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, [ 110.662019][ T7691] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.892: mark_inode_dirty error [ 110.665251][ T7695] inode 18: [ 110.674410][ T7691] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 110.675623][ T7695] block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 110.680767][ T7691] EXT4-fs (loop8): 1 orphan inode deleted [ 110.699049][ T7727] loop7: detected capacity change from 0 to 512 [ 110.714845][ T7691] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.717249][ T3460] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 110.753977][ T7718] netlink: 36 bytes leftover after parsing attributes in process `syz.0.894'. [ 110.847449][ T7733] loop9: detected capacity change from 0 to 764 [ 110.892395][ T3460] __quota_error: 269 callbacks suppressed [ 110.892408][ T3460] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 110.949705][ T3460] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 110.996343][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.024942][ T7727] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.075481][ T7727] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.111411][ T7727] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.896: corrupted xattr block 19: overlapping e_value [ 111.130079][ T7748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.898'. [ 111.155525][ T7753] FAULT_INJECTION: forcing a failure. [ 111.155525][ T7753] name failslab, interval 1, probability 0, space 0, times 0 [ 111.168225][ T7753] CPU: 0 UID: 0 PID: 7753 Comm: syz.4.900 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 111.168413][ T7753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.168424][ T7753] Call Trace: [ 111.168429][ T7753] [ 111.168435][ T7753] __dump_stack+0x1d/0x30 [ 111.168458][ T7753] dump_stack_lvl+0xe8/0x140 [ 111.168477][ T7753] dump_stack+0x15/0x1b [ 111.168494][ T7753] should_fail_ex+0x265/0x280 [ 111.168527][ T7753] should_failslab+0x8c/0xb0 [ 111.168581][ T7753] __kmalloc_noprof+0xa5/0x3e0 [ 111.168604][ T7753] ? ctnl_timeout_parse_policy+0x44/0x110 [ 111.168634][ T7753] ctnl_timeout_parse_policy+0x44/0x110 [ 111.168663][ T7753] cttimeout_new_timeout+0x1ef/0x460 [ 111.168691][ T7753] ? __nla_parse+0x40/0x60 [ 111.168707][ T7753] nfnetlink_rcv_msg+0x4c6/0x590 [ 111.168751][ T7753] ? selinux_capable+0x1f9/0x270 [ 111.168811][ T7753] netlink_rcv_skb+0x123/0x220 [ 111.168847][ T7753] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 111.168946][ T7753] nfnetlink_rcv+0x16b/0x1690 [ 111.169028][ T7753] ? __kfree_skb+0x109/0x150 [ 111.169058][ T7753] ? nlmon_xmit+0x4f/0x60 [ 111.169126][ T7753] ? consume_skb+0x49/0x150 [ 111.169162][ T7753] ? nlmon_xmit+0x4f/0x60 [ 111.169183][ T7753] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 111.169218][ T7753] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 111.169359][ T7753] ? __dev_queue_xmit+0x182/0x1fb0 [ 111.169374][ T7753] ? __account_obj_stock+0x2cc/0x350 [ 111.169453][ T7753] ? ref_tracker_free+0x37d/0x3e0 [ 111.169490][ T7753] ? __netlink_deliver_tap+0x4dc/0x500 [ 111.169542][ T7753] netlink_unicast+0x5a8/0x680 [ 111.169576][ T7753] netlink_sendmsg+0x58b/0x6b0 [ 111.169599][ T7753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.169620][ T7753] __sock_sendmsg+0x142/0x180 [ 111.169698][ T7753] ____sys_sendmsg+0x31e/0x4e0 [ 111.169717][ T7753] ___sys_sendmsg+0x17b/0x1d0 [ 111.169745][ T7753] __x64_sys_sendmsg+0xd4/0x160 [ 111.169809][ T7753] x64_sys_call+0x2999/0x2fb0 [ 111.169832][ T7753] do_syscall_64+0xd2/0x200 [ 111.169849][ T7753] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 111.169876][ T7753] ? clear_bhb_loop+0x40/0x90 [ 111.169899][ T7753] ? clear_bhb_loop+0x40/0x90 [ 111.169971][ T7753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.170046][ T7753] RIP: 0033:0x7fc630a0e9a9 [ 111.170062][ T7753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.170124][ T7753] RSP: 002b:00007fc62f06f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.170143][ T7753] RAX: ffffffffffffffda RBX: 00007fc630c35fa0 RCX: 00007fc630a0e9a9 [ 111.170154][ T7753] RDX: 0000000028040000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 111.170165][ T7753] RBP: 00007fc62f06f090 R08: 0000000000000000 R09: 0000000000000000 [ 111.170211][ T7753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.170223][ T7753] R13: 0000000000000000 R14: 00007fc630c35fa0 R15: 00007ffc03b164f8 [ 111.170282][ T7753] [ 111.171975][ T7727] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 111.475506][ T7727] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.896: corrupted xattr block 19: overlapping e_value [ 111.477998][ T7757] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.896: corrupted xattr block 19: overlapping e_value [ 111.506392][ T6063] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.516005][ T7727] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 111.521095][ T7769] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.896: corrupted xattr block 19: overlapping e_value [ 111.539959][ T7727] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.896: corrupted xattr block 19: overlapping e_value [ 111.551104][ T7769] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 111.587917][ T6063] EXT4-fs error (device loop8): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 111.596486][ T7757] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 111.613765][ T6063] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 111.634178][ T6063] EXT4-fs error (device loop8): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 111.646226][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.903'. [ 111.665565][ T7727] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 111.665577][ T7769] EXT4-fs error (device loop7): ext4_xattr_block_find:1869: inode #15: comm syz.7.896: corrupted xattr block 19: overlapping e_value [ 111.723763][ T7799] netlink: 24 bytes leftover after parsing attributes in process `syz.9.905'. [ 111.740691][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.906'. [ 111.749910][ T7816] loop8: detected capacity change from 0 to 512 [ 111.756339][ T7762] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.896: corrupted xattr block 19: overlapping e_value [ 111.783633][ T7757] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.896: corrupted xattr block 19: overlapping e_value [ 111.786952][ T7816] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 111.854540][ T7762] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 111.869697][ T7816] EXT4-fs (loop8): 1 truncate cleaned up [ 111.884048][ T7816] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.899415][ T7829] loop4: detected capacity change from 0 to 8192 [ 111.904393][ T7757] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 111.927645][ T7757] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.896: corrupted xattr block 19: overlapping e_value [ 111.952069][ T7762] EXT4-fs error (device loop7): ext4_xattr_block_find:1869: inode #15: comm syz.7.896: corrupted xattr block 19: overlapping e_value [ 112.058750][ T7839] loop9: detected capacity change from 0 to 8192 [ 112.068033][ T5901] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.104374][ T7848] netlink: 32 bytes leftover after parsing attributes in process `syz.4.912'. [ 112.233499][ T29] audit: type=1326 audit(1753680306.983:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.9.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a5dce9a9 code=0x7ffc0000 [ 112.257200][ T29] audit: type=1326 audit(1753680306.983:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.9.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a5dce9a9 code=0x7ffc0000 [ 112.280941][ T29] audit: type=1326 audit(1753680306.983:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.9.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f55a5dce9a9 code=0x7ffc0000 [ 112.304305][ T29] audit: type=1326 audit(1753680306.983:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.9.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a5dce9a9 code=0x7ffc0000 [ 112.327906][ T29] audit: type=1326 audit(1753680306.983:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.9.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f55a5dce9a9 code=0x7ffc0000 [ 112.351321][ T29] audit: type=1326 audit(1753680306.983:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.9.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a5dce9a9 code=0x7ffc0000 [ 112.374700][ T29] audit: type=1326 audit(1753680306.983:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.9.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a5dce9a9 code=0x7ffc0000 [ 112.398108][ T29] audit: type=1326 audit(1753680306.983:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.9.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55a5dce9a9 code=0x7ffc0000 [ 112.421450][ T29] audit: type=1326 audit(1753680306.983:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7850 comm="syz.9.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a5dce9a9 code=0x7ffc0000 [ 112.529123][ T7853] loop7: detected capacity change from 0 to 8192 [ 112.592580][ T7858] loop9: detected capacity change from 0 to 1024 [ 112.609572][ T6063] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.630989][ T7848] vhci_hcd: invalid port number 129 [ 112.636402][ T7848] vhci_hcd: default hub control req: 0200 v0005 i0081 l0 [ 112.657581][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.912'. [ 112.681005][ T7862] loop8: detected capacity change from 0 to 512 [ 112.683490][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 112.704625][ T7858] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.747293][ T7862] EXT4-fs (loop8): too many log groups per flexible block group [ 112.755685][ T7862] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 112.769754][ T7858] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.916: Allocating blocks 497-513 which overlap fs metadata [ 112.793927][ T7862] EXT4-fs (loop8): mount failed [ 112.813945][ T7871] netlink: 24 bytes leftover after parsing attributes in process `syz.0.920'. [ 112.814917][ T7858] EXT4-fs (loop9): pa ffff8881071c4930: logic 256, phys. 369, len 9 [ 112.831316][ T7858] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 112.843663][ T7858] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 112.910278][ T6207] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.135243][ T7900] loop8: detected capacity change from 0 to 164 [ 113.144819][ T7898] loop7: detected capacity change from 0 to 164 [ 113.151509][ T7900] Unable to read rock-ridge attributes [ 113.157863][ T7898] Unable to read rock-ridge attributes [ 113.164610][ T7900] Unable to read rock-ridge attributes [ 113.202711][ T7898] Unable to read rock-ridge attributes [ 113.267172][ T7906] FAULT_INJECTION: forcing a failure. [ 113.267172][ T7906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.280463][ T7906] CPU: 0 UID: 0 PID: 7906 Comm: syz.7.934 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 113.280502][ T7906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.280513][ T7906] Call Trace: [ 113.280520][ T7906] [ 113.280528][ T7906] __dump_stack+0x1d/0x30 [ 113.280551][ T7906] dump_stack_lvl+0xe8/0x140 [ 113.280570][ T7906] dump_stack+0x15/0x1b [ 113.280588][ T7906] should_fail_ex+0x265/0x280 [ 113.280620][ T7906] should_fail+0xb/0x20 [ 113.280650][ T7906] should_fail_usercopy+0x1a/0x20 [ 113.280734][ T7906] _copy_from_user+0x1c/0xb0 [ 113.280754][ T7906] ___sys_sendmsg+0xc1/0x1d0 [ 113.280787][ T7906] __sys_sendmmsg+0x178/0x300 [ 113.280846][ T7906] __x64_sys_sendmmsg+0x57/0x70 [ 113.280866][ T7906] x64_sys_call+0x2f2f/0x2fb0 [ 113.280887][ T7906] do_syscall_64+0xd2/0x200 [ 113.280904][ T7906] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 113.280929][ T7906] ? clear_bhb_loop+0x40/0x90 [ 113.281000][ T7906] ? clear_bhb_loop+0x40/0x90 [ 113.281020][ T7906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.281043][ T7906] RIP: 0033:0x7fc2f486e9a9 [ 113.281060][ T7906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.281087][ T7906] RSP: 002b:00007fc2f2ed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 113.281104][ T7906] RAX: ffffffffffffffda RBX: 00007fc2f4a95fa0 RCX: 00007fc2f486e9a9 [ 113.281116][ T7906] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 113.281128][ T7906] RBP: 00007fc2f2ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 113.281141][ T7906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.281202][ T7906] R13: 0000000000000000 R14: 00007fc2f4a95fa0 R15: 00007ffff339a878 [ 113.281217][ T7906] [ 113.520218][ T7909] loop4: detected capacity change from 0 to 1024 [ 113.542820][ T7909] EXT4-fs: Ignoring removed bh option [ 113.554383][ T7911] loop7: detected capacity change from 0 to 128 [ 113.579482][ T7911] FAT-fs (loop7): Directory bread(block 32) failed [ 113.586179][ T7911] FAT-fs (loop7): Directory bread(block 33) failed [ 113.593137][ T7911] FAT-fs (loop7): Directory bread(block 34) failed [ 113.600946][ T7911] FAT-fs (loop7): Directory bread(block 35) failed [ 113.614622][ T7909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 113.616545][ T7911] FAT-fs (loop7): Directory bread(block 36) failed [ 113.636830][ T7909] EXT4-fs: Ignoring removed orlov option [ 113.642756][ T7911] FAT-fs (loop7): Directory bread(block 37) failed [ 113.649753][ T7911] FAT-fs (loop7): Directory bread(block 38) failed [ 113.656541][ T7911] FAT-fs (loop7): Directory bread(block 39) failed [ 113.663282][ T7911] FAT-fs (loop7): Directory bread(block 40) failed [ 113.669989][ T7909] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.935: Abort forced by user [ 113.680500][ T7916] FAULT_INJECTION: forcing a failure. [ 113.680500][ T7916] name failslab, interval 1, probability 0, space 0, times 0 [ 113.693541][ T7916] CPU: 1 UID: 0 PID: 7916 Comm: syz.8.937 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 113.693576][ T7916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.693590][ T7916] Call Trace: [ 113.693597][ T7916] [ 113.693605][ T7916] __dump_stack+0x1d/0x30 [ 113.693640][ T7916] dump_stack_lvl+0xe8/0x140 [ 113.693656][ T7916] dump_stack+0x15/0x1b [ 113.693671][ T7916] should_fail_ex+0x265/0x280 [ 113.693703][ T7916] should_failslab+0x8c/0xb0 [ 113.693727][ T7916] kmem_cache_alloc_node_noprof+0x57/0x320 [ 113.693809][ T7916] ? __alloc_skb+0x101/0x320 [ 113.693853][ T7916] __alloc_skb+0x101/0x320 [ 113.693882][ T7916] inet_netconf_notify_devconf+0x173/0x230 [ 113.693912][ T7916] inetdev_event+0x743/0xc10 [ 113.693941][ T7916] ? __pfx_ib_netdevice_event+0x10/0x10 [ 113.693979][ T7916] ? ib_netdevice_event+0x186/0x5f0 [ 113.694003][ T7916] ? __pfx_arp_netdev_event+0x10/0x10 [ 113.694177][ T7916] ? __pfx_inetdev_event+0x10/0x10 [ 113.694245][ T7916] raw_notifier_call_chain+0x6c/0x1b0 [ 113.694264][ T7916] ? call_netdevice_notifiers_info+0x9c/0x100 [ 113.694373][ T7916] call_netdevice_notifiers_info+0xae/0x100 [ 113.694403][ T7916] unregister_netdevice_many_notify+0xd9d/0x1690 [ 113.694430][ T7916] ? __mutex_lock+0x1a7/0xa50 [ 113.694516][ T7916] unregister_netdevice_queue+0x1f5/0x220 [ 113.694548][ T7916] unregister_netdev+0xb3/0xe0 [ 113.694564][ T7916] slip_close+0xe4/0x100 [ 113.694592][ T7916] ? __pfx_slip_close+0x10/0x10 [ 113.694626][ T7916] tty_ldisc_close+0x74/0xa0 [ 113.694652][ T7916] tty_set_ldisc+0x1b9/0x380 [ 113.694695][ T7916] tiocsetd+0x51/0x60 [ 113.694842][ T7916] tty_ioctl+0xa7f/0xb80 [ 113.695027][ T7916] ? __pfx_tty_ioctl+0x10/0x10 [ 113.695055][ T7916] __se_sys_ioctl+0xce/0x140 [ 113.695080][ T7916] __x64_sys_ioctl+0x43/0x50 [ 113.695103][ T7916] x64_sys_call+0x19a8/0x2fb0 [ 113.695123][ T7916] do_syscall_64+0xd2/0x200 [ 113.695210][ T7916] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 113.695279][ T7916] ? clear_bhb_loop+0x40/0x90 [ 113.695298][ T7916] ? clear_bhb_loop+0x40/0x90 [ 113.695317][ T7916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.695341][ T7916] RIP: 0033:0x7f75fd6ee9a9 [ 113.695358][ T7916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.695378][ T7916] RSP: 002b:00007f75fbd2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.695397][ T7916] RAX: ffffffffffffffda RBX: 00007f75fd916080 RCX: 00007f75fd6ee9a9 [ 113.695409][ T7916] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 000000000000000d [ 113.695423][ T7916] RBP: 00007f75fbd2e090 R08: 0000000000000000 R09: 0000000000000000 [ 113.695441][ T7916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.695451][ T7916] R13: 0000000000000000 R14: 00007f75fd916080 R15: 00007ffc028e0068 [ 113.695484][ T7916] [ 113.698646][ T7909] EXT4-fs (loop4): Remounting filesystem read-only [ 113.753502][ T7911] FAT-fs (loop7): Directory bread(block 41) failed [ 113.755619][ T7909] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-001000000000. [ 113.840577][ T7911] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 114.016675][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 114.053726][ T7916] Falling back ldisc for ttyS3. [ 114.124177][ T7911] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 114.131856][ T7911] FAT-fs (loop7): Filesystem has been set read-only [ 114.334641][ T7933] x_tables: duplicate underflow at hook 2 [ 114.745229][ T7983] sctp: [Deprecated]: syz.0.952 (pid 7983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.745229][ T7983] Use struct sctp_sack_info instead [ 114.770967][ T7983] 9pnet_fd: Insufficient options for proto=fd [ 114.926010][ T7998] netlink: 'syz.0.957': attribute type 1 has an invalid length. [ 115.187870][ T8012] loop7: detected capacity change from 0 to 512 [ 115.203065][ T8012] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.301879][ T8012] ================================================================== [ 115.310009][ T8012] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 115.318892][ T8012] [ 115.321301][ T8012] read-write to 0xffff88810049a140 of 8 bytes by task 8029 on cpu 1: [ 115.329375][ T8012] __filemap_add_folio+0x5b9/0x7d0 [ 115.334596][ T8012] filemap_add_folio+0x98/0x1b0 [ 115.339598][ T8012] __filemap_get_folio+0x31e/0x6b0 [ 115.344761][ T8012] ext4_write_begin+0x234/0xd30 [ 115.349792][ T8012] ext4_da_write_begin+0x1e0/0x670 [ 115.354909][ T8012] generic_perform_write+0x184/0x490 [ 115.360250][ T8012] ext4_buffered_write_iter+0x1ee/0x3c0 [ 115.365801][ T8012] ext4_file_write_iter+0xdbf/0xf00 [ 115.371001][ T8012] iter_file_splice_write+0x5ef/0x970 [ 115.376382][ T8012] direct_splice_actor+0x153/0x2a0 [ 115.381588][ T8012] splice_direct_to_actor+0x30f/0x680 [ 115.386973][ T8012] do_splice_direct+0xda/0x150 [ 115.391752][ T8012] do_sendfile+0x380/0x650 [ 115.396175][ T8012] __x64_sys_sendfile64+0x105/0x150 [ 115.401456][ T8012] x64_sys_call+0xb39/0x2fb0 [ 115.406046][ T8012] do_syscall_64+0xd2/0x200 [ 115.410540][ T8012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.416523][ T8012] [ 115.418832][ T8012] read to 0xffff88810049a140 of 8 bytes by task 8012 on cpu 0: [ 115.426364][ T8012] filemap_write_and_wait_range+0x59/0x340 [ 115.432169][ T8012] ext4_file_write_iter+0xe04/0xf00 [ 115.437392][ T8012] iter_file_splice_write+0x5ef/0x970 [ 115.442857][ T8012] direct_splice_actor+0x153/0x2a0 [ 115.447969][ T8012] splice_direct_to_actor+0x30f/0x680 [ 115.453347][ T8012] do_splice_direct+0xda/0x150 [ 115.458113][ T8012] do_sendfile+0x380/0x650 [ 115.462522][ T8012] __x64_sys_sendfile64+0x105/0x150 [ 115.467799][ T8012] x64_sys_call+0xb39/0x2fb0 [ 115.472470][ T8012] do_syscall_64+0xd2/0x200 [ 115.477063][ T8012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.482974][ T8012] [ 115.485339][ T8012] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 115.492443][ T8012] [ 115.494755][ T8012] Reported by Kernel Concurrency Sanitizer on: [ 115.500889][ T8012] CPU: 0 UID: 0 PID: 8012 Comm: syz.7.958 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 115.513270][ T8012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.523324][ T8012] ================================================================== [ 116.142086][ T5901] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.