last executing test programs: 3m51.854447415s ago: executing program 32 (id=2430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[], 0x7c}}, 0x0) 3m44.290189726s ago: executing program 33 (id=2515): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 2m15.236817612s ago: executing program 34 (id=3920): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sync() 45.250766665s ago: executing program 1 (id=5562): socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00c0000550900000d0000000000000000040000000000000a0000000000000006000000000000000000000000000000000000000000000000000000000000000200000008da565325000000000000000000000000000080ff070000000000000500000000000000000000000000000000000000000000000000000000000000fd95e2729ad96788684d2a97bead15"]) syz_usb_disconnect(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {0x0, 0x6}]}, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x2000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {0x3}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4a6}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffa, 0x8}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x5}, @const={0xbc}}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 44.965766084s ago: executing program 1 (id=5567): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000280)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 44.965027664s ago: executing program 35 (id=5567): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000280)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 37.464170085s ago: executing program 36 (id=5710): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r1, @ANYBLOB="000000000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 36.18981923s ago: executing program 37 (id=5724): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x482000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@empty, @private, 0x0}, &(0x7f00000001c0)=0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3, 0x0, 0x8}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000e9c9431200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="18c8284693e82bc1a76344d8e8618a7f008ea500000000000000877500000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) perf_event_open(&(0x7f0000000200)={0x2, 0x99, 0x3d, 0x1, 0x3, 0x0, 0x0, 0x5, 0xdf505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x10dbe6, 0x8, 0x0, 0x6, 0x3, 0xfffffffd, 0x4}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x8) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) connect$inet(r7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r8 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000340), 0x40c, &(0x7f0000000680)=ANY=[]) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB], 0x1c}}, 0x0) 34.377200053s ago: executing program 38 (id=5744): socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xd, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r0, 0x400, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) close(r0) 27.329642246s ago: executing program 39 (id=5827): bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7fffffd, 0x5, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x14, &(0x7f00000000c0)={0x0, 0x11}, 0x1, 0x10, &(0x7f0000000000), 0xa, 0x0, 0xffffffffffffffff, 0x4c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x52abe154ad664f64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[], 0x1, 0x67e, &(0x7f0000001600)="$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") r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 26.452300182s ago: executing program 40 (id=5835): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) (async, rerun: 32) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', 0x0) (async, rerun: 32) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x8000000000000000}, 0x18) (async, rerun: 32) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x10001}, {0x0}, &(0x7f0000000400)=[{&(0x7f0000002880)=""/4082, 0xff2}, {&(0x7f00000000c0)=""/80, 0x50}, {&(0x7f0000000080)=""/61, 0x3d}, {&(0x7f0000000300)=""/253, 0xfd}], 0x4}}], 0x48}, 0x0) (async, rerun: 32) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfffffffffffffffd}, 0x3000, 0x0, 0x0, 0x3, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x0) 24.521766455s ago: executing program 41 (id=5857): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="a183000000000000000005000240080003"], 0x7c}, 0x1, 0x0, 0x0, 0x20008085}, 0x0) 20.70238102s ago: executing program 9 (id=5882): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x201000, 0x1000}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0xce, 0x7ffc1ff8}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r5 = semget(0x1, 0x1, 0x82) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r4, 0x0, 0xfffffbffffffffff}, 0x18) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100}, 0x14) semctl$SEM_STAT_ANY(r5, 0x1, 0x14, &(0x7f0000000280)=""/109) semtimedop(r5, &(0x7f0000000000)=[{0x3}, {0x4, 0xfe01}, {0x2, 0x9}, {0x4, 0x4, 0x1000}, {0x4, 0x3d2, 0x800}, {0x3, 0x4, 0x1800}, {0x0, 0x5, 0x400}], 0x7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x1bcb, &(0x7f0000000140)={0x0, 0xbebf, 0x800, 0x3, 0x165}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x181100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x7, 0x1, 0x4}}) openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x140, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) pipe(&(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 20.57478697s ago: executing program 9 (id=5883): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xfffffffd, @local, 0x7}, 0x18, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x37, {@local}}}], 0x28, 0x7ffffff7}}], 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 20.52609441s ago: executing program 9 (id=5884): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x2000) 20.339784778s ago: executing program 9 (id=5886): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000280)={[{@abort}, {@nouid32}, {@data_journal}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@data_err_ignore}, {@jqfmt_vfsv1}]}, 0x7, 0x44d, &(0x7f0000000d80)="$eJzs3MtvG0UYAPBv10n6JqGURx9AoCAiHkmTFuiBCwgkDiAhwaEcQ5JWpW6DmiDRKoKAUDmiStwRRyT+Ak5wQcAJCY5wR5UqlEsLJ6O1dxPHtdM8nDitfz9p25ndteb7PDv27E7dALrWYPZHErE3Iv6MiP5adfkJg7W/bi7MTfy7MDeRRKXy9j9J9bwbC3MTxanF6/bklaE0Iv08icNN2p25dPnceLk8dTGvj8ye/2Bk5tLl586eHz8zdWbqwtjJkyeOj774wtjzbckzi+nGoY+njxx8/d2rb06cuvreL98lRf4NebTJ4EoHn6xU2txcZ+2rKyc9HQyENSlFRNZdvdXx3x+lWOq8/njts44GB2yqSqVS2dP68HwFuIsl0ekIgM4ovuiz+99i26Kpx7Zw/eXaDVCW9818qx3piTQ/p7fh/radBiPi1Px/X2dbbM5zCACAZX7I5j/PNpv/pfFA3Xn35GtDAxFxb0Tsj4j7IuJARNwfUT33wYh4aI3tNy6S3Dr/Sa+tK7FVyuZ/L+VrW8vnf8XsLwZKeW1fNf/e5PTZ8tSx/D0Zit4dWX10hTZ+fPX3L1sdq5//ZVvWfjEXzOO41rNj+Wsmx2fHN5JzveufRhzqaZZ/srgSkETEwYg4tM42zj797ZFWx26f/wrasM5U+SbiqVr/z0dD/oWstLNWbLY+ObIzylPHRoqr4la//nblrVbtbyj/Nsj6f3fT638x/4Gkfr12Zu1tXPnri5b3NOu9/vuSd6rlvnzfR+OzsxdHI/qSN2pB1+8fW3ptUS/Oz/IfOtp8/O+PpXficERkF/HDEfFIRDyax/5YRDweEUdXyP/nV554v+mBnnX1f98Kx9Ysy39yTf2/VOiLxj3NC6VzP32/rNGBpeLq+v9EtTSU71nN599q4lrf1QwAAAB3njQi9kaSDi+W03R4uPbv5Q/E7rQ8PTP7zOnpDy9M1n4jMBC9afGkq7/ueehofltf1Mca6sfz58ZflXZV68MT0+XJTicPXW5Pi/Gf+bvU6eiATbehdbT59sUBbD2/14TuZfxD9zL+oXs1Gf+7OhEHsPWaff9/0oE4gK3XMP4t+0EXcf8P3cv4h+5l/ENXmtkVt/+R/N1b+CP/Xw62Szx3UCHSbRGGwiYVOv3JBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0B7/BwAA//8R1OI0") r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x2}, 0x8000, 0x3, 0x1, 0x6, 0x0, 0xfffffffa, 0xffef}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x8ad, 0x200000) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000cc0)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00310000008000000000000000004d0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000300)="5396756a5d35", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES32=r4, @ANYRES64=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800110125bd70000400df250a001400fc010006"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x3) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup2(r9, r8) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d525780820d1cbf7db71038259ca0800e1a311ef97e400ecffffffffffffff006f0003000000000000000000000000000000001200000000000000001000", "d300e6d6ae9ef30bea2a004000"}) open(&(0x7f00000003c0)='./file1\x00', 0x14127e, 0x2) 20.003972328s ago: executing program 9 (id=5887): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) add_key(0x0, 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='mm_lru_activate\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$tipc(r5, &(0x7f0000000a00)={&(0x7f0000000240)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000280)="74d0f40e7cb3668e52a835988a512a10d5274839259b5032cc25dc984f2a1e884d87ead3cbaa1aef27b811", 0x2b}, {&(0x7f00000002c0)="be487fc3f637f7b3920cd05021cc0e8ec4dac124214d7108f880441d62b638be2169f7d0343749c1c5f6d887625ac1c2417ffe0a6ba9482353c5fea176ad92ad81e349", 0x43}, {&(0x7f00000004c0)="ff8d968b426baaa8641b2ab524a298b240483f0886fda5e57bb18c91906e05f492b2f0953058a805652eb4a2366f12f00657da6f3f81f0da3831c8dcda831b623eff00a6168f6d2db58a58c329d4738a37adb51766eda2a28158984cf1359b8c5c3cc72fb428e5f5aaa6eaf65f21164080e49a0a6ba94180f1b3f1c750d85a79dc8e713def55fca0f496e3d84908c4959e501c4f7b10bc81f92b099a", 0x9c}, {&(0x7f0000000580)="eea8d689f41d89debbaf257f9f4b6aa7a21dce1043b46e289edd0c707acc0f82ec98a7b424c83685f665671bb45eeb737c69c59f3e600f7f5f497df40766c1dfeb968f0a143484c501da7ed12474963ed74c67834c2369fa5ab25b6fecda0d89cfcbf41b58ab2a713c61549036e846dff8d4985a7da5a7351f7d374934525616fdb6b3de14875fd16db518782fb42b8fefa3cf0e1166dc19fe27e1696e0cb0eece01979c85a77a77db076176d2", 0xad}, {&(0x7f0000000680)="0f29a8db84cb8579f79232000397568a3cf1cc385160452c113407e74f323045ba5b5f475570203eb05bfb95bc5ac924a4c8874db91f3665181f2548fb7a1aa8bf996f06c7d644921822621b659b688214e4800eaf4e536df097e9c3741caa1d3bbe0938b26cf4ce4f2631db4667", 0x6e}, {&(0x7f0000000700)="f95bef7f7e14701f825012944df7bcad01e46d49839557de4d6d91c53f6d24200a70d9e2cdb056c90f64a869d75bcf5c9ffc1e5cbc6a1d5052048fa74bbdcf64729c9a5072ff014a85d0e3bc74c4e05579e6e34210bca2477f209c10fade7ed7ab66a42acdc77444ae42120b5873a48705af342231e9160a2cd78170ffe863d9b068c6e699c937dac169616878785936f1545d9a261e280a888844c0479fbf6d9cc0", 0xa2}], 0x6, &(0x7f0000000980)="2edd12bce824a62f09cb8431d4be4e052ba7c3c19978bd3724d86d4cf578ad1826a4de0f9dcb2b6db92bfca3f68c3b10119d49e802227f957ce6bf99161c56447147a27b26443a0ef3b9c19a98749cf1f5ee483035b5a9b73679778638ecdb52ea79f511283a687d86438793665a28c09461d27417", 0x75}, 0x0) r9 = socket$kcm(0xa, 0x2, 0x0) kexec_load(0x1, 0x2, &(0x7f0000000c00)=[{&(0x7f0000000b00)="bf55f28a3250f418ffd93e8549783228f13be59b25cc75d1a4db11f35fec3282e04ebe9a9ede56", 0x27, 0x0, 0x400}, {&(0x7f0000000b40)="b308ae9ad5fafb6e5ae79c4aa5053a4c26bdc1a24979cc375f3a1710c369a7f7eaf089fdfcf5063ebfaf4034b4e94f9423e93631563b750248252a0dac08c5975a8a5e19bf2c0627979305f73ddac52494ac155cf13a7bbc2cc07e62455b1e2073e0bf3cf14da34d27c7a77b5d5b54c7164e86487daa7c1a3bbac399289e07b3ec19ffc0bbf545eda5a68f9a1ee1a2d03b0379a37e", 0x95, 0x7, 0x8}], 0x5e0000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800", 0x2}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8918, &(0x7f0000000000)={r9}) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_migrate_pages_start\x00', r1}, 0x18) mount(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f00000000c0)=',\x83\xed\xaeH\x00\x97\xf48z\n:\x18\xcbRC\x97\xc8\xa6\b\x85\xa2\xd8Z\x88i\x02P<)\xac\xac\x03\'\xed\x93\x11\xba&\x00'/49) 19.516286515s ago: executing program 9 (id=5891): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000080)='&\x00', &(0x7f0000000140)='({{!\x00', &(0x7f0000000180)='GPL\x00', &(0x7f00000001c0)='}\'@[$.\x00', &(0x7f00000002c0)='-{\x00', &(0x7f0000000300)='{\x00']}, &(0x7f0000000740)={[&(0x7f00000003c0)='\'^/!$}^{\x95.%\x00', &(0x7f0000000400)='nfc\x00', &(0x7f0000000440)='nfc\x00', &(0x7f0000000480)='{\\\x00', &(0x7f00000004c0)='[\xca.\x00', &(0x7f0000000500)='#&\x92\x00', 0x0, &(0x7f0000000640)='/\x00', &(0x7f0000000680)=']+\\\'-&-$],*\x00']}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x4) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000006c0)={0x0, 0x2, 0x30}, &(0x7f00000007c0)=0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_CREATE2(r4, 0x0, 0x1b) (fail_nth: 7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, 0x0) 19.478769046s ago: executing program 42 (id=5891): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000080)='&\x00', &(0x7f0000000140)='({{!\x00', &(0x7f0000000180)='GPL\x00', &(0x7f00000001c0)='}\'@[$.\x00', &(0x7f00000002c0)='-{\x00', &(0x7f0000000300)='{\x00']}, &(0x7f0000000740)={[&(0x7f00000003c0)='\'^/!$}^{\x95.%\x00', &(0x7f0000000400)='nfc\x00', &(0x7f0000000440)='nfc\x00', &(0x7f0000000480)='{\\\x00', &(0x7f00000004c0)='[\xca.\x00', &(0x7f0000000500)='#&\x92\x00', 0x0, &(0x7f0000000640)='/\x00', &(0x7f0000000680)=']+\\\'-&-$],*\x00']}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x4) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000006c0)={0x0, 0x2, 0x30}, &(0x7f00000007c0)=0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_CREATE2(r4, 0x0, 0x1b) (fail_nth: 7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, 0x0) 19.125853614s ago: executing program 1 (id=5836): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x55c, 0x65, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x4, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x52c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x40}, @TCA_ROUTE4_ACT={0x520, 0x6, [@m_simple={0x1f4, 0x1f, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8401, 0x2, 0x1, 0x2, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1000, 0xffff, 0x0, 0x4, 0x751}}, @TCA_DEF_DATA={0x7, 0x3, 'lo\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x403, 0xfffffffffffffffe, 0x4, 0x2}}, @TCA_DEF_DATA={0x7, 0x3, '\xfc}\x00'}, @TCA_DEF_DATA={0x7, 0x3, ']/\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'j\xbf!*{$\x00'}]}, {0x159, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x184, 0x4, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x200, 0x8, 0x9, 0x100}, 0x5b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xfffffffb, 0x10000000, 0x6357cdec, 0x10000}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x6d7, 0x5, 0x4, 0x8000}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe0, 0x7, 0xcdb3da5a94de4674, 0x3, 0x1}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x81, 0x10000000, 0x1, 0xc}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0xfffffffd, 0x0, 0x0, 0x7}, 0x4d}}]}, {0xad, 0x6, "1dc7479808d6c90250d523862380873363ee290289ff44e789cde40973e125f404b7dae756d1e8a04bcc9637b40abe50f02f62b2e8308eb77b659a331ac115d87d73e6232de8f9dad91575b3d6c8cd6762d5298b996754ad8dcb555bf914140ac84d95a4d4a501b1b4ba7c7fba20a003d5334fc0342357ea596bc8072803118c8dbf3be88e493ab4f40b7b3789b7b297cc61ef1488f4c28dbcf2e92f3b73fa308167e351366a76093f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x30, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x84, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0x55, 0x6, "b785195954bf29eb39a865c5695a7ac46cec065f7db06dbdba2e8cf062693312261bf71915b2d84a074fd931b04b8440933794ba3bc0c3d3302773efdb92a216873b53281af4671231b5fff52cece35cfe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0xc0, 0x1e, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x7, 0x20000000, 0x0, 0xffffffff}}]}, {0x75, 0x6, "8d3fe574fbc1ca49b619a269038c45853e95bcebaf7809e37533e03d9655c6e3661b66380f0ea5b4dc2df75af2fc5a96b1bcd59b6a7cf20122ebfae4e633f1f61bdf6b44c90c272314e5d9d2042b89088234fdf2e4fb09989c12df538c477b6f5603235328c12c550a6001ad6984c698c8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x55c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (fail_nth: 4) 18.671726612s ago: executing program 1 (id=5895): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000280)={[{@abort}, {@nouid32}, {@data_journal}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@data_err_ignore}, {@jqfmt_vfsv1}]}, 0x7, 0x44d, &(0x7f0000000d80)="$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") r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x2}, 0x8000, 0x3, 0x1, 0x6, 0x0, 0xfffffffa, 0xffef}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x8ad, 0x200000) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000cc0)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00310000008000000000000000004d0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000300)="5396756a5d35", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES32=r4, @ANYRES64=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800110125bd70000400df250a001400fc010006"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x3) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup2(r9, r8) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d525780820d1cbf7db71038259ca0800e1a311ef97e400ecffffffffffffff006f0003000000000000000000000000000000001200000000000000001000", "d300e6d6ae9ef30bea2a004000"}) open(&(0x7f00000003c0)='./file1\x00', 0x14127e, 0x2) 17.92178361s ago: executing program 1 (id=5899): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) add_key(0x0, 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='mm_lru_activate\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$tipc(r5, &(0x7f0000000a00)={&(0x7f0000000240)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000280)="74d0f40e7cb3668e52a835988a512a10d5274839259b5032cc25dc984f2a1e884d87ead3cbaa1aef27b811", 0x2b}, {&(0x7f00000002c0)="be487fc3f637f7b3920cd05021cc0e8ec4dac124214d7108f880441d62b638be2169f7d0343749c1c5f6d887625ac1c2417ffe0a6ba9482353c5fea176ad92ad81e349", 0x43}, {&(0x7f00000004c0)="ff8d968b426baaa8641b2ab524a298b240483f0886fda5e57bb18c91906e05f492b2f0953058a805652eb4a2366f12f00657da6f3f81f0da3831c8dcda831b623eff00a6168f6d2db58a58c329d4738a37adb51766eda2a28158984cf1359b8c5c3cc72fb428e5f5aaa6eaf65f21164080e49a0a6ba94180f1b3f1c750d85a79dc8e713def55fca0f496e3d84908c4959e501c4f7b10bc81f92b099a", 0x9c}, {&(0x7f0000000580)="eea8d689f41d89debbaf257f9f4b6aa7a21dce1043b46e289edd0c707acc0f82ec98a7b424c83685f665671bb45eeb737c69c59f3e600f7f5f497df40766c1dfeb968f0a143484c501da7ed12474963ed74c67834c2369fa5ab25b6fecda0d89cfcbf41b58ab2a713c61549036e846dff8d4985a7da5a7351f7d374934525616fdb6b3de14875fd16db518782fb42b8fefa3cf0e1166dc19fe27e1696e0cb0eece01979c85a77a77db076176d2", 0xad}, {&(0x7f0000000680)="0f29a8db84cb8579f79232000397568a3cf1cc385160452c113407e74f323045ba5b5f475570203eb05bfb95bc5ac924a4c8874db91f3665181f2548fb7a1aa8bf996f06c7d644921822621b659b688214e4800eaf4e536df097e9c3741caa1d3bbe0938b26cf4ce4f2631db4667", 0x6e}, {&(0x7f0000000700)="f95bef7f7e14701f825012944df7bcad01e46d49839557de4d6d91c53f6d24200a70d9e2cdb056c90f64a869d75bcf5c9ffc1e5cbc6a1d5052048fa74bbdcf64729c9a5072ff014a85d0e3bc74c4e05579e6e34210bca2477f209c10fade7ed7ab66a42acdc77444ae42120b5873a48705af342231e9160a2cd78170ffe863d9b068c6e699c937dac169616878785936f1545d9a261e280a888844c0479fbf6d9cc0", 0xa2}], 0x6, &(0x7f0000000980)="2edd12bce824a62f09cb8431d4be4e052ba7c3c19978bd3724d86d4cf578ad1826a4de0f9dcb2b6db92bfca3f68c3b10119d49e802227f957ce6bf99161c56447147a27b26443a0ef3b9c19a98749cf1f5ee483035b5a9b73679778638ecdb52ea79f511283a687d86438793665a28c09461d27417", 0x75}, 0x0) r9 = socket$kcm(0xa, 0x2, 0x0) kexec_load(0x1, 0x2, &(0x7f0000000c00)=[{&(0x7f0000000b00)="bf55f28a3250f418ffd93e8549783228f13be59b25cc75d1a4db11f35fec3282e04ebe9a9ede56", 0x27, 0x0, 0x400}, {&(0x7f0000000b40)="b308ae9ad5fafb6e5ae79c4aa5053a4c26bdc1a24979cc375f3a1710c369a7f7eaf089fdfcf5063ebfaf4034b4e94f9423e93631563b750248252a0dac08c5975a8a5e19bf2c0627979305f73ddac52494ac155cf13a7bbc2cc07e62455b1e2073e0bf3cf14da34d27c7a77b5d5b54c7164e86487daa7c1a3bbac399289e07b3ec19ffc0bbf545eda5a68f9a1ee1a2d03b0379a37e", 0x95, 0x7, 0x8}], 0x5e0000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800", 0x2}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8918, &(0x7f0000000000)={r9}) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_migrate_pages_start\x00', r1}, 0x18) mount(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f00000000c0)=',\x83\xed\xaeH\x00\x97\xf48z\n:\x18\xcbRC\x97\xc8\xa6\b\x85\xa2\xd8Z\x88i\x02P<)\xac\xac\x03\'\xed\x93\x11\xba&\x00'/49) 16.009388702s ago: executing program 6 (id=5917): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x14, &(0x7f0000000040)={0x2, [0x0, 0x0]}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa0003"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) close(0xffffffffffffffff) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r10, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r10, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r10, &(0x7f0000000280)={0x2, 0x4e20, @dev}, 0x10) close(r10) splice(r0, 0x0, r3, 0x0, 0x7fff, 0x0) 15.59441715s ago: executing program 1 (id=5918): fchdir(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r2, 0x400, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r3 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0x9}, 0x2c2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu>20\t&&') ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x2904c, 0x4, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xd}], ['\x00', '\x00', '\x00', '\x00']}) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) 15.58997942s ago: executing program 43 (id=5918): fchdir(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r2, 0x400, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r3 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0x9}, 0x2c2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu>20\t&&') ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x2904c, 0x4, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xd}], ['\x00', '\x00', '\x00', '\x00']}) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) 15.39309198s ago: executing program 4 (id=5920): migrate_pages(0x0, 0xac, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x14, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 15.124917838s ago: executing program 4 (id=5921): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 15.062361898s ago: executing program 6 (id=5922): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000e40)=ANY=[], 0x8) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x8639}, {0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x6c}, 0xa, @in6=@private2, 0x0, 0x4}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x5e26, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x2000000000000147, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000800355d7a01da7b00009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0xc, r4, 0x1, 0x5e, 0x6, @broadcast}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0xffa1, {0x0, 0x0, 0x0, r4, {0xe, 0x3}, {0x6}}}, 0x24}}, 0x44804) 15.029601488s ago: executing program 4 (id=5923): r0 = socket$inet6(0xa, 0x3, 0x87) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = dup(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x3e}}, 0x14) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x80000002, 0x0, 0x2, 0x2, 0x20800, 0x3, 0x3, 0x0, 0x0, 0x2, 0x248a, 0xa, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0xf, 0x0, 0x9, 0x5999, 0x1, 0x0, 0x0, 0x2be}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$nfs4(&(0x7f00000001c0)='\x00', &(0x7f0000000240)='.\x00', &(0x7f00000003c0), 0x200000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x4e24, 0x6, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x3b}, {0x0, 0x4, 0x1, 0x68be, 0x0, 0x9, 0xfffffffffffffffe, 0x5}, {0x1, 0x8000, 0x4053e5, 0x23}, 0x4, 0x1, 0x2, 0x0, 0x1, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x4d3, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x1, 0x68, 0x6, 0xfffffffd}}, 0xe8) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x17) 14.914326348s ago: executing program 4 (id=5924): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000280)={[{@abort}, {@nouid32}, {@data_journal}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@data_err_ignore}, {@jqfmt_vfsv1}]}, 0x7, 0x44d, &(0x7f0000000d80)="$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") r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x2}, 0x8000, 0x3, 0x1, 0x6, 0x0, 0xfffffffa, 0xffef}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x8ad, 0x200000) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000cc0)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00310000008000000000000000004d0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000300)="5396756a5d35", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES32=r3, @ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800110125bd70000400df250a001400fc010006"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00'}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x3) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup2(r8, r7) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d525780820d1cbf7db71038259ca0800e1a311ef97e400ecffffffffffffff006f0003000000000000000000000000000000001200000000000000001000", "d300e6d6ae9ef30bea2a004000"}) open(&(0x7f00000003c0)='./file1\x00', 0x14127e, 0x2) 14.786572127s ago: executing program 6 (id=5927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) close(r0) 14.475083636s ago: executing program 6 (id=5930): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000280)={[{@abort}, {@nouid32}, {@data_journal}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@data_err_ignore}, {@jqfmt_vfsv1}]}, 0x7, 0x44d, &(0x7f0000000d80)="$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") r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x2}, 0x8000, 0x3, 0x1, 0x6, 0x0, 0xfffffffa, 0xffef}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x8ad, 0x200000) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000cc0)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00310000008000000000000000004d0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000300)="5396756a5d35", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES32=r4, @ANYRES64=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800110125bd70000400df250a001400fc010006"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup2(r10, r9) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d525780820d1cbf7db71038259ca0800e1a311ef97e400ecffffffffffffff006f0003000000000000000000000000000000001200000000000000001000", "d300e6d6ae9ef30bea2a004000"}) open(&(0x7f00000003c0)='./file1\x00', 0x14127e, 0x2) 14.473511376s ago: executing program 4 (id=5931): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) open(&(0x7f0000000080)='./file0\x00', 0x200, 0x152) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x824b, 0x4280) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="a0000000090601010000000000000000000000080900020073797a31000000000500010007000000050001000700000008000940003c0000080009400000000944000880100007800900130073797a31000000000c00078008000b400000000b0c000780060005404e2400000c00d78008000b40000000060c00078008000b4000000007100008800c00078008001c40000000000900020073797a3200000000"], 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f50850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140), 0xfe, 0x444, &(0x7f0000000980)="$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") (async) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f00000003c0)=0x0) io_submit(r6, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="4a00ffff", 0x4}]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) (async) sendmsg$nl_xfrm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) 14.078233875s ago: executing program 6 (id=5933): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000410, &(0x7f0000000000)={[{@nouid32}, {@grpquota}, {@abort}]}, 0x4, 0x4fe, &(0x7f0000000a40)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000000701010000000000000000030000020900010073797a3000000000080005400000000375d1e45c64903a78fd23874e4631f00a13a8759418b2adb6d5e815d6840d84e7cbdef1ef473489c586103a9f02d16e34eb7a2cc97b15f99cfc43df24bad92eb6860c1f73205ff4028ddba7cd884cc418cf1dc107aead307f94c53da1bba8cc270a833d"], 0x28}, 0x1, 0x0, 0x0, 0x24048880}, 0x40000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101100, 0x0, 0x0, 0x2, 0x9, 0x0, 0x7be}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r2 = socket$kcm(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) getgroups(0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000080)={[{@nomblk_io_submit}]}, 0x1, 0x4ef, &(0x7f0000000a00)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r7, 0x0}]) 14.077454404s ago: executing program 4 (id=5934): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x40, 0x0, 0x0, 0x81, 0xffffffff}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000540)="217151510bff9529441d5260808f845c80e618c623295ec6cab5e0cf28b87a497b7ba4f98f7da43e2f0807483791acbb74be0e5a3def0edf2fe4627368931bc2667dfc02303b7b4fbff75192640350b5dbcef6e151a4038150", &(0x7f0000000200)=""/166}, 0x20) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040061981a0888183c662c0000090000000000000013cef591193744acb3c54281add532f9edcf27178eeff5ab517dc8fec8d0e4b563e9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0d0000000c000086f0ee4b21d9c0518aab00040000000100000000000000898faffd38cd4b45d2c16f14bd524e6ddd22e121956ba88e67e6752a8ab0480001f8099e8856113a794631336559a95928dae8085eecac23b432e8eeef43fe5dab4cfdb4c0a8bf41b57a96dbc0b2e4d21465a3baa87ba939c06bacc0283114a0733a805714da1be49bc0c9e7b9710d26505fad4d49ec54046db3788397569efd8b52675d6ece649e8b0025e899b0acc9c56bbe8ec91e95fa5ef1549f9e6ef58e0e61fd12", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x101a02, 0x0) copy_file_range(r2, &(0x7f0000000000)=0x7, r2, 0x0, 0x7, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000ffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000400000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000047baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32, @ANYBLOB="0000000000000000b74fd7ff04050000040000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000023e27833030000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x1, 0x8, r5, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2}]) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r8, 0x1, 0x4c, &(0x7f0000000000)=0xb, 0x4) (async) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r9, r9, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) (async) recvmmsg(r8, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) 14.055715765s ago: executing program 44 (id=5934): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x40, 0x0, 0x0, 0x81, 0xffffffff}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000540)="217151510bff9529441d5260808f845c80e618c623295ec6cab5e0cf28b87a497b7ba4f98f7da43e2f0807483791acbb74be0e5a3def0edf2fe4627368931bc2667dfc02303b7b4fbff75192640350b5dbcef6e151a4038150", &(0x7f0000000200)=""/166}, 0x20) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040061981a0888183c662c0000090000000000000013cef591193744acb3c54281add532f9edcf27178eeff5ab517dc8fec8d0e4b563e9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0d0000000c000086f0ee4b21d9c0518aab00040000000100000000000000898faffd38cd4b45d2c16f14bd524e6ddd22e121956ba88e67e6752a8ab0480001f8099e8856113a794631336559a95928dae8085eecac23b432e8eeef43fe5dab4cfdb4c0a8bf41b57a96dbc0b2e4d21465a3baa87ba939c06bacc0283114a0733a805714da1be49bc0c9e7b9710d26505fad4d49ec54046db3788397569efd8b52675d6ece649e8b0025e899b0acc9c56bbe8ec91e95fa5ef1549f9e6ef58e0e61fd12", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x101a02, 0x0) copy_file_range(r2, &(0x7f0000000000)=0x7, r2, 0x0, 0x7, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000ffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000400000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000047baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32, @ANYBLOB="0000000000000000b74fd7ff04050000040000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000023e27833030000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x1, 0x8, r5, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2}]) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r8, 0x1, 0x4c, &(0x7f0000000000)=0xb, 0x4) (async) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r9, r9, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) (async) recvmmsg(r8, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) 13.640154333s ago: executing program 0 (id=5940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) close(r0) 13.496888703s ago: executing program 6 (id=5942): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x24fd, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000000c0)=ANY=[@ANYRES16=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 13.495977443s ago: executing program 45 (id=5942): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x24fd, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000000c0)=ANY=[@ANYRES16=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 13.410125492s ago: executing program 0 (id=5943): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00f8ebff000080000000008000edff00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = epoll_create(0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002640), 0x80800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000002680)={0x2}) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x200000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'gretap0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x80, 0x1, 0x8001, 0x0, {{0x2d, 0x4, 0x0, 0x2f, 0xb4, 0x66, 0x0, 0x2, 0x21, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x44, 0x9b, 0x1, 0xb, [{@private=0xa010101, 0x81}, {@empty, 0x9}, {@private=0xa010101, 0x5}, {@multicast1, 0x2}, {@multicast1, 0x5}, {@loopback, 0x4}, {@broadcast, 0xffffffff}, {@multicast1, 0xc8d3}]}, @timestamp={0x44, 0x10, 0x27, 0x0, 0x0, [0x0, 0xc, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x84, 0x3, 0xc, [{@rand_addr=0x64010101, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc4bf}]}, @cipso={0x86, 0x34, 0x1, [{0x2, 0x8, "192543d48251"}, {0x2, 0x12, "9c5be5d455af04650352c3bba7c6a664"}, {0x7, 0xd, "41e92ccbd3e0f85d765fe8"}, {0x1, 0x7, "c93197ca8f"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x12, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000012a5000085000000c300000018560000060000000000000000007f000000000000000000183600000500000000000000000000001852000008000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018000000f3010000000000000000000085000000600000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x14f, 0x6b, &(0x7f00000002c0)=""/107, 0x41100, 0x18, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x10, 0xffff, 0x1fb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r0], 0x0, 0x10, 0xfffffff8, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000004000000000000005000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fd, &(0x7f0000000ac0)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) flock(0xffffffffffffffff, 0xfb8cbf45da2632e) truncate(&(0x7f0000000080)='./file2\x00', 0x81c01) r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x10f881, 0x51ff2d9f051d6576) pwrite64(r12, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$EXT4_IOC_MOVE_EXT(r11, 0xc028660f, &(0x7f0000000240)={0x3920e, r10, 0x5, 0x1, 0x5}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r13, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r15], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) chdir(0x0) symlinkat(&(0x7f0000000b80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 13.171497921s ago: executing program 0 (id=5944): write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f0000000540)="$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") r0 = socket$netlink(0x10, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x8fe) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r2, 0x24, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRES32=r2, @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x10, 0x8000, 0xfffffeff, 0x0, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x66, 0x0, 0x1, 0x2f, 0x0, @broadcast, @broadcast}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r1, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b80)=0x14) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000000b00)=0xffffffffffffffff, 0x4) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x2, 0x6, @remote}, 0x10) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x7, [@const={0xa, 0x0, 0x0, 0xa, 0x3}, @enum64={0x7, 0x9, 0x0, 0x13, 0x0, 0x8, [{0x3, 0x8, 0x7}, {0xd, 0x6, 0x3}, {0xd, 0x3, 0x42}, {0x6, 0x400}, {0xe, 0x2, 0x3}, {0x9, 0x4, 0x3}, {0x4, 0x1, 0xacd}, {0xe, 0x3, 0x9}, {0xf, 0x77c}]}, @struct={0xc, 0x2, 0x0, 0x4, 0x1, 0xfffff4b5, [{0x10, 0x4, 0xcf}, {0x2, 0x3, 0x8000}]}, @func={0xf, 0x0, 0x0, 0xc, 0x5}, @func={0x3, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x30, 0x386fbb6838ecffe5, 0x0, 0x30, 0x2e]}}, &(0x7f0000000400)=""/20, 0xdf, 0x14, 0x0, 0x5, 0x10000, @value=r1}, 0x28) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) 12.164635167s ago: executing program 0 (id=5945): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000280)={[{@abort}, {@nouid32}, {@data_journal}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@data_err_ignore}, {@jqfmt_vfsv1}]}, 0x7, 0x44d, &(0x7f0000000d80)="$eJzs3MtvG0UYAPBv10n6JqGURx9AoCAiHkmTFuiBCwgkDiAhwaEcQ5JWpW6DmiDRKoKAUDmiStwRRyT+Ak5wQcAJCY5wR5UqlEsLJ6O1dxPHtdM8nDitfz9p25ndteb7PDv27E7dALrWYPZHErE3Iv6MiP5adfkJg7W/bi7MTfy7MDeRRKXy9j9J9bwbC3MTxanF6/bklaE0Iv08icNN2p25dPnceLk8dTGvj8ye/2Bk5tLl586eHz8zdWbqwtjJkyeOj774wtjzbckzi+nGoY+njxx8/d2rb06cuvreL98lRf4NebTJ4EoHn6xU2txcZ+2rKyc9HQyENSlFRNZdvdXx3x+lWOq8/njts44GB2yqSqVS2dP68HwFuIsl0ekIgM4ovuiz+99i26Kpx7Zw/eXaDVCW9818qx3piTQ/p7fh/radBiPi1Px/X2dbbM5zCACAZX7I5j/PNpv/pfFA3Xn35GtDAxFxb0Tsj4j7IuJARNwfUT33wYh4aI3tNy6S3Dr/Sa+tK7FVyuZ/L+VrW8vnf8XsLwZKeW1fNf/e5PTZ8tSx/D0Zit4dWX10hTZ+fPX3L1sdq5//ZVvWfjEXzOO41rNj+Wsmx2fHN5JzveufRhzqaZZ/srgSkETEwYg4tM42zj797ZFWx26f/wrasM5U+SbiqVr/z0dD/oWstLNWbLY+ObIzylPHRoqr4la//nblrVbtbyj/Nsj6f3fT638x/4Gkfr12Zu1tXPnri5b3NOu9/vuSd6rlvnzfR+OzsxdHI/qSN2pB1+8fW3ptUS/Oz/IfOtp8/O+PpXficERkF/HDEfFIRDyax/5YRDweEUdXyP/nV554v+mBnnX1f98Kx9Ysy39yTf2/VOiLxj3NC6VzP32/rNGBpeLq+v9EtTSU71nN599q4lrf1QwAAAB3njQi9kaSDi+W03R4uPbv5Q/E7rQ8PTP7zOnpDy9M1n4jMBC9afGkq7/ueehofltf1Mca6sfz58ZflXZV68MT0+XJTicPXW5Pi/Gf+bvU6eiATbehdbT59sUBbD2/14TuZfxD9zL+oXs1Gf+7OhEHsPWaff9/0oE4gK3XMP4t+0EXcf8P3cv4h+5l/ENXmtkVt/+R/N1b+CP/Xw62Szx3UCHSbRGGwiYVOv3JBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0B7/BwAA//8R1OI0") r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x2}, 0x8000, 0x3, 0x1, 0x6, 0x0, 0xfffffffa, 0xffef}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x8ad, 0x200000) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000cc0)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00310000008000000000000000004d0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000300)="5396756a5d35", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES32=r3, @ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800110125bd70000400df250a001400fc010006"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00'}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x3) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup2(r8, r7) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d525780820d1cbf7db71038259ca0800e1a311ef97e400ecffffffffffffff006f0003000000000000000000000000000000001200000000000000001000", "d300e6d6ae9ef30bea2a004000"}) open(&(0x7f00000003c0)='./file1\x00', 0x14127e, 0x2) 11.766663406s ago: executing program 0 (id=5946): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0x0, 0xee01) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) (async) brk(0x3) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) (async, rerun: 32) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0x10, 0xd}, {0x0, 0xd}}}, 0x24}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x54, r3, 0x10a, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb8da}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r10, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x48, r13, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 11.548374855s ago: executing program 0 (id=5947): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 11.513090995s ago: executing program 46 (id=5947): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 3.044278282s ago: executing program 2 (id=6008): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") (async) r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000003299b8f276dc75584a8d87d907005858367d61f49e1639a48f614a54a8192c2876b7f843cd3a3c07288fa0f1e28983b5cdc2e29b6e", 0x3c, 0xffffffffffffffff) (async) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000003299b8f276dc75584a8d87d907005858367d61f49e1639a48f614a54a8192c2876b7f843cd3a3c07288fa0f1e28983b5cdc2e29b6e", 0x3c, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="4100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000003150ddecc508bb0d3d709e83e6", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000003150ddecc508bb0d3d709e83e6", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f0000000200)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x5, &(0x7f0000000ac0)=[{0x200000000006, 0xfa, 0x0, 0x7ffe1fff}, {0xff, 0xff, 0x1e, 0x1000}, {0x4, 0x0, 0x18, 0x10001}, {0xc, 0x2, 0x3, 0xa10}, {0x81, 0x0, 0x9, 0x6}]}) ftruncate(0xffffffffffffffff, 0x1f) timer_create(0x9, 0x0, &(0x7f0000000400)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@nombcache}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") write$selinux_user(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t '], 0x27) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) faccessat(r0, 0x0, 0x5) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r8, r8, 0x0, 0x80000000) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") (async) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000040)='./file1\x00', 0x2d) unlink(&(0x7f00000000c0)='./file1\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x48, 0x32, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) 3.016912842s ago: executing program 2 (id=6009): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 2.978142292s ago: executing program 2 (id=6010): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f030006"], 0x60}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 2.898116561s ago: executing program 2 (id=6011): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000280)={[{@abort}, {@nouid32}, {@data_journal}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@data_err_ignore}, {@jqfmt_vfsv1}]}, 0x7, 0x44d, &(0x7f0000000d80)="$eJzs3MtvG0UYAPBv10n6JqGURx9AoCAiHkmTFuiBCwgkDiAhwaEcQ5JWpW6DmiDRKoKAUDmiStwRRyT+Ak5wQcAJCY5wR5UqlEsLJ6O1dxPHtdM8nDitfz9p25ndteb7PDv27E7dALrWYPZHErE3Iv6MiP5adfkJg7W/bi7MTfy7MDeRRKXy9j9J9bwbC3MTxanF6/bklaE0Iv08icNN2p25dPnceLk8dTGvj8ye/2Bk5tLl586eHz8zdWbqwtjJkyeOj774wtjzbckzi+nGoY+njxx8/d2rb06cuvreL98lRf4NebTJ4EoHn6xU2txcZ+2rKyc9HQyENSlFRNZdvdXx3x+lWOq8/njts44GB2yqSqVS2dP68HwFuIsl0ekIgM4ovuiz+99i26Kpx7Zw/eXaDVCW9818qx3piTQ/p7fh/radBiPi1Px/X2dbbM5zCACAZX7I5j/PNpv/pfFA3Xn35GtDAxFxb0Tsj4j7IuJARNwfUT33wYh4aI3tNy6S3Dr/Sa+tK7FVyuZ/L+VrW8vnf8XsLwZKeW1fNf/e5PTZ8tSx/D0Zit4dWX10hTZ+fPX3L1sdq5//ZVvWfjEXzOO41rNj+Wsmx2fHN5JzveufRhzqaZZ/srgSkETEwYg4tM42zj797ZFWx26f/wrasM5U+SbiqVr/z0dD/oWstLNWbLY+ObIzylPHRoqr4la//nblrVbtbyj/Nsj6f3fT638x/4Gkfr12Zu1tXPnri5b3NOu9/vuSd6rlvnzfR+OzsxdHI/qSN2pB1+8fW3ptUS/Oz/IfOtp8/O+PpXficERkF/HDEfFIRDyax/5YRDweEUdXyP/nV554v+mBnnX1f98Kx9Ysy39yTf2/VOiLxj3NC6VzP32/rNGBpeLq+v9EtTSU71nN599q4lrf1QwAAAB3njQi9kaSDi+W03R4uPbv5Q/E7rQ8PTP7zOnpDy9M1n4jMBC9afGkq7/ueehofltf1Mca6sfz58ZflXZV68MT0+XJTicPXW5Pi/Gf+bvU6eiATbehdbT59sUBbD2/14TuZfxD9zL+oXs1Gf+7OhEHsPWaff9/0oE4gK3XMP4t+0EXcf8P3cv4h+5l/ENXmtkVt/+R/N1b+CP/Xw62Szx3UCHSbRGGwiYVOv3JBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0B7/BwAA//8R1OI0") r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x2}, 0x8000, 0x3, 0x1, 0x6, 0x0, 0xfffffffa, 0xffef}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x8ad, 0x200000) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000cc0)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00310000008000000000000000004d0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000300)="5396756a5d35", 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES32=r4, @ANYRES64=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800110125bd70000400df250a001400fc010006"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x3) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup2(r9, r8) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d525780820d1cbf7db71038259ca0800e1a311ef97e400ecffffffffffffff006f0003000000000000000000000000000000001200000000000000001000", "d300e6d6ae9ef30bea2a004000"}) open(&(0x7f00000003c0)='./file1\x00', 0x14127e, 0x2) 2.742426891s ago: executing program 2 (id=6013): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe3, &(0x7f0000000100), &(0x7f0000000080)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x503, 0x9000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180000100000000000000000000000030005000000000002000010e000000100000000000000000800120000000000000000000000000010000000000000000000000000000000ac1414bb000000000000000000000000fc010000000000000000000000000000030006000000000002"], 0x80}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0x7, @loopback, 0x52a0c585}}, 0x9, 0x4}, &(0x7f00000004c0)=0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000005c0)={r5, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f0000000500)=0x84) ioctl$EVIOCRMFF(r3, 0x40085503, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x4d0101, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r7}, 0x9) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x64, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = getpgid(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r10}}, 0x40) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r10, 0x10, &(0x7f00000003c0)={0xffffffffffffff2c}) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0)="f957a7939432a10b12e670911b7c57671133d18c082e7a36b51c0e4a4a347b366bd170c168f883677316b72aaaeb5a2ebcb8247ce032eac25c7d6395cd99282984217602f78cf241a4390d6cd755f30f809c31405b8d54dea0e8bf5d12f85e366f4457d2c36105cb25fc288b64f6f22712f5477ef86dee8e80683b5b77131dfe878a44e358c2d31fa64e6817e34a71c81697c81f540fbf5827ff7736053f29d8a1fd9986efcacb4936f7f057182dee2e54d2b162b974c0f29a40c4b89c1b568d652b1f62", 0xc4) 2.54216631s ago: executing program 7 (id=6016): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r3], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9bed67a87ee4623d39c10780000000000000000", 0x14}}, 0x20040814) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r7}, 0x10) io_setup(0x3, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_clone(0x8006411, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r8, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) ioctl$MON_IOCH_MFLUSH(r8, 0x9208, 0x64) 2.48509639s ago: executing program 2 (id=6018): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x7, 0x80000) ioctl$SG_BLKSECTGET(r1, 0x1267, &(0x7f0000000440)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000340)=0xc) setresuid(r3, r4, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000030014e7797a3000000000"], 0x28}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x24, r8, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x100}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2000040}, 0x48004) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r5, 0x24, 0x0, @void}, 0x10) lsm_get_self_attr(0x67, &(0x7f0000002540)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000300)=0x1020, 0x0) 2.47796856s ago: executing program 47 (id=6018): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x7, 0x80000) ioctl$SG_BLKSECTGET(r1, 0x1267, &(0x7f0000000440)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000340)=0xc) setresuid(r3, r4, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000030014e7797a3000000000"], 0x28}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x24, r8, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x100}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2000040}, 0x48004) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r5, 0x24, 0x0, @void}, 0x10) lsm_get_self_attr(0x67, &(0x7f0000002540)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000300)=0x1020, 0x0) 1.634493226s ago: executing program 8 (id=6029): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x6a6, &(0x7f0000000680)={0x0, 0xcfb3, 0x10, 0x4, 0xfffffff9}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7ff, 0x6000}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.571508026s ago: executing program 7 (id=6031): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r5) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r6}, 0x10) (async, rerun: 64) recvmsg$can_raw(r3, &(0x7f0000000240)={&(0x7f0000000080)=@l2, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/197, 0xc5}, {&(0x7f00000003c0)=""/204, 0xcc}, {&(0x7f00000004c0)=""/207, 0xcf}, {&(0x7f0000000000)=""/48, 0x30}], 0x4, &(0x7f0000000740)=""/235, 0xeb}, 0x2060) (rerun: 64) ioperm(0xfffffffffffffe00, 0x8, 0x1) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 1.567649656s ago: executing program 8 (id=6032): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1d) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1.542513646s ago: executing program 8 (id=6033): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffb963}, [@call={0x85, 0x0, 0x0, 0xd0}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) (async) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001e00), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000001e40)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x7, 0x3a, '@#%', 0x3a, '%@', 0x3a, './file0', 0x3a, [0x50, 0x46]}, 0x2e) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = syz_pidfd_open(0x0, 0x0) setns(r4, 0x8020000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r5 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0xc, r4, 0x1, 0x5e, 0x6, @broadcast}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0xffa1, {0x0, 0x0, 0x0, r4, {0xe, 0x3}, {0x6}}}, 0x24}}, 0x44804) 1.167997785s ago: executing program 8 (id=6038): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYBLOB="93da033e08c15491f0d8b62ad603fe50073e562c555b839e9fdaa55a4a8c49da5a7356a101c856cbcfed75462f56bf5590b4c1df0487dd089672c20624686b869d934ab69fd3c2358c326bb6eb26b711af6221114706f8934cf86fbd69b00c4dff23d1404169057bb5672da5b6c8d54105b034f065394a8e4fa6d5d4bb9798a6b047db86b85922d3571b0773b52be379e37c338237d7a5bb20357867e33752ca4d15ae06f54569fc9fe3ba1a3e099684e117a43844bc46e72b458ad08de32e80a235a252090da47d6b8cceb1275c2aec3c4217aa5908ab433d110713ffb200fc1d84ff3d2b472ea3cf4b7ab70c80bede90eef752dc"], 0x1, 0x67e, &(0x7f0000000980)="$eJzs3V1v29Ydx/Ef5SfFHYJiG4IgSJOTZAUcLFMouXFgZMCqUZTNTRIFUh5sYECRNXYRRE63JAMW3xS+2BPQvYHd9WK72IsYsOu9iu1uA4rtbsBuWPCQsiVbD1btJG3y/QStKPLPc/4kFf7BSDwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQ49Vct+yoEbQ2Ns1oXi0Km2OWZ63N6WY2cXNiv5KT/qdiURezWRe/fbj4Qvq/67qcvbusYvpS1N5bF96+963ZQm/9MQl9GZq2wafP9x7d73a3n5wgdkZTN/8qqXCCoDW/FcRh0Kyu+SaIQ7O6suLeXq/Hph40/Hgr7vhN40V+oRNGZsm7acqrq8vGL22FG621WrXh92be/V7FdVfMjxayAy2pFHvrQaMRtNZsTLo4jblrPv1pFuBXm8bsPOxuL09KMg0qnySoMimo4lYq5XKlUl65s3rnruvOHpvhphz3gI5FnPmHFl8zZ3fyBk6pkNb/fzpSQ0W1tKFNmaF/PNUUKVRzxPJcr/6/e9sf229//e9V+YvSD/LFl2Tr/5Xs3ZVR9X9ELkbGrjBsiTNi/nR/5vJWnuq59vRI99VVV9t6cgZtG5mrp23h12eSxz+SzOiINflqKVCsUIGaqto5Jp9jtKoVrcjVB1pXXbGM6grUkK9YW4rVkW8/UZ4i+aqqo1CRjJbk6aaMylrVqpZl5KukLYXaUEtrqqmq/yVJsqOHdr8vj9kK9YLKIwIW+oMqY1oaVf9/9kn2Oc3rv0v9f1Nln4OF/Cw2Lgb4Ckjy6/8pXX0x2QAAAAAAgBfBsf/67tjv7t+RlKgeNHz3VacFAAAAAADOkKNkQZflyP6kTe/I4fofAAAAAIDXjWPvsXMkLdof9TuHd0Kd5B8BZl5CigAAAAAA4JTsnf9X5qXEDlpxVc5U1/8AAAAAAOBr4Hd9Y+zP9sbYTXpf6xckxe0F56//WVA05+y3N7/j7FbTJdXdPObYLwA69UvO+XygXvsyL8m+8/zLTt5bPgjmwbiDn+9MGuvfiY4kMD/T38CIBJy055XZ/J0+1bVslWv5OPMP9gqyS7JeFutBwy95YeNeWdXq+ULH3+z88vHDX0nRwXbuPOxulz78uPvA5rKfztrfTRv9ZCCdwvCdcZjLMzvegr3nYtgWn1O91+XvW81Fx/br9rZ/RtXdQn9H4w7AYZ+/0fXsmF1fzGIX9w5G3E+3v5huf7lkD9nA1kdzzmEW5aNbPuxAjMiiaLO4kcXcWLqRvfTyS9spOMXvzkiV0vFjMJBFpT+LyfvC+e+xfTEui3xfLKdZ/C1taEQWy9NlceyIAMCrsnNYhewg5sfqbq889E5qX6ruTK7u7w9W92d/TBK7wow0m383MbaXotIz+pJj69C87Il19tKQM7qb15WiRpzR3VNUt7Svvxw+AylP+1gW/0+S5F7Z9vuHI1X1s3SFz0b2GzcqM+kuvP1s9+d2APzUR9sfbT+uVJZX3Pdc905Fc3Yz8pcZHc2U32wCAE7wjJ2JEc57upZFXHvw73ezqYGK982DnxSU9KE+VlcPdKv3CIGrw1td7PsZwq3sqlV9V63mwtv3zklHY8u6NfKqztbSvtjKQeyceqsMVurD2OUXfBQAAHi5rk+ow8Prf3Gg/t/SUhaxdGnodfdgLT/6hOBRseXJyb9/1nsDAIA3gx997ix2futEUdD+oLy6Wq521n0Thd6PTRTU1nwTtDp+5K1XW2u+aUdhJ/TChmlHWghqfmzijXY7jDqmHkamHcbBpn3yu8kf/R77zWqrE3hxu+FXY994YatTnZGpBbFn2hs/bATxuh/ZleO27wX1wKt2grBl4nAj8vySMbHv9wUGNb/VCepBOtky7ShoVqMt85OwsdH0Tc2PvShod8KsQduX1zFBqx5GTdtsScnUDzoEAOB19PT53qP73e72kzET+5ock0/MD2mQ75sBAPiKOSzXU6xUfIEJAQAAAAAAAAAAAAAAAAAAAACAY05y/99UE3PDbhaUDub84vyRtf6kYe04OuvEppkoTLtW75aIvUd/HxN87mBOb/f3x+y/tA381zekt+wcZXNmz76vc3ZvvLwD9/2dbI+OjEkXDl20cHAsZs/+r0M68fjPIxYlSZKMX31hcB/Oj9vAwYlZSU/mT3EIBk4TjJsBvIa+CAAA//9z/kFZ") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) socket$phonet(0x23, 0x2, 0x1) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000002, 0x4016012, r2, 0x0) 929.949534ms ago: executing program 7 (id=6039): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = syz_io_uring_setup(0x58ca, &(0x7f0000000280)={0x0, 0x50f3, 0x2, 0x0, 0x2de}, &(0x7f0000000080), &(0x7f0000000200)) r3 = syz_open_dev$hidraw(&(0x7f0000000300), 0x8, 0x400) r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @remote, 0x3}, 0x1c) sendto$inet6(r5, 0x0, 0x15, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000003c0)={0x3, 0x0, &(0x7f0000000380)=[r0, r1, r3, r1, r1, r1, r4]}, 0x7) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r8) quotactl$Q_GETFMT(0xffffffff80000401, 0x0, r8, &(0x7f00000002c0)) quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000900, r8, &(0x7f0000000780)) r9 = getegid() getpgid(r7) chown(&(0x7f0000000400)='./file0\x00', r8, r9) sigaltstack(0x0, 0x0) 574.247952ms ago: executing program 7 (id=6041): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r3], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9bed67a87ee4623d39c10780000000000000000", 0x14}}, 0x20040814) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r7}, 0x10) io_setup(0x3, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_clone(0x8006411, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r8, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) ioctl$MON_IOCH_MFLUSH(r8, 0x9208, 0x64) 556.071413ms ago: executing program 5 (id=6042): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x6a6, &(0x7f0000000680)={0x0, 0xcfb3, 0x10, 0x4, 0xfffffff9}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7ff, 0x6000}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 530.282022ms ago: executing program 3 (id=6043): syz_emit_ethernet(0x6a, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @rand_addr=0x64010101, {[@cipso={0x86, 0x18, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}]}, @lsrr={0x83, 0x13, 0x0, [@local, @loopback, @broadcast, @empty]}]}}}}}}}, 0x0) 481.716502ms ago: executing program 5 (id=6044): syz_emit_ethernet(0x6a, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @rand_addr=0x64010101, {[@cipso={0x86, 0x18, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}]}, @lsrr={0x83, 0x13, 0x0, [@local, @loopback, @broadcast, @empty]}]}}}}}}}, 0x0) 438.306152ms ago: executing program 3 (id=6045): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 426.160702ms ago: executing program 5 (id=6046): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1d) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 326.257331ms ago: executing program 5 (id=6047): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00f8ebff000080000000008000edff00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = epoll_create(0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002640), 0x80800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000002680)={0x2}) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x200000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'gretap0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x80, 0x1, 0x8001, 0x0, {{0x2d, 0x4, 0x0, 0x2f, 0xb4, 0x66, 0x0, 0x2, 0x21, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x44, 0x9b, 0x1, 0xb, [{@private=0xa010101, 0x81}, {@empty, 0x9}, {@private=0xa010101, 0x5}, {@multicast1, 0x2}, {@multicast1, 0x5}, {@loopback, 0x4}, {@broadcast, 0xffffffff}, {@multicast1, 0xc8d3}]}, @timestamp={0x44, 0x10, 0x27, 0x0, 0x0, [0x0, 0xc, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x84, 0x3, 0xc, [{@rand_addr=0x64010101, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc4bf}]}, @cipso={0x86, 0x34, 0x1, [{0x2, 0x8, "192543d48251"}, {0x2, 0x12, "9c5be5d455af04650352c3bba7c6a664"}, {0x7, 0xd, "41e92ccbd3e0f85d765fe8"}, {0x1, 0x7, "c93197ca8f"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x12, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000012a5000085000000c300000018560000060000000000000000007f000000000000000000183600000500000000000000000000001852000008000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018000000f3010000000000000000000085000000600000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x14f, 0x6b, &(0x7f00000002c0)=""/107, 0x41100, 0x18, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x10, 0xffff, 0x1fb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r0], 0x0, 0x10, 0xfffffff8, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000004000000000000005000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fd, &(0x7f0000000ac0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) flock(0xffffffffffffffff, 0xfb8cbf45da2632e) truncate(&(0x7f0000000080)='./file2\x00', 0x81c01) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x10f881, 0x51ff2d9f051d6576) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000240)={0x3920e, r9, 0x5, 0x1, 0x5}) 298.231911ms ago: executing program 3 (id=6048): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00f8ebff000080000000008000edff00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = epoll_create(0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002640), 0x80800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000002680)={0x2}) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x200000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'gretap0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x80, 0x1, 0x8001, 0x0, {{0x2d, 0x4, 0x0, 0x2f, 0xb4, 0x66, 0x0, 0x2, 0x21, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x44, 0x9b, 0x1, 0xb, [{@private=0xa010101, 0x81}, {@empty, 0x9}, {@private=0xa010101, 0x5}, {@multicast1, 0x2}, {@multicast1, 0x5}, {@loopback, 0x4}, {@broadcast, 0xffffffff}, {@multicast1, 0xc8d3}]}, @timestamp={0x44, 0x10, 0x27, 0x0, 0x0, [0x0, 0xc, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x84, 0x3, 0xc, [{@rand_addr=0x64010101, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc4bf}]}, @cipso={0x86, 0x34, 0x1, [{0x2, 0x8, "192543d48251"}, {0x2, 0x12, "9c5be5d455af04650352c3bba7c6a664"}, {0x7, 0xd, "41e92ccbd3e0f85d765fe8"}, {0x1, 0x7, "c93197ca8f"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x12, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000012a5000085000000c300000018560000060000000000000000007f000000000000000000183600000500000000000000000000001852000008000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018000000f3010000000000000000000085000000600000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x14f, 0x6b, &(0x7f00000002c0)=""/107, 0x41100, 0x18, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x10, 0xffff, 0x1fb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r0], 0x0, 0x10, 0xfffffff8, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000004000000000000005000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fd, &(0x7f0000000ac0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) flock(0xffffffffffffffff, 0xfb8cbf45da2632e) truncate(&(0x7f0000000080)='./file2\x00', 0x81c01) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x10f881, 0x51ff2d9f051d6576) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000240)={0x3920e, r9, 0x5, 0x1, 0x5}) 164.210641ms ago: executing program 3 (id=6049): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817", 0x15, 0xfffffffffffffffd) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='mm_lru_activate\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$tipc(r5, &(0x7f0000000a00)={&(0x7f0000000240)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000280)="74d0f40e7cb3668e52a835988a512a10d5274839259b5032cc25dc984f2a1e884d87ead3cbaa1aef27b811", 0x2b}, {&(0x7f00000002c0)="be487fc3f637f7b3920cd05021cc0e8ec4dac124214d7108f880441d62b638be2169f7d0343749c1c5f6d887625ac1c2417ffe0a6ba9482353c5fea176ad92ad81e349", 0x43}, {&(0x7f00000004c0)="ff8d968b426baaa8641b2ab524a298b240483f0886fda5e57bb18c91906e05f492b2f0953058a805652eb4a2366f12f00657da6f3f81f0da3831c8dcda831b623eff00a6168f6d2db58a58c329d4738a37adb51766eda2a28158984cf1359b8c5c3cc72fb428e5f5aaa6eaf65f21164080e49a0a6ba94180f1b3f1c750d85a79dc8e713def55fca0f496e3d84908c4959e501c4f7b10bc81f92b099a", 0x9c}, {&(0x7f0000000580)="eea8d689f41d89debbaf257f9f4b6aa7a21dce1043b46e289edd0c707acc0f82ec98a7b424c83685f665671bb45eeb737c69c59f3e600f7f5f497df40766c1dfeb968f0a143484c501da7ed12474963ed74c67834c2369fa5ab25b6fecda0d89cfcbf41b58ab2a713c61549036e846dff8d4985a7da5a7351f7d374934525616fdb6b3de14875fd16db518782fb42b8fefa3cf0e1166dc19fe27e1696e0cb0eece01979c85a77a77db076176d2", 0xad}, {&(0x7f0000000680)="0f29a8db84cb8579f79232000397568a3cf1cc385160452c113407e74f323045ba5b5f475570203eb05bfb95bc5ac924a4c8874db91f3665181f2548fb7a1aa8bf996f06c7d644921822621b659b688214e4800eaf4e536df097e9c3741caa1d3bbe0938b26cf4ce4f2631db4667", 0x6e}, {&(0x7f0000000700)="f95bef7f7e14701f825012944df7bcad01e46d49839557de4d6d91c53f6d24200a70d9e2cdb056c90f64a869d75bcf5c9ffc1e5cbc6a1d5052048fa74bbdcf64729c9a5072ff014a85d0e3bc74c4e05579e6e34210bca2477f209c10fade7ed7ab66a42acdc77444ae42120b5873a48705af342231e9160a2cd78170ffe863d9b068c6e699c937dac169616878785936f1545d9a261e280a888844c0479fbf6d9cc0", 0xa2}], 0x6, &(0x7f0000000980)="2edd12bce824a62f09cb8431d4be4e052ba7c3c19978bd3724d86d4cf578ad1826a4de0f9dcb2b6db92bfca3f68c3b10119d49e802227f957ce6bf99161c56447147a27b26443a0ef3b9c19a98749cf1f5ee483035b5a9b73679778638ecdb52ea79f511283a687d86438793665a28c09461d27417", 0x75}, 0x0) r9 = socket$kcm(0xa, 0x2, 0x0) kexec_load(0x1, 0x2, &(0x7f0000000c00)=[{&(0x7f0000000b00)="bf55f28a3250f418ffd93e8549783228f13be59b25cc75d1a4db11f35fec3282e04ebe9a9ede56", 0x27, 0x0, 0x400}, {&(0x7f0000000b40)="b308ae9ad5fafb6e5ae79c4aa5053a4c26bdc1a24979cc375f3a1710c369a7f7eaf089fdfcf5063ebfaf4034b4e94f9423e93631563b750248252a0dac08c5975a8a5e19bf2c0627979305f73ddac52494ac155cf13a7bbc2cc07e62455b1e2073e0bf3cf14da34d27c7a77b5d5b54c7164e86487daa7c1a3bbac399289e07b3ec19ffc0bbf545eda5a68f9a1ee1a2d03b0379a37e", 0x95, 0x7, 0x8}], 0x5e0000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800", 0x2}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8918, &(0x7f0000000000)={r9}) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_migrate_pages_start\x00', r1}, 0x18) mount(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, &(0x7f00000000c0)=',\x83\xed\xaeH\x00\x97\xf48z\n:\x18\xcbRC\x97\xc8\xa6\b\x85\xa2\xd8Z\x88i\x02P<)\xac\xac\x03\'\xed\x93\x11\xba&\x00'/49) 73.68846ms ago: executing program 3 (id=6050): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1d) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 53.81152ms ago: executing program 8 (id=6051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x1}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0x4e, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702c900f8ffffffb703000008000000b70400000000000085000000590000009554f16ee0517f47710f50d8ce15ce45df688ef9e494051d"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="9e", @ANYRES8=r1, @ANYRES8=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000140), &(0x7f00000003c0)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000000044babeed00000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') fchdir(r9) (async) r10 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r10, &(0x7f0000001fc0)=""/184, 0xb8) (async) r11 = socket(0x18, 0x0, 0x0) connect$pppoe(r11, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r11, r7, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) 48.84983ms ago: executing program 3 (id=6052): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYBLOB="93da033e08c15491f0d8b62ad603fe50073e562c555b839e9fdaa55a4a8c49da5a7356a101c856cbcfed75462f56bf5590b4c1df0487dd089672c20624686b869d934ab69fd3c2358c326bb6eb26b711af6221114706f8934cf86fbd69b00c4dff23d1404169057bb5672da5b6c8d54105b034f065394a8e4fa6d5d4bb9798a6b047db86b85922d3571b0773b52be379e37c338237d7a5bb20357867e33752ca4d15ae06f54569fc9fe3ba1a3e099684e117a43844bc46e72b458ad08de32e80a235a252090da47d6b8cceb1275c2aec3c4217aa5908ab433d110713ffb200fc1d84ff3d2b472ea3cf4b7ab70c80bede90eef752dc"], 0x1, 0x67e, &(0x7f0000000980)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) socket$phonet(0x23, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x1100, 0x4, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0x0) listen(r4, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept$inet6(r4, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x4) r6 = open$dir(&(0x7f0000000000)='./file2\x00', 0x20000, 0x0) mmap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000002, 0x4016012, r6, 0x0) 0s ago: executing program 5 (id=6053): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) kernel console output (not intermixed with test programs): th parent 'hsr' already present! [ 415.365445][T21412] Cannot create hsr debugfs directory [ 415.368633][T21623] loop9: detected capacity change from 0 to 512 [ 415.388314][T21623] EXT4-fs error (device loop9): ext4_ext_check_inode:524: inode #4: comm syz.9.5865: pblk 0 bad header/extent: invalid magic - magic 70a, entries 0, max 0(0), depth 0(0) [ 415.407098][T21623] EXT4-fs error (device loop9): ext4_quota_enable:7115: comm syz.9.5865: Bad quota inode: 4, type: 1 [ 415.418297][T21623] EXT4-fs warning (device loop9): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 415.433117][T21623] EXT4-fs (loop9): mount failed [ 415.440197][ T55] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.452027][T21623] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5865'. [ 415.508746][ T55] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.522599][T21554] chnl_net:caif_netlink_parms(): no params data found [ 415.584574][T21633] bond1: entered promiscuous mode [ 415.589809][T21633] bond1: entered allmulticast mode [ 415.598288][T21633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 415.628798][T21633] bond1 (unregistering): Released all slaves [ 415.654723][ T55] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.784948][T21660] netlink: 'syz.0.5868': attribute type 13 has an invalid length. [ 415.810489][ T55] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.822420][T21554] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.829733][T21554] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.837023][T21554] bridge_slave_0: entered allmulticast mode [ 415.844822][T21554] bridge_slave_0: entered promiscuous mode [ 415.860771][T21660] gretap0: refused to change device tx_queue_len [ 415.867204][T21660] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 415.902091][T21671] loop9: detected capacity change from 0 to 1024 [ 415.908642][T21554] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.915704][T21554] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.937387][T21554] bridge_slave_1: entered allmulticast mode [ 415.943937][T21554] bridge_slave_1: entered promiscuous mode [ 415.950818][T21671] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 415.994718][T21671] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 416.014492][T21671] EXT4-fs (loop9): orphan cleanup on readonly fs [ 416.021451][T21671] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 416.023220][T21554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.041416][T21671] EXT4-fs (loop9): Remounting filesystem read-only [ 416.054661][T21341] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 416.057285][T21671] Quota error (device loop9): write_blk: dquota write failed [ 416.068830][T21671] Quota error (device loop9): write_blk: dquota write failed [ 416.076195][T21671] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 416.086079][T21671] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 416.094970][T21671] EXT4-fs (loop9): 1 orphan inode deleted [ 416.101415][T21671] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 416.113600][T21671] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 416.120512][T21671] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.148232][T21554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.168028][T21341] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 416.224657][T21341] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 416.239446][T21341] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 416.269492][T21554] team0: Port device team_slave_0 added [ 416.277213][T21554] team0: Port device team_slave_1 added [ 416.313552][ T29] audit: type=1326 audit(2000000060.290:19028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21705 comm="syz.9.5872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5d6d5d29 code=0x7ffc0000 [ 416.339797][T21698] FAULT_INJECTION: forcing a failure. [ 416.339797][T21698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.352963][T21698] CPU: 1 UID: 0 PID: 21698 Comm: syz.0.5871 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 416.363806][T21698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 416.374081][T21698] Call Trace: [ 416.377375][T21698] [ 416.377936][T21341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.380332][T21698] dump_stack_lvl+0xf2/0x150 [ 416.391526][T21698] dump_stack+0x15/0x1a [ 416.392221][T21341] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.395872][T21698] should_fail_ex+0x223/0x230 [ 416.407155][T21698] should_fail+0xb/0x10 [ 416.411349][T21698] should_fail_usercopy+0x1a/0x20 [ 416.415922][T21341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 416.416474][T21698] _copy_to_user+0x20/0xa0 [ 416.426814][T21341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 416.431282][T21698] simple_read_from_buffer+0xa0/0x110 [ 416.447237][T21698] proc_fail_nth_read+0xf9/0x140 [ 416.452217][T21698] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 416.457848][T21698] vfs_read+0x1a2/0x700 [ 416.462045][T21698] ? __rcu_read_unlock+0x4e/0x70 [ 416.467621][T21698] ? __fget_files+0x17c/0x1c0 [ 416.472351][T21698] ksys_read+0xe8/0x1b0 [ 416.476606][T21698] __x64_sys_read+0x42/0x50 [ 416.481134][T21698] x64_sys_call+0x2874/0x2dc0 [ 416.485842][T21698] do_syscall_64+0xc9/0x1c0 [ 416.490402][T21698] ? clear_bhb_loop+0x55/0xb0 [ 416.495177][T21698] ? clear_bhb_loop+0x55/0xb0 [ 416.499888][T21698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.505871][T21698] RIP: 0033:0x7fc6fb9f473c [ 416.510307][T21698] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 416.529955][T21698] RSP: 002b:00007fc6fa067030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 416.538477][T21698] RAX: ffffffffffffffda RBX: 00007fc6fbbe5fa0 RCX: 00007fc6fb9f473c [ 416.546476][T21698] RDX: 000000000000000f RSI: 00007fc6fa0670a0 RDI: 000000000000000d [ 416.554541][T21698] RBP: 00007fc6fa067090 R08: 0000000000000000 R09: 0000000000000000 [ 416.562553][T21698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.570548][T21698] R13: 0000000000000000 R14: 00007fc6fbbe5fa0 R15: 00007fffff490768 [ 416.578605][T21698] [ 416.593377][T21554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.600430][T21554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.626480][T21554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.649583][T21728] loop9: detected capacity change from 0 to 512 [ 416.658014][ T55] bridge_slave_1: left allmulticast mode [ 416.663735][ T55] bridge_slave_1: left promiscuous mode [ 416.669559][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.696689][ T55] bridge_slave_0: left allmulticast mode [ 416.702461][ T55] bridge_slave_0: left promiscuous mode [ 416.704882][T21728] EXT4-fs: Ignoring removed i_version option [ 416.708573][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.716829][T21728] EXT4-fs (loop9): invalid first ino: 4294967290 [ 416.800483][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.813161][T21742] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5873'. [ 416.822557][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.845563][ T55] bond0 (unregistering): Released all slaves [ 416.861050][ T1636] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.868180][ T1636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.876752][ T1636] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.883887][ T1636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.903296][T21554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.910323][T21554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.936397][T21554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.999539][T21554] hsr_slave_0: entered promiscuous mode [ 417.006043][T21554] hsr_slave_1: entered promiscuous mode [ 417.019123][T21554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.026707][T21554] Cannot create hsr debugfs directory [ 417.035353][T21755] netlink: 'syz.0.5878': attribute type 13 has an invalid length. [ 417.053900][ T55] hsr_slave_0: left promiscuous mode [ 417.061465][ T55] hsr_slave_1: left promiscuous mode [ 417.067253][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.074707][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.083035][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.090611][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.100462][ T55] veth1_macvtap: left promiscuous mode [ 417.106013][ T55] veth0_macvtap: left promiscuous mode [ 417.111584][ T55] veth1_vlan: left promiscuous mode [ 417.116975][ T55] veth0_vlan: left promiscuous mode [ 417.214114][ T55] team0 (unregistering): Port device team_slave_1 removed [ 417.224044][ T55] team0 (unregistering): Port device team_slave_0 removed [ 417.262852][T21341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.281146][T21755] gretap0: refused to change device tx_queue_len [ 417.287584][T21755] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 417.340468][T21766] team0 (unregistering): Port device team_slave_0 removed [ 417.351915][T21766] team0 (unregistering): Port device team_slave_1 removed [ 417.510317][T21412] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 417.522850][T21412] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 417.557345][T21412] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 417.587374][T21412] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 417.608011][T21825] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5881'. [ 417.627547][T21825] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5881'. [ 417.636795][T21825] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5881'. [ 417.676929][T21826] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.702557][T21341] veth0_vlan: entered promiscuous mode [ 417.726520][T21341] veth1_vlan: entered promiscuous mode [ 417.761349][T21826] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.786499][T21341] veth0_macvtap: entered promiscuous mode [ 417.794329][T21341] veth1_macvtap: entered promiscuous mode [ 417.844509][T21826] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.860599][T21412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.870974][T21341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.881512][T21341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.891399][T21341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.901884][T21341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.911855][T21341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.922353][T21341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.932238][T21341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.942751][T21341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.953491][T21341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.967414][T21554] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 417.982952][T21554] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 417.994600][T21826] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.014418][T21341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.024927][T21341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.034905][T21341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.045447][T21341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.055345][T21341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.065840][T21341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.075759][T21341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.086266][T21341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.099182][T21341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.108448][T21341] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.117310][T21341] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.126040][T21341] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.134899][T21341] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.146753][T21554] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 418.163992][T21412] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.173203][T21554] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 418.202428][T21826] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.213615][T21826] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.224778][T21826] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.236599][T21826] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.273810][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.280932][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.298618][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.305749][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.309627][T21882] SELinux: policydb version 0 does not match my version range 15-33 [ 418.321287][T21882] SELinux: failed to load policy [ 418.359202][T21412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 418.369632][T21412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.401554][T21888] loop9: detected capacity change from 0 to 512 [ 418.435470][T21888] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 418.448031][T21554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.486970][T21554] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.505456][T21888] EXT4-fs (loop9): 1 truncate cleaned up [ 418.515197][T21897] random: crng reseeded on system resumption [ 418.526186][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.533377][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.537628][T21888] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.563234][T21888] IPv6: NLM_F_CREATE should be specified when creating new route [ 418.572958][T21888] IPv6: Can't replace route, no match found [ 418.618814][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.625958][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.645405][T21554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 418.655878][T21554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.677212][T21888] loop9: detected capacity change from 512 to 64 [ 418.707945][T21412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.719432][T20632] EXT4-fs warning (device loop9): ext4_evict_inode:276: xattr delete (err -12) [ 418.752729][T20632] EXT4-fs error (device loop9): ext4_lookup:1813: inode #11: comm syz-executor: iget: bad extra_isize 29028 (inode size 256) [ 418.794999][T20632] EXT4-fs error (device loop9): ext4_lookup:1813: inode #11: comm syz-executor: iget: bad extra_isize 29028 (inode size 256) [ 418.799427][T21554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.913733][T21412] veth0_vlan: entered promiscuous mode [ 418.926739][T21412] veth1_vlan: entered promiscuous mode [ 418.955182][T21412] veth0_macvtap: entered promiscuous mode [ 418.962685][T21945] loop4: detected capacity change from 0 to 1024 [ 418.964298][T21412] veth1_macvtap: entered promiscuous mode [ 418.978557][T21945] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 419.020132][T21412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.030717][T21412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.040646][T21412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.051168][T21412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.059334][T21945] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 419.061064][T21412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.069889][T21945] EXT4-fs (loop4): orphan cleanup on readonly fs [ 419.079582][T21412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.095785][T21412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.098928][T20632] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.106319][T21412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.125144][T21412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.135729][T21412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.143358][T21945] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 419.161897][T21412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.176208][T21945] EXT4-fs (loop4): Remounting filesystem read-only [ 419.183992][T21945] EXT4-fs (loop4): 1 orphan inode deleted [ 419.191714][T21945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 419.212974][ T28] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.217343][T21945] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 419.226062][T21962] loop0: detected capacity change from 0 to 256 [ 419.245608][T21412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.256297][T21412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.266200][T21412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.276662][T21412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.277663][T21945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.286493][T21412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.306004][T21412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.315861][T21412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.326376][T21412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.336234][T21412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.346745][T21412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.359094][T21962] FAT-fs (loop0): Directory bread(block 1285) failed [ 419.366670][T21962] netlink: 596 bytes leftover after parsing attributes in process `syz.0.5890'. [ 419.376851][T21412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.388633][T21962] FAT-fs (loop0): Directory bread(block 1285) failed [ 419.395401][T21962] FAT-fs (loop0): Directory bread(block 1285) failed [ 419.396150][T21554] veth0_vlan: entered promiscuous mode [ 419.421491][T21962] FAT-fs (loop0): Directory bread(block 1285) failed [ 419.436902][ T28] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.461348][T21412] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.470570][T21412] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.479341][T21412] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.488163][T21412] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.504821][T21554] veth1_vlan: entered promiscuous mode [ 419.523081][ T28] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.562616][ T28] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.610576][T21554] veth0_macvtap: entered promiscuous mode [ 419.616683][T21991] FAULT_INJECTION: forcing a failure. [ 419.616683][T21991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.629854][T21991] CPU: 0 UID: 0 PID: 21991 Comm: syz.1.5836 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 419.640659][T21991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 419.650874][T21991] Call Trace: [ 419.654180][T21991] [ 419.657129][T21991] dump_stack_lvl+0xf2/0x150 [ 419.661843][T21991] dump_stack+0x15/0x1a [ 419.666100][T21991] should_fail_ex+0x223/0x230 [ 419.670825][T21991] should_fail+0xb/0x10 [ 419.675014][T21991] should_fail_usercopy+0x1a/0x20 [ 419.680091][T21991] _copy_to_iter+0x248/0xd00 [ 419.684729][T21991] ? __virt_addr_valid+0x1ed/0x250 [ 419.689883][T21991] ? __check_object_size+0x364/0x520 [ 419.695258][T21991] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 419.700935][T21991] __skb_datagram_iter+0xc8/0x610 [ 419.706099][T21991] skb_copy_datagram_iter+0x41/0x130 [ 419.709375][T21554] veth1_macvtap: entered promiscuous mode [ 419.711494][T21991] netlink_recvmsg+0x1a4/0x780 [ 419.722084][T21991] ? __pfx_netlink_recvmsg+0x10/0x10 [ 419.727469][T21991] sock_recvmsg+0x13f/0x170 [ 419.732027][T21991] ____sys_recvmsg+0xf9/0x280 [ 419.736743][T21991] do_recvmmsg+0x2aa/0x6d0 [ 419.741229][T21991] __x64_sys_recvmmsg+0xf9/0x170 [ 419.746195][T21991] x64_sys_call+0x2a9a/0x2dc0 [ 419.750967][T21991] do_syscall_64+0xc9/0x1c0 [ 419.755495][T21991] ? clear_bhb_loop+0x55/0xb0 [ 419.756385][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.760412][T21991] ? clear_bhb_loop+0x55/0xb0 [ 419.760458][T21991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.770962][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.775587][T21991] RIP: 0033:0x7ffb41dd5d29 [ 419.781553][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.791301][T21991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.791327][T21991] RSP: 002b:00007ffb40447038 EFLAGS: 00000246 [ 419.795733][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.806140][T21991] ORIG_RAX: 000000000000012b [ 419.806155][T21991] RAX: ffffffffffffffda RBX: 00007ffb41fc5fa0 RCX: 00007ffb41dd5d29 [ 419.806172][T21991] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 419.806189][T21991] RBP: 00007ffb40447090 R08: 0000000020003700 R09: 0000000000000000 [ 419.806205][T21991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.825934][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.831936][T21991] R13: 0000000000000000 R14: 00007ffb41fc5fa0 R15: 00007fff4944fe68 [ 419.831966][T21991] [ 419.898915][T22005] SELinux: policydb version 0 does not match my version range 15-33 [ 419.900847][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.909692][T22005] SELinux: failed to load policy [ 419.918842][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.934335][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.944203][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.953386][T22007] loop4: detected capacity change from 0 to 512 [ 419.954821][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.970999][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.974481][T22007] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 419.981457][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.004820][T21554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.051267][T22007] EXT4-fs (loop4): 1 truncate cleaned up [ 420.072513][T22015] loop1: detected capacity change from 0 to 512 [ 420.085794][T22007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.103198][ T28] bridge_slave_1: left allmulticast mode [ 420.108933][ T28] bridge_slave_1: left promiscuous mode [ 420.114666][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.127422][ T28] bridge_slave_0: left allmulticast mode [ 420.133172][ T28] bridge_slave_0: left promiscuous mode [ 420.138966][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.162585][T22015] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 420.180549][T22015] EXT4-fs (loop1): 1 truncate cleaned up [ 420.190103][T22015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.244695][T22022] loop0: detected capacity change from 0 to 1024 [ 420.252238][T22022] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 420.264612][T22022] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 420.272809][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.272904][T22022] EXT4-fs (loop0): orphan cleanup on readonly fs [ 420.289227][T22022] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 420.299107][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.300688][T22022] EXT4-fs (loop0): Remounting filesystem read-only [ 420.314422][T22022] __quota_error: 72 callbacks suppressed [ 420.314437][T22022] Quota error (device loop0): write_blk: dquota write failed [ 420.327780][T22022] Quota error (device loop0): write_blk: dquota write failed [ 420.335431][T22022] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 420.346101][T22022] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 420.346139][ T28] bond0 (unregistering): Released all slaves [ 420.361236][T22022] EXT4-fs (loop0): 1 orphan inode deleted [ 420.362124][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.377507][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.387480][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.397970][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.407887][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.418394][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.428314][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.438805][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.448632][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.459068][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.469245][T21554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.479746][T21554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.490994][T21554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.497712][T22022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 420.508755][T21554] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.519095][T21554] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.527206][T22022] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 420.527911][T21554] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.534710][T22022] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.543047][T21554] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.562837][T22025] loop1: detected capacity change from 512 to 64 [ 420.586347][T21341] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 420.610173][T22023] IPv6: NLM_F_CREATE should be specified when creating new route [ 420.627286][T22023] IPv6: Can't replace route, no match found [ 420.627400][T21341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.677839][T22030] FAULT_INJECTION: forcing a failure. [ 420.677839][T22030] name failslab, interval 1, probability 0, space 0, times 0 [ 420.690527][T22030] CPU: 0 UID: 0 PID: 22030 Comm: syz.4.5898 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 420.701324][T22030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 420.711414][T22030] Call Trace: [ 420.714717][T22030] [ 420.717683][T22030] dump_stack_lvl+0xf2/0x150 [ 420.722437][T22030] dump_stack+0x15/0x1a [ 420.722933][T21412] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 420.726614][T22030] should_fail_ex+0x223/0x230 [ 420.750746][T22030] should_failslab+0x8f/0xb0 [ 420.755460][T22030] kmem_cache_alloc_node_noprof+0x59/0x320 [ 420.761368][T22030] ? __alloc_skb+0x10b/0x310 [ 420.766111][T22030] __alloc_skb+0x10b/0x310 [ 420.770610][T22030] netlink_alloc_large_skb+0xad/0xe0 [ 420.775967][T22030] netlink_sendmsg+0x3b4/0x6e0 [ 420.780865][T22030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.786195][T22030] __sock_sendmsg+0x140/0x180 [ 420.790918][T22030] ____sys_sendmsg+0x312/0x410 [ 420.795798][T22030] __sys_sendmsg+0x19d/0x230 [ 420.800487][T22030] __x64_sys_sendmsg+0x46/0x50 [ 420.805345][T22030] x64_sys_call+0x2734/0x2dc0 [ 420.810053][T22030] do_syscall_64+0xc9/0x1c0 [ 420.814613][T22030] ? clear_bhb_loop+0x55/0xb0 [ 420.819327][T22030] ? clear_bhb_loop+0x55/0xb0 [ 420.824185][T22030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.830117][T22030] RIP: 0033:0x7f1c7caa5d29 [ 420.834553][T22030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.854199][T22030] RSP: 002b:00007f1c7b117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.862686][T22030] RAX: ffffffffffffffda RBX: 00007f1c7cc95fa0 RCX: 00007f1c7caa5d29 [ 420.870679][T22030] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 420.878782][T22030] RBP: 00007f1c7b117090 R08: 0000000000000000 R09: 0000000000000000 [ 420.886833][T22030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.894892][T22030] R13: 0000000000000000 R14: 00007f1c7cc95fa0 R15: 00007ffc4a857c18 [ 420.902962][T22030] [ 420.930192][T21412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.960141][ T28] hsr_slave_0: left promiscuous mode [ 420.967357][ T29] audit: type=1326 audit(2000000064.940:19097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22044 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7caa5d29 code=0x7ffc0000 [ 420.991063][ T29] audit: type=1326 audit(2000000064.940:19098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22044 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7caa5d29 code=0x7ffc0000 [ 420.994308][T22048] loop6: detected capacity change from 0 to 8192 [ 421.014752][ T29] audit: type=1326 audit(2000000064.940:19099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22044 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1c7caa5d29 code=0x7ffc0000 [ 421.014797][ T29] audit: type=1326 audit(2000000064.950:19100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22044 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7caa5d29 code=0x7ffc0000 [ 421.071888][ T28] hsr_slave_1: left promiscuous mode [ 421.072112][ T29] audit: type=1326 audit(2000000065.030:19101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22044 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7caa5d29 code=0x7ffc0000 [ 421.100884][ T29] audit: type=1326 audit(2000000065.060:19102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22044 comm="syz.4.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1c7caa5d29 code=0x7ffc0000 [ 421.134815][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.142432][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.153383][T22048] syz.6.5858: attempt to access beyond end of device [ 421.153383][T22048] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 421.170337][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.172115][T22048] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 421.177807][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.185594][T22048] FAT-fs (loop6): Filesystem has been set read-only [ 421.196223][T22050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5901'. [ 421.200049][T22048] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 421.216493][ T28] veth1_macvtap: left promiscuous mode [ 421.216760][T22048] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 421.222022][ T28] veth0_macvtap: left promiscuous mode [ 421.222074][ T28] veth1_vlan: left promiscuous mode [ 421.240786][ T28] veth0_vlan: left promiscuous mode [ 421.346306][T22052] netlink: 'syz.6.5902': attribute type 2 has an invalid length. [ 421.461203][T21972] chnl_net:caif_netlink_parms(): no params data found [ 421.514254][T22073] loop6: detected capacity change from 0 to 128 [ 421.530727][T22073] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 421.553497][T21972] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.560633][T21972] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.569462][T21972] bridge_slave_0: entered allmulticast mode [ 421.577356][T21972] bridge_slave_0: entered promiscuous mode [ 421.585531][T21972] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.592892][T21972] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.600426][T21972] bridge_slave_1: entered allmulticast mode [ 421.607019][T21972] bridge_slave_1: entered promiscuous mode [ 421.640223][T21972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.658827][T21972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.708295][T21972] team0: Port device team_slave_0 added [ 421.714977][T21972] team0: Port device team_slave_1 added [ 421.732983][T21972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.740033][T21972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.766454][T21972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.789351][T21972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.796464][T21972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.822815][T21972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.888727][T21972] hsr_slave_0: entered promiscuous mode [ 421.895017][T21972] hsr_slave_1: entered promiscuous mode [ 421.899182][T22098] loop0: detected capacity change from 0 to 764 [ 422.114495][T22109] syzkaller0: entered promiscuous mode [ 422.120279][T22109] syzkaller0: entered allmulticast mode [ 422.138182][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 422.145732][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.153264][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.160726][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.168162][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.175598][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.183133][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 422.190772][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.198282][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 422.205700][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.213144][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.220672][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.228236][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.235930][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.243415][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 422.250925][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.258441][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.266026][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.273526][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.281040][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.288473][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.295923][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.303339][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.310763][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.318309][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.325776][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.333296][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.340818][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.348425][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.355894][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.363331][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.370778][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.378303][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.385725][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.393171][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.400697][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.408310][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.415702][ T3358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 422.426121][ T3358] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 422.426912][T21972] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.451991][T22116] netlink: 'syz.4.5912': attribute type 2 has an invalid length. [ 422.463824][ T9371] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 422.528753][T21972] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.570755][T22124] SELinux: Context system_u:object_r:sendmail_exec_t:s0 is not valid (left unmapped). [ 422.583981][T21972] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.608115][T22129] loop6: detected capacity change from 0 to 2048 [ 422.630172][T22133] loop4: detected capacity change from 0 to 512 [ 422.637519][T22133] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 422.651251][T21972] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.658009][T22129] Alternate GPT is invalid, using primary GPT. [ 422.664917][T22133] EXT4-fs (loop4): 1 truncate cleaned up [ 422.667989][T22129] loop6: p2 p3 p7 [ 422.675111][T22133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.700176][ T2999] Alternate GPT is invalid, using primary GPT. [ 422.706653][ T2999] loop6: p2 p3 p7 [ 422.760782][T21348] udevd[21348]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 422.775812][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 422.786910][ T4025] udevd[4025]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 422.811452][T21972] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 422.823048][T21972] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 422.832576][T21972] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 422.841707][T21972] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 422.885265][T21972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.901452][T21972] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.913323][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.920514][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.939734][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.946876][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.021898][T21972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.085499][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.120061][T21972] veth0_vlan: entered promiscuous mode [ 423.139183][T21972] veth1_vlan: entered promiscuous mode [ 423.158900][T21972] veth0_macvtap: entered promiscuous mode [ 423.169713][T21972] veth1_macvtap: entered promiscuous mode [ 423.190267][T21972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.201022][T21972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.211011][T21972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.221682][T21972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.231552][T21972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.242077][T21972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.251947][T21972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.262412][T21972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.272251][T21972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.282729][T21972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.292812][T21972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.303385][T21972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.327618][T21341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.338879][T21972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.349735][T21972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.360251][T21972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.370509][T21972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.381166][T21972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.391121][T21972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.401587][T21972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.402475][T22205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5920'. [ 423.411440][T21972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.430895][T21972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.440843][T21972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.451489][T21972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.461453][T21972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.471910][T21972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.483429][T21972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.493653][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.512701][T22205] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 423.527040][T21972] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.535875][T21972] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.544826][T21972] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.553589][T21972] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.584414][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.633031][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.668355][T22225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5922'. [ 423.732061][T22233] nfs4: Bad value for 'source' [ 423.778792][ T11] bridge_slave_1: left allmulticast mode [ 423.784565][ T11] bridge_slave_1: left promiscuous mode [ 423.790293][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.805019][T22241] loop0: detected capacity change from 0 to 512 [ 423.807739][T22241] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 423.809924][T22241] EXT4-fs (loop0): 1 truncate cleaned up [ 423.817640][T22241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.819927][T22242] loop4: detected capacity change from 0 to 512 [ 423.825775][ T11] bridge_slave_0: left allmulticast mode [ 423.825798][ T11] bridge_slave_0: left promiscuous mode [ 423.825974][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.832545][T22242] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 423.921796][T22242] EXT4-fs (loop4): 1 truncate cleaned up [ 423.945150][T22242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.019214][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.031358][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.044406][ T11] bond0 (unregistering): Released all slaves [ 424.069760][T22267] IPv6: NLM_F_CREATE should be specified when creating new route [ 424.078354][T22267] IPv6: Can't replace route, no match found [ 424.078989][T19611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.145341][T22242] loop4: detected capacity change from 512 to 64 [ 424.216766][T22281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5929'. [ 424.223989][T21341] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 424.227164][ T11] hsr_slave_0: left promiscuous mode [ 424.249389][T22289] loop6: detected capacity change from 0 to 512 [ 424.257804][ T11] hsr_slave_1: left promiscuous mode [ 424.268101][T22289] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 424.279560][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.281534][T22289] EXT4-fs (loop6): 1 truncate cleaned up [ 424.287166][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.296031][T21341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.300539][T22289] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.322842][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.330564][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.340701][ T11] veth1_macvtap: left promiscuous mode [ 424.346248][ T11] veth0_macvtap: left promiscuous mode [ 424.351957][ T11] veth1_vlan: left promiscuous mode [ 424.357219][ T11] veth0_vlan: left promiscuous mode [ 424.422464][ T11] team0 (unregistering): Port device team_slave_1 removed [ 424.432064][ T11] team0 (unregistering): Port device team_slave_0 removed [ 424.490138][T22292] IPv6: NLM_F_CREATE should be specified when creating new route [ 424.499627][T22293] loop6: detected capacity change from 512 to 64 [ 424.504790][T22292] IPv6: Can't replace route, no match found [ 424.514980][T22299] random: crng reseeded on system resumption [ 424.575898][T22186] chnl_net:caif_netlink_parms(): no params data found [ 424.622326][T21554] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 424.625124][T22186] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.649109][T22186] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.662915][T22186] bridge_slave_0: entered allmulticast mode [ 424.674190][T22186] bridge_slave_0: entered promiscuous mode [ 424.681542][T22186] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.688623][T22186] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.696360][T22186] bridge_slave_1: entered allmulticast mode [ 424.703190][T22186] bridge_slave_1: entered promiscuous mode [ 424.707136][T21554] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.748063][T22308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5936'. [ 424.758728][T22308] FAULT_INJECTION: forcing a failure. [ 424.758728][T22308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.759799][T22186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.771837][T22308] CPU: 1 UID: 0 PID: 22308 Comm: syz.0.5936 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 424.771868][T22308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 424.801767][T22308] Call Trace: [ 424.805065][T22308] [ 424.808027][T22308] dump_stack_lvl+0xf2/0x150 [ 424.812710][T22308] dump_stack+0x15/0x1a [ 424.816980][T22308] should_fail_ex+0x223/0x230 [ 424.821725][T22308] should_fail+0xb/0x10 [ 424.825954][T22308] should_fail_usercopy+0x1a/0x20 [ 424.831015][T22308] _copy_from_user+0x1e/0xb0 [ 424.835644][T22308] copy_msghdr_from_user+0x54/0x2a0 [ 424.840876][T22308] ? __fget_files+0x17c/0x1c0 [ 424.845574][T22308] __sys_sendmsg+0x13e/0x230 [ 424.850359][T22308] __x64_sys_sendmsg+0x46/0x50 [ 424.855172][T22308] x64_sys_call+0x2734/0x2dc0 [ 424.859849][T22308] do_syscall_64+0xc9/0x1c0 [ 424.864715][T22308] ? clear_bhb_loop+0x55/0xb0 [ 424.869391][T22308] ? clear_bhb_loop+0x55/0xb0 [ 424.874066][T22308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.879969][T22308] RIP: 0033:0x7fc6fb9f5d29 [ 424.884401][T22308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.904017][T22308] RSP: 002b:00007fc6fa067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.912490][T22308] RAX: ffffffffffffffda RBX: 00007fc6fbbe5fa0 RCX: 00007fc6fb9f5d29 [ 424.920505][T22308] RDX: 0000000024040808 RSI: 0000000020000180 RDI: 0000000000000004 [ 424.928650][T22308] RBP: 00007fc6fa067090 R08: 0000000000000000 R09: 0000000000000000 [ 424.936716][T22308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.944761][T22308] R13: 0000000000000000 R14: 00007fc6fbbe5fa0 R15: 00007fffff490768 [ 424.952748][T22308] [ 424.965672][T22186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.026957][T22186] team0: Port device team_slave_0 added [ 425.034486][T22315] netlink: 'syz.3.5937': attribute type 2 has an invalid length. [ 425.043578][T22186] team0: Port device team_slave_1 added [ 425.070205][T22315] SELinux: policydb version 536871040 does not match my version range 15-33 [ 425.083029][T22315] SELinux: failed to load policy [ 425.123916][T22186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.131015][T22186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.131373][T22327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5941'. [ 425.157760][T22186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.180066][T22186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.187067][T22186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.213082][T22186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.331359][T22186] hsr_slave_0: entered promiscuous mode [ 425.340138][T22186] hsr_slave_1: entered promiscuous mode [ 425.346588][T22186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.354287][T22186] Cannot create hsr debugfs directory [ 425.373226][T22337] loop0: detected capacity change from 0 to 512 [ 425.391324][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.434830][T22337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.447819][T22337] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 425.469142][T22337] syz.0.5943(22337): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 425.494097][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 425.494115][ T29] audit: type=1400 audit(2000000069.366:19403): avc: denied { ioctl } for pid=22336 comm="syz.0.5943" path="/110/bus/file2" dev="loop0" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 425.543412][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.555655][T19611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.580156][T22348] loop0: detected capacity change from 0 to 512 [ 425.587115][T22348] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 425.601354][T22348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.624011][T22348] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.5944: path /111/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 425.646727][T22348] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 12: comm syz.0.5944: path /111/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 425.668014][T22348] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 13: comm syz.0.5944: path /111/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 425.690408][T22348] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 14: comm syz.0.5944: path /111/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 425.711177][T22348] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 15: comm syz.0.5944: path /111/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 425.711800][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.733618][T22348] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 16: comm syz.0.5944: path /111/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 425.763465][T22348] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 17: comm syz.0.5944: path /111/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 425.792352][T22348] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #2: block 18: comm syz.0.5944: lblock 23 mapped to illegal pblock 18 (length 1) [ 425.817857][T22309] chnl_net:caif_netlink_parms(): no params data found [ 425.829984][T22348] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 19: comm syz.0.5944: path /111/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 425.853580][T22348] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 20: comm syz.0.5944: path /111/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 425.896974][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.937432][T22331] chnl_net:caif_netlink_parms(): no params data found [ 426.028393][T22309] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.035499][T22309] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.047759][T22309] bridge_slave_0: entered allmulticast mode [ 426.054312][T22309] bridge_slave_0: entered promiscuous mode [ 426.105071][T22309] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.112336][T22309] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.128780][T22309] bridge_slave_1: entered allmulticast mode [ 426.140115][T22309] bridge_slave_1: entered promiscuous mode [ 426.201551][T22331] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.208706][T22331] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.217982][T22331] bridge_slave_0: entered allmulticast mode [ 426.225942][T22331] bridge_slave_0: entered promiscuous mode [ 426.248382][T22309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.260751][T22331] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.267931][T22331] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.283735][T22331] bridge_slave_1: entered allmulticast mode [ 426.290548][T22331] bridge_slave_1: entered promiscuous mode [ 426.313118][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.328966][T22309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.371056][T22331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.390201][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.405760][T22186] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 426.416232][T22309] team0: Port device team_slave_0 added [ 426.423026][T22309] team0: Port device team_slave_1 added [ 426.430162][T22331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.439360][T22186] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 426.456155][T22186] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 426.502774][T19611] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 426.519401][T19611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.529477][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.542501][T22186] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 426.545119][T22404] loop0: detected capacity change from 0 to 512 [ 426.556749][T22404] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 426.570913][T22309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.578025][T22309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.586616][T22404] EXT4-fs (loop0): 1 truncate cleaned up [ 426.604079][T22309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.612562][T22404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.623478][T22331] team0: Port device team_slave_0 added [ 426.648710][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.669360][T22309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.676356][T22309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.702477][T22309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.714687][T22331] team0: Port device team_slave_1 added [ 426.733004][T22417] IPv6: Can't replace route, no match found [ 426.770051][T22331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.777161][T22331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.803256][T22331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.816860][T22404] loop0: detected capacity change from 512 to 64 [ 426.848528][T22186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.875170][T22331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.882251][T22331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.908248][T22331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.926778][T22186] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.953277][T22309] hsr_slave_0: entered promiscuous mode [ 426.953745][T19611] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 426.978830][T22309] hsr_slave_1: entered promiscuous mode [ 426.985018][T22309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.995543][T22309] Cannot create hsr debugfs directory [ 427.002289][T19611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.018272][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.025508][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.052779][ T11] bridge_slave_1: left allmulticast mode [ 427.058581][ T11] bridge_slave_1: left promiscuous mode [ 427.064418][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.075938][ T11] bridge_slave_0: left allmulticast mode [ 427.081652][ T11] bridge_slave_0: left promiscuous mode [ 427.087316][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.097144][ T11] bridge_slave_1: left allmulticast mode [ 427.102813][ T11] bridge_slave_1: left promiscuous mode [ 427.108624][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.119231][ T11] bridge_slave_0: left allmulticast mode [ 427.124991][ T11] bridge_slave_0: left promiscuous mode [ 427.130755][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.385703][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.395909][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.405384][ T11] bond0 (unregistering): Released all slaves [ 427.414215][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.424039][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.433648][ T11] bond0 (unregistering): Released all slaves [ 427.443881][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.451020][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.524998][T22331] hsr_slave_0: entered promiscuous mode [ 427.533768][T22331] hsr_slave_1: entered promiscuous mode [ 427.561673][T22331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.576153][T22331] Cannot create hsr debugfs directory [ 427.592673][ T11] hsr_slave_0: left promiscuous mode [ 427.611143][ T11] hsr_slave_1: left promiscuous mode [ 427.617744][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.625328][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.633195][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.640699][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.650680][ T11] hsr_slave_0: left promiscuous mode [ 427.656625][ T11] hsr_slave_1: left promiscuous mode [ 427.664033][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.671634][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.679819][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.687378][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.701188][ T11] veth1_macvtap: left promiscuous mode [ 427.706727][ T11] veth0_macvtap: left promiscuous mode [ 427.712344][ T11] veth1_vlan: left promiscuous mode [ 427.717699][ T11] veth0_vlan: left promiscuous mode [ 427.723622][ T11] veth1_macvtap: left promiscuous mode [ 427.729214][ T11] veth0_macvtap: left promiscuous mode [ 427.734806][ T11] veth1_vlan: left promiscuous mode [ 427.740122][ T11] veth0_vlan: left promiscuous mode [ 427.866156][ T11] team0 (unregistering): Port device team_slave_1 removed [ 427.877847][ T11] team0 (unregistering): Port device team_slave_0 removed [ 427.938181][ T11] team0 (unregistering): Port device team_slave_1 removed [ 427.951910][ T11] team0 (unregistering): Port device team_slave_0 removed [ 428.013468][T22186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.093937][ T29] audit: type=1326 audit(2000000071.798:19404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22556 comm="syz.3.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a45f85d29 code=0x7ffc0000 [ 428.117949][ T29] audit: type=1326 audit(2000000071.798:19405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22556 comm="syz.3.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a45f85d29 code=0x7ffc0000 [ 428.141682][ T29] audit: type=1326 audit(2000000071.798:19406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22556 comm="syz.3.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a45f85d29 code=0x7ffc0000 [ 428.165314][ T29] audit: type=1326 audit(2000000071.798:19407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22556 comm="syz.3.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5a45f85d29 code=0x7ffc0000 [ 428.189013][ T29] audit: type=1326 audit(2000000071.798:19408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22556 comm="syz.3.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a45f85d29 code=0x7ffc0000 [ 428.212642][ T29] audit: type=1326 audit(2000000071.798:19409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22556 comm="syz.3.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5a45f85d29 code=0x7ffc0000 [ 428.236423][ T29] audit: type=1326 audit(2000000071.798:19410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22556 comm="syz.3.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a45f85d29 code=0x7ffc0000 [ 428.260112][ T29] audit: type=1326 audit(2000000071.798:19411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22556 comm="syz.3.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5a45f85d29 code=0x7ffc0000 [ 428.283892][ T29] audit: type=1326 audit(2000000071.798:19412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22556 comm="syz.3.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a45f85d29 code=0x7ffc0000 [ 428.364571][T22566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5951'. [ 428.429349][T22474] chnl_net:caif_netlink_parms(): no params data found [ 428.440523][T22585] FAULT_INJECTION: forcing a failure. [ 428.440523][T22585] name failslab, interval 1, probability 0, space 0, times 0 [ 428.453230][T22585] CPU: 0 UID: 0 PID: 22585 Comm: syz.3.5952 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 428.464011][T22585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 428.474082][T22585] Call Trace: [ 428.477394][T22585] [ 428.480339][T22585] dump_stack_lvl+0xf2/0x150 [ 428.484961][T22585] dump_stack+0x15/0x1a [ 428.489154][T22585] should_fail_ex+0x223/0x230 [ 428.493911][T22585] ? getname_flags+0x1f4/0x3b0 [ 428.498684][T22585] should_failslab+0x8f/0xb0 [ 428.503373][T22585] __kmalloc_cache_noprof+0x4e/0x320 [ 428.508741][T22585] getname_flags+0x1f4/0x3b0 [ 428.513340][T22585] __x64_sys_symlinkat+0x43/0x70 [ 428.518302][T22585] x64_sys_call+0x269e/0x2dc0 [ 428.522987][T22585] do_syscall_64+0xc9/0x1c0 [ 428.527550][T22585] ? clear_bhb_loop+0x55/0xb0 [ 428.532344][T22585] ? clear_bhb_loop+0x55/0xb0 [ 428.537099][T22585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.543095][T22585] RIP: 0033:0x7f5a45f85d29 [ 428.547730][T22585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.567384][T22585] RSP: 002b:00007f5a445f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 428.575806][T22585] RAX: ffffffffffffffda RBX: 00007f5a46175fa0 RCX: 00007f5a45f85d29 [ 428.583783][T22585] RDX: 0000000020000000 RSI: ffffffffffffff9c RDI: 0000000020000b80 [ 428.591764][T22585] RBP: 00007f5a445f7090 R08: 0000000000000000 R09: 0000000000000000 [ 428.599794][T22585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.607839][T22585] R13: 0000000000000000 R14: 00007f5a46175fa0 R15: 00007ffdef0bd0e8 [ 428.615840][T22585] [ 428.686400][T22474] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.693840][T22474] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.701276][T22474] bridge_slave_0: entered allmulticast mode [ 428.707879][T22474] bridge_slave_0: entered promiscuous mode [ 428.714682][T22474] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.721787][T22474] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.728966][T22474] bridge_slave_1: entered allmulticast mode [ 428.736175][T22474] bridge_slave_1: entered promiscuous mode [ 428.779896][T22474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.789965][T22186] veth0_vlan: entered promiscuous mode [ 428.797841][T22186] veth1_vlan: entered promiscuous mode [ 428.804362][T22309] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 428.832511][T22474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.850094][T22309] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 428.861199][T22309] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 428.874097][T22186] veth0_macvtap: entered promiscuous mode [ 428.891701][T22309] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 428.910010][T22186] veth1_macvtap: entered promiscuous mode [ 428.919285][T22474] team0: Port device team_slave_0 added [ 428.926839][T22474] team0: Port device team_slave_1 added [ 428.951697][T22474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.958760][T22474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.984802][T22474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.008356][T22186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.018958][T22186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.028884][T22186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.039328][T22186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.049287][T22186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.059732][T22186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.069575][T22186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.080279][T22186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.091584][T22186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.101275][T22474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.108318][T22474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.134303][T22474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.148848][ T36] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.164437][T22186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.175167][T22186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.185177][T22186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.195688][T22186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.205525][T22186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.216076][T22186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.226027][T22186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.236520][T22186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.247539][T22186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.262667][T22186] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.271897][T22186] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.280654][T22186] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.289515][T22186] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.319958][ T36] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.336225][T22474] hsr_slave_0: entered promiscuous mode [ 429.345769][T22474] hsr_slave_1: entered promiscuous mode [ 429.353323][T22474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.360945][T22474] Cannot create hsr debugfs directory [ 429.394730][ T36] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.435342][T22331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 429.457391][ T36] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.497342][T22331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 429.525380][T22331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 429.539455][T22309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.553482][T22331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 429.635649][T22684] loop7: detected capacity change from 0 to 512 [ 429.652777][T22684] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 429.662253][ T36] bridge_slave_1: left allmulticast mode [ 429.668446][ T36] bridge_slave_1: left promiscuous mode [ 429.674630][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.686101][T22684] EXT4-fs (loop7): 1 truncate cleaned up [ 429.692137][T22684] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.706955][ T36] bridge_slave_0: left allmulticast mode [ 429.712679][ T36] bridge_slave_0: left promiscuous mode [ 429.718371][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.761049][T22690] loop3: detected capacity change from 0 to 8192 [ 429.788264][T22690] syz.3.5955: attempt to access beyond end of device [ 429.788264][T22690] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 429.802818][T22690] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 429.810780][T22690] FAT-fs (loop3): Filesystem has been set read-only [ 429.818489][T22690] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 429.828110][T22690] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 429.876776][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.886776][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.896557][ T36] bond0 (unregistering): Released all slaves [ 429.916868][T22309] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.934405][ T1636] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.941536][ T1636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.965161][T22186] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.987692][T22331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.011462][ T1636] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.018586][ T1636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.044321][T22309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.059610][ T36] hsr_slave_0: left promiscuous mode [ 430.065411][ T36] hsr_slave_1: left promiscuous mode [ 430.074450][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.082083][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.087448][T22725] loop7: detected capacity change from 0 to 1024 [ 430.096090][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.103709][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.104410][T22725] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 430.123547][T22725] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 430.131636][ T36] veth1_macvtap: left promiscuous mode [ 430.131646][T22725] EXT4-fs (loop7): orphan cleanup on readonly fs [ 430.143613][ T36] veth0_macvtap: left promiscuous mode [ 430.144919][T22725] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 430.149269][ T36] veth1_vlan: left promiscuous mode [ 430.161073][T22725] EXT4-fs (loop7): Remounting filesystem read-only [ 430.163783][ T36] veth0_vlan: left promiscuous mode [ 430.171931][T22725] EXT4-fs (loop7): 1 orphan inode deleted [ 430.182164][T22725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 430.197022][T22725] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 430.223965][T22725] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.295948][ T36] team0 (unregistering): Port device team_slave_1 removed [ 430.308807][ T36] team0 (unregistering): Port device team_slave_0 removed [ 430.391004][T22331] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.407327][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.414774][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.444830][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.451932][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.476634][T22331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.521359][T22309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.582290][T22474] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 430.598091][T22474] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 430.635698][T22474] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 430.653052][T22474] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 430.682972][T22331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.777885][T22474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.804335][T22474] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.861017][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.868186][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.886048][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 430.886081][ T29] audit: type=1326 audit(2000000074.407:19421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22804 comm="syz.3.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a45f85d29 code=0x7ffc0000 [ 430.896096][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.915834][ T29] audit: type=1326 audit(2000000074.407:19422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22804 comm="syz.3.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a45f85d29 code=0x7ffc0000 [ 430.922853][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.936457][T22809] loop3: detected capacity change from 0 to 2048 [ 430.946492][ T29] audit: type=1326 audit(2000000074.407:19423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22804 comm="syz.3.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5a45f85d29 code=0x7ffc0000 [ 430.983898][ T29] audit: type=1326 audit(2000000074.407:19424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22804 comm="syz.3.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5a45f85d63 code=0x7ffc0000 [ 431.008179][ T29] audit: type=1326 audit(2000000074.407:19425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22804 comm="syz.3.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5a45f847df code=0x7ffc0000 [ 431.009496][T22809] loop3: p3 < > p4 < > [ 431.031632][ T29] audit: type=1326 audit(2000000074.445:19426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22804 comm="syz.3.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5a45f85db7 code=0x7ffc0000 [ 431.035803][T22809] loop3: partition table partially beyond EOD, truncated [ 431.059328][ T29] audit: type=1326 audit(2000000074.445:19427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22804 comm="syz.3.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a45f84690 code=0x7ffc0000 [ 431.068695][T22809] loop3: p3 start 4284289 is beyond EOD, [ 431.089920][ T29] audit: type=1326 audit(2000000074.445:19428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22804 comm="syz.3.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a45f8592b code=0x7ffc0000 [ 431.089956][ T29] audit: type=1326 audit(2000000074.482:19429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22804 comm="syz.3.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5a45f8498a code=0x7ffc0000 [ 431.095687][T22809] truncated [ 431.145768][ T29] audit: type=1326 audit(2000000074.482:19430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22804 comm="syz.3.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a45f8592b code=0x7ffc0000 [ 431.176755][T22474] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 431.187206][T22474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 431.221377][T22331] veth0_vlan: entered promiscuous mode [ 431.255669][T22309] veth0_vlan: entered promiscuous mode [ 431.278639][T22309] veth1_vlan: entered promiscuous mode [ 431.294688][T22331] veth1_vlan: entered promiscuous mode [ 431.336057][T22309] veth0_macvtap: entered promiscuous mode [ 431.347411][T22331] veth0_macvtap: entered promiscuous mode [ 431.356970][T22309] veth1_macvtap: entered promiscuous mode [ 431.367098][T22331] veth1_macvtap: entered promiscuous mode [ 431.378398][T22474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.388823][T22309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.399398][T22309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.409317][T22309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.419876][T22309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.429857][T22309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.440423][T22309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.450334][T22309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.460816][T22309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.479087][T22309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.499972][T22331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.510563][T22331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.520446][T22331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.530957][T22331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.540938][T22331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.551540][T22331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.561434][T22331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.571926][T22331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.581880][T22331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.592424][T22331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.604466][T22331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.612875][T22309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.623531][T22309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.633387][T22309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.644004][T22309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.653954][T22309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.664457][T22309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.674406][T22309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.684988][T22309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.705214][T22309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.717336][T22331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.727852][T22331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.737812][T22331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.748345][T22331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.758300][T22331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.768934][T22331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.778912][T22331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.789540][T22331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.799416][T22331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.809927][T22331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.821241][T22331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.829332][T22865] macsec0: entered promiscuous mode [ 431.835850][T22309] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.844628][T22309] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.853480][T22309] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.862201][T22309] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.884603][T22331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.893436][T22331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.902306][T22331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.911069][T22331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.034816][T22861] macsec0: left promiscuous mode [ 432.110417][T22893] syz.5.5935[22893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.110605][T22893] syz.5.5935[22893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.113982][T22474] veth0_vlan: entered promiscuous mode [ 432.162487][T22893] syz.5.5935[22893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.178104][T22474] veth1_vlan: entered promiscuous mode [ 432.245684][T22474] veth0_macvtap: entered promiscuous mode [ 432.270032][T22474] veth1_macvtap: entered promiscuous mode [ 432.289529][T22474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.300121][T22474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.310004][T22474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.320509][T22474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.330430][T22474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.340907][T22474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.350940][T22474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.361753][T22474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.371799][T22474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.382505][T22474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.392423][T22474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.402930][T22474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.523123][T22918] FAULT_INJECTION: forcing a failure. [ 432.523123][T22918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.527167][T22474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.536309][T22918] CPU: 0 UID: 0 PID: 22918 Comm: syz.3.5969 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 432.554235][T22918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 432.559103][T22474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.564351][T22918] Call Trace: [ 432.564361][T22918] [ 432.574842][T22474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.578076][T22918] dump_stack_lvl+0xf2/0x150 [ 432.581070][T22474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.590789][T22918] dump_stack+0x15/0x1a [ 432.595381][T22474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.595396][T22474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.595410][T22474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.595423][T22474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.595436][T22474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.605846][T22918] should_fail_ex+0x223/0x230 [ 432.605881][T22918] should_fail+0xb/0x10 [ 432.605905][T22918] should_fail_usercopy+0x1a/0x20 [ 432.610087][T22474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.619862][T22918] _copy_from_iter+0xd5/0xd00 [ 432.630291][T22474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.630302][T22474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.630316][T22474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.706058][T22474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.709792][T22918] ? __rcu_read_unlock+0x4e/0x70 [ 432.709837][T22918] ? avc_has_perm_noaudit+0x1cc/0x210 [ 432.737303][T22918] write_pool_user+0x80/0x1e0 [ 432.742008][T22918] ? import_ubuf+0xec/0x130 [ 432.746577][T22918] random_ioctl+0x2c6/0x3f0 [ 432.751108][T22918] ? __pfx_random_ioctl+0x10/0x10 [ 432.756211][T22918] __se_sys_ioctl+0xc9/0x140 [ 432.760916][T22918] __x64_sys_ioctl+0x43/0x50 [ 432.765553][T22918] x64_sys_call+0x1690/0x2dc0 [ 432.770268][T22918] do_syscall_64+0xc9/0x1c0 [ 432.774889][T22918] ? clear_bhb_loop+0x55/0xb0 [ 432.779623][T22918] ? clear_bhb_loop+0x55/0xb0 [ 432.784393][T22918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.786819][T22474] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.790417][T22918] RIP: 0033:0x7f5a45f85d29 [ 432.790442][T22918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.799185][T22474] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.803503][T22918] RSP: 002b:00007f5a445f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.823172][T22474] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.831807][T22918] RAX: ffffffffffffffda RBX: 00007f5a46175fa0 RCX: 00007f5a45f85d29 [ 432.831826][T22918] RDX: 0000000020000000 RSI: 0000000040085203 RDI: 0000000000000003 [ 432.831843][T22918] RBP: 00007f5a445f7090 R08: 0000000000000000 R09: 0000000000000000 [ 432.831859][T22918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.840391][T22474] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.849022][T22918] R13: 0000000000000000 R14: 00007f5a46175fa0 R15: 00007ffdef0bd0e8 [ 432.849052][T22918] [ 432.978818][T22939] loop3: detected capacity change from 0 to 256 [ 433.032156][T22939] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 433.062917][T22939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5973'. [ 433.140694][T22956] loop8: detected capacity change from 0 to 1024 [ 433.222026][T22956] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 433.265749][T22967] syz.3.5977[22967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.265890][T22967] syz.3.5977[22967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.278310][T22956] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 433.302782][T22967] syz.3.5977[22967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.306304][T22956] EXT4-fs (loop8): orphan cleanup on readonly fs [ 433.339763][T22956] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 433.373581][T22975] loop3: detected capacity change from 0 to 512 [ 433.381358][T22975] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 433.392406][T22956] EXT4-fs (loop8): Remounting filesystem read-only [ 433.399124][T22956] EXT4-fs (loop8): 1 orphan inode deleted [ 433.429012][T22975] EXT4-fs (loop3): 1 truncate cleaned up [ 433.471838][T22975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.631545][T22956] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 433.656271][T22956] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 433.663714][T22995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5981'. [ 433.666180][T22956] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.836648][T23018] FAULT_INJECTION: forcing a failure. [ 433.836648][T23018] name failslab, interval 1, probability 0, space 0, times 0 [ 433.849370][T23018] CPU: 1 UID: 0 PID: 23018 Comm: syz.5.5987 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 433.860625][T23018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 433.870718][T23018] Call Trace: [ 433.874014][T23018] [ 433.877060][T23018] dump_stack_lvl+0xf2/0x150 [ 433.881784][T23018] dump_stack+0x15/0x1a [ 433.886095][T23018] should_fail_ex+0x223/0x230 [ 433.890806][T23018] should_failslab+0x8f/0xb0 [ 433.895438][T23018] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 433.901269][T23018] ? __d_alloc+0x3d/0x340 [ 433.905648][T23018] __d_alloc+0x3d/0x340 [ 433.909891][T23018] d_alloc_parallel+0x54/0xc60 [ 433.914680][T23018] ? selinux_inode_permission+0x341/0x410 [ 433.920481][T23018] ? lockref_get_not_dead+0x118/0x1b0 [ 433.925944][T23018] ? down_read+0x171/0x4b0 [ 433.930491][T23018] __lookup_slow+0x8d/0x250 [ 433.935164][T23018] lookup_slow+0x3c/0x60 [ 433.939449][T23018] walk_component+0x1f5/0x230 [ 433.944250][T23018] ? path_lookupat+0xfd/0x2b0 [ 433.949088][T23018] path_lookupat+0x10a/0x2b0 [ 433.953694][T23018] filename_lookup+0x150/0x340 [ 433.958477][T23018] user_path_at+0x3c/0x120 [ 433.962973][T23018] do_fchownat+0x92/0x1a0 [ 433.967444][T23018] __x64_sys_chown+0x47/0x60 [ 433.972086][T23018] x64_sys_call+0x7e0/0x2dc0 [ 433.976751][T23018] do_syscall_64+0xc9/0x1c0 [ 433.981263][T23018] ? clear_bhb_loop+0x55/0xb0 [ 433.986064][T23018] ? clear_bhb_loop+0x55/0xb0 [ 433.990750][T23018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.996785][T23018] RIP: 0033:0x7f2625205d29 [ 434.001218][T23018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.020924][T23018] RSP: 002b:00007f2623871038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 434.029344][T23018] RAX: ffffffffffffffda RBX: 00007f26253f5fa0 RCX: 00007f2625205d29 [ 434.037334][T23018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 434.045310][T23018] RBP: 00007f2623871090 R08: 0000000000000000 R09: 0000000000000000 [ 434.053322][T23018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.061296][T23018] R13: 0000000000000000 R14: 00007f26253f5fa0 R15: 00007fff3fa1cb78 [ 434.069285][T23018] [ 434.290770][T21009] IPVS: starting estimator thread 0... [ 434.337351][T21972] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.397448][T23054] IPVS: using max 2304 ests per chain, 115200 per kthread [ 434.431940][T23068] loop3: detected capacity change from 0 to 2048 [ 434.465318][T23068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.501781][T23077] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 434.513416][T23077] loop7: detected capacity change from 0 to 512 [ 434.526905][T23077] EXT4-fs (loop7): ea_inode feature is not supported for Hurd [ 434.541362][ T36] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 434.560697][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 434.572951][ T36] EXT4-fs (loop3): This should not happen!! Data will be lost [ 434.572951][ T36] [ 434.582760][ T36] EXT4-fs (loop3): Total free blocks count 0 [ 434.588789][ T36] EXT4-fs (loop3): Free/Dirty block details [ 434.594790][ T36] EXT4-fs (loop3): free_blocks=2415919104 [ 434.600574][ T36] EXT4-fs (loop3): dirty_blocks=16 [ 434.605740][ T36] EXT4-fs (loop3): Block reservation details [ 434.611801][ T36] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 434.619284][T21972] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.630453][T23082] SELinux: Context system_u:object_r:removable_device_t:s0 is not valid (left unmapped). [ 434.747268][T23087] loop3: detected capacity change from 0 to 8192 [ 434.758574][T23087] syz.3.5994: attempt to access beyond end of device [ 434.758574][T23087] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 434.776926][T23098] FAULT_INJECTION: forcing a failure. [ 434.776926][T23098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.790138][T23098] CPU: 1 UID: 0 PID: 23098 Comm: syz.7.5996 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 434.796561][T23097] loop5: detected capacity change from 0 to 1024 [ 434.800912][T23098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 434.817347][T23098] Call Trace: [ 434.820732][T23098] [ 434.823674][T23098] dump_stack_lvl+0xf2/0x150 [ 434.828390][T23098] dump_stack+0x15/0x1a [ 434.832566][T23098] should_fail_ex+0x223/0x230 [ 434.837353][T23098] should_fail+0xb/0x10 [ 434.841598][T23098] should_fail_usercopy+0x1a/0x20 [ 434.846739][T23098] _copy_to_user+0x20/0xa0 [ 434.851204][T23098] simple_read_from_buffer+0xa0/0x110 [ 434.856599][T23098] proc_fail_nth_read+0xf9/0x140 [ 434.861588][T23098] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 434.867199][T23098] vfs_read+0x1a2/0x700 [ 434.871369][T23098] ? __rcu_read_unlock+0x4e/0x70 [ 434.876332][T23098] ? __fget_files+0x17c/0x1c0 [ 434.881036][T23098] ksys_read+0xe8/0x1b0 [ 434.885216][T23098] __x64_sys_read+0x42/0x50 [ 434.889734][T23098] x64_sys_call+0x2874/0x2dc0 [ 434.894419][T23098] do_syscall_64+0xc9/0x1c0 [ 434.899024][T23098] ? clear_bhb_loop+0x55/0xb0 [ 434.903749][T23098] ? clear_bhb_loop+0x55/0xb0 [ 434.908432][T23098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.914425][T23098] RIP: 0033:0x7fba79d5473c [ 434.918845][T23098] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 434.938460][T23098] RSP: 002b:00007fba783c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 434.946920][T23098] RAX: ffffffffffffffda RBX: 00007fba79f45fa0 RCX: 00007fba79d5473c [ 434.954896][T23098] RDX: 000000000000000f RSI: 00007fba783c70a0 RDI: 0000000000000003 [ 434.962875][T23098] RBP: 00007fba783c7090 R08: 0000000000000000 R09: 0000000000000000 [ 434.970922][T23098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.979022][T23098] R13: 0000000000000000 R14: 00007fba79f45fa0 R15: 00007ffff70f89e8 [ 434.987022][T23098] [ 435.012163][T23097] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 435.023982][T23097] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 435.040681][T23097] EXT4-fs (loop5): orphan cleanup on readonly fs [ 435.042190][T23087] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 435.055144][T23087] FAT-fs (loop3): Filesystem has been set read-only [ 435.068646][T23097] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 435.078211][T23087] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 435.088528][T23087] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 435.098093][T23097] EXT4-fs (loop5): Remounting filesystem read-only [ 435.104957][T23097] EXT4-fs (loop5): 1 orphan inode deleted [ 435.125693][T23097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 435.176404][T23097] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 435.204293][T23097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.321608][T23137] loop7: detected capacity change from 0 to 512 [ 435.354109][T23137] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 435.397291][T23137] EXT4-fs (loop7): 1 truncate cleaned up [ 435.406313][T23137] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.488255][T23162] loop3: detected capacity change from 0 to 256 [ 435.517235][T23162] FAT-fs (loop3): Directory bread(block 1285) failed [ 435.526215][T23162] netlink: 596 bytes leftover after parsing attributes in process `syz.3.6006'. [ 435.536528][T23162] FAT-fs (loop3): Directory bread(block 1285) failed [ 435.554249][T23162] FAT-fs (loop3): Directory bread(block 1285) failed [ 435.570368][T23169] netlink: 'syz.5.6007': attribute type 13 has an invalid length. [ 435.571789][T23162] FAT-fs (loop3): Directory bread(block 1285) failed [ 435.607887][T23169] gretap0: refused to change device tx_queue_len [ 435.614280][T23169] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 435.794968][T23201] loop2: detected capacity change from 0 to 512 [ 435.805924][T23201] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 435.826342][T23201] EXT4-fs (loop2): 1 truncate cleaned up [ 435.835847][T23201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.858573][T23201] IPv6: NLM_F_CREATE should be specified when creating new route [ 435.868176][T23201] IPv6: Can't replace route, no match found [ 435.915077][T23201] loop2: detected capacity change from 512 to 64 [ 435.958591][T23221] loop5: detected capacity change from 0 to 1024 [ 435.976922][T23221] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 435.988312][T22331] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 436.008759][T23221] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 436.019230][T23221] EXT4-fs (loop5): orphan cleanup on readonly fs [ 436.027290][T23221] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 436.030452][T22331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.038688][T23221] EXT4-fs (loop5): Remounting filesystem read-only [ 436.052649][T23221] EXT4-fs (loop5): 1 orphan inode deleted [ 436.066880][T23221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 436.080521][T23221] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 436.087982][T23221] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.136177][T22186] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.256195][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 436.256214][ T29] audit: type=1400 audit(2000000079.421:19817): avc: denied { execmem } for pid=23248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 436.289875][ T29] audit: type=1400 audit(2000000079.459:19818): avc: denied { read } for pid=23240 comm="syz.7.6016" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 436.313487][ T29] audit: type=1400 audit(2000000079.459:19819): avc: denied { open } for pid=23240 comm="syz.7.6016" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 436.363442][ T29] audit: type=1400 audit(2000000079.496:19820): avc: denied { mounton } for pid=23253 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 436.385814][ T29] audit: type=1400 audit(2000000079.505:19821): avc: denied { ioctl } for pid=23240 comm="syz.7.6016" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 436.411918][ T29] audit: type=1400 audit(2000000079.524:19822): avc: denied { create } for pid=23254 comm="syz.5.6021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 436.431789][ T29] audit: type=1400 audit(2000000079.524:19823): avc: denied { setopt } for pid=23254 comm="syz.5.6021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 436.451637][ T29] audit: type=1400 audit(2000000079.524:19824): avc: denied { ioctl } for pid=23254 comm="syz.5.6021" path="socket:[75088]" dev="sockfs" ino=75088 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 436.476632][ T29] audit: type=1400 audit(2000000079.524:19825): avc: denied { ioctl } for pid=23254 comm="syz.5.6021" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 436.502979][ T29] audit: type=1400 audit(2000000079.524:19826): avc: denied { sys_module } for pid=23253 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 436.551779][T23272] FAULT_INJECTION: forcing a failure. [ 436.551779][T23272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.564894][T23272] CPU: 1 UID: 0 PID: 23272 Comm: syz.3.6022 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 436.575683][T23272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 436.585765][T23272] Call Trace: [ 436.589055][T23272] [ 436.592007][T23272] dump_stack_lvl+0xf2/0x150 [ 436.596712][T23272] dump_stack+0x15/0x1a [ 436.600953][T23272] should_fail_ex+0x223/0x230 [ 436.605655][T23272] should_fail+0xb/0x10 [ 436.609851][T23272] should_fail_usercopy+0x1a/0x20 [ 436.614964][T23272] _copy_from_user+0x1e/0xb0 [ 436.619703][T23272] copy_msghdr_from_user+0x54/0x2a0 [ 436.624941][T23272] ? __fget_files+0x17c/0x1c0 [ 436.629789][T23272] __sys_sendmsg+0x13e/0x230 [ 436.634422][T23272] __x64_sys_sendmsg+0x46/0x50 [ 436.639282][T23272] x64_sys_call+0x2734/0x2dc0 [ 436.644071][T23272] do_syscall_64+0xc9/0x1c0 [ 436.648652][T23272] ? clear_bhb_loop+0x55/0xb0 [ 436.653394][T23272] ? clear_bhb_loop+0x55/0xb0 [ 436.658137][T23272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.664077][T23272] RIP: 0033:0x7f5a45f85d29 [ 436.668584][T23272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.688254][T23272] RSP: 002b:00007f5a445f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.696704][T23272] RAX: ffffffffffffffda RBX: 00007f5a46175fa0 RCX: 00007f5a45f85d29 [ 436.704695][T23272] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 436.712684][T23272] RBP: 00007f5a445f7090 R08: 0000000000000000 R09: 0000000000000000 [ 436.720727][T23272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.728758][T23272] R13: 0000000000000000 R14: 00007f5a46175fa0 R15: 00007ffdef0bd0e8 [ 436.736765][T23272] [ 436.752535][T23253] chnl_net:caif_netlink_parms(): no params data found [ 436.818494][ T55] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.891977][T23253] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.899217][T23253] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.903632][T23299] loop5: detected capacity change from 0 to 8192 [ 436.912309][T23253] bridge_slave_0: entered allmulticast mode [ 436.919495][T23253] bridge_slave_0: entered promiscuous mode [ 436.928784][T23299] syz.5.6026: attempt to access beyond end of device [ 436.928784][T23299] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 436.929784][T23253] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.949374][T23253] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.956790][T23253] bridge_slave_1: entered allmulticast mode [ 436.967017][T23299] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 436.973853][T23253] bridge_slave_1: entered promiscuous mode [ 436.974954][T23299] FAT-fs (loop5): Filesystem has been set read-only [ 437.007085][ T55] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.036051][T23299] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 437.047056][T23299] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 437.073803][ T55] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.100056][T23253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.136993][ T55] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.185688][T23253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.208310][T23338] binfmt_misc: register: failed to install interpreter file ./file0 [ 437.244751][T23253] team0: Port device team_slave_0 added [ 437.275486][T23347] loop8: detected capacity change from 0 to 512 [ 437.295851][T23347] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 437.300368][T23253] team0: Port device team_slave_1 added [ 437.321567][T23347] EXT4-fs (loop8): 1 truncate cleaned up [ 437.332024][ T55] bridge_slave_1: left allmulticast mode [ 437.333255][T23347] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.337786][ T55] bridge_slave_1: left promiscuous mode [ 437.355541][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.370298][ T55] bridge_slave_0: left allmulticast mode [ 437.376079][ T55] bridge_slave_0: left promiscuous mode [ 437.381924][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.405322][T23360] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6037'. [ 437.488791][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.499446][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.510014][ T55] bond0 (unregistering): Released all slaves [ 437.555346][T23253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.562390][T23253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.588643][T23253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.605792][T22474] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 437.606095][T23253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.627563][T23253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.653774][T23253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.684757][T22474] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.707578][ T55] hsr_slave_0: left promiscuous mode [ 437.724477][T23394] loop8: detected capacity change from 0 to 164 [ 437.742812][ T55] hsr_slave_1: left promiscuous mode [ 437.748772][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.756289][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.767033][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.774479][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.794578][ T55] veth1_macvtap: left promiscuous mode [ 437.800384][ T55] veth0_macvtap: left promiscuous mode [ 437.806075][ T55] veth1_vlan: left promiscuous mode [ 437.808453][T23394] syz.8.6038: attempt to access beyond end of device [ 437.808453][T23394] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 437.811394][ T55] veth0_vlan: left promiscuous mode [ 437.836866][T23399] syz.7.6039[23399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.836926][T23399] syz.7.6039[23399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.857601][T23394] syz.8.6038: attempt to access beyond end of device [ 437.857601][T23394] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 437.870074][T23399] syz.7.6039[23399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.902733][T23394] syz.8.6038: attempt to access beyond end of device [ 437.902733][T23394] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 437.913824][T23402] loop3: detected capacity change from 0 to 8192 [ 437.925808][T23394] syz.8.6038: attempt to access beyond end of device [ 437.925808][T23394] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 437.959367][T23394] syz.8.6038: attempt to access beyond end of device [ 437.959367][T23394] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 437.982548][T23402] syz.3.6040: attempt to access beyond end of device [ 437.982548][T23402] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 437.983971][T23394] syz.8.6038: attempt to access beyond end of device [ 437.983971][T23394] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 438.018170][T23402] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 438.020784][T23394] syz.8.6038: attempt to access beyond end of device [ 438.020784][T23394] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 438.026065][T23402] FAT-fs (loop3): Filesystem has been set read-only [ 438.028711][T23402] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 438.050368][T23394] syz.8.6038: attempt to access beyond end of device [ 438.050368][T23394] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 438.056820][T23402] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 438.130942][ T55] team0 (unregistering): Port device team_slave_1 removed [ 438.179203][ T55] team0 (unregistering): Port device team_slave_0 removed [ 438.322640][T23253] hsr_slave_0: entered promiscuous mode [ 438.330189][T23253] hsr_slave_1: entered promiscuous mode [ 438.337463][T23253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.345611][T23253] Cannot create hsr debugfs directory [ 438.352330][T23439] geneve0: entered allmulticast mode [ 438.450068][T23457] loop3: detected capacity change from 0 to 512 [ 438.505231][T23457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.513781][T23461] loop5: detected capacity change from 0 to 512 [ 438.521772][T23457] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 438.561884][T21972] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.610005][T23461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.630266][T23461] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 438.702871][T23483] loop3: detected capacity change from 0 to 164 [ 438.703204][T23478] loop8: detected capacity change from 0 to 512 [ 438.724069][T23483] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 438.725464][T22309] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.749470][T21348] ================================================================== [ 438.757570][T21348] BUG: KCSAN: data-race in __dentry_kill / __dentry_kill [ 438.764596][T21348] [ 438.766932][T21348] write to 0xffff88811e4a80c0 of 4 bytes by task 2999 on cpu 1: [ 438.774558][T21348] __dentry_kill+0xa3/0x4c0 [ 438.779069][T21348] dput+0x5c/0xd0 [ 438.782827][T21348] lookup_fast+0x25c/0x2a0 [ 438.787259][T21348] walk_component+0x3f/0x230 [ 438.791852][T21348] path_lookupat+0x10a/0x2b0 [ 438.796561][T21348] filename_lookup+0x150/0x340 [ 438.801419][T21348] do_readlinkat+0x89/0x210 [ 438.805950][T21348] __x64_sys_readlink+0x47/0x60 [ 438.810801][T21348] x64_sys_call+0x28ba/0x2dc0 [ 438.815476][T21348] do_syscall_64+0xc9/0x1c0 [ 438.819973][T21348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.825875][T21348] [ 438.828230][T21348] read to 0xffff88811e4a80c0 of 4 bytes by task 21348 on cpu 0: [ 438.835866][T21348] __dentry_kill+0x2af/0x4c0 [ 438.840455][T21348] dput+0x5c/0xd0 [ 438.844112][T21348] lookup_fast+0x25c/0x2a0 [ 438.848535][T21348] walk_component+0x3f/0x230 [ 438.853228][T21348] path_lookupat+0x10a/0x2b0 [ 438.857814][T21348] filename_lookup+0x150/0x340 [ 438.862750][T21348] user_path_at+0x3c/0x120 [ 438.867171][T21348] do_faccessat+0x396/0x640 [ 438.871682][T21348] __x64_sys_faccessat2+0x51/0x60 [ 438.876720][T21348] x64_sys_call+0x15bc/0x2dc0 [ 438.881403][T21348] do_syscall_64+0xc9/0x1c0 [ 438.885908][T21348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.891839][T21348] [ 438.894155][T21348] value changed: 0x00280004 -> 0x00000004 [ 438.899907][T21348] [ 438.902243][T21348] Reported by Kernel Concurrency Sanitizer on: [ 438.908416][T21348] CPU: 0 UID: 0 PID: 21348 Comm: udevd Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 438.918760][T21348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 438.928913][T21348] ================================================================== [ 438.943250][T23478] EXT4-fs warning (device loop8): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop8. [ 439.019968][T23253] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 439.034974][T23253] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 439.077077][T23253] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 439.092163][T23253] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 439.104652][T23491] loop5: detected capacity change from 0 to 8192 [ 439.121585][T23491] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 439.129528][T23491] FAT-fs (loop5): Filesystem has been set read-only [ 439.139671][T23491] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 439.148809][T23491] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 439.157190][T23253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.180286][T23253] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.192291][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.199488][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.214215][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.221567][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.305338][T23253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.442950][T23253] veth0_vlan: entered promiscuous mode [ 439.452175][T23253] veth1_vlan: entered promiscuous mode [ 439.471472][T23253] veth0_macvtap: entered promiscuous mode [ 439.481083][T23253] veth1_macvtap: entered promiscuous mode [ 439.493069][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.503575][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.513523][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.524009][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.533865][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.544366][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.554301][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.564862][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.574750][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.585222][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.595378][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.606045][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.623000][T23253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.634717][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.645300][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.655209][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.665849][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.675854][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.686345][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.696206][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.706858][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.716715][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.727221][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.737087][T23253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.747677][T23253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.766720][T23253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.779327][T23253] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.788104][T23253] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.796935][T23253] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.805659][T23253] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.344754][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 442.344770][ T29] audit: type=1400 audit(2000000085.127:20010): avc: denied { sys_chroot } for pid=23926 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 442.377868][ T29] audit: type=1400 audit(2000000085.155:20011): avc: denied { setgid } for pid=23926 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 442.398940][ T29] audit: type=1400 audit(2000000085.155:20012): avc: denied { setuid } for pid=23926 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 442.420051][ T29] audit: type=1400 audit(2000000085.155:20013): avc: denied { setrlimit } for pid=23926 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1