last executing test programs: 23m46.513028827s ago: executing program 32 (id=2221): setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000000)=0x6, 0x4) r0 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r0, 0x6a, 0x4, 0x0, 0x20000071) 23m22.117270935s ago: executing program 33 (id=2772): removexattr(0x0, 0x0) io_uring_setup(0xfc6, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x40) 22m11.91164119s ago: executing program 34 (id=4021): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000300), 0xfffffffffffffffe, 0x200800) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000340)) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x24) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r8 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000096) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(0x0, r9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) sendmsg$nl_route(r1, 0x0, 0x8c0) r11 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r11, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d48", 0x3}], 0x2) 21m50.430494355s ago: executing program 35 (id=4094): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 21m48.787988627s ago: executing program 36 (id=4311): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x1]}) ftruncate(0xffffffffffffffff, 0x9) 15m5.065667309s ago: executing program 37 (id=9239): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x48970, 0x10003}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffffc, 0x2}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000854) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syslog(0x9, 0x0, 0x0) 14m5.057556569s ago: executing program 38 (id=10046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) 7m7.003406176s ago: executing program 39 (id=15569): r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0) dup(r0) (async) r1 = dup(r0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000040)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x1}, @ioring_restriction_sqe_flags_allowed={0x2, 0x19}, @ioring_restriction_register_op={0x0, 0xe}, @ioring_restriction_sqe_op={0x1, 0xf}, @ioring_restriction_sqe_op={0x1, 0x1a}], 0x5) openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmallocinfo\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000340), 0x1, 0x55e, &(0x7f0000001ac0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) open(0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) unlink(0x0) (async) unlink(0x0) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) r10 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008000000", @ANYRES32=r10], 0x68}, 0x84) (async) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008000000", @ANYRES32=r10], 0x68}, 0x84) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x7e, 0x1, 0xb, 0x9, 0x2}) 4m30.91999099s ago: executing program 40 (id=17671): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) 3m47.247958071s ago: executing program 41 (id=18157): socket$kcm(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x12, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x10000000}, 0x94) socket$unix(0x1, 0x5, 0x0) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000480)='mm_page_alloc\x00'}, 0x10) lchown(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) r11 = socket$netlink(0x10, 0x3, 0x14) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r11) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000300)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x102000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[], 0x4c8}, 0x1, 0x0, 0x0, 0x489}, 0x7ebf15da3e88f782) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f00000006c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r5], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 3m44.628697181s ago: executing program 42 (id=18190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1000000000000}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000480)={0x1d, r3}, 0x10) close(r2) 3m39.437705977s ago: executing program 6 (id=18344): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x12a, 0x20111, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x9, 0xffffffffffff8000}, 0x40, 0x10000, 0xfffffffd, 0x1, 0x8, 0x20005, 0xb, 0x0, 0xa8, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000280)={0x9, 0x28, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) fcntl$lock(r1, 0x7, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f00000004c0)=0xab3) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077672b2364c26b390270bf5fc37d66b4f1"], 0xa8}}, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000002c0)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0x0) 3m38.769969321s ago: executing program 6 (id=18352): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x5d6c}, 0x18) socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0xffa1, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xfffffffffffffffd, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = timerfd_create(0x1, 0x0) timerfd_gettime(r10, &(0x7f0000000000)) 3m38.727219805s ago: executing program 43 (id=18352): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x5d6c}, 0x18) socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0xffa1, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xfffffffffffffffd, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = timerfd_create(0x1, 0x0) timerfd_gettime(r10, &(0x7f0000000000)) 3m36.745132073s ago: executing program 44 (id=18365): socket$igmp(0x2, 0x3, 0x2) r0 = syz_io_uring_setup(0xbdc, 0x0, &(0x7f00000006c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) listen(r4, 0x8) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3m35.628095713s ago: executing program 45 (id=18264): prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 3m29.67810841s ago: executing program 46 (id=18441): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x154644, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0xfffffffffffff6ee, 0x7}, 0x100410, 0x1fc, 0x2, 0x1, 0x9, 0xa, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) 3m25.585765438s ago: executing program 2 (id=18505): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x5, 0x2c6, &(0x7f0000000380)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3M2AlSvvX5Ji2sk47Yjj77fp4d577j0vr00WJed9+dp0fPNOFicPH0SeZ9E5iIN4lMVudKL1XXQDAHh+PEopfk9VmKXahpndzpUWBgBcmfrz/4k++AGA/7iPP/3sw8Hh4Y2PiiKPV/r3Z8MsIqb3Z8N6fnA7vo5J3Irr0Y/TiLRQx+9/cHgjukVpN96czmfDMnP6xc/N/oPfIqr8/ejH7vr8/aK2+JdD+XO4HS9GEYPb222p/Xh5ff7bbf7y/HkMe/HWGyv170U/fvkq7sQkbkaZu8z/dr8o3kvfP/zm8/KYMj/rxHCnWldJKfJnelcAAAAAAAAAAAAAAAAAAAAAAHje7RVFVrfvqfr3lENV/5zZcOu0mt8rWqv9feZtf6Cs3ajuD5SiadEzT/FD21/nelEUqVm4zO/Gq10PFgAAAAAAAAAAAAAAAAAAAIDS0b0H10aTya27R/eOx08dtN0A2q/1/9N9DlZGXo/j8Wjr/A13Nj9rtdtAWeuFi6PbjUt6WdYHJ4uRF8p6Lv2InViMfBJ10N6YSz3rpXfrTY/Ho6KZal/k8Sh73Fl5e+N+XJ3qxWLNH6n2hIWl6lfiNJ29p/mi1LNZvQ12LnMft6Z3be3UnymlzYp/59f6HjUjWdViY7NL3m6CtRdYBnk0V1H/4ZdTP52/4blvGVtP/aYDAAAAAAAAAAAAAAAAAACstfzS75rJkwtTO1dWFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Y8vn/7dBHhFnR/4WzJvki9Y0QS/uHv3LlwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/wF8BAAD//4oXU2s=") ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) semget$private(0x0, 0x4, 0x480) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) brk(0x101) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ptrace$setregs(0xf, r4, 0x10000, &(0x7f0000000340)="0e04b2340d08cd604441f610519475983cd65a1fe883a3ceda0737202800995f4e82b2927eb1a733f329b6d87abb88627b50b047cd54fc8d00283abd4eba2e697b9812ab3d55d190c45f5be6c3a462287410ef408e006a41566e6319cce3ee6d2e08aefc7b2d64ebe72d765769e21b1faea419445e7861934036beacc4e95bc1ed60888cbdf8d98819a12da359dd26a6f6692ceb0d15940b9fc33274f57f4f16038e530c6b3edaf717cff5fee29e6a0a16f2dd5e4355dcb4bf860cc93c0a93cae6e29fa5") pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x0, 0x10080, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x108bcf, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r5, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000180)={{{0x3}}, 0xe, 0x2, &(0x7f0000000140)="d760fbebec619032c9f268ffcd86"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m25.200084169s ago: executing program 2 (id=18511): r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffff00}, 0x1c) sendmsg$tipc(r0, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x3}, 0x28, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x1f, 0x1fffffffffffff5f, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000d2a4164a208c741cfd26d9871c9b2f4adb434dfcb32410e7acd326c45b56988fbd6e1ec4965940ad8fcdaee5951edc5c4b72243d4a74839cb279", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xf7}, 0x18) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) tkill(0x0, 0x39) memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) (fail_nth: 3) 3m24.789829901s ago: executing program 2 (id=18521): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x5, 0x2c6, &(0x7f0000000380)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3M2AlSvvX5Ji2sk47Yjj77fp4d577j0vr00WJed9+dp0fPNOFicPH0SeZ9E5iIN4lMVudKL1XXQDAHh+PEopfk9VmKXahpndzpUWBgBcmfrz/4k++AGA/7iPP/3sw8Hh4Y2PiiKPV/r3Z8MsIqb3Z8N6fnA7vo5J3Irr0Y/TiLRQx+9/cHgjukVpN96czmfDMnP6xc/N/oPfIqr8/ejH7vr8/aK2+JdD+XO4HS9GEYPb222p/Xh5ff7bbf7y/HkMe/HWGyv170U/fvkq7sQkbkaZu8z/dr8o3kvfP/zm8/KYMj/rxHCnWldJKfJnelcAAAAAAAAAAAAAAAAAAAAAAHje7RVFVrfvqfr3lENV/5zZcOu0mt8rWqv9feZtf6Cs3ajuD5SiadEzT/FD21/nelEUqVm4zO/Gq10PFgAAAAAAAAAAAAAAAAAAAIDS0b0H10aTya27R/eOx08dtN0A2q/1/9N9DlZGXo/j8Wjr/A13Nj9rtdtAWeuFi6PbjUt6WdYHJ4uRF8p6Lv2InViMfBJ10N6YSz3rpXfrTY/Ho6KZal/k8Sh73Fl5e+N+XJ3qxWLNH6n2hIWl6lfiNJ29p/mi1LNZvQ12LnMft6Z3be3UnymlzYp/59f6HjUjWdViY7NL3m6CtRdYBnk0V1H/4ZdTP52/4blvGVtP/aYDAAAAAAAAAAAAAAAAAACstfzS75rJkwtTO1dWFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Y8vn/7dBHhFnR/4WzJvki9Y0QS/uHv3LlwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/wF8BAAD//4oXU2s=") ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) semget$private(0x0, 0x4, 0x480) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) brk(0x101) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ptrace$setregs(0xf, r4, 0x10000, &(0x7f0000000340)="0e04b2340d08cd604441f610519475983cd65a1fe883a3ceda0737202800995f4e82b2927eb1a733f329b6d87abb88627b50b047cd54fc8d00283abd4eba2e697b9812ab3d55d190c45f5be6c3a462287410ef408e006a41566e6319cce3ee6d2e08aefc7b2d64ebe72d765769e21b1faea419445e7861934036beacc4e95bc1ed60888cbdf8d98819a12da359dd26a6f6692ceb0d15940b9fc33274f57f4f16038e530c6b3edaf717cff5fee29e6a0a16f2dd5e4355dcb4bf860cc93c0a93cae6e29fa5") pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x0, 0x10080, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x108bcf, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r5, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000180)={{{0x3}}, 0xe, 0x2, &(0x7f0000000140)="d760fbebec619032c9f268ffcd86"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m24.56057396s ago: executing program 2 (id=18526): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000100)="ecb2d5cbde8069324a04ca01b564d6b0dafbcf2fc2fbb11384b275b4b420dd601be6fcccfb2bea1c47a8277ec8f9636facd89adfa62753b700650d5680", &(0x7f0000001d00)=""/4096}, 0x20) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000180)=ANY=[], 0xfd, 0x648, &(0x7f0000002280)="$eJzs3U9v2/Ydx/EPZdlWPCwYtqEIgjT5NVkBB8sUSW4cGNlhHEXZ7CRRIOnBBgYUWWMXQeR0SzJg8aXwZX+A7gnsMvSywx7EgJ133wPYcUCx3QbsooH/bMn661S21/X9EhxS5Jf8fX+kwy9oiaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAsp16pVC01vfb2jhnPqQd+a8L8dG2LupuO3J3armTFPyqVdC2ddO3bJ7Pfiv+5rRvpuxsqxYOSDr/21jcefatYyJefkNCb0FlX+PL14bPH3e7eizkncsEea7jnKsyw4Kbb9kLfa9mbrvFC32ysr1fubzVC0/CabrgbRm7LOIFbiPzArDp3TXVjY8245V1/u71Zt5tuPvHh92qVyrp5fznb/fffL4fOltdseu3NJCaeHcc8NJ/+JA1x7ZYx+0+7e2vTkoyDqrME1aYF1Sq1WrVaq1XXH2w8WFClODDhYaVSrJyioYi5/9LiS2Z+B2/gCyrE9f/vltRUSW1ta0dm5MtRXYF8tfIpxcH5mbz+v3vfndhuf/3Pq/y1k9nXldT/m+m7m+Pq/5hcjUyywKg51pjpb/Z6qdc61DM9Vldd7enFfNZ7a34ZnuOrIG1KRclTKF+eWrK1KVcmm2K0oXWtq6IPtKWGQhk15KkpV6F2FSqSq1ayTwK5shXJVyCjVTm6K6OqNrShNRm5KmtXvrbV1qbqsvXvXq+3r6fJdl+bkKfyoOosQbUJQUPFPJvw00/S31Pq/1ddfvyaJQa4dL3s/P+Mbp1PNgAAAAAA4DxYyV/freSz+7cl9dTwmm7lstMCAAAAAABzlHzyfyMeLMZjb8sac/7fu/jcAAAAAADAfFjJNXaWpJXFbFJ+JdQsXwJYOOf0AAAAAADAHCSf/99cknrJvdduyTrT+T8AAAAAAPgS+E3fPfaL+T12e/nH+gVJYWfZ+vM/lxUsWkedne9YB3Y8xz7IYoa+ARA1rltXsxv1JoMlSck7x120Th4MYCU/pfTN5/vT7vVvBacSWFrI/3wxLYH1YvZOn+qdNOadrN0nhwUlc9JWVhpe0y07fvNRVbZ9tRC5O9Evnj/9pRQc93P/aXev/OHH3SdJLkfxpKODOI9PBtIpTMvlVXK/heSai1E9vqJG3uRv260VK2m3kvd/QfZBob+h2fr/K91OY26vpMOVw3wPJP0vxf2vlpNddtL75O4Q1kkW1dM9H7UjxmRRSrK4k8bcWb2TDvL8siy+uyDVysP7IOjPotafxfRtYf1raFtMySLeFmtxFn+JVzQmi7WzZTG0RwDgsuyfVKHkJubD99g/XXff5Cg3vbr/YLCVV7/vpRccLkjF7LOJia2UFB/RV9OYJSUH1uL1EUf0SlZXShpzRK8MVLe/JWnMWt3itv508gykLO2hLP7T6/UeVZN2f3eqqn4WL/DZ2KoaNmsL8Sa8/+rgZ8kN8GMf7X2097xWW1uvvFepPKhpMelGNqD2AABGmP6MnakR1nvHZ9VP/vFuOjZQ8b55/JWCsj7Ux+rqie7ljxC4NXqtK31fQ7g3fNYax16RTsX+YVH3xp7VJbW0b72149j8wofTZ4AnsWvnvBcAALhYt6fU4Vnq/738vHv1+sjz7sFafvoJwSNivx5Pr17shgAA4CvEDT63VqJfW0HgdT6obmxU7WjLNYHv/MgEXn3TNV47cgNny25vuqYT+JHv+E3TCbTs1d3QhNudjh9EpuEHpuOH3k7y5HeTPfo9dFt2O/KcsNN07dA1jt+ObCcydS90TGf7h00v3HKDZOGw4zpew3PsyPPbJvS3A8ctGxO6bl+gV3fbkdfw4tG26QReyw52zY/95nbLNXU3dAKvE/npCvO2vHbDD1rJasvqnflBhwAA/D96+frw2eNud+/FhJEjTY/JRpZGrfCy+wgAAAZRpQEAAAAAAAAAAAAAAAAAAAAA+N83y/V/ZxpZHHWxoHQ85edXZ1qPpXkndpaRwpsv/tcJMVeOp+Sbvz/maL69KGqG4CymOP9teEWa/bLROYx8fz/domNj4pkjZy0f74vi/P87xCPP/zhmVq/X601efHlwGy5N6uDgSFHSi6UvsAsu53gE4OL8NwAA//9PqEPf") r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a3000000000080041007369770014"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, 0x0, &(0x7f0000002640)) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000010180)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x1, 0x4, 0x4, {0x3, 0x0, 0x101, 0x9, 0x5, 0x2}, {0x3, 0x1, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x100000, 0x2, 0x8, 0x5, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0xffffffff, 0x1, 0x3, 0xffffffda, 0x8, 0x2, 0x76ccfa5f, 0x5, 0x8, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x3, 0x9, 0x2, 0xc, 0x1, 0x8, 0x7, 0x4, 0x8, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xffffff01, 0x1, 0x80, 0xa9, 0x7f, 0x84, 0x6, 0x637, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x40007, 0xab5, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1eb, 0x7, 0xd43, 0x9, 0x6, 0x7, 0x7, 0x4, 0x4, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x3, 0xaa2, 0x400, 0x40, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x7, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x7ff, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x10000000, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x6, 0x1ff, 0x1ff, 0x8, 0x2, 0x5, 0xffffffff, 0x9, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x9, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0x2, 0x8, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x0, 0x1, 0x1, 0xd0c0, 0xfffff33c, 0xc974, 0x3, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x9, 0x24c, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0xffffffe4, 0x9, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0x10000, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x103, 0xa, 0x6, 0x3, 0xf, 0x1, 0x9, 0x9, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x104, 0xa27d, 0x9, 0x9, 0x0, 0x81, 0x4, 0x7f8000, 0x9, 0x0, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x401, 0x40, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x490}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000f80)=ANY=[@ANYRESDEC, @ANYBLOB="302b6eff52a55a9c3ff89c5391ed0178b7d6df01911c727d8c7a8d340a26ff2cb8921987aab69a1fb47fa5edf3bee3d2ca09657d8f2cc07be31fc642150b9ef2713becedbcc15cb8f783369416847ab9e77cd53f9026e0c77fe6f2fbff2b1a332c4344eb249088cd52895b0e1a309825e5cf51c5cbe8a460cbe94538496111b394f5dc09b64e9dbd25085e14659cd3203fd7c10cb02800b7360fd3d69ca5eabca7c397a554c715df475d5dd4820a47", @ANYRES16=r3, @ANYRES64=r3, @ANYRESOCT, @ANYRES16=r2, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB="e8fa88e70da1b9c76cfaf3d80659ae68eb29563234049e665da79cebc620be16778776225013943b37faa22e2cf1c8182f9f145839b2c310bbb276b81cf5e8f79bbcdaca26dc11e2aac8f915fd6f248216e714865dc635d6f0f3b375b0dbba056bdf18a7f200de6a9e995dca5fa8beda1ef93e1a9b241640634e6a6687d44c4cb189bcdfa08b86714d70495d799a713d0b284c17e515c6f31fb7427d327feaf324", @ANYBLOB="8e992400028447ab6903d457b10100c104a0b14ac8f07d96cff44ef48944010165fbcfdd", @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r6, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e745", @ANYRESDEC=r4, @ANYRESOCT, @ANYBLOB='\b', @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="080004", @ANYRES16=r5], 0x94, 0x1) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, r4, &(0x7f0000000040)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000d40), 0x0}, 0x20) r11 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r11, 0x4b67, &(0x7f0000000180)) 3m24.481470376s ago: executing program 47 (id=18528): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb851}, 0x1c) 3m24.385987884s ago: executing program 4 (id=18532): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x1000000000000}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0xffffffffffffff24, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 3m24.339967778s ago: executing program 4 (id=18533): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40d", 0xd5}], 0x1}, 0x14) 3m24.282311992s ago: executing program 4 (id=18535): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89b1, &(0x7f0000000000)={'macvlan1\x00', @ifru_map={0x8, 0x1ff, 0x8, 0x4, 0x9, 0x6}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b70300000000000085000000bf00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ifreq(r2, 0x89b1, &(0x7f0000000000)={'macvlan1\x00', @ifru_map={0x8, 0x1ff, 0x8, 0x4, 0x9, 0x6}}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) ioctl$TIOCGPTPEER(r4, 0x5441, 0x1) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) (async) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b70300000000000085000000bf00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) (async) 3m24.121636135s ago: executing program 4 (id=18537): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x5, 0x2c6, &(0x7f0000000380)="$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") ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) brk(0x101) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ptrace$setregs(0xf, r4, 0x10000, &(0x7f0000000340)="0e04b2340d08cd604441f610519475983cd65a1fe883a3ceda0737202800995f4e82b2927eb1a733f329b6d87abb88627b50b047cd54fc8d00283abd4eba2e697b9812ab3d55d190c45f5be6c3a462287410ef408e006a41566e6319cce3ee6d2e08aefc7b2d64ebe72d765769e21b1faea419445e7861934036beacc4e95bc1ed60888cbdf8d98819a12da359dd26a6f6692ceb0d15940b9fc33274f57f4f16038e530c6b3edaf717cff5fee29e6a0a16f2dd5e4355dcb4bf860cc93c0a93cae6e29fa5") pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x0, 0x10080, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x108bcf, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r5, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000180)={{{0x3}}, 0xe, 0x2, &(0x7f0000000140)="d760fbebec619032c9f268ffcd86"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m23.966698668s ago: executing program 4 (id=18538): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0x0, 0xb152, 0x1, 0x1fc, 0x0, 0x5}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x10, 0x5, 0x6, 0x8000000000001, 0xffeffffffffff801, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) (fail_nth: 1) 3m23.81215782s ago: executing program 4 (id=18540): r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffff00}, 0x1c) sendmsg$tipc(r0, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x3}, 0x28, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x1f, 0x1fffffffffffff5f, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000d2a4164a208c741cfd26d9871c9b2f4adb434dfcb32410e7acd326c45b56988fbd6e1ec4965940ad8fcdaee5951edc5c4b72243d4a74839cb279", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) tkill(0x0, 0x39) memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0x9, 0x1}]}}, @TCA_U32_LINK={0x8, 0x3, 0x80000000}]}}]}, 0x7c}}, 0x24040084) 3m23.500621655s ago: executing program 3 (id=18548): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x5, 0x2c6, &(0x7f0000000380)="$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") ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) brk(0x101) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ptrace$setregs(0xf, r4, 0x10000, &(0x7f0000000340)="0e04b2340d08cd604441f610519475983cd65a1fe883a3ceda0737202800995f4e82b2927eb1a733f329b6d87abb88627b50b047cd54fc8d00283abd4eba2e697b9812ab3d55d190c45f5be6c3a462287410ef408e006a41566e6319cce3ee6d2e08aefc7b2d64ebe72d765769e21b1faea419445e7861934036beacc4e95bc1ed60888cbdf8d98819a12da359dd26a6f6692ceb0d15940b9fc33274f57f4f16038e530c6b3edaf717cff5fee29e6a0a16f2dd5e4355dcb4bf860cc93c0a93cae6e29fa5") pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x0, 0x10080, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x108bcf, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r5, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000180)={{{0x3}}, 0xe, 0x2, &(0x7f0000000140)="d760fbebec619032c9f268ffcd86"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m23.152068423s ago: executing program 3 (id=18556): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mincore(&(0x7f0000001000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/176) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) 3m22.921901632s ago: executing program 3 (id=18559): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4", 0xd7}], 0x1}, 0x14) 3m22.921662652s ago: executing program 49 (id=18559): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4", 0xd7}], 0x1}, 0x14) 3m22.882589314s ago: executing program 2 (id=18560): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)={0x14, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 3m22.848217028s ago: executing program 50 (id=18560): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)={0x14, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 3m18.769050145s ago: executing program 6 (id=18542): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000480)={0x1d, r3}, 0x10) close(r2) 3m18.714198079s ago: executing program 6 (id=18589): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x5, 0x2c6, &(0x7f0000000380)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3M2AlSvvX5Ji2sk47Yjj77fp4d577j0vr00WJed9+dp0fPNOFicPH0SeZ9E5iIN4lMVudKL1XXQDAHh+PEopfk9VmKXahpndzpUWBgBcmfrz/4k++AGA/7iPP/3sw8Hh4Y2PiiKPV/r3Z8MsIqb3Z8N6fnA7vo5J3Irr0Y/TiLRQx+9/cHgjukVpN96czmfDMnP6xc/N/oPfIqr8/ejH7vr8/aK2+JdD+XO4HS9GEYPb222p/Xh5ff7bbf7y/HkMe/HWGyv170U/fvkq7sQkbkaZu8z/dr8o3kvfP/zm8/KYMj/rxHCnWldJKfJnelcAAAAAAAAAAAAAAAAAAAAAAHje7RVFVrfvqfr3lENV/5zZcOu0mt8rWqv9feZtf6Cs3ajuD5SiadEzT/FD21/nelEUqVm4zO/Gq10PFgAAAAAAAAAAAAAAAAAAAIDS0b0H10aTya27R/eOx08dtN0A2q/1/9N9DlZGXo/j8Wjr/A13Nj9rtdtAWeuFi6PbjUt6WdYHJ4uRF8p6Lv2InViMfBJ10N6YSz3rpXfrTY/Ho6KZal/k8Sh73Fl5e+N+XJ3qxWLNH6n2hIWl6lfiNJ29p/mi1LNZvQ12LnMft6Z3be3UnymlzYp/59f6HjUjWdViY7NL3m6CtRdYBnk0V1H/4ZdTP52/4blvGVtP/aYDAAAAAAAAAAAAAAAAAACstfzS75rJkwtTO1dWFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Y8vn/7dBHhFnR/4WzJvki9Y0QS/uHv3LlwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/wF8BAAD//4oXU2s=") ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) brk(0x101) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ptrace$setregs(0xf, r4, 0x10000, &(0x7f0000000340)="0e04b2340d08cd604441f610519475983cd65a1fe883a3ceda0737202800995f4e82b2927eb1a733f329b6d87abb88627b50b047cd54fc8d00283abd4eba2e697b9812ab3d55d190c45f5be6c3a462287410ef408e006a41566e6319cce3ee6d2e08aefc7b2d64ebe72d765769e21b1faea419445e7861934036beacc4e95bc1ed60888cbdf8d98819a12da359dd26a6f6692ceb0d15940b9fc33274f57f4f16038e530c6b3edaf717cff5fee29e6a0a16f2dd5e4355dcb4bf860cc93c0a93cae6e29fa5") pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x0, 0x10080, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x108bcf, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r5, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000180)={{{0x3}}, 0xe, 0x2, &(0x7f0000000140)="d760fbebec619032c9f268ffcd86"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m18.640435905s ago: executing program 6 (id=18590): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb8}}, &(0x7f00000004c0)='GPL\x00'}, 0x94) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0xa8, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6deb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @private1, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4050081}, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000190000fbffffffffffffff00000000000000000000000000004000000000000000000200000000000000000200000000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r8}, 0x38) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3m17.176993412s ago: executing program 6 (id=18606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x5, 0x1, 0xcd}]}]}, 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80080, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x12}}, {@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) 3m17.176399002s ago: executing program 51 (id=18606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x5, 0x1, 0xcd}]}]}, 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80080, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x12}}, {@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) 32.116058916s ago: executing program 5 (id=21938): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) eventfd(0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x2, 0xb, 0x5, 0x6}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x6, 0xfffe, 0x0, 0x0, 0x2a}, &(0x7f0000000100)=0x9c) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) lsm_set_self_attr(0x67, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = getpgrp(0xffffffffffffffff) ptrace$poke(0x5, r3, &(0x7f00000001c0), 0x66) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x21) 32.100491087s ago: executing program 5 (id=21940): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x2) (async) pidfd_send_signal(r0, 0x0, 0x0, 0x2) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) timer_create(0x5, &(0x7f0000000040)={0x0, 0x37, 0x2, @tid=r1}, &(0x7f00000000c0)) socket$inet6(0xa, 0x80002, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 31.658834842s ago: executing program 5 (id=21945): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000b00)=ANY=[]) 31.658680642s ago: executing program 5 (id=21946): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/tcp\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x0, 0x59, &(0x7f0000000680)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000007c0), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") 31.495074486s ago: executing program 5 (id=21951): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) eventfd(0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x2, 0xb, 0x5, 0x6}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x6, 0xfffe, 0x0, 0x0, 0x2a}, &(0x7f0000000100)=0x9c) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) lsm_set_self_attr(0x67, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(r3, 0x0, 0x40000000, 0x0) 31.242166915s ago: executing program 5 (id=21961): setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x4) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0x209, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000080)=0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f00000006c0)={[], [{@smackfshat={'smackfshat', 0x3d, ')'}}, {@uid_lt}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}]}, 0x1, 0x59d, &(0x7f0000001100)="$eJzs3c9vFGUfAPDvs7stlAItb97kfZGDTUiERG1pwWiMiRDx5sEfJJ5IrG0hhAUaWhNBjJDgf6B/gIk3E2M8EmOIevHqzcSriSESA714WzO7s2WB3f7cMsh8PsnQ55mnk+8zu3z7zDw7MxtAaY1l/1Qi9kbEfIoY6WirRd441vq9u3euzCzduTKTotF4568UKV/X/v2U/xzON94eEb/8kOI/1YfjLly6fHa6Xp+7mNcnFs/NTyxcuvz8mXPTp+dOz52fmnxx8oUjh6eOHOrLfu6KiJ/Gj9eun3pt3zczX+755LuvbqQ4Gjvz9s796JexGFt+TTplr+tL/Q5WkGq+P51vcaoV2CHWpf3+DUTE/2IkqnHvzRuJT98qtHPAlmqkiAZQUkn+Q0m1jwOy89/2UuwRCfCo3D7WmgC4m1pze0vL+V9rzQ3G9ubcwI6lFJ3TOiki+jEzl8WYfyaNZEts0Twc0N3VaxHx/27jf2rm5mhzFj/L/8p9+V+JiDfzn9n6tzcYf+yBuvyHR2cz+f9eR/6/v8H48h8AAAAAAAD65+axiHiu2+d/leXrf6LL9T/DEXG0D/FX//yvcqsPYYAubh+LeCUi2tf+LXXkf260mtd2Na8HGEinztTnDkXE7og4GAPbsvrkCjHG9v080LOt4/q/bMnit68FzPtxq7bt/m1mpxenN7PPQMvtaxFP1brlf1oe/1OX8T8b++fXGKNx/NUfe7Wtnv/AVml8EXGg6/h/78kVaeXnc0w0jwcm2kcFD/vo5I1ve8WX/1CcbPzfsXL+j6bO5/UsrD/Gx3/+ton87378P5hONB85M5iv+3B6cfHiZMRgeuPh9VPr7zM8idr50M6XLP8P7u9+/r/S8f9QRFxdY8wT379+vVeb8R+KM3QtYnZd4//6C/vf/fzvXvHXNv4faY7pB/M15v9gZWtN0KL7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/RpWI2BmpMr5crlTGxyOGI+K/saNSv7Cw+OypCx+cn83amt//X2l/0+9Iq57a3/8/2lGfeqB+OCL2RMRn1aFmfXzmQn226J0HAAAAAAAAAAAAAAAAAACAx8Rwj/v/M39Ui+4dsOVqRXcAKIz8h/KS/1Be8h/KS/5Decl/KC/5D+Ul/6G85D+UV7Xx9cmi+wAAAAAAAPTNnqdv/poi4urLQ80lM5i3DRTaM2CrHS26A0BhPOIHysulf1Beq53jmwOAJ19apX37hrcEAAAAAAAAAAAAAPrlwF73/0NZVYruAFCY3vf/ezIAPOnc/w/l5RwfcP8/AAAAAAAAAAAAADz+Fi5dPjtdr89d3Ghh2+Y2V1BYa+H33a3/s49Lf9ZfiNSHjHtEhaL/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3/BAAA//9r5fVk") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={0x0, 0x11f0}, 0x1, 0x0, 0x0, 0x24000003}, 0x4000) r3 = syz_open_dev$usbfs(0x0, 0x80006f, 0x81501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000900)='cpu<02||!') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x1b, r1}, 0x94) chmod(&(0x7f0000000340)='./file0\x00', 0x0) epoll_create(0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x9) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) 31.241398366s ago: executing program 52 (id=21961): setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x4) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0x209, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000080)=0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f00000006c0)={[], [{@smackfshat={'smackfshat', 0x3d, ')'}}, {@uid_lt}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}]}, 0x1, 0x59d, &(0x7f0000001100)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={0x0, 0x11f0}, 0x1, 0x0, 0x0, 0x24000003}, 0x4000) r3 = syz_open_dev$usbfs(0x0, 0x80006f, 0x81501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000900)='cpu<02||!') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x1b, r1}, 0x94) chmod(&(0x7f0000000340)='./file0\x00', 0x0) epoll_create(0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x9) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) 1.474874961s ago: executing program 9 (id=22695): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0) 1.457153193s ago: executing program 9 (id=22698): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x1c00000, &(0x7f0000000800)={[{@memory_hugetlb_accounting}]}) (fail_nth: 1) 1.393966768s ago: executing program 9 (id=22699): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(r1, 0x0, 0x40000000, 0x0) 1.2452358s ago: executing program 9 (id=22700): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getpid() listen(r0, 0x21) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x2, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x806004, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}, 0x3}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000adaedc2000000000000000000000000000000000000000000000add8f2bd48281341a1f8c2f6f1cd1670e9ccee161dc9a75889b14d5e1b34b2004f43c9db23fa727c4894c380f4ae15186994649c2568a8ed48e808bf9758058a755b12d30f14011954b3624d3c10490ba9a9010a3c89bf04eb2e7014651bd1dd1c9f65daf56f3af4f476b480a7bfc8f28d52f7013ea3ea18bfa891e407b7f189b8d998535a37e6114f6bd4d6da2a4cce87c95402f952f02f159432dd92bb485a487b49bc4b6a044c10424ba538436c2cbfe9dce1081a373607b09cb867c6"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x100, 0x600}, 0x90) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000340)={0x0, 0xa7dc}, &(0x7f00000003c0)=0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x10, 0x80800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000040000200010000001ffe02000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) accept4(r0, 0x0, 0x0, 0x0) 1.137780758s ago: executing program 8 (id=22702): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r1, 0xffffffffffffffff, 0x100000) 1.1242866s ago: executing program 8 (id=22703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r4, r4, 0x0, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r6, 0x0, 0x79) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000000)=0x6, 0x4) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r7, 0x0, 0x3, 0x0, 0x0) read(r7, &(0x7f0000000280)=""/4096, 0x1000) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000100b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r9}, 0x10) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r10, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) 1.072797143s ago: executing program 7 (id=22706): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000240)={{0xa, 0x4e22, 0x2, @remote, 0x6}, {0xa, 0x4e21, 0x80, @private2, 0x8}, 0x1, {[0x3, 0x9, 0x4, 0x3, 0x476, 0xe, 0x9]}}, 0x5c) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000)=0xffff, 0x4) sendmmsg$inet6(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000028c0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="b323", 0x2}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e21, 0x7b6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001600)}}], 0x5, 0x4000800) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@noinit_itable}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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") (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@noinit_itable}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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") getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000b95000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000b95000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x40) 985.698591ms ago: executing program 8 (id=22708): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000100)="ecb2d5cbde8069324a04ca01b564d6b0dafbcf2fc2fbb11384b275b4b420dd601be6fcccfb2bea1c47a8277ec8f9636facd89adfa62753b700650d5680", &(0x7f0000001d00)=""/4096}, 0x20) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000180)=ANY=[], 0xfd, 0x648, &(0x7f0000002280)="$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") r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, 0x0, &(0x7f0000002640)) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000010180)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x1, 0x4, 0x4, {0x3, 0x0, 0x101, 0x9, 0x5, 0x2}, {0x3, 0x1, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x100000, 0x2, 0x8, 0x5, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0xffffffff, 0x1, 0x3, 0xffffffda, 0x8, 0x2, 0x76ccfa5f, 0x5, 0x8, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x3, 0x9, 0x2, 0xc, 0x1, 0x8, 0x7, 0x4, 0x8, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xffffff01, 0x1, 0x80, 0xa9, 0x7f, 0x84, 0x6, 0x637, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x40007, 0xab5, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1eb, 0x7, 0xd43, 0x9, 0x6, 0x7, 0x7, 0x4, 0x4, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x3, 0xaa2, 0x400, 0x40, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x7, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x7ff, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x10000000, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x6, 0x1ff, 0x1ff, 0x8, 0x2, 0x5, 0xffffffff, 0x9, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x9, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0x2, 0x8, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x0, 0x1, 0x1, 0xd0c0, 0xfffff33c, 0xc974, 0x3, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x9, 0x24c, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0xffffffe4, 0x9, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0x10000, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x103, 0xa, 0x6, 0x3, 0xf, 0x1, 0x9, 0x9, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x104, 0xa27d, 0x9, 0x9, 0x0, 0x81, 0x4, 0x7f8000, 0x9, 0x0, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x401, 0x40, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x490}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000f80)=ANY=[@ANYRESDEC, @ANYBLOB="302b6eff52a55a9c3ff89c5391ed0178b7d6df01911c727d8c7a8d340a26ff2cb8921987aab69a1fb47fa5edf3bee3d2ca09657d8f2cc07be31fc642150b9ef2713becedbcc15cb8f783369416847ab9e77cd53f9026e0c77fe6f2fbff2b1a332c4344eb249088cd52895b0e1a309825e5cf51c5cbe8a460cbe94538496111b394f5dc09b64e9dbd25085e14659cd3203fd7c10cb02800b7360fd3d69ca5eabca7c397a554c715df475d5dd4820a47", @ANYRES16=r3, @ANYRES64=r3, @ANYRESOCT, @ANYRES16=r2, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB="e8fa88e70da1b9c76cfaf3d80659ae68eb29563234049e665da79cebc620be16778776225013943b37faa22e2cf1c8182f9f145839b2c310bbb276b81cf5e8f79bbcdaca26dc11e2aac8f915fd6f248216e714865dc635d6f0f3b375b0dbba056bdf18a7f200de6a9e995dca5fa8beda1ef93e1a9b241640634e6a6687d44c4cb189bcdfa08b86714d70495d799a713d0b284c17e515c6f31fb7427d327feaf324", @ANYBLOB="8e992400028447ab6903d457b10100c104a0b14ac8f07d96cff44ef48944010165fbcfdd", @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r6, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e745", @ANYRESDEC=r4, @ANYRESOCT, @ANYBLOB='\b', @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="080004", @ANYRES16=r5], 0x94, 0x1) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, r4, &(0x7f0000000040)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000d40), 0x0}, 0x20) r11 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r11, 0x4b67, &(0x7f0000000180)) 985.319631ms ago: executing program 7 (id=22709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\b\x00'], 0xdc) 966.295072ms ago: executing program 0 (id=22710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) 956.396183ms ago: executing program 8 (id=22711): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="0f00002ed3530953b9e5430000006b17ca9c99ccf51fb806b3b940198b65305a1d6a9fbc045b7b71f5b4d58e10ea5094ec54014f0de9162ed0eb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r5, 0x0, 0x0, 0x1) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) r6 = syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000a00)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nombcache}, {@nodelalloc}, {@minixdf}, {@noinit_itable}], [{@appraise_type}, {@euid_gt}, {@dont_appraise}, {@fowner_lt}, {@fowner_gt}, {@fsmagic={'fsmagic', 0x3d, 0xd1}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'writeback_bdi_register\x00'}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x401c2103, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x300}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r8) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x428080, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0xf, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r6], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x18) socket$inet6(0xa, 0x802, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket(0x1a, 0x5, 0x0) 950.141594ms ago: executing program 0 (id=22712): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000050000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffeffff}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000080)=""/95) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x40, 0x20, 0x7, 0x7, {{0x14, 0x4, 0x2, 0x12, 0x50, 0x65, 0x0, 0x7f, 0x4, 0x0, @private=0xa010100, @remote, {[@timestamp={0x44, 0x8, 0x7a, 0x0, 0x3, [0xffffffff]}, @rr={0x7, 0x23, 0xd2, [@rand_addr=0x64010100, @multicast1, @rand_addr=0x64010101, @loopback, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}, @local]}, @rr={0x7, 0xb, 0x37, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, r3, 0x25, 0x9, @void}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffd, @loopback, 0x6324}, 0x1c) sendto$inet6(r2, 0x0, 0x2, 0x0, 0x0, 0x0) 939.829035ms ago: executing program 7 (id=22713): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getaddr={0x50, 0x15, 0x200, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_FLAGS={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x2, 0xb, 0x5}}, @IFA_CACHEINFO={0x14}]}, 0x50}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r2 = inotify_init1(0x800) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x90, &(0x7f0000000980)=ANY=[], 0x6, 0x699, &(0x7f0000000140)="$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") lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) inotify_add_watch(r2, &(0x7f00000002c0)='./file0\x00', 0x500082c) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r5, 0x0, 0x100000000}, 0x18) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 885.699879ms ago: executing program 0 (id=22714): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) unshare(0x20060400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0xfffffffffffffdfe, 0xfa00, {r2, 0x5b6}}, 0xfffffffffffffcca) close(r1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 885.081099ms ago: executing program 0 (id=22715): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x2c, {0x2, 0x4e22, @empty}, 'lo\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={[&(0x7f0000000080)=')@/#-^^\x00', &(0x7f0000000140)='!\x00', &(0x7f0000000180)='syztnl0\x00']}, &(0x7f0000000300)={[&(0x7f0000000200)=',)\x00', &(0x7f0000000240)='syztnl1\x00', &(0x7f0000000280)='syztnl0\x00', &(0x7f00000002c0)='syztnl1\x00']}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) r2 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x8, 0x1100, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x164, 0x0, 0x5, 0x4, 0x0, @empty, @private}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000200)=0x1, &(0x7f00000002c0)=0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) dup2(r8, r7) 884.125439ms ago: executing program 7 (id=22716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x21) 859.942911ms ago: executing program 7 (id=22717): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file1\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xd5, 0xffff, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x48002000, 0x0, 0x0, 0x0, 0x0, 0x0) 835.251903ms ago: executing program 0 (id=22718): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb8}}, &(0x7f00000004c0)='GPL\x00'}, 0x94) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x8c, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @private1, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4050081}, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000190000fbffffffffffffff00000000000000000000000000004000000000000000000200000000000000000200000000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r8}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r8}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 779.384337ms ago: executing program 7 (id=22719): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb8}}, &(0x7f00000004c0)='GPL\x00'}, 0x94) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0xa8, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6deb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @private1, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4050081}, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000190000fbffffffffffffff00000000000000000000000000004000000000000000000200000000000000000200000000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r9}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x70, 0x0, &(0x7f0000000540)=[@decrefs={0x40046307, 0x3}, @acquire_done={0x40106309, 0x2}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x0, &(0x7f00000004c0)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/40, 0x28, 0x0, 0x3f}, @fd={0x66642a85, 0x0, r6}, @fda={0x66646185, 0x6, 0x2, 0x3a}}, 0x0}}, @request_death={0x400c630e, 0x1}], 0xaf, 0x0, &(0x7f00000007c0)="a43ae6372305ba9b9f971b617cab524aadfedcee80ecafefea20beb2391d5aeaa822bfb11ba1330cd8cc00504fe7a2427a61ff8666db6bb5622f3909bc190b7c12077278010bdfaf2a2677e3c561018bb381bdf693671be711494063cf3a71a1cc148c1ff96808783556ab079fcdc2a2cb7ab868741496893e7904024b493e588c28c617d5683aa5373dcf64545152d6adc3589ec6e94b7560870ecd448c08223f645ec129f7ade5f8a60339988d78"}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r10}, 0x38) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 515.650709ms ago: executing program 8 (id=22721): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) request_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f0000000080)='\xe3', 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 499.08065ms ago: executing program 8 (id=22723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\b\x00'], 0xdc) 450.038754ms ago: executing program 1 (id=22724): bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = creat(&(0x7f00000006c0)='./file0\x00', 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f0000000340)="7a40b2dee8877e7183ba2919e177aea04113a044a5c08bc2b04934c437e6c6d01a88c6922a8044863e78ba019297f4a0948890813590f013311aba1377e92bb0bd50880f88be6417d0b76d4b29cbee84c6cff8fb897bcff557b8b6042effe0533e0ad0f3abab950ae4bf8f7b6a0cf8308e58bfaa5bcf6db1c29c2a7bf5e793a2d3b469a6b00dbafc17e856f76bf79f9e764727512239896c38b1d3fad0fc", &(0x7f0000000400)=""/204, &(0x7f0000000700)="20e47fb88e5289e928ac4e9891b3a8f0831cf10a72ffd0050fdf40dba757096a37adb76774273813fad0ce321e1a6ea3ab3d35284d4c1d58edb13ad5448b7b274259547a3e5fac9fb708a2d55bc6c679db69b49ff966318643cc085c9d307a3e89a203359a72c15de6bd40ea290e08b890c7f6eb5a1c21937585dfee2eac79b2cc3e5eab5e4c1c8021e41469850db96dc856e61f04e66a2c2d67d4cb8613a7c6371ea55e2a3bd9cff74f23129a0583e9baa9e5beed5a9f85", &(0x7f0000000000)="9f5ac309bda7ea8ddace7e117a10e50a4ada28c165cbb16a7fff7aa65fb17544a376026ab93e10879d17f43ce78ec0481d05a278b58847c4d1bc913f", 0x3, r0}, 0x38) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 397.708038ms ago: executing program 9 (id=22725): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x7f, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffffefc, 0x3, 0xfffffffffffffffe, 0x0, 0x4000, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000380), 0x5, 0x4f3, &(0x7f0000000700)="$eJzs3c9vG0sdAPDvOnGTtHk4Dzg8nsSjgofSCmonDW0jDiVICE6VKOXCKYTEiaI4cRQ7bRNVKBV/ABLil+DEiQsSZ4SE+icgpEpwRwiBKmjLgQNgtM6ahtRJnNc4buPPR5ru7M7ufmfqeOzZWXkD6FsXI2ImIgYi4nJEFLLtuSzFzm5K93v29MF8mpJoDN35WxJJtq11riRbXsgOG46Ir30l4lvJy3FrW9src5VKeSNbL9VX10u1re0ry6tzS+Wl8trM1OT16RvT16YnTqytN7/05x9+9+dfvvmbz9774+xfL307rdZoVra3HZ3Y6XC/3abnm/8XLYMRsXGcYK+xgaw9+V5XBACAjqTf8T8cEZ+MiOc/6XVtAAAAgG5ofGE0/pVENAAAAIAzK9e8BzbJFbN7AUYjlysWd+/h/Wicz1WqtfpnFqubawu798qORT63uFwpT2T3Co9FPknXJ5v5F+tX961PRcTbEfH9wkhzvThfrSz0+uIHAAAA9IkL+8b//yjsjv8BAACAM2as1xUAAAAAus74HwAAAM6+A8f/yeDpVgQAAADohq/eupWmRuv51wt3tzZXqnevLJRrK8XVzfnifHVjvbhUrS41f7Nv9ajzVarV9c/F2ub9Ur1cq5dqW9uzq9XNtfps87nes+VG4VSaBQAAAOzx9ice/SGJiJ3PjzRT6lxWlj/68Jnu1g7optzxdk+6VQ/g9A30ugJAz7jBF/pXB2N84Iw7YmD/g33rx7xsAAAAvA7GP/ZK8//mA+ENZiAP/cv8P/Qv8//Qv8z/Q58bOnqX4YMKfnvCdQEAALpmtJmSXDGbCxyNXK5YjHir+ViAfLK4XClPRMSHIuL3hfxQuj7Z60oDAAAAAAAAAAAAAAAAAAAAAAAAwBum0UiiAQAAAJxpEbm/JNmD/McL74/uvz5wLvlnobmMiHs/vfOj+3P1+sZkuv3v/9te/3G2/WprS+obp3wlAwAAAGhpjdNb43gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEnPnj6Yb6XTjPvkixEx1i7+YAw3l8O/KkTE+edJDO45LomIgROIv/MwIt5pFz9JqxVjWS32x89FxEiP4184gfjQzx6l/c9M+v7L73v/5eJic9n+/TeYpVf15OJB/V+u1f81+7l2/d9bh596uJV59/EvSy+VFrL4DyPeHWzf/7TiJ+3in+u8jd/8+vb2QWWNn0WMH/H5k8Yv1VfXS7Wt7SvLq3NL5aXy2tTU5PXpG9PXpidKi8uVcvZv2xjf+/iv/3NQ/LT959vG3+1/D2x/RLzfYfv//fj+048cEv/Sp9q//u8cEj/9m/h09jmQlo+38ju7+b3e+8Xv3jus/QsHtP/Q1z8iLnXY/su3v/OnDncFAE5BbWt7Za5SKW90JTPStTPLpJnq2lH7pN8TP3CI/Kn8kch0M3M7ew2PfXgPOyUAAKArXnzp319yjAkeAAAAAAAAAAAAAAAAAAAA4JV0/UfIhv7/lwWGe9dUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBD/TcAAP//V7HNuw==") openat(0xffffffffffffff9c, 0x0, 0x80040, 0x46) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r4, &(0x7f0000000080), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000240)=0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6, 0x8, 0x2, 0x17, 0x0, 0x3, 0xad40, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xe1fd, 0x0, @perf_config_ext={0x4, 0x918}, 0x11013, 0x40, 0x5, 0x5, 0x2, 0x4, 0x3f3b, 0x0, 0x5, 0x0, 0x1}, r6, 0x9, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x93254, 0x11b22}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xa}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x92) 288.881836ms ago: executing program 1 (id=22726): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000410, &(0x7f0000000080)={[{@bsdgroups}, {@jqfmt_vfsv0}], [{@fsmagic={'fsmagic', 0x3d, 0x10009}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") 270.110758ms ago: executing program 1 (id=22727): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getaddr={0x50, 0x15, 0x200, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_FLAGS={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x2, 0xb, 0x5}}, @IFA_CACHEINFO={0x14}]}, 0x50}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r2 = inotify_init1(0x800) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x90, &(0x7f0000000980)=ANY=[], 0x6, 0x699, &(0x7f0000000140)="$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") lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) inotify_add_watch(r2, &(0x7f00000002c0)='./file0\x00', 0x500082c) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r5, 0x0, 0x100000000}, 0x18) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 216.074603ms ago: executing program 1 (id=22728): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x21) 153.614087ms ago: executing program 1 (id=22729): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000140)={'geneve1\x00', 0x600}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext, 0x3, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) 137.057419ms ago: executing program 9 (id=22730): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000065cf0000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 94.451032ms ago: executing program 1 (id=22731): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0), 0x0, 0x9000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) sendmsg$tipc(r3, &(0x7f0000000640)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x2, 0x3}}, 0x10, &(0x7f0000000240)=[{&(0x7f00000003c0)="5e6eb006f9b283e40084d4610132fbf7f6097b37aa7b8872eee065713e49c348ea4cdcda384f4039afb35137049068106a365cc2880e360224d5ffbbfadcf8773a3ca1bf78818b8bb0a117e5e88a8ed6ded661ecb32f06803ce721f49e33fc5f442de4f7ab17ebbe13f2f03838daea8b029ef64de80a3178fd55798e90c4c6b35a36f306a97beb7e8554eba9f07c5165a88969c35f661486ad486f3a366743aa", 0xa0}, {&(0x7f00000001c0)="fd0a5294638f5232ed96d50ffdc85e2b163aec479880dbf2", 0x18}], 0x2, &(0x7f0000000480)="73f1058049e52b2695e05700e17e477eeab6b41b9c60e0e1ad7a4a45", 0x1c, 0x4040041}, 0x11) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}, @IFLA_MASTER={0x8, 0x3, r10}]}, 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0x11) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="d8000000190081054e81f783db4cb9040a1d080006007c02cdfc55a10a0017000600a42603600e12080006ba0474f701a8000100fe80ffff7f6f94007134cf6efb8000a007a290457f01890500277ce06bbaceac3c2fb14c2ee5a7a3aab62f00001fb71b14d6d930dfe1d9d322fe7c2e8771820d16a4683f5aeb4edbb5952a0f536ffd77500db798262f3d409c1f40cb9f92b74f51fad9e3bb9ad809d5e1cace0d81ed0b764434a19789bf0cffece0b4129ecbee5de6ccd4e1ffffffffc2c9b627430600007c388b0dd6e4edef3d93000020000000000000", 0xd8}], 0x1}, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mem_disconnect\x00', r12}, 0x18) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) 0s ago: executing program 0 (id=22732): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000140)={'geneve1\x00', 0x600}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext, 0x3, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0xa000200) unshare(0x20060400) kernel console output (not intermixed with test programs): T41] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.495679][ T41] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.509102][T16132] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.570992][ T3132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1565.597335][ T3132] 8021q: adding VLAN 0 to HW filter on device team0 [ 1565.620956][T16132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.628080][T16132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1565.644688][T16132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.651847][T16132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1565.671131][ T41] bridge_slave_1: left allmulticast mode [ 1565.676935][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.695017][ T41] bridge_slave_0: left promiscuous mode [ 1565.700762][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 1565.710343][ T41] vlan2: left promiscuous mode [ 1565.715246][ T41] bridge0: left promiscuous mode [ 1565.720513][ T41] bridge1: port 1(vlan2) entered disabled state [ 1565.942808][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1565.953347][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1565.962970][ T41] bond0 (unregistering): Released all slaves [ 1565.971768][ T41] bond1 (unregistering): Released all slaves [ 1565.988113][ T3132] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1565.998549][ T3132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1566.026626][ T3371] pim6reg1: entered promiscuous mode [ 1566.045475][ T41] tipc: Disabling bearer [ 1566.050555][ T41] tipc: Left network mode [ 1566.072697][ T41] hsr_slave_0: left promiscuous mode [ 1566.079462][ T41] hsr_slave_1: left promiscuous mode [ 1566.085511][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1566.092901][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1566.102470][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1566.110112][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1566.133287][ T41] veth1_macvtap: left promiscuous mode [ 1566.138765][ T41] veth0_macvtap: left promiscuous mode [ 1566.193027][ T41] team0 (unregistering): Port device team_slave_1 removed [ 1566.202156][ T41] team0 (unregistering): Port device team_slave_0 removed [ 1566.225526][ T3385] loop7: detected capacity change from 0 to 512 [ 1566.232301][ T3385] ext4: Unknown parameter 'euid<00000000000000060928' [ 1566.232427][ T41] team0 (unregistering): Port device dummy0 removed [ 1566.260561][T26409] lo speed is unknown, defaulting to 1000 [ 1566.266343][T26409] infiniband syz0: ib_query_port failed (-19) [ 1566.282501][ T3132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1566.300769][ T3270] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1566.318636][ T3270] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1566.327884][ T3270] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1566.337354][ T3270] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1566.377661][ T3411] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1566.411430][ T3270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1566.431074][ T3418] loop7: detected capacity change from 0 to 164 [ 1566.444064][ T3270] 8021q: adding VLAN 0 to HW filter on device team0 [ 1566.451024][ T3418] iso9660: Unknown parameter '' [ 1566.457819][ T3420] FAULT_INJECTION: forcing a failure. [ 1566.457819][ T3420] name failslab, interval 1, probability 0, space 0, times 0 [ 1566.466388][ T3418] lo speed is unknown, defaulting to 1000 [ 1566.470606][ T3420] CPU: 1 UID: 0 PID: 3420 Comm: syz.1.22005 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 1566.470635][ T3420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1566.470647][ T3420] Call Trace: [ 1566.470733][ T3420] [ 1566.470802][ T3420] __dump_stack+0x1d/0x30 [ 1566.470822][ T3420] dump_stack_lvl+0xe8/0x140 [ 1566.470841][ T3420] dump_stack+0x15/0x1b [ 1566.470857][ T3420] should_fail_ex+0x265/0x280 [ 1566.470878][ T3420] should_failslab+0x8c/0xb0 [ 1566.470902][ T3420] kmem_cache_alloc_noprof+0x50/0x310 [ 1566.470940][ T3420] ? getname_flags+0x80/0x3b0 [ 1566.470967][ T3420] getname_flags+0x80/0x3b0 [ 1566.470992][ T3420] user_path_at+0x28/0x130 [ 1566.471030][ T3420] __se_sys_quotactl+0xb6/0x670 [ 1566.471052][ T3420] __x64_sys_quotactl+0x55/0x70 [ 1566.471080][ T3420] x64_sys_call+0x15d6/0x2ff0 [ 1566.471100][ T3420] do_syscall_64+0xd2/0x200 [ 1566.471124][ T3420] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1566.471148][ T3420] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1566.471171][ T3420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.471213][ T3420] RIP: 0033:0x7ffa462eebe9 [ 1566.471228][ T3420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1566.471302][ T3420] RSP: 002b:00007ffa44d4f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 1566.471321][ T3420] RAX: ffffffffffffffda RBX: 00007ffa46515fa0 RCX: 00007ffa462eebe9 [ 1566.471334][ T3420] RDX: 0000000000000000 RSI: 0000200000000580 RDI: ffffffff80000201 [ 1566.471347][ T3420] RBP: 00007ffa44d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1566.471360][ T3420] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000001 [ 1566.471373][ T3420] R13: 00007ffa46516038 R14: 00007ffa46515fa0 R15: 00007fffcfa39708 [ 1566.471396][ T3420] [ 1566.518467][T16115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.665305][T16115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1566.687426][ T3418] lo speed is unknown, defaulting to 1000 [ 1566.693413][ T3418] lo speed is unknown, defaulting to 1000 [ 1566.704290][T22641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.711333][T22641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1566.719329][ T3418] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1566.720116][ T41] IPVS: stop unused estimator thread 0... [ 1566.752408][ T3418] lo speed is unknown, defaulting to 1000 [ 1566.767832][ T3418] lo speed is unknown, defaulting to 1000 [ 1566.777460][ T3270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1566.805592][ T3418] lo speed is unknown, defaulting to 1000 [ 1566.812301][ T3418] lo speed is unknown, defaulting to 1000 [ 1566.834569][ T3418] lo speed is unknown, defaulting to 1000 [ 1566.865253][ T3442] team0 (unregistering): Port device team_slave_0 removed [ 1566.876067][ T3442] team0 (unregistering): Port device team_slave_1 removed [ 1566.887184][ T3418] lo speed is unknown, defaulting to 1000 [ 1566.890232][ T3132] veth0_vlan: entered promiscuous mode [ 1566.910366][ T3132] veth1_vlan: entered promiscuous mode [ 1566.919242][ T3418] lo speed is unknown, defaulting to 1000 [ 1566.921403][ T3270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1566.957800][ T3449] __nla_validate_parse: 5 callbacks suppressed [ 1566.957865][ T3449] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22012'. [ 1566.964866][ T3132] veth0_macvtap: entered promiscuous mode [ 1566.981882][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1566.989288][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1567.003390][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1567.010840][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1567.020944][ T3449] batman_adv: batadv0: Interface deactivated: dummy0 [ 1567.027704][ T3449] batman_adv: batadv0: Removing interface: dummy0 [ 1567.044581][ T3132] veth1_macvtap: entered promiscuous mode [ 1567.069025][ T3132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1567.080684][ T3132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1567.094710][T16115] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.107443][T16115] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.116480][T16115] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.129889][T16115] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.149471][ T3466] syzkaller1: entered promiscuous mode [ 1567.155051][ T3466] syzkaller1: entered allmulticast mode [ 1567.206921][ T3270] veth0_vlan: entered promiscuous mode [ 1567.216306][ T3270] veth1_vlan: entered promiscuous mode [ 1567.232319][ T3270] veth0_macvtap: entered promiscuous mode [ 1567.240275][ T3270] veth1_macvtap: entered promiscuous mode [ 1567.253950][ T3270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1567.267488][ T3270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1567.280762][T22641] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.297159][T22641] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.302575][ T3478] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1567.312993][ T792] IPVS: starting estimator thread 0... [ 1567.319787][T22641] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.332065][T22641] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.386102][ T3480] pim6reg1: entered promiscuous mode [ 1567.407033][ T3482] IPVS: using max 2544 ests per chain, 127200 per kthread [ 1567.440264][ T3489] loop9: detected capacity change from 0 to 512 [ 1567.455588][ T3489] EXT4-fs: Ignoring removed orlov option [ 1567.464038][ T3489] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1567.480903][ T3493] netlink: 'syz.8.22024': attribute type 4 has an invalid length. [ 1567.483772][ T3489] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1567.495853][ T3489] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.21963: bg 0: block 248: padding at end of block bitmap is not set [ 1567.511639][ T3489] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.21963: Failed to acquire dquot type 1 [ 1567.515770][ T3493] netlink: 'syz.8.22024': attribute type 4 has an invalid length. [ 1567.524783][ T3489] EXT4-fs (loop9): 1 truncate cleaned up [ 1567.541658][ T3489] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1567.563407][ T3498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22026'. [ 1567.591713][ T3504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22029'. [ 1567.602208][ T3270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1567.634585][ T3506] loop9: detected capacity change from 0 to 164 [ 1567.634913][ T3508] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1567.668549][ T3511] FAULT_INJECTION: forcing a failure. [ 1567.668549][ T3511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1567.681922][ T3511] CPU: 0 UID: 0 PID: 3511 Comm: syz.9.22032 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 1567.681952][ T3511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1567.681973][ T3511] Call Trace: [ 1567.681979][ T3511] [ 1567.681985][ T3511] __dump_stack+0x1d/0x30 [ 1567.682007][ T3511] dump_stack_lvl+0xe8/0x140 [ 1567.682087][ T3511] dump_stack+0x15/0x1b [ 1567.682103][ T3511] should_fail_ex+0x265/0x280 [ 1567.682123][ T3511] should_fail+0xb/0x20 [ 1567.682139][ T3511] should_fail_usercopy+0x1a/0x20 [ 1567.682160][ T3511] _copy_from_user+0x1c/0xb0 [ 1567.682237][ T3511] __sys_bpf+0x178/0x7b0 [ 1567.682265][ T3511] __x64_sys_bpf+0x41/0x50 [ 1567.682287][ T3511] x64_sys_call+0x2aea/0x2ff0 [ 1567.682348][ T3511] do_syscall_64+0xd2/0x200 [ 1567.682387][ T3511] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1567.682414][ T3511] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1567.682436][ T3511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.682457][ T3511] RIP: 0033:0x7f5ececeebe9 [ 1567.682510][ T3511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1567.682525][ T3511] RSP: 002b:00007f5ecd74f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1567.682544][ T3511] RAX: ffffffffffffffda RBX: 00007f5ecef15fa0 RCX: 00007f5ececeebe9 [ 1567.682555][ T3511] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1567.682627][ T3511] RBP: 00007f5ecd74f090 R08: 0000000000000000 R09: 0000000000000000 [ 1567.682637][ T3511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1567.682647][ T3511] R13: 00007f5ecef16038 R14: 00007f5ecef15fa0 R15: 00007ffec8d68a28 [ 1567.682662][ T3511] [ 1567.911845][ T3520] netlink: 'syz.8.22037': attribute type 4 has an invalid length. [ 1567.923268][ T3520] netlink: 'syz.8.22037': attribute type 4 has an invalid length. [ 1568.373620][ T3551] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1568.468620][ T3553] pim6reg1: entered promiscuous mode [ 1568.645425][ T3569] siw: device registration error -23 [ 1568.712005][ T29] kauditd_printk_skb: 677 callbacks suppressed [ 1568.712020][ T29] audit: type=1326 audit(3857.231:64764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3568 comm="syz.8.22058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c4f0ebe9 code=0x7ffc0000 [ 1568.741395][ T29] audit: type=1326 audit(3857.231:64765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3568 comm="syz.8.22058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c4f0ebe9 code=0x7ffc0000 [ 1568.846069][ T3573] netlink: 12 bytes leftover after parsing attributes in process `syz.8.22059'. [ 1568.867611][ T29] audit: type=1400 audit(3857.346:64766): avc: denied { create } for pid=3566 comm="syz.1.22057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1568.886910][ T29] audit: type=1400 audit(3857.346:64767): avc: denied { create } for pid=3566 comm="syz.1.22057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1568.907143][ T29] audit: type=1400 audit(3857.346:64768): avc: denied { write } for pid=3566 comm="syz.1.22057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1568.927197][ T29] audit: type=1400 audit(3857.346:64769): avc: denied { read } for pid=3566 comm="syz.1.22057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1568.947152][ T29] audit: type=1400 audit(3857.367:64770): avc: denied { write } for pid=3566 comm="syz.1.22057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1568.966358][ T29] audit: type=1400 audit(3857.367:64771): avc: denied { read write } for pid=3270 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1568.990092][ T29] audit: type=1400 audit(3857.367:64772): avc: denied { open } for pid=3270 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1569.013735][ T29] audit: type=1400 audit(3857.367:64773): avc: denied { ioctl } for pid=3270 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1569.052479][ T3581] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1569.114993][ T3576] FAULT_INJECTION: forcing a failure. [ 1569.114993][ T3576] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1569.128333][ T3576] CPU: 0 UID: 0 PID: 3576 Comm: syz.9.22060 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 1569.128418][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1569.128491][ T3576] Call Trace: [ 1569.128496][ T3576] [ 1569.128502][ T3576] __dump_stack+0x1d/0x30 [ 1569.128520][ T3576] dump_stack_lvl+0xe8/0x140 [ 1569.128540][ T3576] dump_stack+0x15/0x1b [ 1569.128558][ T3576] should_fail_ex+0x265/0x280 [ 1569.128596][ T3576] should_fail_alloc_page+0xf2/0x100 [ 1569.128618][ T3576] __alloc_frozen_pages_noprof+0xff/0x360 [ 1569.128647][ T3576] alloc_pages_mpol+0xb3/0x250 [ 1569.128748][ T3576] vma_alloc_folio_noprof+0x1aa/0x300 [ 1569.128840][ T3576] handle_mm_fault+0xec2/0x2c20 [ 1569.128870][ T3576] do_user_addr_fault+0x636/0x1090 [ 1569.128972][ T3576] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1569.128995][ T3576] exc_page_fault+0x62/0xa0 [ 1569.129019][ T3576] asm_exc_page_fault+0x26/0x30 [ 1569.129040][ T3576] RIP: 0033:0x7f5ecec9c20b [ 1569.129056][ T3576] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 1569.129071][ T3576] RSP: 002b:00007f5ecd74ce10 EFLAGS: 00010246 [ 1569.129162][ T3576] RAX: 00007f5ecd74ef30 RBX: 00007f5eceee7640 RCX: 0000000000000000 [ 1569.129175][ T3576] RDX: 00007f5ecd74ef78 RSI: 00007f5eced4eca8 RDI: 00007f5ecd74ce30 [ 1569.129186][ T3576] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 1569.129196][ T3576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1569.129274][ T3576] R13: 00007f5ecef16038 R14: 00007f5ecef15fa0 R15: 00007ffec8d68a28 [ 1569.129293][ T3576] [ 1569.129302][ T3576] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1569.553777][ T3603] loop9: detected capacity change from 0 to 512 [ 1569.569036][ T3603] EXT4-fs: Ignoring removed orlov option [ 1569.579876][ T3603] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1569.583408][ T3607] FAULT_INJECTION: forcing a failure. [ 1569.583408][ T3607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1569.598539][ T3603] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1569.601447][ T3607] CPU: 0 UID: 0 PID: 3607 Comm: syz.8.22072 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 1569.601552][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1569.601622][ T3607] Call Trace: [ 1569.601630][ T3607] [ 1569.601639][ T3607] __dump_stack+0x1d/0x30 [ 1569.601659][ T3607] dump_stack_lvl+0xe8/0x140 [ 1569.601678][ T3607] dump_stack+0x15/0x1b [ 1569.601695][ T3607] should_fail_ex+0x265/0x280 [ 1569.601756][ T3607] should_fail+0xb/0x20 [ 1569.601773][ T3607] should_fail_usercopy+0x1a/0x20 [ 1569.601794][ T3607] _copy_from_user+0x1c/0xb0 [ 1569.601820][ T3607] ___sys_sendmsg+0xc1/0x1d0 [ 1569.601907][ T3607] __x64_sys_sendmsg+0xd4/0x160 [ 1569.601930][ T3607] x64_sys_call+0x191e/0x2ff0 [ 1569.602002][ T3607] do_syscall_64+0xd2/0x200 [ 1569.602027][ T3607] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1569.602051][ T3607] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1569.602140][ T3607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.602161][ T3607] RIP: 0033:0x7f78c4f0ebe9 [ 1569.602176][ T3607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1569.602193][ T3607] RSP: 002b:00007f78c396f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1569.602275][ T3607] RAX: ffffffffffffffda RBX: 00007f78c5135fa0 RCX: 00007f78c4f0ebe9 [ 1569.602301][ T3607] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1569.602339][ T3607] RBP: 00007f78c396f090 R08: 0000000000000000 R09: 0000000000000000 [ 1569.602353][ T3607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1569.602365][ T3607] R13: 00007f78c5136038 R14: 00007f78c5135fa0 R15: 00007fff32e38fa8 [ 1569.602423][ T3607] [ 1569.695113][ T3613] siw: device registration error -23 [ 1569.704354][ T3615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22076'. [ 1569.711541][ T3603] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.22071: bg 0: block 248: padding at end of block bitmap is not set [ 1569.810763][ T3603] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.22071: Failed to acquire dquot type 1 [ 1569.825590][ T3603] EXT4-fs (loop9): 1 truncate cleaned up [ 1569.836398][ T3620] netlink: 'syz.1.22078': attribute type 4 has an invalid length. [ 1569.844923][ T3603] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1569.860103][ T3617] pim6reg1: entered promiscuous mode [ 1569.875956][ T3620] netlink: 'syz.1.22078': attribute type 4 has an invalid length. [ 1569.885810][ T3270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1569.969423][ T3636] netlink: 12 bytes leftover after parsing attributes in process `syz.9.22086'. [ 1569.987947][ T3628] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 1570.029386][ T3641] loop7: detected capacity change from 0 to 1024 [ 1570.036772][ T3641] EXT4-fs: Ignoring removed bh option [ 1570.055374][ T3641] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1570.081798][ T2829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1570.135937][ T3654] loop7: detected capacity change from 0 to 512 [ 1570.145789][ T3654] EXT4-fs: Ignoring removed orlov option [ 1570.153466][ T3654] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1570.170310][ T3658] netlink: 'syz.0.22094': attribute type 4 has an invalid length. [ 1570.179552][ T3654] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1570.182978][ T3658] netlink: 'syz.0.22094': attribute type 4 has an invalid length. [ 1570.196107][ T3654] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.22091: bg 0: block 248: padding at end of block bitmap is not set [ 1570.228452][ T3654] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.22091: Failed to acquire dquot type 1 [ 1570.240695][ T3654] EXT4-fs (loop7): 1 truncate cleaned up [ 1570.248103][ T3654] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1570.281114][ T2829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1570.324811][ T3667] pim6reg1: entered promiscuous mode [ 1570.391324][ T3676] loop7: detected capacity change from 0 to 1024 [ 1570.410689][ T3676] EXT4-fs: Ignoring removed bh option [ 1570.428142][ T3676] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1570.461288][ T2829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1571.059469][ T3683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3683 comm=syz.8.22103 [ 1571.125549][ T3693] bond_slave_0: entered promiscuous mode [ 1571.131248][ T3693] bond_slave_1: entered promiscuous mode [ 1571.142221][ T3693] macvtap1: entered allmulticast mode [ 1571.147703][ T3693] bond0: entered allmulticast mode [ 1571.152939][ T3693] bond_slave_0: entered allmulticast mode [ 1571.159307][ T3693] bond_slave_1: entered allmulticast mode [ 1571.173411][ T3693] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1571.180987][ T3695] loop7: detected capacity change from 0 to 164 [ 1571.187670][ T3693] bond0: left allmulticast mode [ 1571.188307][ T3700] FAULT_INJECTION: forcing a failure. [ 1571.188307][ T3700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1571.192545][ T3693] bond_slave_0: left allmulticast mode [ 1571.205798][ T3700] CPU: 1 UID: 0 PID: 3700 Comm: ,&#^% Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 1571.205901][ T3700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1571.205918][ T3700] Call Trace: [ 1571.205927][ T3700] [ 1571.205939][ T3700] __dump_stack+0x1d/0x30 [ 1571.206037][ T3700] dump_stack_lvl+0xe8/0x140 [ 1571.206060][ T3700] dump_stack+0x15/0x1b [ 1571.206080][ T3700] should_fail_ex+0x265/0x280 [ 1571.206105][ T3700] should_fail+0xb/0x20 [ 1571.206148][ T3700] should_fail_usercopy+0x1a/0x20 [ 1571.206172][ T3700] _copy_from_user+0x1c/0xb0 [ 1571.206203][ T3700] __sys_bpf+0x178/0x7b0 [ 1571.206275][ T3700] __x64_sys_bpf+0x41/0x50 [ 1571.206313][ T3700] x64_sys_call+0x2aea/0x2ff0 [ 1571.206337][ T3700] do_syscall_64+0xd2/0x200 [ 1571.206366][ T3700] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1571.206394][ T3700] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1571.206421][ T3700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.206445][ T3700] RIP: 0033:0x7f300d6bebe9 [ 1571.206464][ T3700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1571.206485][ T3700] RSP: 002b:00007f300c127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1571.206535][ T3700] RAX: ffffffffffffffda RBX: 00007f300d8e5fa0 RCX: 00007f300d6bebe9 [ 1571.206551][ T3700] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 1571.206568][ T3700] RBP: 00007f300c127090 R08: 0000000000000000 R09: 0000000000000000 [ 1571.206585][ T3700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1571.206601][ T3700] R13: 00007f300d8e6038 R14: 00007f300d8e5fa0 R15: 00007fffc02f1408 [ 1571.206624][ T3700] [ 1571.271675][ T3695] netlink: 'syz.7.22109': attribute type 4 has an invalid length. [ 1571.275532][ T3693] bond_slave_1: left allmulticast mode [ 1571.332762][ T3706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22113'. [ 1571.339974][ T3693] bond_slave_0: left promiscuous mode [ 1571.361478][ T3704] netlink: 'syz.7.22109': attribute type 4 has an invalid length. [ 1571.363859][ T3693] bond_slave_1: left promiscuous mode [ 1571.441135][ T3417] lo speed is unknown, defaulting to 1000 [ 1571.441147][ T792] lo speed is unknown, defaulting to 1000 [ 1571.479229][ T3709] loop9: detected capacity change from 0 to 1024 [ 1571.487687][ T3709] EXT4-fs: Ignoring removed bh option [ 1571.497219][ T3711] loop7: detected capacity change from 0 to 512 [ 1571.504784][ T3711] EXT4-fs: Ignoring removed orlov option [ 1571.511928][ T3711] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1571.522431][ T3709] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1571.549286][ T3711] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1571.576742][ T3711] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.22115: bg 0: block 248: padding at end of block bitmap is not set [ 1571.593246][ T3270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1571.611266][ T3711] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.22115: Failed to acquire dquot type 1 [ 1571.619259][ T3726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22122'. [ 1571.639270][ T3711] EXT4-fs (loop7): 1 truncate cleaned up [ 1571.645987][ T3711] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1571.678641][ T2829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1571.808207][ T3745] bond_slave_0: entered promiscuous mode [ 1571.813904][ T3745] bond_slave_1: entered promiscuous mode [ 1571.822240][ T3745] macvtap1: entered allmulticast mode [ 1571.827829][ T3745] bond0: entered allmulticast mode [ 1571.833039][ T3745] bond_slave_0: entered allmulticast mode [ 1571.838777][ T3745] bond_slave_1: entered allmulticast mode [ 1571.845509][ T3745] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1571.854357][ T3745] bond0: left allmulticast mode [ 1571.859268][ T3745] bond_slave_0: left allmulticast mode [ 1571.864780][ T3745] bond_slave_1: left allmulticast mode [ 1571.870381][ T3745] bond_slave_0: left promiscuous mode [ 1571.875774][ T3745] bond_slave_1: left promiscuous mode [ 1571.938148][ T3755] netlink: 16 bytes leftover after parsing attributes in process `syz.7.22131'. [ 1571.969526][ T3758] netlink: 12 bytes leftover after parsing attributes in process `syz.9.22132'. [ 1571.993982][ T3761] loop7: detected capacity change from 0 to 1024 [ 1572.001047][ T3761] EXT4-fs: Ignoring removed bh option [ 1572.016863][ T3761] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1572.042888][ T2829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1572.078394][ T3767] FAULT_INJECTION: forcing a failure. [ 1572.078394][ T3767] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.091180][ T3767] CPU: 1 UID: 0 PID: 3767 Comm: syz.7.22136 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 1572.091242][ T3767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1572.091252][ T3767] Call Trace: [ 1572.091257][ T3767] [ 1572.091264][ T3767] __dump_stack+0x1d/0x30 [ 1572.091283][ T3767] dump_stack_lvl+0xe8/0x140 [ 1572.091299][ T3767] dump_stack+0x15/0x1b [ 1572.091380][ T3767] should_fail_ex+0x265/0x280 [ 1572.091400][ T3767] should_failslab+0x8c/0xb0 [ 1572.091424][ T3767] __kmalloc_noprof+0xa5/0x3e0 [ 1572.091495][ T3767] ? usb_alloc_urb+0x42/0xc0 [ 1572.091519][ T3767] usb_alloc_urb+0x42/0xc0 [ 1572.091540][ T3767] do_proc_control+0x1a8/0x8b0 [ 1572.091580][ T3767] ? should_fail_ex+0xdb/0x280 [ 1572.091601][ T3767] proc_control+0x71/0xa0 [ 1572.091625][ T3767] usbdev_ioctl+0x948/0x1710 [ 1572.091648][ T3767] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1572.091730][ T3767] __se_sys_ioctl+0xcb/0x140 [ 1572.091758][ T3767] __x64_sys_ioctl+0x43/0x50 [ 1572.091787][ T3767] x64_sys_call+0x1816/0x2ff0 [ 1572.091833][ T3767] do_syscall_64+0xd2/0x200 [ 1572.091859][ T3767] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1572.091889][ T3767] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1572.091914][ T3767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.091931][ T3767] RIP: 0033:0x7fa56e80ebe9 [ 1572.091947][ T3767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1572.091982][ T3767] RSP: 002b:00007fa56d277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1572.091999][ T3767] RAX: ffffffffffffffda RBX: 00007fa56ea35fa0 RCX: 00007fa56e80ebe9 [ 1572.092075][ T3767] RDX: 00002000000001c0 RSI: 00000000c0185500 RDI: 0000000000000003 [ 1572.092087][ T3767] RBP: 00007fa56d277090 R08: 0000000000000000 R09: 0000000000000000 [ 1572.092097][ T3767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1572.092108][ T3767] R13: 00007fa56ea36038 R14: 00007fa56ea35fa0 R15: 00007ffd488d5478 [ 1572.092124][ T3767] [ 1572.358173][ T3773] loop7: detected capacity change from 0 to 512 [ 1572.364634][ T3773] ext2: Unknown parameter 'euid<00000000000000000000' [ 1572.450493][ T3789] FAULT_INJECTION: forcing a failure. [ 1572.450493][ T3789] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.463352][ T3789] CPU: 1 UID: 0 PID: 3789 Comm: syz.1.22145 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 1572.463378][ T3789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1572.463388][ T3789] Call Trace: [ 1572.463395][ T3789] [ 1572.463402][ T3789] __dump_stack+0x1d/0x30 [ 1572.463459][ T3789] dump_stack_lvl+0xe8/0x140 [ 1572.463552][ T3789] dump_stack+0x15/0x1b [ 1572.463601][ T3789] should_fail_ex+0x265/0x280 [ 1572.463619][ T3789] should_failslab+0x8c/0xb0 [ 1572.463644][ T3789] kmem_cache_alloc_noprof+0x50/0x310 [ 1572.463740][ T3789] ? alloc_empty_file+0x76/0x200 [ 1572.463768][ T3789] ? mntput+0x4b/0x80 [ 1572.463796][ T3789] alloc_empty_file+0x76/0x200 [ 1572.463891][ T3789] path_openat+0x68/0x2170 [ 1572.463911][ T3789] ? _parse_integer_limit+0x170/0x190 [ 1572.463934][ T3789] ? kstrtoull+0x111/0x140 [ 1572.463954][ T3789] ? kstrtouint+0x76/0xc0 [ 1572.463971][ T3789] do_filp_open+0x109/0x230 [ 1572.464061][ T3789] do_sys_openat2+0xa6/0x110 [ 1572.464092][ T3789] __x64_sys_openat+0xf2/0x120 [ 1572.464118][ T3789] x64_sys_call+0x2e9c/0x2ff0 [ 1572.464137][ T3789] do_syscall_64+0xd2/0x200 [ 1572.464186][ T3789] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1572.464223][ T3789] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1572.464280][ T3789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.464301][ T3789] RIP: 0033:0x7ffa462eebe9 [ 1572.464316][ T3789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1572.464331][ T3789] RSP: 002b:00007ffa44d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1572.464357][ T3789] RAX: ffffffffffffffda RBX: 00007ffa46515fa0 RCX: 00007ffa462eebe9 [ 1572.464368][ T3789] RDX: 0000000000042080 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1572.464379][ T3789] RBP: 00007ffa44d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1572.464393][ T3789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1572.464407][ T3789] R13: 00007ffa46516038 R14: 00007ffa46515fa0 R15: 00007fffcfa39708 [ 1572.464470][ T3789] [ 1572.829654][ T3814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22157'. [ 1572.863180][ T3816] netlink: 12 bytes leftover after parsing attributes in process `syz.9.22158'. [ 1573.019784][ T3827] FAULT_INJECTION: forcing a failure. [ 1573.019784][ T3827] name failslab, interval 1, probability 0, space 0, times 0 [ 1573.032559][ T3827] CPU: 0 UID: 0 PID: 3827 Comm: syz.8.22163 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 1573.032586][ T3827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1573.032597][ T3827] Call Trace: [ 1573.032603][ T3827] [ 1573.032610][ T3827] __dump_stack+0x1d/0x30 [ 1573.032667][ T3827] dump_stack_lvl+0xe8/0x140 [ 1573.032685][ T3827] dump_stack+0x15/0x1b [ 1573.032735][ T3827] should_fail_ex+0x265/0x280 [ 1573.032754][ T3827] ? __se_sys_mount+0xef/0x2e0 [ 1573.032774][ T3827] should_failslab+0x8c/0xb0 [ 1573.032860][ T3827] __kmalloc_cache_noprof+0x4c/0x320 [ 1573.032965][ T3827] ? memdup_user+0x99/0xd0 [ 1573.032988][ T3827] __se_sys_mount+0xef/0x2e0 [ 1573.033009][ T3827] ? do_user_addr_fault+0xbb8/0x1090 [ 1573.033057][ T3827] __x64_sys_mount+0x67/0x80 [ 1573.033076][ T3827] x64_sys_call+0x2b4d/0x2ff0 [ 1573.033094][ T3827] do_syscall_64+0xd2/0x200 [ 1573.033160][ T3827] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1573.033181][ T3827] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1573.033202][ T3827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.033219][ T3827] RIP: 0033:0x7f78c4f1038a [ 1573.033257][ T3827] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1573.033274][ T3827] RSP: 002b:00007f78c396ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1573.033345][ T3827] RAX: ffffffffffffffda RBX: 00007f78c396eef0 RCX: 00007f78c4f1038a [ 1573.033356][ T3827] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 1573.033368][ T3827] RBP: 0000200000000f40 R08: 00007f78c396eef0 R09: 0000000001aca421 [ 1573.033380][ T3827] R10: 0000000001aca421 R11: 0000000000000246 R12: 0000200000000f00 [ 1573.033393][ T3827] R13: 00007f78c396eeb0 R14: 0000000000000000 R15: 00002000000008c0 [ 1573.033416][ T3827] [ 1573.254459][ T3831] netlink: 12 bytes leftover after parsing attributes in process `syz.8.22165'. [ 1573.315791][ T3788] syz.7.22147 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1573.330039][ T3788] CPU: 0 UID: 0 PID: 3788 Comm: syz.7.22147 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 1573.330071][ T3788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1573.330105][ T3788] Call Trace: [ 1573.330126][ T3788] [ 1573.330153][ T3788] __dump_stack+0x1d/0x30 [ 1573.330178][ T3788] dump_stack_lvl+0xe8/0x140 [ 1573.330199][ T3788] dump_stack+0x15/0x1b [ 1573.330216][ T3788] dump_header+0x81/0x220 [ 1573.330340][ T3788] oom_kill_process+0x342/0x400 [ 1573.330386][ T3788] out_of_memory+0x979/0xb80 [ 1573.330405][ T3788] try_charge_memcg+0x5e6/0x9e0 [ 1573.330422][ T3788] obj_cgroup_charge_pages+0xa6/0x150 [ 1573.330440][ T3788] __memcg_kmem_charge_page+0x9f/0x170 [ 1573.330459][ T3788] __alloc_frozen_pages_noprof+0x188/0x360 [ 1573.330480][ T3788] alloc_pages_mpol+0xb3/0x250 [ 1573.330498][ T3788] alloc_pages_noprof+0x90/0x130 [ 1573.330539][ T3788] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 1573.330563][ T3788] __kvmalloc_node_noprof+0x30f/0x4e0 [ 1573.330593][ T3788] ? ip_set_alloc+0x1f/0x30 [ 1573.330610][ T3788] ? ip_set_alloc+0x1f/0x30 [ 1573.330626][ T3788] ? __kmalloc_cache_noprof+0x189/0x320 [ 1573.330671][ T3788] ip_set_alloc+0x1f/0x30 [ 1573.330687][ T3788] hash_netiface_create+0x282/0x740 [ 1573.330706][ T3788] ? __pfx_hash_netiface_create+0x10/0x10 [ 1573.330803][ T3788] ip_set_create+0x3cc/0x960 [ 1573.330841][ T3788] ? __nla_parse+0x40/0x60 [ 1573.330855][ T3788] nfnetlink_rcv_msg+0x4c3/0x590 [ 1573.330957][ T3788] netlink_rcv_skb+0x123/0x220 [ 1573.330968][ T3788] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1573.331051][ T3788] nfnetlink_rcv+0x16b/0x1690 [ 1573.331143][ T3788] ? nlmon_xmit+0x4f/0x60 [ 1573.331170][ T3788] ? consume_skb+0x49/0x150 [ 1573.331183][ T3788] ? nlmon_xmit+0x4f/0x60 [ 1573.331197][ T3788] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 1573.331215][ T3788] ? __dev_queue_xmit+0x1200/0x2000 [ 1573.331237][ T3788] ? __dev_queue_xmit+0x182/0x2000 [ 1573.331259][ T3788] ? ctx_sched_in+0x34d/0x370 [ 1573.331280][ T3788] ? ref_tracker_free+0x37d/0x3e0 [ 1573.331297][ T3788] ? __netlink_deliver_tap+0x4dc/0x500 [ 1573.331399][ T3788] netlink_unicast+0x5bd/0x690 [ 1573.331418][ T3788] netlink_sendmsg+0x58b/0x6b0 [ 1573.331500][ T3788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1573.331512][ T3788] __sock_sendmsg+0x142/0x180 [ 1573.331555][ T3788] ____sys_sendmsg+0x31e/0x4e0 [ 1573.331569][ T3788] ___sys_sendmsg+0x17b/0x1d0 [ 1573.331588][ T3788] __x64_sys_sendmsg+0xd4/0x160 [ 1573.331668][ T3788] x64_sys_call+0x191e/0x2ff0 [ 1573.331680][ T3788] do_syscall_64+0xd2/0x200 [ 1573.331695][ T3788] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1573.331709][ T3788] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1573.331794][ T3788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.331807][ T3788] RIP: 0033:0x7fa56e80ebe9 [ 1573.331816][ T3788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1573.331856][ T3788] RSP: 002b:00007fa56d277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1573.331868][ T3788] RAX: ffffffffffffffda RBX: 00007fa56ea35fa0 RCX: 00007fa56e80ebe9 [ 1573.331911][ T3788] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 1573.331991][ T3788] RBP: 00007fa56e891e19 R08: 0000000000000000 R09: 0000000000000000 [ 1573.331998][ T3788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1573.332005][ T3788] R13: 00007fa56ea36038 R14: 00007fa56ea35fa0 R15: 00007ffd488d5478 [ 1573.332023][ T3788] [ 1573.332027][ T3788] memory: usage 307200kB, limit 307200kB, failcnt 390 [ 1573.565206][ T3833] siw: device registration error -23 [ 1573.569083][ T3788] memory+swap: usage 307552kB, limit 9007199254740988kB, failcnt 0 [ 1573.569100][ T3788] kmem: usage 307056kB, limit 9007199254740988kB, failcnt 0 [ 1573.569113][ T3788] Memory cgroup stats for [ 1573.576008][ T29] kauditd_printk_skb: 521 callbacks suppressed [ 1573.576022][ T29] audit: type=1326 audit(3862.325:65287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.1.22166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa462eebe9 code=0x7ffc0000 [ 1573.578286][ T3788] /syz7 [ 1573.584405][ T29] audit: type=1326 audit(3862.325:65288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.1.22166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa462eebe9 code=0x7ffc0000 [ 1573.590058][ T3788] : [ 1573.594611][ T3788] cache 0 [ 1573.596014][ T29] audit: type=1326 audit(3862.325:65289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.1.22166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa462eebe9 code=0x7ffc0000 [ 1573.600425][ T3788] rss 0 [ 1573.620114][ T29] audit: type=1326 audit(3862.325:65290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.1.22166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ffa462eebe9 code=0x7ffc0000 [ 1573.628411][ T3788] shmem 0 [ 1573.636392][ T29] audit: type=1326 audit(3862.325:65291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.1.22166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa462eebe9 code=0x7ffc0000 [ 1573.644341][ T3788] mapped_file 0 [ 1573.644349][ T3788] dirty 0 [ 1573.644355][ T3788] writeback 8192 [ 1573.644361][ T3788] workingset_refault_anon 4562 [ 1573.644369][ T3788] workingset_refault_file 0 [ 1573.644376][ T3788] swap 360448 [ 1573.644383][ T3788] swapcached 16384 [ 1573.644390][ T3788] pgpgin 682495 [ 1573.644411][ T3788] pgpgout 682464 [ 1573.652376][ T29] audit: type=1326 audit(3862.325:65292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.1.22166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa462eebe9 code=0x7ffc0000 [ 1573.660328][ T3788] pgfault 645746 [ 1573.668308][ T29] audit: type=1326 audit(3862.325:65293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.1.22166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa462eebe9 code=0x7ffc0000 [ 1573.671308][ T3788] pgmajfault 662 [ 1573.678052][ T29] audit: type=1326 audit(3862.325:65294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.1.22166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7ffa462eebe9 code=0x7ffc0000 [ 1573.683350][ T3788] inactive_anon 0 [ 1573.691248][ T29] audit: type=1326 audit(3862.325:65295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.1.22166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa462eebe9 code=0x7ffc0000 [ 1573.698495][ T3788] active_anon 16384 [ 1573.702920][ T29] audit: type=1326 audit(3862.325:65296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.1.22166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffa462eebe9 code=0x7ffc0000 [ 1573.709046][ T3788] inactive_file 0 [ 1573.709055][ T3788] active_file 110592 [ 1573.839755][ T3838] netlink: 'syz.0.22168': attribute type 4 has an invalid length. [ 1573.842905][ T3788] unevictable 0 [ 1573.851847][ T3838] netlink: 'syz.0.22168': attribute type 4 has an invalid length. [ 1573.854140][ T3788] hierarchical_memory_limit 314572800 [ 1573.854151][ T3788] hierarchical_memsw_limit 9223372036854771712 [ 1573.854160][ T3788] total_cache 0 [ 1574.043735][ T3788] total_rss 0 [ 1574.043748][ T3788] total_shmem 0 [ 1574.043799][ T3788] total_mapped_file 0 [ 1574.043807][ T3788] total_dirty 0 [ 1574.043814][ T3788] total_writeback 8192 [ 1574.043823][ T3788] total_workingset_refault_anon 4562 [ 1574.043832][ T3788] total_workingset_refault_file 0 [ 1574.043841][ T3788] total_swap 360448 [ 1574.043848][ T3788] total_swapcached 16384 [ 1574.043855][ T3788] total_pgpgin 682495 [ 1574.043910][ T3788] total_pgpgout 682464 [ 1574.043917][ T3788] total_pgfault 645746 [ 1574.043924][ T3788] total_pgmajfault 662 [ 1574.043932][ T3788] total_inactive_anon 0 [ 1574.043941][ T3788] total_active_anon 16384 [ 1574.043949][ T3788] total_inactive_file 0 [ 1574.043958][ T3788] total_active_file 110592 [ 1574.044005][ T3788] total_unevictable 0 [ 1574.044013][ T3788] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.22147,pid=3786,uid=0 [ 1574.044079][ T3788] Memory cgroup out of memory: Killed process 3786 (syz.7.22147) total-vm:93764kB, anon-rss:940kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1574.163033][ T3845] netlink: 'syz.8.22170': attribute type 4 has an invalid length. [ 1574.170272][ T3845] netlink: 'syz.8.22170': attribute type 4 has an invalid length. [ 1574.323250][ T3853] loop7: detected capacity change from 0 to 164 [ 1574.338628][ T3853] netlink: 'syz.7.22174': attribute type 4 has an invalid length. [ 1574.360655][ T792] lo speed is unknown, defaulting to 1000 [ 1574.366474][ T792] syz0: Port: 1 Link DOWN [ 1574.372177][ T3861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22178'. [ 1574.375788][ T3853] netlink: 'syz.7.22174': attribute type 4 has an invalid length. [ 1574.391661][ T792] lo speed is unknown, defaulting to 1000 [ 1574.397412][ T792] syz0: Port: 1 Link ACTIVE [ 1574.428307][ T3865] netlink: 'syz.0.22179': attribute type 4 has an invalid length. [ 1574.443740][ T3865] netlink: 'syz.0.22179': attribute type 4 has an invalid length. [ 1574.454276][ T3867] netlink: 12 bytes leftover after parsing attributes in process `syz.7.22180'. [ 1574.505296][ T3869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22181'. [ 1574.616144][ T3883] pim6reg1: entered promiscuous mode [ 1574.659939][ T3892] netlink: 'syz.0.22191': attribute type 4 has an invalid length. [ 1574.671367][ T3892] netlink: 'syz.0.22191': attribute type 4 has an invalid length. [ 1574.849661][ T3916] team0 (unregistering): Port device team_slave_0 removed [ 1574.859189][ T3916] team0 (unregistering): Port device team_slave_1 removed [ 1574.896413][ T3920] siw: device registration error -23 [ 1574.977866][ T3922] pim6reg1: entered promiscuous mode [ 1575.034645][ T3928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22208'. [ 1575.154363][ T3941] loop9: detected capacity change from 0 to 164 [ 1575.159321][ T3924] FAULT_INJECTION: forcing a failure. [ 1575.159321][ T3924] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.173408][ T3924] CPU: 0 UID: 0 PID: 3924 Comm: syz.8.22206 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 1575.173514][ T3924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1575.173526][ T3924] Call Trace: [ 1575.173532][ T3924] [ 1575.173539][ T3924] __dump_stack+0x1d/0x30 [ 1575.173560][ T3924] dump_stack_lvl+0xe8/0x140 [ 1575.173580][ T3924] dump_stack+0x15/0x1b [ 1575.173596][ T3924] should_fail_ex+0x265/0x280 [ 1575.173629][ T3924] should_failslab+0x8c/0xb0 [ 1575.173652][ T3924] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1575.173687][ T3924] ? __alloc_skb+0x101/0x320 [ 1575.173778][ T3924] __alloc_skb+0x101/0x320 [ 1575.173803][ T3924] ? audit_log_start+0x365/0x6c0 [ 1575.173828][ T3924] audit_log_start+0x380/0x6c0 [ 1575.173926][ T3924] audit_seccomp+0x48/0x100 [ 1575.173958][ T3924] ? __seccomp_filter+0x68c/0x10d0 [ 1575.173977][ T3924] __seccomp_filter+0x69d/0x10d0 [ 1575.174000][ T3924] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1575.174045][ T3924] ? vfs_write+0x7e8/0x960 [ 1575.174064][ T3924] ? __rcu_read_unlock+0x4f/0x70 [ 1575.174086][ T3924] ? __fget_files+0x184/0x1c0 [ 1575.174109][ T3924] __secure_computing+0x82/0x150 [ 1575.174126][ T3924] syscall_trace_enter+0xcf/0x1e0 [ 1575.174227][ T3924] do_syscall_64+0xac/0x200 [ 1575.174249][ T3924] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1575.174350][ T3924] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1575.174374][ T3924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.174392][ T3924] RIP: 0033:0x7f78c4f0ebe9 [ 1575.174451][ T3924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1575.174467][ T3924] RSP: 002b:00007f78c396f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1575.174485][ T3924] RAX: ffffffffffffffda RBX: 00007f78c5135fa0 RCX: 00007f78c4f0ebe9 [ 1575.174508][ T3924] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1575.174519][ T3924] RBP: 00007f78c396f090 R08: 0000000000000000 R09: 0000000000000000 [ 1575.174571][ T3924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1575.174581][ T3924] R13: 00007f78c5136038 R14: 00007f78c5135fa0 R15: 00007fff32e38fa8 [ 1575.174597][ T3924] [ 1575.422838][ T3950] netlink: 12 bytes leftover after parsing attributes in process `syz.7.22218'. [ 1575.435093][ T3949] loop9: detected capacity change from 0 to 164 [ 1575.442014][ T3949] iso9660: Unknown parameter '' [ 1575.455183][ T3949] siw: device registration error -23 [ 1575.464530][ T3953] team0 (unregistering): Port device team_slave_0 removed [ 1575.475114][ T3953] team0 (unregistering): Port device team_slave_1 removed [ 1575.514366][ T3942] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.532208][ T3958] loop9: detected capacity change from 0 to 1024 [ 1575.540015][ T3958] EXT4-fs: Ignoring removed bh option [ 1575.545433][ T3958] EXT4-fs: inline encryption not supported [ 1575.552164][ T3958] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1575.573302][ T3958] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1575.586743][ T3958] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.22222: lblock 2 mapped to illegal pblock 2 (length 1) [ 1575.601813][ T3942] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.612659][ T3958] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.22222: lblock 0 mapped to illegal pblock 48 (length 1) [ 1575.628269][ T3958] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.22222: Failed to acquire dquot type 0 [ 1575.641387][ T3958] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1575.651993][ T3958] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.22222: mark_inode_dirty error [ 1575.663877][ T3958] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1575.676169][ T3942] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.687470][ T3958] EXT4-fs (loop9): 1 orphan inode deleted [ 1575.693871][ T3958] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1575.706799][T16132] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:63: lblock 1 mapped to illegal pblock 1 (length 1) [ 1575.727082][T16132] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:63: Failed to release dquot type 0 [ 1575.743352][ T3942] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.754395][ T3958] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1575.773974][ T3270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.800356][ T3981] pim6reg1: entered promiscuous mode [ 1575.801418][ T3983] loop9: detected capacity change from 0 to 164 [ 1575.818440][ T3983] iso9660: Unknown parameter '' [ 1575.828474][ T3983] siw: device registration error -23 [ 1575.852629][T12583] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.874705][T12583] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.874794][T12583] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.874894][T12583] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.017657][ T4001] syzkaller1: entered promiscuous mode [ 1576.023350][ T4001] syzkaller1: entered allmulticast mode [ 1576.123264][ T4012] loop9: detected capacity change from 0 to 1024 [ 1576.147538][ T4012] EXT4-fs: Ignoring removed bh option [ 1576.158271][ T4012] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1576.210588][ T3270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1576.241336][ T4015] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.279373][ T4018] loop7: detected capacity change from 0 to 512 [ 1576.293458][ T4018] EXT4-fs: Ignoring removed orlov option [ 1576.299845][ T4018] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1576.309397][ T4018] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1576.316632][ T4018] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.22247: bg 0: block 248: padding at end of block bitmap is not set [ 1576.331891][ T4018] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.22247: Failed to acquire dquot type 1 [ 1576.332770][ T4015] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.346644][ T4018] EXT4-fs (loop7): 1 truncate cleaned up [ 1576.360040][ T4018] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1576.390116][ T2829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1576.402648][ T4015] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.449135][ T4015] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.514042][ T4038] syzkaller1: entered promiscuous mode [ 1576.519626][ T4038] syzkaller1: entered allmulticast mode [ 1576.537686][ T41] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.549785][ T41] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.564219][ T4043] loop7: detected capacity change from 0 to 1024 [ 1576.567366][ T41] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.571135][ T4043] EXT4-fs: Ignoring removed bh option [ 1576.585213][T16132] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.605104][ T4043] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1576.637262][ T2829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1576.651631][ T4049] ref_ctr_offset mismatch. inode: 0x195 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 1576.726056][ T4058] __nla_validate_parse: 4 callbacks suppressed [ 1576.726070][ T4058] netlink: 12 bytes leftover after parsing attributes in process `syz.7.22263'. [ 1576.807916][ T4062] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.853015][ T4062] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.900616][ T4062] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.957919][ T4062] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.019882][ T41] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.041303][ T41] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.068070][ T41] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.117235][ T41] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.154266][ T4087] netlink: 64066 bytes leftover after parsing attributes in process `syz.8.22275'. [ 1577.230758][ T4091] pim6reg1: entered promiscuous mode [ 1577.330790][ T4094] block device autoloading is deprecated and will be removed. [ 1577.494242][ T4102] team0 (unregistering): Port device team_slave_0 removed [ 1577.522585][ T4102] team0 (unregistering): Port device team_slave_1 removed [ 1577.690343][ T4119] team0 (unregistering): Port device team_slave_0 removed [ 1577.711451][ T4119] team0 (unregistering): Port device team_slave_1 removed [ 1577.735113][ T4121] syzkaller1: entered promiscuous mode [ 1577.740746][ T4121] syzkaller1: entered allmulticast mode [ 1577.779156][ T4124] loop7: detected capacity change from 0 to 512 [ 1577.785905][ T4124] EXT4-fs: Ignoring removed orlov option [ 1577.793788][ T4124] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1577.811771][ T4124] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1577.827502][ T4124] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.22290: bg 0: block 248: padding at end of block bitmap is not set [ 1577.854064][ T4124] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.22290: Failed to acquire dquot type 1 [ 1577.865929][ T4124] EXT4-fs (loop7): 1 truncate cleaned up [ 1577.873062][ T4124] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1577.897318][ T2829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1577.932963][ T4129] netlink: 12 bytes leftover after parsing attributes in process `syz.7.22292'. [ 1578.436316][ T4131] loop9: detected capacity change from 0 to 164 [ 1578.444003][ T29] kauditd_printk_skb: 835 callbacks suppressed [ 1578.444017][ T29] audit: type=1400 audit(3867.451:66123): avc: denied { mount } for pid=4130 comm="syz.9.22293" name="/" dev="loop9" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 1578.479624][ T29] audit: type=1400 audit(3867.493:66124): avc: denied { unmount } for pid=3270 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 1578.677781][ T29] audit: type=1400 audit(3867.693:66125): avc: denied { create } for pid=4137 comm="syz.9.22296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1578.698951][ T29] audit: type=1326 audit(3867.704:66126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4137 comm="syz.9.22296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ececeebe9 code=0x7ffc0000 [ 1578.722186][ T29] audit: type=1326 audit(3867.704:66127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4137 comm="syz.9.22296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ececeebe9 code=0x7ffc0000 [ 1578.745408][ T29] audit: type=1326 audit(3867.704:66128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4137 comm="syz.9.22296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ececeebe9 code=0x7ffc0000 [ 1578.768689][ T29] audit: type=1326 audit(3867.704:66129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4137 comm="syz.9.22296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ececeebe9 code=0x7ffc0000 [ 1578.791730][ T29] audit: type=1326 audit(3867.704:66130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4137 comm="syz.9.22296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ececeebe9 code=0x7ffc0000 [ 1578.814766][ T29] audit: type=1326 audit(3867.704:66131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4137 comm="syz.9.22296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ececeebe9 code=0x7ffc0000 [ 1578.837827][ T29] audit: type=1326 audit(3867.704:66132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4137 comm="syz.9.22296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ececeebe9 code=0x7ffc0000 [ 1578.880949][ T4139] pim6reg1: entered promiscuous mode [ 1578.990542][ T4151] loop7: detected capacity change from 0 to 512 [ 1579.004589][ T4151] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1579.012668][ T4151] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1579.023106][ T4151] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.22301: corrupted inode contents [ 1579.026657][ T4159] loop9: detected capacity change from 0 to 164 [ 1579.035687][ T4151] EXT4-fs (loop7): Remounting filesystem read-only [ 1579.048058][ T4151] EXT4-fs (loop7): 1 truncate cleaned up [ 1579.051199][ T4159] validate_nla: 12 callbacks suppressed [ 1579.051212][ T4159] netlink: 'syz.9.22304': attribute type 4 has an invalid length. [ 1579.067373][ T41] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1579.070740][ T4159] netlink: 'syz.9.22304': attribute type 4 has an invalid length. [ 1579.078066][ T41] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1579.097078][ T41] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 1579.108517][ T4151] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1579.124474][ T4161] loop9: detected capacity change from 0 to 512 [ 1579.137100][ T4161] EXT4-fs (loop9): too many log groups per flexible block group [ 1579.144884][ T4161] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 1579.151755][ T4161] EXT4-fs (loop9): mount failed [ 1579.157965][ T2829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1579.217713][ T4173] loop7: detected capacity change from 0 to 512 [ 1579.232394][ T4173] EXT4-fs (loop7): too many log groups per flexible block group [ 1579.240169][ T4173] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 1579.247406][ T4173] EXT4-fs (loop7): mount failed [ 1579.279956][ T4178] loop7: detected capacity change from 0 to 1024 [ 1579.286576][ T4178] EXT4-fs: Ignoring removed bh option [ 1579.292746][ T4178] EXT4-fs: inline encryption not supported [ 1579.302661][ T4178] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1579.332087][ T4178] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1579.347679][ T4178] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.22311: lblock 2 mapped to illegal pblock 2 (length 1) [ 1579.363959][ T4178] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.22311: lblock 0 mapped to illegal pblock 48 (length 1) [ 1579.378879][ T4178] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.22311: Failed to acquire dquot type 0 [ 1579.392835][ T4178] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1579.405892][ T4178] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.22311: mark_inode_dirty error [ 1579.417326][ T4178] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1579.427575][ T4178] EXT4-fs (loop7): 1 orphan inode deleted [ 1579.434003][ T4178] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1579.446474][ T41] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 1579.462162][ T41] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 1579.477251][ T4178] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1579.496321][ T2829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1579.590826][ T4190] loop7: detected capacity change from 0 to 512 [ 1579.598163][ T4190] EXT4-fs: Ignoring removed orlov option [ 1579.604327][ T4190] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1579.616000][ T4190] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1579.629906][ T4190] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.22315: bg 0: block 248: padding at end of block bitmap is not set [ 1579.653131][ T4190] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.22315: Failed to acquire dquot type 1 [ 1579.670502][ T4190] EXT4-fs (loop7): 1 truncate cleaned up [ 1579.690113][ T4190] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1579.726882][ T2829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1580.199682][ T4211] netlink: 'syz.0.22323': attribute type 4 has an invalid length. [ 1580.328858][ T4217] pim6reg1: entered promiscuous mode [ 1580.429583][ T4232] netlink: 'syz.1.22332': attribute type 4 has an invalid length. [ 1580.466234][ T4232] netlink: 'syz.1.22332': attribute type 4 has an invalid length. [ 1580.659151][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22342'. [ 1580.703910][ T4259] netlink: 'syz.9.22345': attribute type 12 has an invalid length. [ 1580.767381][ T4267] netlink: 'syz.0.22347': attribute type 4 has an invalid length. [ 1580.787454][ T4267] netlink: 'syz.0.22347': attribute type 4 has an invalid length. [ 1580.940423][ T4289] FAULT_INJECTION: forcing a failure. [ 1580.940423][ T4289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1580.953571][ T4289] CPU: 1 UID: 0 PID: 4289 Comm: syz.9.22359 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 1580.953601][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1580.953611][ T4289] Call Trace: [ 1580.953617][ T4289] [ 1580.953624][ T4289] __dump_stack+0x1d/0x30 [ 1580.953643][ T4289] dump_stack_lvl+0xe8/0x140 [ 1580.953713][ T4289] dump_stack+0x15/0x1b [ 1580.953727][ T4289] should_fail_ex+0x265/0x280 [ 1580.953744][ T4289] should_fail+0xb/0x20 [ 1580.953759][ T4289] should_fail_usercopy+0x1a/0x20 [ 1580.953777][ T4289] _copy_from_user+0x1c/0xb0 [ 1580.953833][ T4289] ___sys_sendmsg+0xc1/0x1d0 [ 1580.953948][ T4289] __x64_sys_sendmsg+0xd4/0x160 [ 1580.953973][ T4289] x64_sys_call+0x191e/0x2ff0 [ 1580.953994][ T4289] do_syscall_64+0xd2/0x200 [ 1580.954032][ T4289] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1580.954051][ T4289] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1580.954071][ T4289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.954089][ T4289] RIP: 0033:0x7f5ececeebe9 [ 1580.954103][ T4289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1580.954164][ T4289] RSP: 002b:00007f5ecd74f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1580.954185][ T4289] RAX: ffffffffffffffda RBX: 00007f5ecef15fa0 RCX: 00007f5ececeebe9 [ 1580.954198][ T4289] RDX: 0000000020004440 RSI: 0000200000000400 RDI: 0000000000000003 [ 1580.954269][ T4289] RBP: 00007f5ecd74f090 R08: 0000000000000000 R09: 0000000000000000 [ 1580.954280][ T4289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1580.954364][ T4289] R13: 00007f5ecef16038 R14: 00007f5ecef15fa0 R15: 00007ffec8d68a28 [ 1580.954382][ T4289] [ 1581.174542][ T4297] netlink: 148 bytes leftover after parsing attributes in process `syz.1.22362'. [ 1581.224846][ T4301] netlink: 'syz.7.22363': attribute type 4 has an invalid length. [ 1581.251547][ T3397] lo speed is unknown, defaulting to 1000 [ 1581.257316][ T3397] syz0: Port: 1 Link DOWN [ 1581.269487][ T4301] netlink: 'syz.7.22363': attribute type 4 has an invalid length. [ 1581.290619][ T3397] lo speed is unknown, defaulting to 1000 [ 1581.296371][ T3397] syz0: Port: 1 Link ACTIVE [ 1581.513358][ T4348] netlink: 180 bytes leftover after parsing attributes in process `syz.1.22387'. [ 1581.533761][ T4348] netlink: 180 bytes leftover after parsing attributes in process `syz.1.22387'. [ 1581.583963][ T4362] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1581.590501][ T4362] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1581.598131][ T4362] vhci_hcd vhci_hcd.0: Device attached [ 1581.771224][ T4366] vhci_hcd: connection closed [ 1581.771687][T22641] vhci_hcd: stop threads [ 1581.780852][T22641] vhci_hcd: release socket [ 1581.785359][T22641] vhci_hcd: disconnect device [ 1581.806760][ T4405] FAULT_INJECTION: forcing a failure. [ 1581.806760][ T4405] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.819433][ T4405] CPU: 1 UID: 0 PID: 4405 Comm: syz.1.22410 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 1581.819463][ T4405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1581.819474][ T4405] Call Trace: [ 1581.819480][ T4405] [ 1581.819488][ T4405] __dump_stack+0x1d/0x30 [ 1581.819554][ T4405] dump_stack_lvl+0xe8/0x140 [ 1581.819574][ T4405] dump_stack+0x15/0x1b [ 1581.819591][ T4405] should_fail_ex+0x265/0x280 [ 1581.819614][ T4405] should_failslab+0x8c/0xb0 [ 1581.819695][ T4405] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1581.819724][ T4405] ? __alloc_skb+0x101/0x320 [ 1581.819756][ T4405] __alloc_skb+0x101/0x320 [ 1581.819800][ T4405] netlink_dump+0x10d/0x8a0 [ 1581.819826][ T4405] netlink_recvmsg+0x420/0x550 [ 1581.819870][ T4405] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1581.819891][ T4405] sock_recvmsg+0x139/0x170 [ 1581.819917][ T4405] ____sys_recvmsg+0xf5/0x280 [ 1581.819986][ T4405] ___sys_recvmsg+0x11f/0x370 [ 1581.820015][ T4405] do_recvmmsg+0x1ef/0x540 [ 1581.820063][ T4405] ? get_timespec64+0xc9/0x100 [ 1581.820083][ T4405] __x64_sys_recvmmsg+0xfb/0x170 [ 1581.820106][ T4405] x64_sys_call+0x27a6/0x2ff0 [ 1581.820211][ T4405] do_syscall_64+0xd2/0x200 [ 1581.820236][ T4405] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1581.820313][ T4405] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1581.820336][ T4405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.820354][ T4405] RIP: 0033:0x7ffa462eebe9 [ 1581.820368][ T4405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1581.820443][ T4405] RSP: 002b:00007ffa44d4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1581.820496][ T4405] RAX: ffffffffffffffda RBX: 00007ffa46515fa0 RCX: 00007ffa462eebe9 [ 1581.820580][ T4405] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1581.820591][ T4405] RBP: 00007ffa44d4f090 R08: 0000200000003700 R09: 0000000000000000 [ 1581.820602][ T4405] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 1581.820616][ T4405] R13: 00007ffa46516038 R14: 00007ffa46515fa0 R15: 00007fffcfa39708 [ 1581.820695][ T4405] [ 1581.854461][ T4412] FAULT_INJECTION: forcing a failure. [ 1581.854461][ T4412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1582.032858][ T4429] FAULT_INJECTION: forcing a failure. [ 1582.032858][ T4429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1582.033409][ T4412] CPU: 0 UID: 0 PID: 4412 Comm: syz.8.22414 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 1582.033511][ T4412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1582.033523][ T4412] Call Trace: [ 1582.033531][ T4412] [ 1582.033539][ T4412] __dump_stack+0x1d/0x30 [ 1582.033559][ T4412] dump_stack_lvl+0xe8/0x140 [ 1582.033609][ T4412] dump_stack+0x15/0x1b [ 1582.033625][ T4412] should_fail_ex+0x265/0x280 [ 1582.033646][ T4412] should_fail+0xb/0x20 [ 1582.033662][ T4412] should_fail_usercopy+0x1a/0x20 [ 1582.033721][ T4412] _copy_from_user+0x1c/0xb0 [ 1582.033746][ T4412] kstrtouint_from_user+0x69/0xf0 [ 1582.033843][ T4412] ? 0xffffffff81000000 [ 1582.033856][ T4412] ? selinux_file_permission+0x1e4/0x320 [ 1582.033942][ T4412] proc_fail_nth_write+0x50/0x160 [ 1582.033967][ T4412] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1582.033991][ T4412] vfs_write+0x266/0x960 [ 1582.034051][ T4412] ? vfs_read+0x4e6/0x770 [ 1582.034069][ T4412] ? __rcu_read_unlock+0x4f/0x70 [ 1582.034091][ T4412] ? __fget_files+0x184/0x1c0 [ 1582.034112][ T4412] ? finish_task_switch+0xad/0x2b0 [ 1582.034193][ T4412] ksys_write+0xda/0x1a0 [ 1582.034214][ T4412] __x64_sys_write+0x40/0x50 [ 1582.034235][ T4412] x64_sys_call+0x27fe/0x2ff0 [ 1582.034307][ T4412] do_syscall_64+0xd2/0x200 [ 1582.034332][ T4412] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1582.034396][ T4412] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1582.034419][ T4412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.034455][ T4412] RIP: 0033:0x7f78c4f0d69f [ 1582.034470][ T4412] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1582.034486][ T4412] RSP: 002b:00007f78c396f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1582.034505][ T4412] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f78c4f0d69f [ 1582.034519][ T4412] RDX: 0000000000000001 RSI: 00007f78c396f0a0 RDI: 0000000000000003 [ 1582.034531][ T4412] RBP: 00007f78c396f090 R08: 0000000000000000 R09: 0000000000000000 [ 1582.034581][ T4412] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1582.034593][ T4412] R13: 00007f78c5136038 R14: 00007f78c5135fa0 R15: 00007fff32e38fa8 [ 1582.034609][ T4412] [ 1582.279602][ T4429] CPU: 1 UID: 0 PID: 4429 Comm: syz.1.22422 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 1582.279688][ T4429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1582.279696][ T4429] Call Trace: [ 1582.279701][ T4429] [ 1582.279711][ T4429] __dump_stack+0x1d/0x30 [ 1582.279724][ T4429] dump_stack_lvl+0xe8/0x140 [ 1582.279771][ T4429] dump_stack+0x15/0x1b [ 1582.279780][ T4429] should_fail_ex+0x265/0x280 [ 1582.279792][ T4429] should_fail+0xb/0x20 [ 1582.279801][ T4429] should_fail_usercopy+0x1a/0x20 [ 1582.279893][ T4429] _copy_from_user+0x1c/0xb0 [ 1582.279910][ T4429] kstrtouint_from_user+0x69/0xf0 [ 1582.279922][ T4429] ? 0xffffffff81000000 [ 1582.279930][ T4429] ? selinux_file_permission+0x1e4/0x320 [ 1582.279957][ T4429] proc_fail_nth_write+0x50/0x160 [ 1582.279972][ T4429] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1582.280040][ T4429] vfs_write+0x266/0x960 [ 1582.280052][ T4429] ? vfs_read+0x4e6/0x770 [ 1582.280062][ T4429] ? __rcu_read_unlock+0x4f/0x70 [ 1582.280149][ T4429] ? __fget_files+0x184/0x1c0 [ 1582.280174][ T4429] ksys_write+0xda/0x1a0 [ 1582.280186][ T4429] __x64_sys_write+0x40/0x50 [ 1582.280238][ T4429] x64_sys_call+0x27fe/0x2ff0 [ 1582.280250][ T4429] do_syscall_64+0xd2/0x200 [ 1582.280264][ T4429] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1582.280338][ T4429] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1582.280352][ T4429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.280383][ T4429] RIP: 0033:0x7ffa462ed69f [ 1582.280392][ T4429] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1582.280402][ T4429] RSP: 002b:00007ffa44d4f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1582.280487][ T4429] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffa462ed69f [ 1582.280494][ T4429] RDX: 0000000000000001 RSI: 00007ffa44d4f0a0 RDI: 0000000000000003 [ 1582.280501][ T4429] RBP: 00007ffa44d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1582.280508][ T4429] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1582.280515][ T4429] R13: 00007ffa46516038 R14: 00007ffa46515fa0 R15: 00007fffcfa39708 [ 1582.280525][ T4429] [ 1582.677703][ T4482] FAULT_INJECTION: forcing a failure. [ 1582.677703][ T4482] name failslab, interval 1, probability 0, space 0, times 0 [ 1582.690433][ T4482] CPU: 1 UID: 0 PID: 4482 Comm: syz.1.22447 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 1582.690459][ T4482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1582.690471][ T4482] Call Trace: [ 1582.690478][ T4482] [ 1582.690486][ T4482] __dump_stack+0x1d/0x30 [ 1582.690549][ T4482] dump_stack_lvl+0xe8/0x140 [ 1582.690568][ T4482] dump_stack+0x15/0x1b [ 1582.690582][ T4482] should_fail_ex+0x265/0x280 [ 1582.690599][ T4482] should_failslab+0x8c/0xb0 [ 1582.690620][ T4482] kmem_cache_alloc_noprof+0x50/0x310 [ 1582.690721][ T4482] ? alloc_empty_file+0x76/0x200 [ 1582.690754][ T4482] alloc_empty_file+0x76/0x200 [ 1582.690780][ T4482] path_openat+0x68/0x2170 [ 1582.690824][ T4482] ? mntput+0x4b/0x80 [ 1582.690851][ T4482] ? terminate_walk+0x27f/0x2a0 [ 1582.690875][ T4482] ? path_openat+0x1bf8/0x2170 [ 1582.690890][ T4482] ? _parse_integer_limit+0x170/0x190 [ 1582.690913][ T4482] do_filp_open+0x109/0x230 [ 1582.691007][ T4482] do_open_execat+0xd8/0x260 [ 1582.691098][ T4482] alloc_bprm+0x25/0x350 [ 1582.691170][ T4482] do_execveat_common+0x12e/0x750 [ 1582.691240][ T4482] ? getname_flags+0x154/0x3b0 [ 1582.691263][ T4482] __x64_sys_execveat+0x73/0x90 [ 1582.691282][ T4482] x64_sys_call+0x1fec/0x2ff0 [ 1582.691307][ T4482] do_syscall_64+0xd2/0x200 [ 1582.691333][ T4482] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1582.691434][ T4482] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1582.691532][ T4482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.691554][ T4482] RIP: 0033:0x7ffa462eebe9 [ 1582.691571][ T4482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1582.691589][ T4482] RSP: 002b:00007ffa44d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1582.691656][ T4482] RAX: ffffffffffffffda RBX: 00007ffa46515fa0 RCX: 00007ffa462eebe9 [ 1582.691673][ T4482] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1582.691683][ T4482] RBP: 00007ffa44d4f090 R08: 0000000000001000 R09: 0000000000000000 [ 1582.691697][ T4482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1582.691710][ T4482] R13: 00007ffa46516038 R14: 00007ffa46515fa0 R15: 00007fffcfa39708 [ 1582.691729][ T4482] [ 1582.935476][ T4473] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 1582.990383][ T4499] netlink: 148 bytes leftover after parsing attributes in process `syz.9.22455'. [ 1582.997834][ T4494] pim6reg1: entered promiscuous mode [ 1583.039774][ T3417] lo speed is unknown, defaulting to 1000 [ 1583.045559][ T3417] syz0: Port: 1 Link DOWN [ 1583.058403][ T3417] lo speed is unknown, defaulting to 1000 [ 1583.064266][ T3417] syz0: Port: 1 Link ACTIVE [ 1583.163348][ T4529] lo speed is unknown, defaulting to 1000 [ 1583.180146][ T4535] netlink: 148 bytes leftover after parsing attributes in process `syz.0.22471'. [ 1583.211556][ T29] kauditd_printk_skb: 1567 callbacks suppressed [ 1583.211571][ T29] audit: type=1326 audit(4385.450:67689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.8.22472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c4f0ebe9 code=0x7ffc0000 [ 1583.241008][ T29] audit: type=1326 audit(4385.450:67690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.8.22472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f78c4f0ebe9 code=0x7ffc0000 [ 1583.273989][ T4540] FAULT_INJECTION: forcing a failure. [ 1583.273989][ T4540] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.286661][ T4540] CPU: 1 UID: 0 PID: 4540 Comm: syz.7.22473 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 1583.286711][ T4540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1583.286723][ T4540] Call Trace: [ 1583.286730][ T4540] [ 1583.286737][ T4540] __dump_stack+0x1d/0x30 [ 1583.286761][ T4540] dump_stack_lvl+0xe8/0x140 [ 1583.286839][ T4540] dump_stack+0x15/0x1b [ 1583.286856][ T4540] should_fail_ex+0x265/0x280 [ 1583.286941][ T4540] ? io_drain_req+0x67/0x350 [ 1583.286960][ T4540] should_failslab+0x8c/0xb0 [ 1583.286984][ T4540] __kmalloc_cache_noprof+0x4c/0x320 [ 1583.287014][ T4540] io_drain_req+0x67/0x350 [ 1583.287071][ T4540] ? io_queue_sqe_fallback+0x12a/0x140 [ 1583.287097][ T4540] io_queue_sqe_fallback+0x132/0x140 [ 1583.287134][ T4540] io_submit_sqes+0xc1d/0x1050 [ 1583.287202][ T4540] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 1583.287222][ T4540] ? 0xffffffff81000000 [ 1583.287236][ T4540] ? __rcu_read_unlock+0x4f/0x70 [ 1583.287258][ T4540] ? get_pid_task+0x96/0xd0 [ 1583.287348][ T4540] ? proc_fail_nth_write+0x13b/0x160 [ 1583.287371][ T4540] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1583.287393][ T4540] ? vfs_write+0x7e8/0x960 [ 1583.287424][ T4540] ? __rcu_read_unlock+0x4f/0x70 [ 1583.287496][ T4540] ? __fget_files+0x184/0x1c0 [ 1583.287519][ T4540] ? fput+0x8f/0xc0 [ 1583.287547][ T4540] __x64_sys_io_uring_enter+0x78/0x90 [ 1583.287567][ T4540] x64_sys_call+0x2de1/0x2ff0 [ 1583.287585][ T4540] do_syscall_64+0xd2/0x200 [ 1583.287697][ T4540] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1583.287721][ T4540] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1583.287743][ T4540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.287800][ T4540] RIP: 0033:0x7fa56e80ebe9 [ 1583.287815][ T4540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1583.287832][ T4540] RSP: 002b:00007fa56d277038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1583.287852][ T4540] RAX: ffffffffffffffda RBX: 00007fa56ea35fa0 RCX: 00007fa56e80ebe9 [ 1583.287866][ T4540] RDX: 000000000000e176 RSI: 0000000000001c3a RDI: 0000000000000006 [ 1583.287907][ T4540] RBP: 00007fa56d277090 R08: 0000000000000000 R09: 0000000000000000 [ 1583.287938][ T4540] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 1583.287951][ T4540] R13: 00007fa56ea36038 R14: 00007fa56ea35fa0 R15: 00007ffd488d5478 [ 1583.287970][ T4540] [ 1583.293930][ T29] audit: type=1326 audit(4385.460:67691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.8.22472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c4f0ebe9 code=0x7ffc0000 [ 1583.558152][ T29] audit: type=1326 audit(4385.460:67692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.8.22472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c4f0ebe9 code=0x7ffc0000 [ 1583.581276][ T29] audit: type=1400 audit(4385.492:67693): avc: denied { allowed } for pid=4539 comm="syz.7.22473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1583.600224][ T29] audit: type=1400 audit(4385.523:67694): avc: denied { create } for pid=4539 comm="syz.7.22473" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1583.621146][ T29] audit: type=1400 audit(4385.523:67695): avc: denied { map } for pid=4539 comm="syz.7.22473" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=291581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1583.645056][ T29] audit: type=1400 audit(4385.523:67696): avc: denied { read write } for pid=4539 comm="syz.7.22473" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=291581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1583.669597][ T29] audit: type=1326 audit(4385.544:67697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.0.22476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300d6bebe9 code=0x7ffc0000 [ 1583.692735][ T29] audit: type=1326 audit(4385.544:67698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.0.22476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f300d6bebe9 code=0x7ffc0000 [ 1583.760182][ T4555] pim6reg1: entered promiscuous mode [ 1583.914508][ T4577] netlink: 148 bytes leftover after parsing attributes in process `syz.1.22485'. [ 1583.996686][ T4583] validate_nla: 11 callbacks suppressed [ 1583.996698][ T4583] netlink: 'syz.1.22487': attribute type 4 has an invalid length. [ 1584.016180][ T4583] netlink: 'syz.1.22487': attribute type 4 has an invalid length. [ 1584.045068][ T4585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22488'. [ 1584.136293][ T4596] syzkaller1: entered promiscuous mode [ 1584.141829][ T4596] syzkaller1: entered allmulticast mode [ 1584.222452][ T4599] pim6reg1: entered promiscuous mode [ 1584.296540][ T4607] loop7: detected capacity change from 0 to 164 [ 1584.321186][ T4607] netlink: 'syz.7.22499': attribute type 4 has an invalid length. [ 1584.337318][T26031] lo speed is unknown, defaulting to 1000 [ 1584.343072][T26031] syz0: Port: 1 Link DOWN [ 1584.350465][ T4607] netlink: 'syz.7.22499': attribute type 4 has an invalid length. [ 1584.366581][T26031] lo speed is unknown, defaulting to 1000 [ 1584.372686][T26031] syz0: Port: 1 Link ACTIVE [ 1584.400168][ T4615] cgroup2: Unknown parameter 'smackfsroot' [ 1584.465057][ T4619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22502'. [ 1584.478487][ T4629] syzkaller1: entered promiscuous mode [ 1584.483980][ T4629] syzkaller1: entered allmulticast mode [ 1584.576032][ T4641] SELinux: failed to load policy [ 1584.597573][ T4643] loop7: detected capacity change from 0 to 164 [ 1584.633914][ T4643] netlink: 'syz.7.22512': attribute type 4 has an invalid length. [ 1584.658574][ T4640] pim6reg1: entered promiscuous mode [ 1584.682796][ T1035] lo speed is unknown, defaulting to 1000 [ 1584.688623][ T1035] syz0: Port: 1 Link DOWN [ 1584.694068][ T4647] netlink: 'syz.7.22512': attribute type 4 has an invalid length. [ 1584.727078][ T1035] lo speed is unknown, defaulting to 1000 [ 1584.732872][ T1035] syz0: Port: 1 Link ACTIVE [ 1584.807316][ T4646] FAULT_INJECTION: forcing a failure. [ 1584.807316][ T4646] name failslab, interval 1, probability 0, space 0, times 0 [ 1584.820033][ T4646] CPU: 1 UID: 0 PID: 4646 Comm: syz.0.22510 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 1584.820059][ T4646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1584.820123][ T4646] Call Trace: [ 1584.820131][ T4646] [ 1584.820139][ T4646] __dump_stack+0x1d/0x30 [ 1584.820158][ T4646] dump_stack_lvl+0xe8/0x140 [ 1584.820174][ T4646] dump_stack+0x15/0x1b [ 1584.820188][ T4646] should_fail_ex+0x265/0x280 [ 1584.820208][ T4646] should_failslab+0x8c/0xb0 [ 1584.820306][ T4646] __kmalloc_node_noprof+0xa9/0x410 [ 1584.820334][ T4646] ? crypto_create_tfm_node+0x5c/0x250 [ 1584.820359][ T4646] crypto_create_tfm_node+0x5c/0x250 [ 1584.820459][ T4646] ? crypto_alg_mod_lookup+0x2f9/0x490 [ 1584.820486][ T4646] crypto_alloc_tfm_node+0xdc/0x2b0 [ 1584.820530][ T4646] ? __kmalloc_node_track_caller_noprof+0x1e5/0x410 [ 1584.820558][ T4646] crypto_alloc_sync_skcipher+0x39/0xa0 [ 1584.820612][ T4646] set_secret+0xec/0x250 [ 1584.820633][ T4646] ceph_crypto_key_decode+0x104/0x170 [ 1584.820658][ T4646] ceph_key_preparse+0xbb/0x140 [ 1584.820682][ T4646] __key_create_or_update+0x288/0x750 [ 1584.820751][ T4646] ? key_validate+0xad/0xd0 [ 1584.820835][ T4646] key_create_or_update+0x42/0x60 [ 1584.820880][ T4646] __se_sys_add_key+0x296/0x350 [ 1584.820904][ T4646] __x64_sys_add_key+0x67/0x80 [ 1584.820926][ T4646] x64_sys_call+0x28c4/0x2ff0 [ 1584.820948][ T4646] do_syscall_64+0xd2/0x200 [ 1584.820972][ T4646] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1584.821102][ T4646] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1584.821124][ T4646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.821142][ T4646] RIP: 0033:0x7f300d6bebe9 [ 1584.821284][ T4646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1584.821299][ T4646] RSP: 002b:00007f300c106038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1584.821318][ T4646] RAX: ffffffffffffffda RBX: 00007f300d8e6090 RCX: 00007f300d6bebe9 [ 1584.821330][ T4646] RDX: 00002000000009c0 RSI: 0000000000000000 RDI: 0000200000000040 [ 1584.821341][ T4646] RBP: 00007f300c106090 R08: 000000003712624e R09: 0000000000000000 [ 1584.821417][ T4646] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000001 [ 1584.821428][ T4646] R13: 00007f300d8e6128 R14: 00007f300d8e6090 R15: 00007fffc02f1408 [ 1584.821443][ T4646] [ 1585.251661][ T4665] loop7: detected capacity change from 0 to 4096 [ 1585.258924][ T4665] EXT4-fs: Ignoring removed mblk_io_submit option [ 1585.265381][ T4665] EXT4-fs: test_dummy_encryption option not supported [ 1585.296465][ T4665] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.309554][ T4668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22518'. [ 1585.344892][ T4665] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.360676][ T4675] FAULT_INJECTION: forcing a failure. [ 1585.360676][ T4675] name failslab, interval 1, probability 0, space 0, times 0 [ 1585.373635][ T4675] CPU: 1 UID: 0 PID: 4675 Comm: syz.9.22520 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 1585.373677][ T4675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1585.373690][ T4675] Call Trace: [ 1585.373696][ T4675] [ 1585.373704][ T4675] __dump_stack+0x1d/0x30 [ 1585.373727][ T4675] dump_stack_lvl+0xe8/0x140 [ 1585.373748][ T4675] dump_stack+0x15/0x1b [ 1585.373826][ T4675] should_fail_ex+0x265/0x280 [ 1585.373848][ T4675] should_failslab+0x8c/0xb0 [ 1585.373873][ T4675] kmem_cache_alloc_noprof+0x50/0x310 [ 1585.373901][ T4675] ? skb_clone+0x151/0x1f0 [ 1585.373921][ T4675] skb_clone+0x151/0x1f0 [ 1585.374015][ T4675] __netlink_deliver_tap+0x2c9/0x500 [ 1585.374113][ T4675] netlink_unicast+0x66b/0x690 [ 1585.374146][ T4675] netlink_sendmsg+0x58b/0x6b0 [ 1585.374222][ T4675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1585.374244][ T4675] __sock_sendmsg+0x142/0x180 [ 1585.374272][ T4675] ____sys_sendmsg+0x31e/0x4e0 [ 1585.374365][ T4675] ___sys_sendmsg+0x17b/0x1d0 [ 1585.374397][ T4675] __x64_sys_sendmsg+0xd4/0x160 [ 1585.374418][ T4675] x64_sys_call+0x191e/0x2ff0 [ 1585.374435][ T4675] do_syscall_64+0xd2/0x200 [ 1585.374523][ T4675] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1585.374547][ T4675] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1585.374572][ T4675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.374589][ T4675] RIP: 0033:0x7f5ececeebe9 [ 1585.374602][ T4675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1585.374696][ T4675] RSP: 002b:00007f5ecd74f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1585.374716][ T4675] RAX: ffffffffffffffda RBX: 00007f5ecef15fa0 RCX: 00007f5ececeebe9 [ 1585.374729][ T4675] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1585.374755][ T4675] RBP: 00007f5ecd74f090 R08: 0000000000000000 R09: 0000000000000000 [ 1585.374769][ T4675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1585.374782][ T4675] R13: 00007f5ecef16038 R14: 00007f5ecef15fa0 R15: 00007ffec8d68a28 [ 1585.374802][ T4675] [ 1585.612313][ T4665] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.631688][ T4681] loop9: detected capacity change from 0 to 164 [ 1585.642962][ T4685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22525'. [ 1585.656399][ T4681] netlink: 'syz.9.22523': attribute type 4 has an invalid length. [ 1585.669631][ T4681] netlink: 'syz.9.22523': attribute type 4 has an invalid length. [ 1585.687906][ T4665] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.743442][T16132] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.754413][ T4692] netlink: 12 bytes leftover after parsing attributes in process `syz.9.22527'. [ 1585.768555][T16132] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.780819][T16132] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.804366][T16132] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.834636][ T4694] loop7: detected capacity change from 0 to 164 [ 1585.848609][ T4694] iso9660: Unknown parameter '' [ 1586.204612][ T4706] cgroup2: Unknown parameter 'smackfsroot' [ 1587.274715][ T4764] siw: device registration error -23 [ 1587.569740][ T4774] program syz.0.22556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1587.643992][ T4800] FAULT_INJECTION: forcing a failure. [ 1587.643992][ T4800] name failslab, interval 1, probability 0, space 0, times 0 [ 1587.656699][ T4800] CPU: 1 UID: 0 PID: 4800 Comm: syz.0.22565 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 1587.656800][ T4800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1587.656810][ T4800] Call Trace: [ 1587.656816][ T4800] [ 1587.656823][ T4800] __dump_stack+0x1d/0x30 [ 1587.656860][ T4800] dump_stack_lvl+0xe8/0x140 [ 1587.656880][ T4800] dump_stack+0x15/0x1b [ 1587.656898][ T4800] should_fail_ex+0x265/0x280 [ 1587.656927][ T4800] should_failslab+0x8c/0xb0 [ 1587.656953][ T4800] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 1587.656981][ T4800] ? __d_alloc+0x3d/0x340 [ 1587.657007][ T4800] __d_alloc+0x3d/0x340 [ 1587.657113][ T4800] ? mpol_shared_policy_init+0xbd/0x4c0 [ 1587.657143][ T4800] d_alloc_pseudo+0x1e/0x80 [ 1587.657170][ T4800] alloc_file_pseudo+0x71/0x160 [ 1587.657200][ T4800] __shmem_file_setup+0x1de/0x210 [ 1587.657290][ T4800] shmem_file_setup+0x3b/0x50 [ 1587.657335][ T4800] __se_sys_memfd_create+0x2c3/0x590 [ 1587.657358][ T4800] __x64_sys_memfd_create+0x31/0x40 [ 1587.657378][ T4800] x64_sys_call+0x2abe/0x2ff0 [ 1587.657469][ T4800] do_syscall_64+0xd2/0x200 [ 1587.657493][ T4800] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1587.657557][ T4800] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1587.657630][ T4800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.657649][ T4800] RIP: 0033:0x7f300d6bebe9 [ 1587.657663][ T4800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1587.657677][ T4800] RSP: 002b:00007f300c126e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1587.657694][ T4800] RAX: ffffffffffffffda RBX: 0000000000000523 RCX: 00007f300d6bebe9 [ 1587.657778][ T4800] RDX: 00007f300c126ef0 RSI: 0000000000000000 RDI: 00007f300d7427e8 [ 1587.657789][ T4800] RBP: 0000200000000a80 R08: 00007f300c126bb7 R09: 00007f300c126e40 [ 1587.657800][ T4800] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000500 [ 1587.657874][ T4800] R13: 00007f300c126ef0 R14: 00007f300c126eb0 R15: 00002000000000c0 [ 1587.657891][ T4800] [ 1587.678150][ T4802] loop7: detected capacity change from 0 to 1024 [ 1587.878056][ T4806] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.900153][ T4802] EXT4-fs: Ignoring removed bh option [ 1587.927743][ T4802] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1587.943773][ T4806] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.962841][ T2829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1588.040966][ T4813] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.055368][ T4806] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.089215][ T29] kauditd_printk_skb: 569 callbacks suppressed [ 1588.089229][ T29] audit: type=1326 audit(4390.586:68268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4812 comm="syz.8.22569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c4f0ebe9 code=0x7ffc0000 [ 1588.120636][ T4813] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.131604][ T29] audit: type=1326 audit(4390.617:68269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4812 comm="syz.8.22569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78c4f0ebe9 code=0x7ffc0000 [ 1588.154657][ T29] audit: type=1326 audit(4390.617:68270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4812 comm="syz.8.22569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c4f0ebe9 code=0x7ffc0000 [ 1588.177703][ T29] audit: type=1326 audit(4390.617:68271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4812 comm="syz.8.22569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c4f0ebe9 code=0x7ffc0000 [ 1588.230114][ T4806] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.258182][ T4813] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.302877][ T41] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.319527][ T41] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.334394][ T4813] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.351111][ T41] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.375358][ T41] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.408069][ T41] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.446711][ T41] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.463240][ T4835] lo speed is unknown, defaulting to 1000 [ 1588.469209][ T29] audit: type=1326 audit(4390.974:68272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.7.22576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56e80ebe9 code=0x7ffc0000 [ 1588.492298][ T29] audit: type=1326 audit(4390.974:68273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.7.22576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa56e80ebe9 code=0x7ffc0000 [ 1588.515415][ T29] audit: type=1326 audit(4390.974:68274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.7.22576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56e80ebe9 code=0x7ffc0000 [ 1588.538483][ T29] audit: type=1326 audit(4390.974:68275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.7.22576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56e80ebe9 code=0x7ffc0000 [ 1588.561544][ T29] audit: type=1326 audit(4390.974:68276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.7.22576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa56e80ebe9 code=0x7ffc0000 [ 1588.584611][ T29] audit: type=1326 audit(4390.974:68277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.7.22576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56e80ebe9 code=0x7ffc0000 [ 1588.607748][ T41] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.628506][ T41] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.728859][ T4857] loop7: detected capacity change from 0 to 1024 [ 1588.737016][ T4854] loop9: detected capacity change from 0 to 1024 [ 1588.745308][ T4854] EXT4-fs: Ignoring removed bh option [ 1588.755183][ T4857] EXT4-fs: Ignoring removed bh option [ 1588.788643][ T4854] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1588.806600][ T4857] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1588.874760][ T3270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1588.915782][ T2829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1589.040131][ T4888] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22594'. [ 1589.098795][ T4896] loop7: detected capacity change from 0 to 1024 [ 1589.113844][ T4896] EXT4-fs: Ignoring removed bh option [ 1589.120194][ T4896] EXT4-fs: inline encryption not supported [ 1589.136424][ T4896] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1589.158303][ T4896] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1589.177225][ T4896] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.22596: lblock 2 mapped to illegal pblock 2 (length 1) [ 1589.193190][ T4903] loop9: detected capacity change from 0 to 512 [ 1589.213341][ T4896] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.22596: lblock 0 mapped to illegal pblock 48 (length 1) [ 1589.234783][ T4903] EXT4-fs (loop9): too many log groups per flexible block group [ 1589.242539][ T4903] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 1589.253810][ T4896] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.22596: Failed to acquire dquot type 0 [ 1589.265455][ T4903] EXT4-fs (loop9): mount failed [ 1589.286458][ T4896] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1589.313457][ T4896] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.22596: mark_inode_dirty error [ 1589.336764][ T4896] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1589.351987][ T4896] EXT4-fs (loop7): 1 orphan inode deleted [ 1589.358175][ T4896] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1589.370106][ T4914] loop9: detected capacity change from 0 to 512 [ 1589.377237][T16115] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:47: lblock 1 mapped to illegal pblock 1 (length 1) [ 1589.386395][ T4914] EXT4-fs: Ignoring removed orlov option [ 1589.397765][ T4914] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1589.400427][T16115] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:47: Failed to release dquot type 0 [ 1589.431299][ T4914] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1589.442975][ T4914] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.22602: bg 0: block 248: padding at end of block bitmap is not set [ 1589.459014][ T4914] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.22602: Failed to acquire dquot type 1 [ 1589.464738][ T4896] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1589.471064][ T4914] EXT4-fs (loop9): 1 truncate cleaned up [ 1589.485817][ T4914] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1589.506587][ T4923] netlink: 4 bytes leftover after parsing attributes in process `syz.8.22606'. [ 1589.525130][ T4923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1589.525752][ T2829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1589.532560][ T4923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1589.549229][ T4923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1589.556659][ T4923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1589.570720][ T3270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1589.588654][ T4926] loop7: detected capacity change from 0 to 164 [ 1589.600582][ T4926] netlink: 'syz.7.22607': attribute type 4 has an invalid length. [ 1589.612759][ T2280] lo speed is unknown, defaulting to 1000 [ 1589.618526][ T2280] syz0: Port: 1 Link DOWN [ 1589.623448][ T4926] netlink: 'syz.7.22607': attribute type 4 has an invalid length. [ 1589.633464][ T2280] lo speed is unknown, defaulting to 1000 [ 1589.639444][ T2280] syz0: Port: 1 Link ACTIVE [ 1589.702479][ T4940] netlink: 'syz.1.22612': attribute type 10 has an invalid length. [ 1589.712533][ T4940] netlink: 'syz.1.22612': attribute type 10 has an invalid length. [ 1589.722349][ T4940] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1589.739970][ T4938] loop7: detected capacity change from 0 to 4096 [ 1589.747058][ T4938] EXT4-fs: Ignoring removed mblk_io_submit option [ 1589.753905][ T4938] EXT4-fs: test_dummy_encryption option not supported [ 1589.771902][ T4938] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.802728][ T4948] loop9: detected capacity change from 0 to 512 [ 1589.809760][ T4948] EXT4-fs: Ignoring removed orlov option [ 1589.815783][ T4948] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1589.825046][ T4938] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.825914][ T4948] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1589.842736][ T4948] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.22616: bg 0: block 248: padding at end of block bitmap is not set [ 1589.858232][ T4948] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.22616: Failed to acquire dquot type 1 [ 1589.872519][ T4948] EXT4-fs (loop9): 1 truncate cleaned up [ 1589.879795][ T4948] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1589.908271][ T3270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1589.919433][ T4938] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.941858][ T4960] loop9: detected capacity change from 0 to 164 [ 1589.957049][ T4960] netlink: 'syz.9.22621': attribute type 4 has an invalid length. [ 1589.968130][ T4960] netlink: 'syz.9.22621': attribute type 4 has an invalid length. [ 1589.982035][ T4938] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.044709][T16115] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.058843][T16115] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.078768][T16132] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.102702][T16132] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.134220][ T4967] loop9: detected capacity change from 0 to 2048 [ 1590.149673][ T4967] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1590.160549][ T4967] EXT4-fs (loop9): group descriptors corrupted! [ 1590.190489][ T4967] loop9: detected capacity change from 0 to 1024 [ 1590.200230][ T4967] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1590.210346][ T4971] loop7: detected capacity change from 0 to 512 [ 1590.217130][ T4971] EXT4-fs: Ignoring removed oldalloc option [ 1590.223423][ T4971] EXT4-fs: Ignoring removed mblk_io_submit option [ 1590.231439][ T4971] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1590.249364][ T4971] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2840c01c, mo2=0102] [ 1590.257744][ T4971] System zones: 0-2, 18-18, 34-34 [ 1590.259526][ T4967] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1590.282333][ T4971] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1590.282941][ T4971] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.22624: Failed to acquire dquot type 1 [ 1590.283620][ T4971] EXT4-fs (loop7): 1 truncate cleaned up [ 1590.284297][ T4971] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1590.321426][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a795a00: rx timeout, send abort [ 1590.334301][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a794e00: rx timeout, send abort [ 1590.342630][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a795a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1590.356930][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a794e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1590.508791][ T4981] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz.7.22624: deleted inode referenced: 12 [ 1590.571841][ T3270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1590.609681][ T4971] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz.7.22624: deleted inode referenced: 12 [ 1590.643599][ T2829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1590.726504][ T4996] netlink: 12 bytes leftover after parsing attributes in process `syz.7.22631'. [ 1590.801860][ T5000] netlink: 'syz.1.22633': attribute type 4 has an invalid length. [ 1590.812442][ T5000] netlink: 'syz.1.22633': attribute type 4 has an invalid length. [ 1591.007474][ T5012] FAULT_INJECTION: forcing a failure. [ 1591.007474][ T5012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1591.020773][ T5012] CPU: 0 UID: 0 PID: 5012 Comm: syz.0.22638 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 1591.020801][ T5012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1591.020863][ T5012] Call Trace: [ 1591.020868][ T5012] [ 1591.020872][ T5012] __dump_stack+0x1d/0x30 [ 1591.020886][ T5012] dump_stack_lvl+0xe8/0x140 [ 1591.020897][ T5012] dump_stack+0x15/0x1b [ 1591.020913][ T5012] should_fail_ex+0x265/0x280 [ 1591.020925][ T5012] should_fail+0xb/0x20 [ 1591.020935][ T5012] should_fail_usercopy+0x1a/0x20 [ 1591.020947][ T5012] _copy_from_user+0x1c/0xb0 [ 1591.020992][ T5012] __sys_bpf+0x178/0x7b0 [ 1591.021010][ T5012] __x64_sys_bpf+0x41/0x50 [ 1591.021023][ T5012] x64_sys_call+0x2aea/0x2ff0 [ 1591.021056][ T5012] do_syscall_64+0xd2/0x200 [ 1591.021154][ T5012] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1591.021174][ T5012] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1591.021197][ T5012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.021218][ T5012] RIP: 0033:0x7f300d6bebe9 [ 1591.021296][ T5012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1591.021310][ T5012] RSP: 002b:00007f300c127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1591.021328][ T5012] RAX: ffffffffffffffda RBX: 00007f300d8e5fa0 RCX: 00007f300d6bebe9 [ 1591.021341][ T5012] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1591.021424][ T5012] RBP: 00007f300c127090 R08: 0000000000000000 R09: 0000000000000000 [ 1591.021435][ T5012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1591.021445][ T5012] R13: 00007f300d8e6038 R14: 00007f300d8e5fa0 R15: 00007fffc02f1408 [ 1591.021462][ T5012] [ 1591.220334][ T5016] siw: device registration error -23 [ 1591.513501][ T5026] netlink: 'syz.0.22644': attribute type 4 has an invalid length. [ 1591.525124][ T5026] netlink: 'syz.0.22644': attribute type 4 has an invalid length. [ 1591.568141][ T5028] pim6reg1: entered promiscuous mode [ 1591.597452][ T5032] loop9: detected capacity change from 0 to 512 [ 1591.621073][ T5032] EXT4-fs (loop9): too many log groups per flexible block group [ 1591.628991][ T5032] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 1591.636224][ T5032] EXT4-fs (loop9): mount failed [ 1591.677514][ T5042] siw: device registration error -23 [ 1591.734772][ T5059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22656'. [ 1591.749213][ T5056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22655'. [ 1591.759133][ T5056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22655'. [ 1591.828075][ T5068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22659'. [ 1591.916090][ T5077] netlink: 4 bytes leftover after parsing attributes in process `syz.9.22663'. [ 1591.925360][ T5077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1591.932801][ T5077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1591.940637][ T5077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1591.948031][ T5077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1592.115506][ T5082] loop9: detected capacity change from 0 to 164 [ 1592.122821][ T5082] iso9660: Unknown parameter '' [ 1592.129800][ T5082] siw: device registration error -23 [ 1592.177546][ T5086] netlink: 12 bytes leftover after parsing attributes in process `syz.8.22667'. [ 1592.193714][ T5089] loop9: detected capacity change from 0 to 164 [ 1592.231683][ T5091] loop9: detected capacity change from 0 to 512 [ 1592.239425][ T5091] EXT4-fs: Ignoring removed orlov option [ 1592.245564][ T5091] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1592.255911][ T5091] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1592.262916][ T5091] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.22669: bg 0: block 248: padding at end of block bitmap is not set [ 1592.278133][ T5091] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.22669: Failed to acquire dquot type 1 [ 1592.290177][ T5091] EXT4-fs (loop9): 1 truncate cleaned up [ 1592.297539][ T5091] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1592.319217][ T3270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1592.364209][ T5098] loop9: detected capacity change from 0 to 512 [ 1592.371648][ T5098] EXT4-fs: Ignoring removed orlov option [ 1592.377666][ T5098] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1592.387837][ T5098] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1592.396869][ T5098] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.22672: corrupted in-inode xattr: e_value size too large [ 1592.411673][ T5098] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.22672: couldn't read orphan inode 15 (err -117) [ 1592.424240][ T5098] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1592.492621][ T5101] netlink: 76 bytes leftover after parsing attributes in process `syz.9.22672'. [ 1592.778171][ T5116] siw: device registration error -23 [ 1592.876246][ T29] kauditd_printk_skb: 976 callbacks suppressed [ 1592.876258][ T29] audit: type=1326 audit(4395.616:69241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.22679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300d6bebe9 code=0x7ffc0000 [ 1592.907183][ T29] audit: type=1326 audit(4395.616:69242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.22679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300d6bebe9 code=0x7ffc0000 [ 1592.930555][ T29] audit: type=1326 audit(4395.648:69243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.22679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f300d6bebe9 code=0x7ffc0000 [ 1592.953757][ T29] audit: type=1326 audit(4395.648:69244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.22679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300d6bebe9 code=0x7ffc0000 [ 1592.976802][ T29] audit: type=1326 audit(4395.648:69245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.22679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300d6bebe9 code=0x7ffc0000 [ 1593.009914][ T5121] IPVS: Error connecting to the multicast addr [ 1593.025896][ T29] audit: type=1326 audit(4395.669:69246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.22679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f300d6bebe9 code=0x7ffc0000 [ 1593.049091][ T29] audit: type=1326 audit(4395.669:69247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.22679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300d6bebe9 code=0x7ffc0000 [ 1593.072502][ T29] audit: type=1326 audit(4395.669:69248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.22679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300d6bebe9 code=0x7ffc0000 [ 1593.095611][ T29] audit: type=1326 audit(4395.753:69249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.22679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f300d6c0b07 code=0x7ffc0000 [ 1593.118648][ T29] audit: type=1326 audit(4395.753:69250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.0.22679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f300d6c0a7c code=0x7ffc0000 [ 1593.166511][ T3270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1593.224665][ T5127] loop9: detected capacity change from 0 to 512 [ 1593.247676][ T5127] EXT4-fs: Ignoring removed orlov option [ 1593.266991][ T5127] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1593.302932][ T5127] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1593.313558][ T5127] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.22681: bg 0: block 248: padding at end of block bitmap is not set [ 1593.348324][ T5127] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.22681: Failed to acquire dquot type 1 [ 1593.380002][ T5127] EXT4-fs (loop9): 1 truncate cleaned up [ 1593.386567][ T5136] bond0: (slave dummy0): Releasing backup interface [ 1593.386578][ T5127] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1593.415837][ T5136] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1593.425028][ T3270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1593.467272][ T5144] wg1: entered promiscuous mode [ 1593.472154][ T5144] wg1: entered allmulticast mode [ 1593.665553][ T5161] loop9: detected capacity change from 0 to 512 [ 1593.672172][ T5161] ext4: Unknown parameter 'euid<00000000000000060928' [ 1593.683192][ T5163] siw: device registration error -23 [ 1593.746153][ T5172] loop7: detected capacity change from 0 to 1024 [ 1593.753132][ T5172] EXT4-fs: Ignoring removed bh option [ 1593.758614][ T5172] EXT4-fs: inline encryption not supported [ 1593.764814][ T5172] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1593.776644][ T5172] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1593.785547][ T5172] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.22696: lblock 2 mapped to illegal pblock 2 (length 1) [ 1593.799799][ T5172] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.22696: lblock 0 mapped to illegal pblock 48 (length 1) [ 1593.814145][ T5179] __nla_validate_parse: 6 callbacks suppressed [ 1593.814132][ T5172] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.22696: Failed to acquire dquot type 0 [ 1593.814231][ T5179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22697'. [ 1593.840815][ T5179] vxlan0: entered promiscuous mode [ 1593.846366][T16132] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.852663][ T5172] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1593.855780][T16132] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.864175][ T5172] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.22696: mark_inode_dirty error [ 1593.873152][T16132] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.884462][ T5172] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1593.901964][T16132] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.902615][ T5172] EXT4-fs (loop7): 1 orphan inode deleted [ 1593.917197][T16115] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:47: lblock 1 mapped to illegal pblock 1 (length 1) [ 1593.917512][ T5172] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1593.944426][T16115] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:47: Failed to release dquot type 0 [ 1593.969141][ T5181] netlink: 16 bytes leftover after parsing attributes in process `syz.9.22700'. [ 1593.982887][ T5172] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1593.998713][ T5181] bridge0: entered promiscuous mode [ 1594.011391][ T2829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1594.027600][ T5181] bridge0: port 3(macvlan2) entered blocking state [ 1594.034259][ T5181] bridge0: port 3(macvlan2) entered disabled state [ 1594.041239][ T5181] macvlan2: entered allmulticast mode [ 1594.046724][ T5181] bridge0: entered allmulticast mode [ 1594.052574][ T5181] macvlan2: left allmulticast mode [ 1594.057822][ T5181] bridge0: left allmulticast mode [ 1594.063459][ T5181] bridge0: left promiscuous mode [ 1594.136661][ T5198] loop7: detected capacity change from 0 to 512 [ 1594.144282][ T5198] journal_path: Lookup failure for './file0/../file0' [ 1594.151128][ T5198] EXT4-fs: error: could not find journal device path [ 1594.174665][ T5202] pim6reg1: entered promiscuous mode [ 1594.194265][ T5205] siw: device registration error -23 [ 1594.205892][ T5207] syzkaller1: entered promiscuous mode [ 1594.214206][ T5207] syzkaller1: entered allmulticast mode [ 1594.273182][ T5215] loop7: detected capacity change from 0 to 164 [ 1594.287133][ T792] lo speed is unknown, defaulting to 1000 [ 1594.293041][ T792] syz0: Port: 1 Link DOWN [ 1594.300745][ T792] lo speed is unknown, defaulting to 1000 [ 1594.306722][ T792] syz0: Port: 1 Link ACTIVE [ 1594.365041][ T5224] lo speed is unknown, defaulting to 1000 [ 1594.377806][ T5211] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.378040][ T5226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22718'. [ 1594.430086][ T5230] netlink: 12 bytes leftover after parsing attributes in process `syz.7.22719'. [ 1594.441006][ T5211] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.485096][ T5211] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.532680][ T5211] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.589529][ T5232] pim6reg1: entered promiscuous mode [ 1594.609901][T16115] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.627018][T16115] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.651183][T16115] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.667778][T16115] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.708088][ T5237] siw: device registration error -23 [ 1594.721939][ T5239] syzkaller1: entered promiscuous mode [ 1594.722029][ T5239] syzkaller1: entered allmulticast mode [ 1594.763114][ T5241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22724'. [ 1594.779783][ T5243] loop9: detected capacity change from 0 to 512 [ 1594.799133][ T5243] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1594.816292][ T3417] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1594.823973][ T3417] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1594.831972][ T3417] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1594.839367][ T3417] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1594.846899][ T3417] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1594.854265][ T3417] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1594.861755][ T3417] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1594.869162][ T3417] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1594.876544][ T3417] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1594.883932][ T3417] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1594.893222][ T3417] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1594.945391][ T5251] validate_nla: 9 callbacks suppressed [ 1594.945405][ T5251] netlink: 'syz.1.22727': attribute type 4 has an invalid length. [ 1594.972669][ T5251] netlink: 'syz.1.22727': attribute type 4 has an invalid length. [ 1595.055804][ T3270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1595.074538][ T5258] loop9: detected capacity change from 0 to 1024 [ 1595.081291][ T5258] EXT4-fs: Ignoring removed bh option [ 1595.087049][ T5258] EXT4-fs: inline encryption not supported [ 1595.094213][ T5258] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1595.109092][ T5258] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1595.120393][ T5258] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.22730: lblock 2 mapped to illegal pblock 2 (length 1) [ 1595.135811][ T5258] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.22730: lblock 0 mapped to illegal pblock 48 (length 1) [ 1595.150456][ T5258] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.22730: Failed to acquire dquot type 0 [ 1595.162425][ T5258] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1595.175152][ T5258] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.22730: mark_inode_dirty error [ 1595.188130][ T5258] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1595.201051][ T5258] EXT4-fs (loop9): 1 orphan inode deleted [ 1595.207380][ T5258] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1595.220337][T12583] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:21: lblock 1 mapped to illegal pblock 1 (length 1) [ 1595.237677][T16132] ================================================================== [ 1595.245759][T16132] BUG: KCSAN: data-race in __stop_tty / n_tty_receive_char [ 1595.252952][T16132] [ 1595.255266][T16132] write to 0xffff88812275a5bc of 1 bytes by task 5263 on cpu 1: [ 1595.262875][T16132] __stop_tty+0x36/0x90 [ 1595.267022][T16132] n_tty_ioctl_helper+0x1e9/0x210 [ 1595.272047][T16132] n_tty_ioctl+0x101/0x200 [ 1595.276446][T16132] tty_ioctl+0x842/0xb80 [ 1595.280683][T16132] __se_sys_ioctl+0xcb/0x140 [ 1595.285268][T16132] __x64_sys_ioctl+0x43/0x50 [ 1595.289852][T16132] x64_sys_call+0x1816/0x2ff0 [ 1595.294516][T16132] do_syscall_64+0xd2/0x200 [ 1595.299008][T16132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.304885][T16132] [ 1595.307190][T16132] read to 0xffff88812275a5bc of 1 bytes by task 16132 on cpu 0: [ 1595.314799][T16132] n_tty_receive_char+0x3d/0x6a0 [ 1595.319721][T16132] n_tty_receive_buf_standard+0x473/0x2f10 [ 1595.325512][T16132] n_tty_receive_buf_common+0x805/0xbe0 [ 1595.331043][T16132] n_tty_receive_buf2+0x33/0x40 [ 1595.335878][T16132] tty_ldisc_receive_buf+0x63/0xf0 [ 1595.340980][T16132] tty_port_default_receive_buf+0x59/0x90 [ 1595.346680][T16132] flush_to_ldisc+0x148/0x340 [ 1595.351346][T16132] process_scheduled_works+0x4cb/0x9d0 [ 1595.356796][T16132] worker_thread+0x582/0x770 [ 1595.361375][T16132] kthread+0x489/0x510 [ 1595.365428][T16132] ret_from_fork+0xda/0x150 [ 1595.369913][T16132] ret_from_fork_asm+0x1a/0x30 [ 1595.374659][T16132] [ 1595.376960][T16132] value changed: 0x00 -> 0x01 [ 1595.381614][T16132] [ 1595.383916][T16132] Reported by Kernel Concurrency Sanitizer on: [ 1595.390045][T16132] CPU: 0 UID: 0 PID: 16132 Comm: kworker/u8:63 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 1595.402799][T16132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1595.412848][T16132] Workqueue: events_unbound flush_to_ldisc [ 1595.418658][T16132] ================================================================== [ 1595.434919][T12583] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:21: Failed to release dquot type 0 [ 1595.435142][ T5266] netlink: 'syz.1.22731': attribute type 23 has an invalid length. [ 1595.460141][ T5258] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1595.494809][ T3270] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1595.517269][ T5265] pim6reg1: entered promiscuous mode