last executing test programs: 6m12.970636022s ago: executing program 4 (id=339): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu~20\t&&') 6m12.931773243s ago: executing program 4 (id=341): creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 6m12.931254473s ago: executing program 4 (id=342): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffefffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$inet6(0xa, 0x6, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x401}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$can_bcm(r6, &(0x7f00000003c0)={0x1d, r5}, 0x10) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) r9 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r9}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r9}) 6m12.844183444s ago: executing program 4 (id=345): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000af000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}, 0x24008004) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000007e9dd6220000", @ANYRES16=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x10) setfsgid(0xee00) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r8, 0x0, 0x178}, 0x18) socket$inet_dccp(0x2, 0x6, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2200c12, &(0x7f0000001180)=ANY=[], 0x1, 0x9fb, &(0x7f0000001280)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x2) 6m12.524175939s ago: executing program 4 (id=348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, 0x0, 0x48844) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x1}, 0x18) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x400c02, 0xe, 0x4}, 0x18) mknodat$null(r3, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) utime(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a", 0x1) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7ffb, 0x2, 0x1, 0x9, 0x36}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0) 6m11.799988102s ago: executing program 4 (id=359): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240), &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x8c, &(0x7f0000000480)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xae, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) write$binfmt_script(r0, &(0x7f0000000540), 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="be", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x7fffffff, 0x0, 0x0, 0x0, 0x5338c7b1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 6m11.788388672s ago: executing program 32 (id=359): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240), &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x8c, &(0x7f0000000480)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xae, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) write$binfmt_script(r0, &(0x7f0000000540), 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="be", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x7fffffff, 0x0, 0x0, 0x0, 0x5338c7b1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 4m11.587870611s ago: executing program 3 (id=2623): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r2, 0x0, 0x5, 0x0, 0x0) socket$inet(0x2, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f0000000000)=0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000080)={0x3681, 0x8, 0x40a8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000000100000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$inet6(r9, &(0x7f0000000640)={&(0x7f0000000400)={0xa, 0x4e23, 0x3, @mcast1, 0x6}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000440)="7f35699c397ab12e1ac018db38a5c4cc21e8121080ea719ef0c7186999b7c1e6cbb959fae93cc33409b2ea42ec25dbaeaabd0bcaa23d0ee1f0e8dc78f172304395e5688130a260e72be1da7e4230957d4740fa21d8d7f40df64ad8d8bf585bafa11a637cffb78db555f4f011fa8b", 0x6e}], 0x1}, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x9}, {0xffff}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4m11.526660422s ago: executing program 3 (id=2624): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000083c0)=@newtaction={0x98, 0x30, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{0x84, 0x1, [@m_sample={0x50, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x88, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xd, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x1}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x88}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 4m11.510186192s ago: executing program 3 (id=2625): write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m11.458937913s ago: executing program 3 (id=2628): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000180)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x5}, 0x18) r8 = socket$inet_tcp(0x2, 0x1, 0x0) fremovexattr(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="62748247aa727b7b00"]) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000580)={[{@nolazytime}]}, 0xfe, 0x507, &(0x7f0000000f40)="$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") bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x74, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpeername(r8, &(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x80) open(0x0, 0x64842, 0x86) r9 = io_uring_setup(0x3eee, &(0x7f0000000600)={0x0, 0x6d33, 0x1000, 0x0, 0x303}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m11.083869229s ago: executing program 3 (id=2630): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) tkill(r0, 0x12) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=0x4) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r3, r2, 0x0, r2}, 0x10) 4m10.47744375s ago: executing program 3 (id=2638): write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m10.43106721s ago: executing program 33 (id=2638): write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 10.118029944s ago: executing program 1 (id=7776): mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) msync(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000340)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=r2, @ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002540)={{r2}, &(0x7f00000024c0), &(0x7f0000002500)}, 0x20) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0xbdb, 0x4) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100030c00000429bd70000000000005000500000000000a004e22000000e00000000000000000000000000000000000f0ffff0000000005000600000120000a004e2100000004fe8800000000000000000000000000010700000000000000"], 0x60}}, 0x0) r8 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r8, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0xffffffff, 0x0, 0x8) syz_open_dev$tty20(0xc, 0x4, 0x0) 9.963980767s ago: executing program 1 (id=7780): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0xfe62219, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000440)={0x11, 0x700, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x67}}, 0x14) timer_create(0xd, &(0x7f00000003c0)={0x0, 0x8, 0x800000000004, @thr={&(0x7f0000000580)="fbec4f734e584bf2d286e9869399efcbb849ac247e786068fd7858ef84693d911d04147ed3fb1b30ea8bd10f6b1ad335407aaf9600e949a3c973580643e25a1f2888dd12a3eb5bfb9774475beea966741d56437446d0c74ab87763809279eb21e48f8a83fc3e7503e2fc1f56404b5e09e8b93a3bab159b58e9e380202b5c9587c7eea57b4e401142735dbc08388bfbdf1277ff1f5a34c5b5f108c5f3abc919", &(0x7f0000000a40)="c077ae81bdee570c72f3739f1d861b763082562d5e00a3fe71ddde312e49dc34cc9a3f9e382e227ce0cfde4dc44698f6d36d73adff84612a121479fd9353e1b70d68d1d97fc6457787b840baa02e2ddff97f9ab95c1be21f1abae6628b10c24272f821412c70980e9aed09296a4362b53828b1c605c63cddc7ecd595cfabdee5652a6fd745d7e33947331a63fda60000000046e79bf5a845fd9b6bbf747c75874e56b6ea72fee1960690ca613ed799db9bdaad1e27342a29d00000"}}, &(0x7f0000000300)) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYRESDEC=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0) 9.406257795s ago: executing program 1 (id=7788): r0 = socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0x7c, 0x4, 0x4a, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x7800, 0x8, 0x7, 0x7}}) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0xc, &(0x7f0000000640)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRESOCT=0x0], 0x0, 0x0, 0x4f, 0x0, 0x41100, 0x0, '\x00', r1, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000032cbd850000000000fcff000000", @ANYRES32=0x0, @ANYBLOB="0802020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001100010029bd7000fedbdf2500000000", @ANYRES32=r5, @ANYBLOB="00000008000079fdf9b15a8dac068c2e8830cb4ec1c53b1786c0c0f79835c39167ab622fbaec1291abb9844af618d0b50f134c9edbfaa7be36cd33fa13e9ed1c8dca7fb7c5481e04e71b7a1cffd248f2974c74db5a3311c61bed76653a56fa8596d5079c3d41ac258d96137c954a1b78a6edb1827344cdf8813e272ca93abf889fbfa2b2eda047c45374959d128d6eba409b7198e3f9c4b1d2ebf17f189dbb556fe35b"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r8, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20004809}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/117, 0x75, 0x3e) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8.528359289s ago: executing program 1 (id=7807): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800700, &(0x7f0000000380)={[{@prjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@minixdf}, {@nomblk_io_submit}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x458, &(0x7f0000001500)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000010850000006d00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x4, &(0x7f0000000600)=[{0x7, 0x80, 0x9, 0x3}, {0xb69, 0x8, 0xfd, 0x80000000}, {0x1, 0xe, 0xc0, 0x2}, {0xd1cd, 0x9, 0x7f, 0x6373dd25}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0xb) r4 = gettid() tkill(r4, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6, 0x0, 0x6}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)=@generic={0x0, r7}, 0x18) ptrace$getregs(0xc, r5, 0x280, &(0x7f0000001400)=""/173) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000000, &(0x7f0000000200)={[{@nobarrier}, {@dioread_nolock}]}, 0x1, 0x527, &(0x7f0000019580)="$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") r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 8.367893251s ago: executing program 1 (id=7810): r0 = socket$inet_smc(0x2b, 0x1, 0x0) fchdir(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000002200)='percpu_alloc_percpu\x00', r1, 0x0, 0x80000000}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) lstat(&(0x7f0000001100)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000010c0)=@nullb, r5, &(0x7f0000002180)) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="270e00d3f1e5d3550000000000001108a6e03041789b05868487ae5270295dec627f6439e1c1540aff61a5662e8753f8a56d687c49"], 0x14}, 0x1, 0x40030000000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r9) 8.299257322s ago: executing program 1 (id=7813): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 8.270543283s ago: executing program 34 (id=7813): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 3.206043701s ago: executing program 0 (id=7917): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000018c0)=[{{&(0x7f00000002c0)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x6}}], 0x1, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = memfd_create(&(0x7f0000000f80)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee\xf2e\x14]j\xd8A\xd8%\xfc\x1f\xed\xb3~\x1aj\t', 0x2) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0xf0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) flock(r5, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='erofs_destroy_inode\x00', 0xffffffffffffffff, 0x0, 0x7060000}, 0x18) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f00000000c0)="bb5abc6b15f3", 0x0, 0x0, 0x32, 0x2, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000004000/0x4000)=nil) brk(0x200000001000) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(r9, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) 2.6739175s ago: executing program 5 (id=7931): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(r0, 0xfff, 0xc7c4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fbffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000200)='./file0\x00', 0x20) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000500)="$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") 2.252841596s ago: executing program 5 (id=7935): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r1, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) (fail_nth: 2) 2.240340226s ago: executing program 6 (id=7937): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000380)=r2}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@const={0x3, 0x0, 0x0, 0xa, 0x1}, @float={0x9, 0x0, 0x0, 0x10, 0x4}, @volatile={0x179, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x4e, 0x2e, 0x0, 0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000800)=""/33, 0x45, 0x21, 0x0, 0x0, 0x10000, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001a80)={0xffffffffffffffff, 0x20, &(0x7f0000000980)={&(0x7f00000008c0)=""/175, 0xaf, 0x0, &(0x7f0000001a00)=""/73, 0x49}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xf4cfbed519ddf383, 0xc, &(0x7f00000006c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x4, 0x6, 0x6, 0x40, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xf}], &(0x7f0000000740)='syzkaller\x00', 0x918d, 0x1000, &(0x7f0000000a00)=""/4096, 0x41100, 0x22, '\x00', 0x0, @fallback=0x22, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x1, 0x0, 0x2, 0x2}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000001ac0)=[r5, r5, r3], 0x0, 0x10, 0xe5c, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000054070000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ifreq(r11, 0x8946, &(0x7f00000004c0)={'vcan0\x00', @ifru_map={0x1, 0x6, 0xf000, 0xc, 0x80, 0x7f}}) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r13, r14, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r13}, &(0x7f00000006c0), &(0x7f0000000700)=r12}, 0x20) sendmsg$inet(r11, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.927639631s ago: executing program 5 (id=7940): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x1a, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000680)='mountinfo\x00') lseek(r4, 0x10001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='erofs_readpages\x00', r2, 0x0, 0x9}, 0x18) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000340)={{0x1ff, 0x6e51}, 0x100, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='cq_process\x00', 0xffffffffffffffff, 0x0, 0x400007}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r4) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r5, 0x300, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x240400c5) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000100)=0x2b00, 0x4) chdir(&(0x7f0000000140)='./file0\x00') socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) 1.927197321s ago: executing program 6 (id=7941): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) truncate(&(0x7f00000001c0)='./file2\x00', 0xaeb3) write$binfmt_format(r1, &(0x7f0000000000)='1\x00', 0x2400) 1.925273941s ago: executing program 5 (id=7950): r0 = socket$inet_smc(0x2b, 0x1, 0x0) fchdir(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000002200)='percpu_alloc_percpu\x00', r1, 0x0, 0x80000000}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) lstat(&(0x7f0000001100)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000010c0)=@nullb, r5, &(0x7f0000002180)) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="270e00d3f1e5d3550000000000001108a6e03041789b05868487ae5270295dec627f6439e1c1540aff61a5662e8753f8a56d687c49"], 0x14}, 0x1, 0x40030000000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$inet_sctp(0x2, 0x1, 0x84) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r9) 1.717906074s ago: executing program 6 (id=7943): openat$rtc(0xffffffffffffff9c, 0x0, 0x103a02, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x9, 0x2, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1}], 0x1, 0x0, 0x0, 0xeaff}, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5825be57aff9352b356be67ca2746357d1787935", 0x14}], 0x1}}], 0x2, 0x4004040) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) 1.659825525s ago: executing program 2 (id=7944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000340)={@broadcast, @multicast2, 0x0}, &(0x7f0000000380)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000003c0)={@initdev, @private, 0x0}, &(0x7f0000000500)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x2000000, {0x0, 0x0, 0x0, r8, {0x2}, {0xfff3}, {0xffff}}}, 0x24}}, 0x880) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250b0000002800018008000300030000001400020076657468300000000000000000000000080003000200000014000180080003000600000008000100", @ANYRES32=r2, @ANYBLOB="5000018008000300010000001400020076657468315f746f5f6272696467650008000100", @ANYRES32=r3, @ANYBLOB="0800030001000000080003000100000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="0800030001000000"], 0xa0}, 0x1, 0x0, 0x0, 0x41}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r9}, 0x10) semget$private(0x0, 0x4000, 0x555) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r10, 0x0) ftruncate(r10, 0xc17a) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r11, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d412000000000000002900000004000000", 0xfe60) r12 = inotify_init1(0x800) inotify_add_watch(r12, &(0x7f0000000240)='./file0\x00', 0x12000841) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="400180000100000000001000fdffff7f0000000000e5ff000c000200020000000800000214000c80080025000700000008001b00f6ffffff06000300010000006b8633a7f7b7c198f67a6c19fae7b205"], 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x400b4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c0001"], 0x140}}, 0x0) 1.556814717s ago: executing program 0 (id=7945): prctl$PR_SET_TSC(0x1a, 0x3) prctl$PR_SET_TSC(0x1a, 0x3) r0 = semget$private(0x0, 0x3, 0x40) semctl$IPC_RMID(r0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r3 = gettid() sendmsg$nl_generic(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x210, 0x26, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@typed={0x8, 0x13a, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x8, 0x99, 0x0, 0x0, @pid=r3}, @nested={0x1ec, 0x135, 0x0, 0x1, [@generic="04326e2439efe83d6d54df9fa4d5d9a717ef19eb97cc7f0519be57d690ad72a6956e008cc8d8887b836d65ff9cdfc1c3291846eeb5c8afc878a2e4917a0bedf080dd1fdcc29b8769f7ef84e997ba07fa67915d4d4f5ffa6e177955e7460e423acfbd9efdfd304e4fd131bc1e4685afa577851831c2cd925233d0249bd5ffaaa33ed2f4250375e40ef59887bea951fb53ce7b6da4f99382b826578604b4215495cd1fff49e63133ff7c4387e2adac1091aaa0f004c465024697367da59c0810", @generic="0a1a664c38acef2349838a53c6e0b9b7e6fd525449b5489e922cbb31bf14f16d5be8677467378053ffb917802ac387bf40b733b16deab4db0b7ca077828509de8d6e6a8723ae28b87e87a20d3e4a0492ba885db6a9414d69cca2980454aeddb9458b7d4e7af1d3fc162cc096a224fb3af3efad4cec09369c8d37277416efe4c3aa57c329fa8d76d6ce214614a5644c0780e59ad45995832016315e22d16dd0b3b4951626c01202fb11ecac61fd75e71274850ae425822e4a746d9e7b5ae7efee907c51968ee3d8b2cba6a851032e9c9d045253c49e28470273557cdeb5c934e4ff5ba63c4ac350ec88cefe62294075426c20afdf9228c2cec2", @typed={0x1f, 0x122, 0x0, 0x0, @binary="20df2f3ab79ead5919210290c147c3f6456efadf51c90541b17e1a"}, @nested={0x4, 0x5c}, @typed={0xc, 0x13f, 0x0, 0x0, @u64=0x400}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x800}, 0x80) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) close(r4) prctl$PR_SET_TSC(0x1a, 0x1) prctl$PR_SET_TSC(0x1a, 0x3) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000380)=0x3ff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000003c0)={0x0, 'syz_tun\x00', {0x2}, 0x1}) prctl$PR_SET_TSC(0x1a, 0x1) getdents64(r2, &(0x7f0000000400)=""/159, 0x9f) syz_genetlink_get_family_id$fou(&(0x7f00000004c0), r2) r6 = accept$inet(r5, &(0x7f0000000500)={0x2, 0x0, @multicast1}, &(0x7f0000000540)=0x10) getsockopt$inet_int(r6, 0x0, 0x22, &(0x7f0000000580), &(0x7f00000005c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000600)=[@in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e20, 0x10000, @loopback, 0x101}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @loopback}], 0x4c) accept(r1, &(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000700)=0x80) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000740), 0x4) setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f0000000780)={@remote, @remote, 0x1, "9cc1dcced1c51221a8587a50c94711174a3c125739e6d6baae4624e6a0c363e1", 0x80, 0x18, 0x6, 0x10}, 0x3c) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0)={r2}, 0x8) recvmsg$can_bcm(r8, &(0x7f0000000ac0)={&(0x7f0000000800)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000880)=""/182, 0xb6}, {&(0x7f0000000940)=""/209, 0xd1}], 0x2, &(0x7f0000000a80)=""/30, 0x1e}, 0x100) r9 = open(&(0x7f0000000b00)='./file0\x00', 0x161180, 0x80) getsockname$packet(r2, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000dc0)=0x14) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000e00)={r9}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001000)={r4, 0x20, &(0x7f0000000fc0)={&(0x7f0000000ec0)=""/153, 0x99, 0x0, &(0x7f0000000f80)=""/30, 0x1e}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x9, 0x1a, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x4, 0x1, 0x0, r8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xffffffffffffffff}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c40)='GPL\x00', 0x8, 0xd8, &(0x7f0000000c80)=""/216, 0x40f00, 0x10, '\x00', r10, @cgroup_sock=0xc, r11, 0x8, &(0x7f0000000e40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x4, 0xc, 0x7, 0x2da0}, 0x10, r12, r9, 0x0, &(0x7f0000001200)=[r1, r1, r1, r1, 0xffffffffffffffff, r8, 0xffffffffffffffff, r8, r9, 0xffffffffffffffff], 0x0, 0x10, 0x7, @void, @value}, 0x94) 1.535564687s ago: executing program 7 (id=7946): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = gettid() rt_sigqueueinfo(r3, 0x21, &(0x7f0000000040)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0xa, 0x5, 0x0) connect$unix(r0, &(0x7f0000001f40)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioperm(0x7, 0x40, 0x6) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000140)={'pimreg\x00', 0x34}) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r8}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sctp_probe_path\x00', r4}, 0x18) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) sendmmsg$inet_sctp(r9, &(0x7f0000001e80)=[{&(0x7f00000002c0)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000300)="d659e7b3cfc4de0ba55e6f51520d3133230c71cc83f50583012d7ac0e09800fee774596f06cb8150c1da4f512ba64a0b2e3ba0beca25b3742c9311c601f749674ea7871785eef479ec58d2ac750064b084f18a847a1ec77d1b367a482f95c59dcfa60b8ba829ddc392babb2bdfd7c473fc06e888", 0x74}, {&(0x7f0000000380)="009510d6a4df355154e39565e04e00a05bf40dda62fdde43cebd3b80877fe1157804b8f5b139e1fea6a1365f2f1c762aae6a624e1ddcd1f3d3b073eb0b4a72ad1d3cb7f0c8380a0480cdf1da271971", 0x4f}], 0x3, &(0x7f0000000440)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x1}}], 0x18, 0x50008}, {&(0x7f0000000480)=@in6={0xa, 0x4e22, 0x4, @mcast2, 0x73}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000004c0)="6032a6a1b8e50212271840c6cbd043c0f286d8c0e9a76c1065666ec30ce4642be66ea013b8691b2c7a124c7f6c300b197c9a7d7d17e3a9067a13d2f72c727a7d369c6327f3fb18e72dfe0c406b021fa87dd1c547eb72c5c7ac1e326e966e84505107a17e912060861ba66964a572fe3117ef8f7aab6513eb5db81cd262c6478c359a7f0850f43d62175858f3d97b9a2e16dfc4360735ea667381a2a648fc3c1002257d468e4704b81508642df3c0269cd45048ddd14067f170895e4452e20158dfbc0ca098cd89fb9e6553b62ae6205cc9179ab3bcf955dde86845226e4cee815b7f0bf64b744dd4ac91", 0xea}, {&(0x7f00000005c0)="04f1c13d7b171ff3ec6ece8e28c12f62663ef2250a5a76c0eccc6d3925eee5afb6d3088fb19e74c7f802915ffd3249b1c88a2d0eef1496bdd5128d975acd30b00382acec7fee245afe7361a09300ec5894adf8e0ca9d438af5577f5f61c6a1bc0a7e1fdca5eeb635242f3cf39fcb8f36708520d6f892a5dfec70ad3c068d393a18bf452ba058cc25dc2c8ec1bb64348958e72ac428b69171", 0x98}, {&(0x7f0000000680)="92e5d0a1c0574033e40846f509b4a4c254a1ddd311a1f9b5649127f3ccccd3b90d7e0c4ad025bfcfcbbd505d1e52ba00befd904e9543c0bcacabf5271323944a86d669ad45f23ef665ba1e0a7edb9b46371fecd298405f2415bec8d394bb9ff614", 0x61}, {&(0x7f0000000700)="9998fb58e3a99ce7c83f48fd47979d334e46212e782d444f2af76d3bbf684fdaa18f0f1587d376d1dc793a95b41de8635876bb4505772a23507dbb4275705cca808b3064365bef31ff6623287685032ab28a552ee9498cff2fb9cb52b379c002a937", 0x62}, {&(0x7f0000000780)="f076cb23e1d4e420ee54a44badf5de528247a69b373756543466975f7a3078a6aeb87b4c4cfdd513abca9a1d9e44a5b4ccb311354109a6a00e3ad164947263c542a5cd751bfb477564dcfc143ad576d0483039f1219cd2c060e248d5314a77872ad8136592947fd840eda3b9547611d76c3ce27e7fd9d5a7286136c19375d7ac3c25a08d260ef203a2a8cb738c7f7390e5c26fffbb3eb39f8f13c64e326f7504d9f4cf087e221378b6eee05ed6a9fd7e61f02b2fccf75e06acc591f474e2f67ec00b158f91e8ddc41eada1bda2", 0xcd}], 0x5, 0x0, 0x0, 0x8040}, {&(0x7f0000000900)=@in6={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c, &(0x7f0000001e00)=[{&(0x7f0000000940)="ec9d88597a74a82269e82929c0286637b8f04e0e090ed3045b1fb5858ff0f70f9f9ec99653867d1760eaa73f68ba4576515eda9430e1db7b9da04a3025a2f10d0fa9a2a93aa1fa9366128d532e638630c2cd9b5aa83b059807925ab11cbffe655e205d8f728cf019b85a52206f19cfb800d63fd086657927bc7899a2b13039", 0x7f}, {&(0x7f0000001a00)="0e9b910c5cea8fa8be3a0062ce97965a88a1d7d4446822b3c0637bd7dbcb24a37d92547c62246748e7d4072cccc19cdc382f928501be061ea575bbcfbe0e7de9cdb55b96fb5ad5b5308fa174e81e3924db6eb32dccf394fb994da9f09ef2eb39adacf9e7da6b54a99de7432572bfa3bd9c6fec431d2c6312c7f13580291a79ee4a82665893aee251d2c4c0ee50937659d948c2ca4f4ab278fdb1fd36f942b0f286032bf2722c7a1765bb", 0xaa}, {&(0x7f0000001ac0)="478c5ae03e07af51fda3904fdd9b57ec44dc7487", 0x14}, {&(0x7f0000001b00)="0c8e06f2cf337ab1a120c7dbfc5622fba4a4ca6ac85b43a42eaa1197b1bc49fce05145fc71ac3463669a9c9576b1c4d8245093e9", 0x34}, {&(0x7f0000001b40)="28951c05fdac537b500097c5001d4d6e64416fa2c851afa9ccddc07f010c847ca62f44b291a1fd06b4d058a3f82a91acab10ccedc0763ef337c53856b2bf6efedf403253305c106f7f29ba137c2f7de1f8b23c8e57bf74ddbdcdbcee4a8dddccc61476454717df115bf94080136f29336c609dae29ec4c3b0cae299ec31fa1c137f57b3dc5d01425db237b020c10465225ab58e6704c502f2ce98723c4475185cb04e0245f379d666f6b0ded9a67cf45714597a825cc810bfe06bca44d9cc15a27a131ede7fe8cfa9a7a686cb11c33", 0xcf}, {&(0x7f0000001c40)="9191174342b17ad03b3252857934e3318ebe4f3477cacb1e0e8cf4948883a9dce69a60a5bbcb1c013b71fb81019d2b730538662cca3841f0853a3a283bb3149ee67be092dc3457cc9d370f3143ef6072511945718c51a35f43d20d553ae702d6f2114eec4a390c4cd8ebfda94751aa116fed4b50e8cbe3507d93a8d22e88cd9840099301e276e9a6e533ac1fe1ad1b5971e7", 0x92}, {&(0x7f0000001d00)="803aa85c64ad848d3f9b5eaad1cee9efb355c41cf44177eb010f3884412cbc41c99e301571869726cd8ef9915775f562992699299aa882cc1511342942b426a8e72a87be3c5454e9c56dea3d0400cdeb", 0x50}, {&(0x7f0000001d80)="000986e811c0e46330d155d1c568e66a5a654235dfe7cce645ee8956eacf17c7dd7b34a251b349070c80dc9aaa9b4429b28d051645678476a8e89797f6411a15d0878aa591bf7cec8cd92063d1ad3d487b52d6b67ebbb173ff6019a5337a893f9415", 0x62}], 0x8, 0x0, 0x0, 0x8004}], 0x3, 0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r10, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8008551c, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0xfe, 0x5}]}, 0x10) 1.528321537s ago: executing program 2 (id=7947): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(r0, 0xfff, 0xc7c4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fbffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000200)='./file0\x00', 0x20) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000500)="$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") 1.441939929s ago: executing program 7 (id=7948): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) preadv2(r4, &(0x7f0000000780)=[{&(0x7f0000000080)=""/5, 0x5}, {&(0x7f0000000600)=""/217, 0xd9}], 0x2, 0x0, 0x7, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000400000000000000000000a50000000060a0b0400000000000000000200000024000480200001800700010063740000140002800800014000000002080002400000000f0900010073797a30000000000900020073797a3200000000140000001100010000"], 0x78}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r9, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x110, 0x4, 0x0, {[{{@arp={@private=0xa010102, @multicast2, 0xff, 0xffffff00, 0x9, 0x4, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xfc6, 0x7f, 0xe9b, 0x4, 0x8, 0xe, 'veth1_to_team\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x284}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @local, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 1.441513909s ago: executing program 0 (id=7949): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(r0, 0xfff, 0xc7c4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fbffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) creat(&(0x7f0000000200)='./file0\x00', 0x20) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000500)="$eJzs28tvG8UfAPDv2kn6/P1qqvLoAwgURMQjadJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSd8QRib+AE1wQcELiCndUqUK5tMDFaOPdxHbttA5ONtSfj7TJzO44M1/vjj07kw2gbw2nP5KIvRHxa0Tsq2ebCwzXf91cXpz6c3lxKola7Y0/kpVyN5YXp/Ki+ev25JmBiNInSRxuU+/8pcvnJqvVmYtZfmzh/Ltj85cuPzN7fvLszNmZCxOnTp04Pv7cyYlnexJnGteNQx/MHTn4yltXX5s6ffXtH79O8vhb4uiR4fUOPl6r9bi6Yv2vIZ0MFNgQulKud9MYXOn/+6IcaydvX7z8caGNAzZVrVar3df58FINuIslUXQLgGLkX/Tp/W++bdHQY1u4/kL9BiiN+2a21Y8MRCkrM9hyf9tLwxFxeumvL9ItNmceAgCgybfp+OfpbPzXtPBTisZ5of9nayiViLgnIvZHxMmIOBAR90aslL0/Ih7osv7WRZJbxz+la13+ya6k47/ns7Wt5vFfPvqLSjni73y4XInB5MxsdeZY9p6MxOCOND++Th3fvfTLZ52ONY7/0i2tPx8LZu24NrCj+TXTkwuT/ybmRtc/ijg00C7+ZHUlIL0sDkbEoQ3WMfvkV0c6Hbt9/M2GGjM9WGeqfRnxRP38L0VL/Llk/fXJsZ1RnTk2ll8Vt/rp5yuvd6q/2/h7LT3/u9te/6vxV5LG9dr57uu48tunHe9pNnr9DyVvNu17f3Jh4eJ4xFDyar3RjfsnWspNrJVP4x852r7/74+1d+JwRKQX8YMR8VBEPJy1/ZGIeDQijq4T/w8vPvZO856ki/g3Vxr/dFfnfy0xFK172ifK577/pqnSSnQRf3r+T6ykRrI9d/L5dyft2tjVDAAAAP89pYjYG0lpdDVdKo2O1v+H/0DsLlXn5heeOjP33oXp+jMClRgs5TNd9fng+nzoeHZbn+cnWvLHs3njz8u7VvKjU3PV6aKDhz63p0P/T/1eLrp1wKbzvBb0L/0f+pf+D/1L/4f+1ab/7yqiHcDWa/f9/2EB7QC2Xkv/t+wHfcT9P/Qv/R/6l/4PfWl+V9z+Ifntmti5PZrRn4koFVd7PkNV+JtwFycK/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokX8CAAD//2Ts5lU=") 1.438750719s ago: executing program 2 (id=7951): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x40, 0x0, 0x1, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40000, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b800800090000000900000009005e2a2d7a080009000000000024000b80080009e6ff0000000800090000000000080009000000000008"], 0x184}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000001000100000000000b0000008520000002000000183500000b0000000000000000000000184a0000faffffff000000000000000018240000", @ANYRES32, @ANYBLOB="000000008f0000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x61, &(0x7f0000000380)=""/97, 0x41e00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x0, 0x800, 0x3ff}, 0x10, 0xeed2, r1, 0x5, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x1, 0x2, 0x4}, {0x3, 0x4, 0xd, 0x8}, {0x5, 0x3, 0xc, 0xc}, {0x0, 0x2, 0x9, 0x6}, {0x3, 0x1, 0x4, 0x7}], 0x10, 0x5, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000006c0)=r5, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000780)=""/105, 0x69, 0x0, &(0x7f0000000900)=""/161, 0xa1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3b, 0x1, 0xfe, 0xff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fffffd, 0x0, @perf_bp={0x0}, 0x10401, 0xffffffff, 0x6, 0x6, 0x0, 0xd, 0xfff9, 0x0, 0x3, 0x0, 0x6}, 0x0, 0x0, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece0195b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x4080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00f4ffffff00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100"], 0x0, 0x82, 0x0, 0x5, 0x0, 0x0, @void, @value}, 0x28) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 1.425885559s ago: executing program 7 (id=7952): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000380)=r2}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@const={0x3, 0x0, 0x0, 0xa, 0x1}, @float={0x9, 0x0, 0x0, 0x10, 0x4}, @volatile={0x179, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x4e, 0x2e, 0x0, 0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000800)=""/33, 0x45, 0x21, 0x0, 0x0, 0x10000, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001a80)={0xffffffffffffffff, 0x20, &(0x7f0000000980)={&(0x7f00000008c0)=""/175, 0xaf, 0x0, &(0x7f0000001a00)=""/73, 0x49}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xf4cfbed519ddf383, 0xc, &(0x7f00000006c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x4, 0x6, 0x6, 0x40, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xf}], &(0x7f0000000740)='syzkaller\x00', 0x918d, 0x1000, &(0x7f0000000a00)=""/4096, 0x41100, 0x22, '\x00', 0x0, @fallback=0x22, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x1, 0x0, 0x2, 0x2}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000001ac0)=[r5, r5, r3], 0x0, 0x10, 0xe5c, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000054070000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ifreq(r11, 0x8946, &(0x7f00000004c0)={'vcan0\x00', @ifru_map={0x1, 0x6, 0xf000, 0xc, 0x80, 0x7f}}) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r13, r14, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r13}, &(0x7f00000006c0), &(0x7f0000000700)=r12}, 0x20) sendmsg$inet(r11, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.408129559s ago: executing program 6 (id=7953): openat$rtc(0xffffffffffffff9c, 0x0, 0x103a02, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x9, 0x2, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeaff}, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5825be57aff9352b356be67ca2746357d1787935", 0x14}], 0x1}}], 0x2, 0x4004040) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) 1.31194564s ago: executing program 7 (id=7954): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8008551c, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0xfe, 0x5}]}, 0x10) (fail_nth: 1) 1.145935093s ago: executing program 7 (id=7955): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 1.115657843s ago: executing program 0 (id=7956): socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'vxcan1\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x31, 0x8, 0x3, {0xd, @esp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010101, 0x3b25, 0xfc}, {0x0, @local, 0x8, 0x86, [0x6, 0x8]}, @ah_ip6_spec={@ipv4={'\x00', '\xff\xff', @local}, @private1, 0x5}, {0x0, @broadcast, 0x8, 0x800, [0x62b5, 0x420]}, 0x0, 0x4}, 0x2, [0x0, 0x4]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x79d6, &(0x7f0000000480)={0x0, 0xa827, 0x4000, 0x3, 0x9c, 0x0, r5}) io_uring_setup(0x7f66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x309}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_alloc\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) 1.112816724s ago: executing program 2 (id=7966): r0 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x62040200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x3, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)=ANY=[@ANYRES8=r0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/92, @ANYRESHEX=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], 0x0, 0x2, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80884}, 0x20000000) sigaltstack(0x0, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080), 0x64, 0x531, &(0x7f0000000740)="$eJzs3c9vI1cdAPDvOPY22c02KXCASpRCi3ZXsPamoW3EoRQJwakSUO5LSLxRFCdexU67sSqSFX8AEkKAxAkuXJD4A5BQJS4cEVIlOIMAgRBs4cChdNDYkzSbjBPv1o2z8ecjTea9+eHve47eeN7M00wAY+vpiHg5It5N0/RaRMzky0v5FLu9Kdvu7XtvLGVTEmn66j+TSPJle5+V5PNL+W6TEfH1r0R8Kzkat7XdWVtsNOqbeb7WXr9da213rq+uL67UV+ob8/NzLyy8uPD8wo2h1PNyRLz0pb/+4Ls/+/JLv/rs63+6+fer386KNZ2vP1iPB1Q+bmWv6pXsu0gO7rD5kMHOonK3hrmpoi0mjiy5+wGXCQCAYtk5/oci4lMRcS1mYuL401kAAADgEZR+YTreSSLSYhf6LAcAAAAeIaXuGNikVM3HAkxHqVSt9sbwfiQulhrNVvszt5pbG8u9sbKzUSndWm3Ub+RjhWejkmT5uW76vfxzh/LzEfFERHx/Zqqbry41G8ujvvgBAAAAY+LSof7/f2Z6/X8AAADgnJkddQEAAACAD5z+PwAAAJx/+v8AAABwrn31lVeyKd17//Xya9tba83Xri/XW2vV9a2l6lJz83Z1pdlc6T6zb/2kz2s0m7c/Fxtbd2rteqtda213bq43tzbaN1e7rwMHAAAARuCJT7z5hyQidj8/1Z0yFwbbdcDNgLOqvJ9K8nlBs/7j4735X06pUMCpmBh1AYCRKY+6AMDIVEZdAGDkkvuzR7oFfQfv/Daff3L4ZQIAAIbrysf63/8vHbvn7vGrgTNPI4bx5f4/jK/u/f9BR/I6WYBzpeIMAMbegfv/6U7B+hPv/58oTR+8VAAAwDBNd6ekVM0v701HqVStRlzuvhagktxabdRvRMTjEfH7mcpjWX6uu2dyeMwwAAAAAAAAAAAAAAAAAAAAAAAAANBHmiaRAgAAAOdaROlvya97z/K/MvPs9OHrAxeS/85E/orQ13/86g/vLLbbm3PZ8n/tL2//KF/+3CiuYAAAAMBYeKAX+O/10/f68QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwTG/fe2NpbzrNuP/4YkTMFsUvx2R3PhmViLj47yTKB/ZLImJiCPGnsj8fLYqfZMXaD1kUf2oI8XfvHhs/ZvNvoSj+pSHEh3H2Znb8ebmo/ZXi6e68uP2VI+7LP6z+x7/YP/5N9Gn/lweM8eRbv6j1jX834sly8fFnL37SJ/4zA8b/5jc6nX7r0p9EXCn8/Unui1Vrr9+utbY711fXF1fqK/WN+fm5FxZeXHh+4Ubt1mqjnv+NxwpifO/jv3z3uPpf7BN/9oT6Pztg/f/31p17H+4lK0Xxrz5TEP83P823OBq/lP/2fTpPZ+uv7KV3e+mDnvr57546rv7Lfepf/P/f2a//1QHrf+1r3/nzgJsCAKegtd1ZW2w06pvvMzEZw/mc4SeyXvoZKMY4Jd5Jz0QxTk7sdNYW051htYI0TdOsTb2Pz0niLHwt3cSoj0wAAMCwvXfS/1C7Tw69QAAAAAAAAAAAAAAAAAAAADCGTuNxYodj7u6nkmE8QhsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYCj+HwAA//+K/dt/") r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x3c, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') faccessat2(r5, &(0x7f0000000400)='./file0/../file0\x00', 0x14c, 0x300) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) 969.082246ms ago: executing program 7 (id=7957): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000018c0)=[{{&(0x7f00000002c0)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x6}}], 0x1, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = memfd_create(&(0x7f0000000f80)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee\xf2e\x14]j\xd8A\xd8%\xfc\x1f\xed\xb3~\x1aj\t', 0x2) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0xf0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) flock(r5, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='erofs_destroy_inode\x00', 0xffffffffffffffff, 0x0, 0x7060000}, 0x18) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f00000000c0)="bb5abc6b15f3", 0x0, 0x0, 0x32, 0x2, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000004000/0x4000)=nil) brk(0x200000001000) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(r9, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) 675.915321ms ago: executing program 2 (id=7958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r3, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x3, 0xd645, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x67}]}]}]}}]}, 0xac}, 0x1, 0x7a00}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x400000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f00000002c0)={0x2, 0x0, {0x0, 0x1, 0x10, 0x1, 0xffffffff}}) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, &(0x7f00000004c0), 0x4) r9 = eventfd2(0x7, 0x801) io_submit(r7, 0x3, &(0x7f0000000400)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0200ffd40000", 0x6, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xe, 0x7f, r1, &(0x7f0000000a00)="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", 0x1000, 0x9, 0x0, 0x1, r9}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x8, r8, &(0x7f0000000380)="04e194b300b6a0949eacfeeefbae6e69edc81165ed13966ed0e4bd5fb1583b74e81a47c46a64c4", 0x27, 0x5, 0x0, 0x3, r9}]) 656.202411ms ago: executing program 6 (id=7959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000340)={@broadcast, @multicast2, 0x0}, &(0x7f0000000380)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000003c0)={@initdev, @private, 0x0}, &(0x7f0000000500)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x2000000, {0x0, 0x0, 0x0, r8, {0x2}, {0xfff3}, {0xffff}}}, 0x24}}, 0x880) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280), 0xc, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[@ANYBLOB="3ccd2293c9d47299cab1ae16d6c4a95a4d2b66f254fde1bda836c732e122404cc47da73625225855b4b8255783588986eaec03f941dae1f3b4712ac56777367cb813bedc3fbcb4cf5d7469430815a968da071a93ef949181df282639dca2a615d3e373818df798abaa88493391e547a22e89b7dfa36f53b534e6278b34880d7e00ea42d84ad36c3f61dd0f4b0f161457ca04665fbc2ad57b28b3b81b47527ab93db1a346570c153749a0da0b5dc8a694546007e8db1c9aedda2cb0a5322e18b914ee3d98caa16208876016c428f24f69bba47c85446a7423fa17445297e53b2a1c637bc0f9f06d7a3253f458a92b9e024d421c7d5b711b8ded76ecbc416f1bb8edf240562e32ac941c7933e9447824bda0ae27ae095eb10ed7ab79c2b03e5dbd8cc9e976ba767ff56009c04f48701a689218deefeb95990f52a684062698edd14560a70f78107906b8b36af8568f6b2848acf89dee787f", @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250b0000002800018008000300030000001400020076657468300000000000000000000000080003000200000014000180080003000600000008000100", @ANYRES32=r2, @ANYBLOB="5000018008000300010000001400020076657468315f746f5f6272696467650008000100", @ANYRES32=r3, @ANYBLOB="0800030001000000080003000100000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="0800030001000000"], 0xa0}, 0x1, 0x0, 0x0, 0x41}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r9}, 0x10) semget$private(0x0, 0x4000, 0x555) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r10, 0x0) ftruncate(r10, 0xc17a) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r11, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d412000000000000002900000004000000", 0xfe60) r12 = inotify_init1(0x800) inotify_add_watch(r12, &(0x7f0000000240)='./file0\x00', 0x12000841) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="400180000100000000001000fdffff7f0000000000e5ff000c000200020000000800000214000c80080025000700000008001b00f6ffffff06000300010000006b8633a7f7b7c198f67a6c19fae7b205"], 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x400b4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c0001"], 0x140}}, 0x0) 596.589372ms ago: executing program 2 (id=7960): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [], {}, [], {0x10, 0x4}}, 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0xc) r1 = dup(r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48840) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x90400, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000000c0)='/.//', 0x0, 0x0, 0x2009000, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r5}, 0x3d) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r6}, 0x3d) 500.398333ms ago: executing program 5 (id=7961): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x800004, &(0x7f0000001b40)={[{@dioread_lock}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@data_err_ignore}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x41}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") (fail_nth: 10) 218.962198ms ago: executing program 0 (id=7962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x2c, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x1, 0x7}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) 100.620739ms ago: executing program 6 (id=7963): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 65.34934ms ago: executing program 0 (id=7964): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000380)=r2}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@const={0x3, 0x0, 0x0, 0xa, 0x1}, @float={0x9, 0x0, 0x0, 0x10, 0x4}, @volatile={0x179, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x4e, 0x2e, 0x0, 0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000800)=""/33, 0x45, 0x21, 0x0, 0x0, 0x10000, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001a80)={0xffffffffffffffff, 0x20, &(0x7f0000000980)={&(0x7f00000008c0)=""/175, 0xaf, 0x0, &(0x7f0000001a00)=""/73, 0x49}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xf4cfbed519ddf383, 0xc, &(0x7f00000006c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x4, 0x6, 0x6, 0x40, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xf}], &(0x7f0000000740)='syzkaller\x00', 0x918d, 0x1000, &(0x7f0000000a00)=""/4096, 0x41100, 0x22, '\x00', 0x0, @fallback=0x22, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x1, 0x0, 0x2, 0x2}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000001ac0)=[r5, r5, r3], 0x0, 0x10, 0xe5c, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000054070000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ifreq(r11, 0x8946, &(0x7f00000004c0)={'vcan0\x00', @ifru_map={0x1, 0x6, 0xf000, 0xc, 0x80, 0x7f}}) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r13, r14, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r13}, &(0x7f00000006c0), &(0x7f0000000700)=r12}, 0x20) sendmsg$inet(r11, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 5 (id=7965): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): is unknown, defaulting to 1000 [ 386.936931][T27882] loop6: detected capacity change from 0 to 1024 [ 386.944062][T27882] EXT4-fs: Ignoring removed bh option [ 386.979734][T27887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=27887 comm=syz.5.7171 [ 386.990517][T27882] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 387.010176][T27882] EXT4-fs (loop6): Remounting filesystem read-only [ 387.082736][T27890] loop1: detected capacity change from 0 to 2048 [ 387.092372][T27893] loop6: detected capacity change from 0 to 512 [ 387.170667][T27898] netlink: 'syz.6.7175': attribute type 13 has an invalid length. [ 387.198580][T27900] loop1: detected capacity change from 0 to 2048 [ 387.230768][T27904] bond1: entered promiscuous mode [ 387.235881][T27904] bond1: entered allmulticast mode [ 387.243925][T27904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 387.259589][T27904] bond1 (unregistering): Released all slaves [ 387.309742][T27908] loop1: detected capacity change from 0 to 512 [ 387.498326][T27917] loop0: detected capacity change from 0 to 1024 [ 387.505168][T27917] EXT4-fs: Ignoring removed bh option [ 387.520656][T27921] loop5: detected capacity change from 0 to 512 [ 387.527302][T27921] EXT4-fs: Ignoring removed bh option [ 387.532957][T27921] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 387.544382][T27921] EXT4-fs (loop5): 1 truncate cleaned up [ 387.554597][T27917] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 387.558305][T27921] pimreg: entered allmulticast mode [ 387.576235][T27921] pimreg: left allmulticast mode [ 387.589870][T27917] EXT4-fs (loop0): Remounting filesystem read-only [ 387.636874][T27928] loop1: detected capacity change from 0 to 2048 [ 387.693813][T27932] loop5: detected capacity change from 0 to 2048 [ 387.735463][T27937] bond1: entered promiscuous mode [ 387.740549][T27937] bond1: entered allmulticast mode [ 387.746223][T27937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 387.790954][T27937] bond1 (unregistering): Released all slaves [ 387.836691][T27950] hsr0 speed is unknown, defaulting to 1000 [ 387.842865][T27950] dummy0 speed is unknown, defaulting to 1000 [ 388.056570][T27970] loop6: detected capacity change from 0 to 2048 [ 388.127964][T27975] loop5: detected capacity change from 0 to 512 [ 388.171767][T27981] loop6: detected capacity change from 0 to 2048 [ 388.191552][T27980] hsr0 speed is unknown, defaulting to 1000 [ 388.197988][T27980] dummy0 speed is unknown, defaulting to 1000 [ 388.552944][T27999] loop5: detected capacity change from 0 to 2048 [ 388.671570][T28005] loop5: detected capacity change from 0 to 512 [ 388.711625][T28012] loop5: detected capacity change from 0 to 512 [ 388.728398][T28012] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.830615][T28017] loop0: detected capacity change from 0 to 512 [ 388.882356][T28022] bond1: entered promiscuous mode [ 388.887429][T28022] bond1: entered allmulticast mode [ 388.892715][T28022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.918658][T28022] bond1 (unregistering): Released all slaves [ 388.953307][T28027] bond0: entered promiscuous mode [ 388.958416][T28027] bond0: entered allmulticast mode [ 388.963695][T28027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.972072][T28027] bond0 (unregistering): Released all slaves [ 389.016308][T28031] loop1: detected capacity change from 0 to 2048 [ 389.088119][T28043] loop1: detected capacity change from 0 to 512 [ 389.112651][T28043] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.126218][T28047] loop5: detected capacity change from 0 to 512 [ 389.159743][T28049] loop6: detected capacity change from 0 to 512 [ 389.189923][T28049] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.517070][T28070] bond1: entered promiscuous mode [ 389.522210][T28070] bond1: entered allmulticast mode [ 389.527499][T28070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.539004][T28070] bond1 (unregistering): Released all slaves [ 389.622789][T28077] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7243'. [ 389.655929][T28079] loop6: detected capacity change from 0 to 2048 [ 389.744746][T28081] bond1: entered promiscuous mode [ 389.749817][T28081] bond1: entered allmulticast mode [ 389.755181][T28081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.773389][T28081] bond1 (unregistering): Released all slaves [ 389.778904][T28086] loop6: detected capacity change from 0 to 512 [ 389.785946][T28086] EXT4-fs: Ignoring removed bh option [ 389.791818][T28086] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 389.812956][T28086] EXT4-fs (loop6): 1 truncate cleaned up [ 389.853620][T28092] loop1: detected capacity change from 0 to 512 [ 389.864612][T28094] netlink: 'syz.0.7250': attribute type 13 has an invalid length. [ 389.881491][T28092] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.962708][T28101] hsr0 speed is unknown, defaulting to 1000 [ 389.969023][T28101] dummy0 speed is unknown, defaulting to 1000 [ 389.974789][T28103] hsr0 speed is unknown, defaulting to 1000 [ 389.981677][T28103] dummy0 speed is unknown, defaulting to 1000 [ 389.982937][T28105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7255'. [ 390.058351][T28112] loop1: detected capacity change from 0 to 2048 [ 390.085655][T28116] loop2: detected capacity change from 0 to 512 [ 390.111223][T28119] loop2: detected capacity change from 0 to 512 [ 390.117756][T28119] EXT4-fs: Ignoring removed bh option [ 390.123401][T28119] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 390.149141][T28119] EXT4-fs (loop2): 1 truncate cleaned up [ 390.233345][T28132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7266'. [ 390.316862][T28141] loop6: detected capacity change from 0 to 512 [ 390.349923][T28147] loop2: detected capacity change from 0 to 2048 [ 390.385040][T28152] loop1: detected capacity change from 0 to 512 [ 390.392878][T28152] EXT4-fs: Ignoring removed bh option [ 390.399462][T28152] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 390.411997][T28152] EXT4-fs (loop1): 1 truncate cleaned up [ 390.428707][T28152] pimreg: entered allmulticast mode [ 390.438438][T28155] loop6: detected capacity change from 0 to 512 [ 390.457757][T28152] pimreg: left allmulticast mode [ 390.475320][T28160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7277'. [ 390.518745][T28165] loop1: detected capacity change from 0 to 512 [ 390.558790][T28173] loop6: detected capacity change from 0 to 512 [ 390.618609][T28180] loop6: detected capacity change from 0 to 2048 [ 390.634588][T28182] loop1: detected capacity change from 0 to 512 [ 390.648476][T28182] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.685436][T28186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7288'. [ 390.731445][T28190] loop2: detected capacity change from 0 to 512 [ 390.788852][T28194] hsr0 speed is unknown, defaulting to 1000 [ 390.795432][T28194] dummy0 speed is unknown, defaulting to 1000 [ 390.805770][T28198] loop6: detected capacity change from 0 to 512 [ 390.819155][T28196] bond1: entered promiscuous mode [ 390.824192][T28196] bond1: entered allmulticast mode [ 390.829688][T28196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.846237][T28196] bond1 (unregistering): Released all slaves [ 391.000899][T28216] loop6: detected capacity change from 0 to 2048 [ 391.015965][T28218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7301'. [ 391.042740][T28222] loop1: detected capacity change from 0 to 512 [ 391.049724][T28220] hsr0 speed is unknown, defaulting to 1000 [ 391.055994][T28220] dummy0 speed is unknown, defaulting to 1000 [ 391.078853][T28222] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.118666][T28227] loop6: detected capacity change from 0 to 512 [ 391.139828][T28231] loop2: detected capacity change from 0 to 1024 [ 391.146667][T28231] EXT4-fs: Ignoring removed bh option [ 391.168208][T28227] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.216092][T28239] loop0: detected capacity change from 0 to 512 [ 391.313675][T28250] loop2: detected capacity change from 0 to 512 [ 391.323361][T28250] EXT4-fs: Ignoring removed bh option [ 391.346201][T28255] loop0: detected capacity change from 0 to 512 [ 391.349336][T28253] loop5: detected capacity change from 0 to 512 [ 391.367404][T28250] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 391.370865][T28253] EXT4-fs: Ignoring removed bh option [ 391.383436][ T29] kauditd_printk_skb: 651 callbacks suppressed [ 391.383451][ T29] audit: type=1326 audit(1745192770.530:47497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28254 comm="syz.6.7314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb988e169 code=0x7ffc0000 [ 391.392894][T28256] loop6: detected capacity change from 0 to 2048 [ 391.419909][T28250] EXT4-fs (loop2): 1 truncate cleaned up [ 391.431379][T28262] loop0: detected capacity change from 0 to 512 [ 391.433117][ T29] audit: type=1326 audit(1745192770.530:47498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28254 comm="syz.6.7314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbbb988e169 code=0x7ffc0000 [ 391.461485][ T29] audit: type=1326 audit(1745192770.530:47499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28254 comm="syz.6.7314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb988e169 code=0x7ffc0000 [ 391.464561][T28253] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 391.485105][ T29] audit: type=1326 audit(1745192770.530:47500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28254 comm="syz.6.7314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbb988e169 code=0x7ffc0000 [ 391.518519][ T29] audit: type=1326 audit(1745192770.530:47501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28254 comm="syz.6.7314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb988e169 code=0x7ffc0000 [ 391.528492][T28250] pimreg: entered allmulticast mode [ 391.542110][ T29] audit: type=1326 audit(1745192770.530:47502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28254 comm="syz.6.7314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbb988e169 code=0x7ffc0000 [ 391.557544][T28250] pimreg: left allmulticast mode [ 391.570814][ T29] audit: type=1326 audit(1745192770.530:47503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28254 comm="syz.6.7314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb988e169 code=0x7ffc0000 [ 391.570842][ T29] audit: type=1326 audit(1745192770.530:47504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28254 comm="syz.6.7314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbb988e169 code=0x7ffc0000 [ 391.597817][T28253] EXT4-fs (loop5): 1 truncate cleaned up [ 391.599319][ T29] audit: type=1326 audit(1745192770.530:47505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28254 comm="syz.6.7314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb988e169 code=0x7ffc0000 [ 391.599342][ T29] audit: type=1326 audit(1745192770.530:47506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28254 comm="syz.6.7314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fbbb988e169 code=0x7ffc0000 [ 391.644990][T28262] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.688578][T28253] pimreg: entered allmulticast mode [ 391.694640][T28270] pimreg: left allmulticast mode [ 391.750978][T28277] loop2: detected capacity change from 0 to 512 [ 391.758447][T28277] EXT4-fs: Ignoring removed bh option [ 391.764241][T28277] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 391.776099][T28277] EXT4-fs (loop2): 1 truncate cleaned up [ 391.794402][T28277] pimreg: entered allmulticast mode [ 391.822097][T28280] bond1: entered promiscuous mode [ 391.827319][T28280] bond1: entered allmulticast mode [ 391.838714][T28280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.854080][T28280] bond1 (unregistering): Released all slaves [ 391.863231][T28277] pimreg: left allmulticast mode [ 391.880834][T28283] hsr0 speed is unknown, defaulting to 1000 [ 391.889622][T28283] dummy0 speed is unknown, defaulting to 1000 [ 391.933502][T28294] loop6: detected capacity change from 0 to 512 [ 391.969784][T28294] ext4 filesystem being mounted at /485/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.000985][T28301] loop2: detected capacity change from 0 to 512 [ 392.049723][T28303] loop0: detected capacity change from 0 to 2048 [ 392.059121][T28301] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.101758][T28309] loop5: detected capacity change from 0 to 512 [ 392.108490][T28309] EXT4-fs: Ignoring removed bh option [ 392.123232][T28309] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 392.144539][T28309] EXT4-fs (loop5): 1 truncate cleaned up [ 392.168107][T28309] pimreg: entered allmulticast mode [ 392.175990][T28309] pimreg: left allmulticast mode [ 392.308794][T28334] loop0: detected capacity change from 0 to 512 [ 392.340384][T28336] loop5: detected capacity change from 0 to 2048 [ 392.372154][T28340] bond1: entered promiscuous mode [ 392.377300][T28340] bond1: entered allmulticast mode [ 392.382551][T28340] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.399946][T28340] bond1 (unregistering): Released all slaves [ 392.415434][T28347] loop0: detected capacity change from 0 to 512 [ 392.490500][T28362] loop1: detected capacity change from 0 to 512 [ 392.509117][T28362] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.543247][T28369] loop5: detected capacity change from 0 to 512 [ 392.594871][T28375] loop0: detected capacity change from 0 to 2048 [ 392.602442][T28377] loop5: detected capacity change from 0 to 512 [ 392.629413][T28377] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.662286][T28387] netlink: 'syz.0.7364': attribute type 13 has an invalid length. [ 392.820261][T28398] netlink: 'syz.5.7369': attribute type 13 has an invalid length. [ 392.951535][T28410] loop1: detected capacity change from 0 to 2048 [ 393.041479][T28414] loop1: detected capacity change from 0 to 512 [ 393.116540][T28422] loop2: detected capacity change from 0 to 512 [ 393.138101][T28422] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.191928][T28430] bond0: entered promiscuous mode [ 393.195466][T28433] loop1: detected capacity change from 0 to 512 [ 393.197081][T28430] bond0: entered allmulticast mode [ 393.209742][T28430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.226096][T28430] bond0 (unregistering): Released all slaves [ 393.278570][T28444] loop6: detected capacity change from 0 to 512 [ 393.288835][T28443] loop1: detected capacity change from 0 to 512 [ 393.295325][T28443] EXT4-fs: Ignoring removed bh option [ 393.301406][T28443] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 393.312612][T28443] EXT4-fs (loop1): 1 truncate cleaned up [ 393.327697][T28443] pimreg: entered allmulticast mode [ 393.333772][T28443] pimreg: left allmulticast mode [ 393.345397][T28444] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.433245][T28456] loop6: detected capacity change from 0 to 512 [ 393.448754][T28456] ext4 filesystem being mounted at /493/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.465417][T28463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=28463 comm=syz.1.7396 [ 393.505084][T28465] loop6: detected capacity change from 0 to 512 [ 393.602080][T28476] bond0: entered promiscuous mode [ 393.607172][T28476] bond0: entered allmulticast mode [ 393.612436][T28476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.622027][T28476] bond0 (unregistering): Released all slaves [ 393.680352][T28481] hsr0 speed is unknown, defaulting to 1000 [ 393.686731][T28481] dummy0 speed is unknown, defaulting to 1000 [ 393.719922][T28486] loop2: detected capacity change from 0 to 512 [ 393.758181][T28486] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.813856][T28496] loop5: detected capacity change from 0 to 2048 [ 393.827490][T28500] loop1: detected capacity change from 0 to 512 [ 393.864536][T28504] loop1: detected capacity change from 0 to 1024 [ 393.880957][T28504] EXT4-fs: Ignoring removed bh option [ 393.886835][T28506] loop2: detected capacity change from 0 to 2048 [ 393.893620][T28508] loop5: detected capacity change from 0 to 512 [ 393.921460][T28512] loop5: detected capacity change from 0 to 512 [ 393.940267][T28506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7413'. [ 393.952244][T28512] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.100115][T28526] hsr0 speed is unknown, defaulting to 1000 [ 394.112188][T28526] dummy0 speed is unknown, defaulting to 1000 [ 394.121281][T28529] loop5: detected capacity change from 0 to 512 [ 394.124084][T28531] loop1: detected capacity change from 0 to 512 [ 394.139740][T28531] EXT4-fs: Ignoring removed bh option [ 394.146294][T28531] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 394.157795][T28534] loop5: detected capacity change from 0 to 512 [ 394.165684][T28531] EXT4-fs (loop1): 1 truncate cleaned up [ 394.176182][T28532] loop0: detected capacity change from 0 to 2048 [ 394.184841][T28534] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.191636][T28531] pimreg: entered allmulticast mode [ 394.226377][T28531] pimreg: left allmulticast mode [ 394.247654][T28540] loop2: detected capacity change from 0 to 512 [ 394.299528][T28549] netlink: 'syz.0.7430': attribute type 13 has an invalid length. [ 394.328915][T28551] hsr0 speed is unknown, defaulting to 1000 [ 394.335096][T28551] dummy0 speed is unknown, defaulting to 1000 [ 394.391736][T28558] loop6: detected capacity change from 0 to 512 [ 394.418226][T28558] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.448088][T28567] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28567 comm=syz.1.7436 [ 394.473507][T28568] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7436'. [ 394.482589][T28568] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7436'. [ 394.491691][T28568] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7436'. [ 394.519875][T28570] loop5: detected capacity change from 0 to 2048 [ 394.605217][T28575] hsr0 speed is unknown, defaulting to 1000 [ 394.611552][T28575] dummy0 speed is unknown, defaulting to 1000 [ 394.636261][T28577] hsr0 speed is unknown, defaulting to 1000 [ 394.674080][T28577] dummy0 speed is unknown, defaulting to 1000 [ 394.764994][T28591] bond1: entered promiscuous mode [ 394.770188][T28591] bond1: entered allmulticast mode [ 394.777071][T28591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.789642][T28591] bond1 (unregistering): Released all slaves [ 394.878845][T28601] loop5: detected capacity change from 0 to 512 [ 394.895886][T28599] loop1: detected capacity change from 0 to 2048 [ 394.942561][T28603] loop5: detected capacity change from 0 to 2048 [ 394.953195][T28599] __nla_validate_parse: 6 callbacks suppressed [ 394.953211][T28599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7449'. [ 395.054426][T28610] hsr0 speed is unknown, defaulting to 1000 [ 395.077427][T28610] dummy0 speed is unknown, defaulting to 1000 [ 395.126531][T28614] hsr0 speed is unknown, defaulting to 1000 [ 395.132954][T28614] dummy0 speed is unknown, defaulting to 1000 [ 395.174506][T28623] netlink: 'syz.2.7457': attribute type 10 has an invalid length. [ 395.184506][T28623] hsr_slave_0: left promiscuous mode [ 395.190170][T28621] loop1: detected capacity change from 0 to 512 [ 395.198027][T28623] hsr_slave_1: left promiscuous mode [ 395.223577][T28621] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.234632][T28627] loop2: detected capacity change from 0 to 164 [ 395.246745][T28627] iso9660: Unknown parameter '0000000000000000000000018446744073709551615ÿÿ00000000000000000005' [ 395.330519][T28632] loop6: detected capacity change from 0 to 512 [ 395.370036][T28632] ext4 filesystem being mounted at /504/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.483100][T28642] loop5: detected capacity change from 0 to 2048 [ 395.625367][T28646] loop5: detected capacity change from 0 to 2048 [ 395.639343][T28648] loop1: detected capacity change from 0 to 2048 [ 395.677700][T28646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7465'. [ 395.754509][T28662] hsr0 speed is unknown, defaulting to 1000 [ 395.761082][T28662] dummy0 speed is unknown, defaulting to 1000 [ 395.808842][T28660] hsr0 speed is unknown, defaulting to 1000 [ 395.821592][T28660] dummy0 speed is unknown, defaulting to 1000 [ 395.887663][T28666] loop5: detected capacity change from 0 to 512 [ 395.908165][T28666] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.994946][T28678] bond1: entered promiscuous mode [ 396.000033][T28678] bond1: entered allmulticast mode [ 396.006812][T28678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.023490][T28678] bond1 (unregistering): Released all slaves [ 396.031373][T28686] netlink: 'syz.1.7481': attribute type 13 has an invalid length. [ 396.129745][T28688] loop0: detected capacity change from 0 to 2048 [ 396.310039][T28704] loop5: detected capacity change from 0 to 128 [ 396.374385][T28686] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.383726][T28686] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.392998][T28686] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.402288][T28686] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.426699][T28711] loop5: detected capacity change from 0 to 1024 [ 396.434317][T28711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 396.442513][T28711] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 396.453375][T28711] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 396.463033][T28711] System zones: 0-1, 3-36 [ 396.495440][ T29] kauditd_printk_skb: 677 callbacks suppressed [ 396.495454][ T29] audit: type=1400 audit(1745192775.640:48184): avc: denied { create } for pid=28710 comm="syz.5.7485" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 396.553015][ T29] audit: type=1326 audit(1745192775.660:48185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.0.7482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bcbae169 code=0x7ffc0000 [ 396.576600][ T29] audit: type=1326 audit(1745192775.660:48186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28687 comm="syz.0.7482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bcbae169 code=0x7ffc0000 [ 396.632527][T28715] hsr0 speed is unknown, defaulting to 1000 [ 396.654676][T28715] dummy0 speed is unknown, defaulting to 1000 [ 396.722503][T28717] hub 2-0:1.0: USB hub found [ 396.727439][T28717] hub 2-0:1.0: 8 ports detected [ 396.744791][T28726] loop5: detected capacity change from 0 to 512 [ 396.761321][T28726] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.869906][T28742] loop5: detected capacity change from 0 to 512 [ 396.876645][T28742] EXT4-fs: Ignoring removed bh option [ 396.882258][T28742] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 396.885291][ T29] audit: type=1326 audit(1745192776.030:48187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28743 comm="syz.2.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067de8e169 code=0x7ffc0000 [ 396.895601][T28742] EXT4-fs (loop5): 1 truncate cleaned up [ 396.915704][ T29] audit: type=1326 audit(1745192776.030:48188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28743 comm="syz.2.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f067de8e169 code=0x7ffc0000 [ 396.944926][ T29] audit: type=1326 audit(1745192776.030:48189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28743 comm="syz.2.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067de8e169 code=0x7ffc0000 [ 396.945247][T28744] loop2: detected capacity change from 0 to 2048 [ 396.968602][ T29] audit: type=1326 audit(1745192776.030:48190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28743 comm="syz.2.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f067de8e169 code=0x7ffc0000 [ 396.987585][T28742] pimreg: entered allmulticast mode [ 396.998431][ T29] audit: type=1326 audit(1745192776.030:48191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28743 comm="syz.2.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067de8e169 code=0x7ffc0000 [ 397.005857][T28742] pimreg: left allmulticast mode [ 397.027214][ T29] audit: type=1326 audit(1745192776.030:48192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28743 comm="syz.2.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f067de8e169 code=0x7ffc0000 [ 397.055837][ T29] audit: type=1326 audit(1745192776.030:48193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28743 comm="syz.2.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067de8e169 code=0x7ffc0000 [ 397.460373][T28762] loop0: detected capacity change from 0 to 164 [ 397.468315][T28762] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 397.492531][T28762] FAULT_INJECTION: forcing a failure. [ 397.492531][T28762] name failslab, interval 1, probability 0, space 0, times 0 [ 397.501599][T28764] hsr0 speed is unknown, defaulting to 1000 [ 397.505291][T28762] CPU: 1 UID: 0 PID: 28762 Comm: syz.0.7504 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 397.505323][T28762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 397.505336][T28762] Call Trace: [ 397.505343][T28762] [ 397.505350][T28762] dump_stack_lvl+0xf6/0x150 [ 397.505377][T28762] dump_stack+0x15/0x1a [ 397.505452][T28762] should_fail_ex+0x261/0x270 [ 397.505480][T28762] should_failslab+0x8f/0xb0 [ 397.505503][T28762] __kmalloc_cache_noprof+0x55/0x320 [ 397.505535][T28762] ? dev_ethtool+0x9a/0x1570 [ 397.505563][T28762] dev_ethtool+0x9a/0x1570 [ 397.505688][T28762] ? full_name_hash+0x93/0xe0 [ 397.505715][T28762] ? strcmp+0x21/0x50 [ 397.505742][T28762] ? __rcu_read_unlock+0x4e/0x70 [ 397.505777][T28762] dev_ioctl+0x3b3/0xa20 [ 397.505805][T28762] sock_do_ioctl+0x121/0x220 [ 397.505864][T28762] sock_ioctl+0x436/0x630 [ 397.505955][T28762] ? __pfx_sock_ioctl+0x10/0x10 [ 397.505984][T28762] __se_sys_ioctl+0xc9/0x140 [ 397.506052][T28762] __x64_sys_ioctl+0x43/0x50 [ 397.506083][T28762] x64_sys_call+0x168d/0x2e10 [ 397.506106][T28762] do_syscall_64+0xc9/0x1a0 [ 397.506207][T28762] ? clear_bhb_loop+0x25/0x80 [ 397.506229][T28762] ? clear_bhb_loop+0x25/0x80 [ 397.506252][T28762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.506274][T28762] RIP: 0033:0x7ff4bcbae169 [ 397.506290][T28762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.506312][T28762] RSP: 002b:00007ff4bb217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.506332][T28762] RAX: ffffffffffffffda RBX: 00007ff4bcdd5fa0 RCX: 00007ff4bcbae169 [ 397.506375][T28762] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000008 [ 397.506388][T28762] RBP: 00007ff4bb217090 R08: 0000000000000000 R09: 0000000000000000 [ 397.506401][T28762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.506419][T28762] R13: 0000000000000000 R14: 00007ff4bcdd5fa0 R15: 00007ffd695406c8 [ 397.506440][T28762] [ 397.713293][T28764] dummy0 speed is unknown, defaulting to 1000 [ 397.789122][T28772] loop1: detected capacity change from 0 to 512 [ 397.814936][T28772] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.839587][T28778] bond1: entered promiscuous mode [ 397.844621][T28778] bond1: entered allmulticast mode [ 397.850222][T28778] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.867490][T28778] bond1 (unregistering): Released all slaves [ 397.982463][T28797] loop1: detected capacity change from 0 to 512 [ 397.989228][T28797] EXT4-fs: Ignoring removed bh option [ 397.994824][T28797] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 398.005586][T28797] EXT4-fs (loop1): 1 truncate cleaned up [ 398.018242][T28797] pimreg: entered allmulticast mode [ 398.024127][T28797] pimreg: left allmulticast mode [ 398.127140][T25828] EXT4-fs unmount: 99 callbacks suppressed [ 398.127154][T25828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.169235][T28811] loop6: detected capacity change from 0 to 512 [ 398.178475][T28803] hsr0 speed is unknown, defaulting to 1000 [ 398.189181][T28811] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.207586][T28811] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.208977][T28803] dummy0 speed is unknown, defaulting to 1000 [ 398.299652][T22289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.342154][T28823] bond0: entered promiscuous mode [ 398.347226][T28823] bond0: entered allmulticast mode [ 398.353654][T28823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.369412][T28823] bond0 (unregistering): Released all slaves [ 398.414289][T28833] loop6: detected capacity change from 0 to 256 [ 398.421003][T28833] msdos: Bad value for 'gid' [ 398.425696][T28833] msdos: Bad value for 'gid' [ 398.495691][T28841] FAULT_INJECTION: forcing a failure. [ 398.495691][T28841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.508743][T28841] CPU: 0 UID: 0 PID: 28841 Comm: syz.2.7533 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 398.508766][T28841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 398.508827][T28841] Call Trace: [ 398.508833][T28841] [ 398.508839][T28841] dump_stack_lvl+0xf6/0x150 [ 398.508859][T28841] dump_stack+0x15/0x1a [ 398.508889][T28841] should_fail_ex+0x261/0x270 [ 398.508911][T28841] should_fail+0xb/0x10 [ 398.508928][T28841] should_fail_usercopy+0x1a/0x20 [ 398.508949][T28841] _copy_from_user+0x1c/0xa0 [ 398.509052][T28841] bpf_test_init+0xeb/0x160 [ 398.509084][T28841] bpf_prog_test_run_xdp+0x31f/0x8e0 [ 398.509100][T28841] ? kstrtouint_from_user+0xbf/0x100 [ 398.509148][T28841] ? __rcu_read_unlock+0x4e/0x70 [ 398.509169][T28841] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 398.509261][T28841] bpf_prog_test_run+0x20e/0x3a0 [ 398.509289][T28841] __sys_bpf+0x440/0x800 [ 398.509319][T28841] __x64_sys_bpf+0x43/0x50 [ 398.509345][T28841] x64_sys_call+0x23da/0x2e10 [ 398.509436][T28841] do_syscall_64+0xc9/0x1a0 [ 398.509457][T28841] ? clear_bhb_loop+0x25/0x80 [ 398.509475][T28841] ? clear_bhb_loop+0x25/0x80 [ 398.509493][T28841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.509511][T28841] RIP: 0033:0x7f067de8e169 [ 398.509577][T28841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.509644][T28841] RSP: 002b:00007f067c4f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 398.509660][T28841] RAX: ffffffffffffffda RBX: 00007f067e0b5fa0 RCX: 00007f067de8e169 [ 398.509670][T28841] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 398.509680][T28841] RBP: 00007f067c4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 398.509690][T28841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.509700][T28841] R13: 0000000000000000 R14: 00007f067e0b5fa0 R15: 00007ffe7a4ac088 [ 398.509717][T28841] [ 398.896939][T28858] bond0: entered promiscuous mode [ 398.901999][T28858] bond0: entered allmulticast mode [ 398.934403][T28858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.962644][T28858] bond0 (unregistering): Released all slaves [ 398.992001][T28868] team0: Port device bridge1 added [ 399.042803][T28874] hsr0 speed is unknown, defaulting to 1000 [ 399.055040][T28874] dummy0 speed is unknown, defaulting to 1000 [ 399.123189][T28881] loop2: detected capacity change from 0 to 512 [ 399.160062][T28881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.173039][T28881] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.174822][T28888] loop5: detected capacity change from 0 to 2048 [ 399.208345][T28893] loop0: detected capacity change from 0 to 512 [ 399.226391][T23784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.237043][T28893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.249832][T28893] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.387277][T24362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.461007][T28915] nfs4: Bad value for 'source' [ 399.568484][T28923] netlink: 'syz.0.7565': attribute type 13 has an invalid length. [ 399.596893][T28928] loop2: detected capacity change from 0 to 512 [ 399.603822][T28928] EXT4-fs: Ignoring removed bh option [ 399.610694][T28928] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 399.622929][T28928] EXT4-fs (loop2): 1 truncate cleaned up [ 399.630190][T28928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.652036][T28928] pimreg: entered allmulticast mode [ 399.657885][T28928] pimreg: left allmulticast mode [ 399.717815][T23784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.744795][T28934] loop2: detected capacity change from 0 to 2048 [ 399.861351][T28947] loop2: detected capacity change from 0 to 512 [ 399.897885][T28947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.910949][T28947] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.931532][T28953] loop6: detected capacity change from 0 to 256 [ 400.014333][T23784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.042961][T28961] loop2: detected capacity change from 0 to 2048 [ 400.240997][T28978] FAULT_INJECTION: forcing a failure. [ 400.240997][T28978] name failslab, interval 1, probability 0, space 0, times 0 [ 400.253713][T28978] CPU: 1 UID: 0 PID: 28978 Comm: syz.6.7587 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 400.253744][T28978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 400.253760][T28978] Call Trace: [ 400.253767][T28978] [ 400.253776][T28978] dump_stack_lvl+0xf6/0x150 [ 400.253843][T28978] dump_stack+0x15/0x1a [ 400.253863][T28978] should_fail_ex+0x261/0x270 [ 400.253892][T28978] should_failslab+0x8f/0xb0 [ 400.253920][T28978] __kmalloc_cache_noprof+0x55/0x320 [ 400.253962][T28978] ? xfrm_policy_alloc+0x62/0x1b0 [ 400.254067][T28978] xfrm_policy_alloc+0x62/0x1b0 [ 400.254091][T28978] xfrm_policy_construct+0x31/0x330 [ 400.254198][T28978] xfrm_add_policy+0x148/0x450 [ 400.254245][T28978] xfrm_user_rcv_msg+0x53a/0x630 [ 400.254295][T28978] ? obj_cgroup_charge+0xc6/0x170 [ 400.254326][T28978] ? xas_load+0x3ba/0x3d0 [ 400.254346][T28978] ? __rcu_read_unlock+0x4e/0x70 [ 400.254384][T28978] netlink_rcv_skb+0x12f/0x230 [ 400.254467][T28978] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 400.254502][T28978] xfrm_netlink_rcv+0x47/0x60 [ 400.254528][T28978] netlink_unicast+0x605/0x6c0 [ 400.254618][T28978] netlink_sendmsg+0x609/0x720 [ 400.254699][T28978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.254769][T28978] __sock_sendmsg+0x140/0x180 [ 400.254806][T28978] ____sys_sendmsg+0x350/0x4e0 [ 400.254834][T28978] __sys_sendmsg+0x1a0/0x240 [ 400.254875][T28978] __x64_sys_sendmsg+0x46/0x50 [ 400.254910][T28978] x64_sys_call+0x26f3/0x2e10 [ 400.254934][T28978] do_syscall_64+0xc9/0x1a0 [ 400.254965][T28978] ? clear_bhb_loop+0x25/0x80 [ 400.254988][T28978] ? clear_bhb_loop+0x25/0x80 [ 400.255010][T28978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.255150][T28978] RIP: 0033:0x7fbbb988e169 [ 400.255201][T28978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.255221][T28978] RSP: 002b:00007fbbb7ef7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.255313][T28978] RAX: ffffffffffffffda RBX: 00007fbbb9ab5fa0 RCX: 00007fbbb988e169 [ 400.255326][T28978] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 400.255339][T28978] RBP: 00007fbbb7ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 400.255383][T28978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.255395][T28978] R13: 0000000000000000 R14: 00007fbbb9ab5fa0 R15: 00007ffffb9d4d58 [ 400.255416][T28978] [ 400.517924][T28983] loop1: detected capacity change from 0 to 512 [ 400.524528][T28983] EXT4-fs: Ignoring removed bh option [ 400.530302][T28983] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 400.541256][T28983] EXT4-fs (loop1): 1 truncate cleaned up [ 400.548036][T28983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.569879][T28983] pimreg: entered allmulticast mode [ 400.575974][T28983] pimreg: left allmulticast mode [ 400.636533][T25828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.672540][T28997] loop1: detected capacity change from 0 to 2048 [ 400.770261][T29003] hsr0 speed is unknown, defaulting to 1000 [ 400.776995][T29003] dummy0 speed is unknown, defaulting to 1000 [ 400.896742][T29018] FAULT_INJECTION: forcing a failure. [ 400.896742][T29018] name failslab, interval 1, probability 0, space 0, times 0 [ 400.909545][T29018] CPU: 1 UID: 0 PID: 29018 Comm: syz.5.7599 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 400.909572][T29018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 400.909586][T29018] Call Trace: [ 400.909593][T29018] [ 400.909623][T29018] dump_stack_lvl+0xf6/0x150 [ 400.909647][T29018] dump_stack+0x15/0x1a [ 400.909744][T29018] should_fail_ex+0x261/0x270 [ 400.909768][T29018] should_failslab+0x8f/0xb0 [ 400.909791][T29018] __kmalloc_cache_noprof+0x55/0x320 [ 400.909816][T29018] ? tipc_sub_subscribe+0xc6/0x330 [ 400.909886][T29018] tipc_sub_subscribe+0xc6/0x330 [ 400.909921][T29018] tipc_conn_rcv_sub+0xfc/0x200 [ 400.909953][T29018] tipc_topsrv_kern_subscr+0x14c/0x1b0 [ 400.909982][T29018] tipc_group_create+0x269/0x2b0 [ 400.910033][T29018] tipc_sk_join+0x13f/0x2f0 [ 400.910056][T29018] tipc_setsockopt+0x641/0x6c0 [ 400.910078][T29018] ? __pfx_tipc_setsockopt+0x10/0x10 [ 400.910152][T29018] __sys_setsockopt+0x187/0x200 [ 400.910171][T29018] __x64_sys_setsockopt+0x66/0x80 [ 400.910189][T29018] x64_sys_call+0x2a09/0x2e10 [ 400.910206][T29018] do_syscall_64+0xc9/0x1a0 [ 400.910229][T29018] ? clear_bhb_loop+0x25/0x80 [ 400.910282][T29018] ? clear_bhb_loop+0x25/0x80 [ 400.910298][T29018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.910315][T29018] RIP: 0033:0x7f173264e169 [ 400.910327][T29018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.910340][T29018] RSP: 002b:00007f1730cb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 400.910413][T29018] RAX: ffffffffffffffda RBX: 00007f1732875fa0 RCX: 00007f173264e169 [ 400.910426][T29018] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 400.910438][T29018] RBP: 00007f1730cb7090 R08: 0000000000000010 R09: 0000000000000000 [ 400.910448][T29018] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 400.910458][T29018] R13: 0000000000000000 R14: 00007f1732875fa0 R15: 00007ffdeb1df898 [ 400.910473][T29018] [ 400.910480][T29018] tipc: Subscription rejected, no memory [ 401.145504][T29027] loop2: detected capacity change from 0 to 2048 [ 401.173346][T29027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.193747][T29027] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.230283][T29036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29036 comm=syz.5.7607 [ 401.244747][T29036] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7607'. [ 401.323406][T29043] FAULT_INJECTION: forcing a failure. [ 401.323406][T29043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.336482][T29043] CPU: 0 UID: 0 PID: 29043 Comm: syz.1.7609 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 401.336533][T29043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 401.336547][T29043] Call Trace: [ 401.336554][T29043] [ 401.336561][T29043] dump_stack_lvl+0xf6/0x150 [ 401.336586][T29043] dump_stack+0x15/0x1a [ 401.336637][T29043] should_fail_ex+0x261/0x270 [ 401.336701][T29043] should_fail+0xb/0x10 [ 401.336846][T29043] should_fail_usercopy+0x1a/0x20 [ 401.336868][T29043] _copy_from_user+0x1c/0xa0 [ 401.336895][T29043] copy_msghdr_from_user+0x54/0x2b0 [ 401.336921][T29043] ? __fget_files+0x186/0x1c0 [ 401.336942][T29043] __sys_sendmsg+0x141/0x240 [ 401.337015][T29043] __x64_sys_sendmsg+0x46/0x50 [ 401.337035][T29043] x64_sys_call+0x26f3/0x2e10 [ 401.337053][T29043] do_syscall_64+0xc9/0x1a0 [ 401.337074][T29043] ? clear_bhb_loop+0x25/0x80 [ 401.337153][T29043] ? clear_bhb_loop+0x25/0x80 [ 401.337171][T29043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.337240][T29043] RIP: 0033:0x7f42f390e169 [ 401.337252][T29043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.337267][T29043] RSP: 002b:00007f42f1f77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.337292][T29043] RAX: ffffffffffffffda RBX: 00007f42f3b35fa0 RCX: 00007f42f390e169 [ 401.337302][T29043] RDX: 0000000024000880 RSI: 00002000000000c0 RDI: 0000000000000005 [ 401.337312][T29043] RBP: 00007f42f1f77090 R08: 0000000000000000 R09: 0000000000000000 [ 401.337322][T29043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.337332][T29043] R13: 0000000000000000 R14: 00007f42f3b35fa0 R15: 00007ffde7d1e828 [ 401.337363][T29043] [ 401.545809][T29049] bond1: entered promiscuous mode [ 401.550919][T29049] bond1: entered allmulticast mode [ 401.556470][T29049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.574056][T29052] netlink: 'syz.5.7612': attribute type 13 has an invalid length. [ 401.592767][T29049] bond1 (unregistering): Released all slaves [ 401.614066][T29054] hsr0 speed is unknown, defaulting to 1000 [ 401.624025][T29054] dummy0 speed is unknown, defaulting to 1000 [ 401.726262][T29061] loop0: detected capacity change from 0 to 512 [ 401.758589][T29061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.779890][T29061] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.889659][T24362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.922904][T29072] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7617'. [ 401.939259][T29072] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 402.136517][T29040] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7604: bg 0: block 345: padding at end of block bitmap is not set [ 402.151963][T29040] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 402.180606][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 402.180617][ T29] audit: type=1400 audit(1745192781.330:48478): avc: denied { ioctl } for pid=29080 comm="syz.6.7621" path="socket:[86135]" dev="sockfs" ino=86135 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 402.180648][T29081] @: renamed from vlan0 [ 402.195706][ T29] audit: type=1400 audit(1745192781.340:48479): avc: denied { ioctl } for pid=29077 comm="syz.0.7620" path="socket:[85457]" dev="sockfs" ino=85457 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 402.243112][T23784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.256027][T29081] unsupported nla_type 52263 [ 402.270332][T29084] loop0: detected capacity change from 0 to 256 [ 402.307513][T29086] syzkaller0: entered promiscuous mode [ 402.307753][ T29] audit: type=1400 audit(1745192781.440:48480): avc: denied { bind } for pid=29085 comm="syz.2.7622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 402.313034][T29086] syzkaller0: entered allmulticast mode [ 402.332436][ T29] audit: type=1400 audit(1745192781.440:48481): avc: denied { name_bind } for pid=29085 comm="syz.2.7622" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 402.360016][ T29] audit: type=1400 audit(1745192781.440:48482): avc: denied { node_bind } for pid=29085 comm="syz.2.7622" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 402.471859][T29093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7625'. [ 402.488509][T29095] hsr0 speed is unknown, defaulting to 1000 [ 402.494956][T29095] dummy0 speed is unknown, defaulting to 1000 [ 402.508301][T29097] loop1: detected capacity change from 0 to 512 [ 402.514716][T29097] EXT4-fs: Ignoring removed mblk_io_submit option [ 402.521698][T29097] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 402.534257][T29097] EXT4-fs (loop1): 1 truncate cleaned up [ 402.540389][T29097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.554854][T29097] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.611633][ T29] audit: type=1326 audit(1745192781.760:48483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29109 comm="syz.0.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bcbae169 code=0x7ffc0000 [ 402.635234][ T29] audit: type=1326 audit(1745192781.760:48484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29109 comm="syz.0.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff4bcbae169 code=0x7ffc0000 [ 402.639566][T29110] netlink: 'syz.0.7632': attribute type 4 has an invalid length. [ 402.659024][ T29] audit: type=1326 audit(1745192781.760:48485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29109 comm="syz.0.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bcbae169 code=0x7ffc0000 [ 402.659050][ T29] audit: type=1326 audit(1745192781.760:48486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29109 comm="syz.0.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4bcbae169 code=0x7ffc0000 [ 402.666768][T29110] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.7632'. [ 402.749658][ T29] audit: type=1326 audit(1745192781.790:48487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29109 comm="syz.0.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bcbae169 code=0x7ffc0000 [ 402.904845][T29123] netlink: 'syz.2.7647': attribute type 13 has an invalid length. [ 402.928857][T29116] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7636'. [ 402.930950][T29125] syzkaller0: entered promiscuous mode [ 402.943413][T29125] syzkaller0: entered allmulticast mode [ 402.950288][T29123] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.959264][T29123] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.968154][T29123] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.977048][T29123] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.072743][T29133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.081401][T29133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.089520][T29133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.095800][T29136] loop5: detected capacity change from 0 to 512 [ 403.098044][T29133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.105450][T29136] EXT4-fs: Ignoring removed bh option [ 403.112707][T29137] netlink: 'syz.6.7639': attribute type 27 has an invalid length. [ 403.119106][T29136] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 403.125229][T29134] netlink: 'syz.6.7639': attribute type 27 has an invalid length. [ 403.148591][T29136] EXT4-fs (loop5): 1 truncate cleaned up [ 403.154621][T29136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.171617][T29136] pimreg: entered allmulticast mode [ 403.177388][T29136] pimreg: left allmulticast mode [ 403.246244][T26694] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.262778][T29141] FAULT_INJECTION: forcing a failure. [ 403.262778][T29141] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 403.276014][T29141] CPU: 0 UID: 0 PID: 29141 Comm: syz.5.7641 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 403.276067][T29141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 403.276081][T29141] Call Trace: [ 403.276087][T29141] [ 403.276093][T29141] dump_stack_lvl+0xf6/0x150 [ 403.276142][T29141] dump_stack+0x15/0x1a [ 403.276161][T29141] should_fail_ex+0x261/0x270 [ 403.276189][T29141] should_fail_alloc_page+0xfd/0x110 [ 403.276341][T29141] __alloc_frozen_pages_noprof+0x11d/0x360 [ 403.276365][T29141] alloc_pages_mpol+0xb6/0x260 [ 403.276474][T29141] vma_alloc_folio_noprof+0x19c/0x300 [ 403.276501][T29141] do_wp_page+0x64f/0x24e0 [ 403.276521][T29141] ? __rcu_read_lock+0x36/0x50 [ 403.276540][T29141] handle_mm_fault+0xc6c/0x2e80 [ 403.276636][T29141] ? mas_walk+0x204/0x320 [ 403.276659][T29141] ? __rcu_read_unlock+0x4e/0x70 [ 403.276681][T29141] exc_page_fault+0x3b9/0x6a0 [ 403.276705][T29141] asm_exc_page_fault+0x26/0x30 [ 403.276752][T29141] RIP: 0033:0x7f1732510be3 [ 403.276763][T29141] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 403.276778][T29141] RSP: 002b:00007f1730cb64a0 EFLAGS: 00010202 [ 403.276790][T29141] RAX: 0000000000000400 RBX: 00007f1730cb6540 RCX: 00007f1728897000 [ 403.276800][T29141] RDX: 00007f1730cb66e0 RSI: 0000000000000001 RDI: 00007f1730cb65e0 [ 403.276866][T29141] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001ab [ 403.276879][T29141] R10: 00000000000001c2 R11: 00007f1730cb6540 R12: 0000000000000001 [ 403.276944][T29141] R13: 00007f17326ebf40 R14: 0000000000000020 R15: 00007f1730cb65e0 [ 403.276963][T29141] [ 403.445791][T29141] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 403.455887][T29141] loop5: detected capacity change from 0 to 512 [ 403.463026][T29141] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 403.478516][T29141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.491171][T29141] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.597266][T26694] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.690082][T29156] loop5: detected capacity change from 0 to 512 [ 403.712723][T29158] hsr0 speed is unknown, defaulting to 1000 [ 403.718032][T29156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.718982][T29158] dummy0 speed is unknown, defaulting to 1000 [ 403.732102][T29156] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.796818][T29165] loop6: detected capacity change from 0 to 1764 [ 403.798243][T29164] @: renamed from vlan0 [ 403.809591][T29165] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 403.855764][T26694] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.931258][T29161] loop1: detected capacity change from 0 to 128 [ 403.939412][T29161] siw: device registration error -23 [ 404.012446][T29169] netlink: 'syz.5.7653': attribute type 1 has an invalid length. [ 404.275679][T29183] hsr0 speed is unknown, defaulting to 1000 [ 404.283299][T29183] dummy0 speed is unknown, defaulting to 1000 [ 404.490550][T29184] loop2: detected capacity change from 0 to 128 [ 404.500507][T29184] siw: device registration error -23 [ 404.751770][T29195] loop5: detected capacity change from 0 to 512 [ 404.768010][T29195] EXT4-fs: Ignoring removed mblk_io_submit option [ 404.775581][T29195] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 404.798207][T29195] EXT4-fs (loop5): 1 truncate cleaned up [ 404.830717][T29195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.852469][T29195] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.903043][T29205] loop0: detected capacity change from 0 to 512 [ 404.912265][T29203] loop5: detected capacity change from 0 to 256 [ 404.934974][T29205] EXT4-fs: Ignoring removed bh option [ 404.941834][T29205] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 404.956016][T29197] loop2: detected capacity change from 0 to 1024 [ 404.967747][T29197] EXT4-fs: Mount option(s) incompatible with ext2 [ 404.976711][T29205] EXT4-fs (loop0): 1 truncate cleaned up [ 404.982908][T29205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.010743][T29217] loop1: detected capacity change from 0 to 512 [ 405.048068][T29218] FAULT_INJECTION: forcing a failure. [ 405.048068][T29218] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 405.061293][T29218] CPU: 0 UID: 0 PID: 29218 Comm: syz.6.7667 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 405.061349][T29218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 405.061401][T29218] Call Trace: [ 405.061407][T29218] [ 405.061413][T29218] dump_stack_lvl+0xf6/0x150 [ 405.061433][T29218] dump_stack+0x15/0x1a [ 405.061452][T29218] should_fail_ex+0x261/0x270 [ 405.061474][T29218] should_fail_alloc_page+0xfd/0x110 [ 405.061572][T29218] __alloc_frozen_pages_noprof+0x11d/0x360 [ 405.061597][T29218] alloc_pages_mpol+0xb6/0x260 [ 405.061627][T29218] vma_alloc_folio_noprof+0x19c/0x300 [ 405.061680][T29218] do_wp_page+0x64f/0x24e0 [ 405.061701][T29218] ? __rcu_read_lock+0x36/0x50 [ 405.061724][T29218] handle_mm_fault+0xc6c/0x2e80 [ 405.061779][T29218] exc_page_fault+0x296/0x6a0 [ 405.061799][T29218] asm_exc_page_fault+0x26/0x30 [ 405.061820][T29218] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 405.061858][T29218] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 405.061874][T29218] RSP: 0018:ffffc900028a7bf8 EFLAGS: 00050206 [ 405.061887][T29218] RAX: ffff8881188e9b18 RBX: 0000200000004140 RCX: 0000000000001140 [ 405.061903][T29218] RDX: 0000000000000000 RSI: ffff8881260b02c0 RDI: 0000200000003000 [ 405.061916][T29218] RBP: ffff8881260b0000 R08: 0000000080000000 R09: 0000000000000000 [ 405.061929][T29218] R10: 00018881260b0000 R11: 00018881260b13ff R12: 0000000000001400 [ 405.061941][T29218] R13: 00007ffffffff000 R14: 0000200000002d40 R15: ffff8881260b0000 [ 405.061967][T29218] _copy_to_user+0x7c/0xa0 [ 405.062000][T29218] __htab_map_lookup_and_delete_batch+0xd93/0x1120 [ 405.062047][T29218] ? __pfx_htab_percpu_map_lookup_and_delete_batch+0x10/0x10 [ 405.062124][T29218] htab_percpu_map_lookup_and_delete_batch+0x33/0x40 [ 405.062152][T29218] bpf_map_do_batch+0x32f/0x3f0 [ 405.062255][T29218] __sys_bpf+0x634/0x800 [ 405.062299][T29218] __x64_sys_bpf+0x43/0x50 [ 405.062338][T29218] x64_sys_call+0x23da/0x2e10 [ 405.062362][T29218] do_syscall_64+0xc9/0x1a0 [ 405.062446][T29218] ? clear_bhb_loop+0x25/0x80 [ 405.062533][T29218] ? clear_bhb_loop+0x25/0x80 [ 405.062653][T29218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.062673][T29218] RIP: 0033:0x7fbbb988e169 [ 405.062688][T29218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.062749][T29218] RSP: 002b:00007fbbb7ed6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 405.062764][T29218] RAX: ffffffffffffffda RBX: 00007fbbb9ab6080 RCX: 00007fbbb988e169 [ 405.062774][T29218] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 405.062784][T29218] RBP: 00007fbbb7ed6090 R08: 0000000000000000 R09: 0000000000000000 [ 405.062795][T29218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 405.062808][T29218] R13: 0000000000000001 R14: 00007fbbb9ab6080 R15: 00007ffffb9d4d58 [ 405.062829][T29218] [ 405.397538][T29205] pimreg: entered allmulticast mode [ 405.406881][T29205] pimreg: left allmulticast mode [ 405.469876][T29224] syzkaller0: entered promiscuous mode [ 405.475387][T29224] syzkaller0: entered allmulticast mode [ 405.629996][T24362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.701991][T29236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7672'. [ 405.710911][T29236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7672'. [ 405.719819][T29236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7672'. [ 405.735211][T29236] pim6reg: entered allmulticast mode [ 405.841695][T29241] loop5: detected capacity change from 0 to 2048 [ 405.863257][T29242] loop1: detected capacity change from 0 to 512 [ 405.944571][T29242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.989325][T29242] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.027811][T29220] netlink: 'syz.2.7670': attribute type 1 has an invalid length. [ 406.065823][T29251] bond2: entered promiscuous mode [ 406.070906][T29251] bond2: entered allmulticast mode [ 406.078055][T25828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.088857][T29251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 406.115164][T29251] bond2 (unregistering): Released all slaves [ 406.162714][T29258] hsr0 speed is unknown, defaulting to 1000 [ 406.170210][T29258] dummy0 speed is unknown, defaulting to 1000 [ 406.207441][T29261] FAULT_INJECTION: forcing a failure. [ 406.207441][T29261] name failslab, interval 1, probability 0, space 0, times 0 [ 406.220186][T29261] CPU: 1 UID: 0 PID: 29261 Comm: syz.1.7682 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 406.220213][T29261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 406.220227][T29261] Call Trace: [ 406.220234][T29261] [ 406.220241][T29261] dump_stack_lvl+0xf6/0x150 [ 406.220327][T29261] dump_stack+0x15/0x1a [ 406.220345][T29261] should_fail_ex+0x261/0x270 [ 406.220371][T29261] should_failslab+0x8f/0xb0 [ 406.220393][T29261] kmem_cache_alloc_noprof+0x59/0x340 [ 406.220455][T29261] ? copy_signal+0x54/0x340 [ 406.220538][T29261] ? copy_sighand+0x52/0x1b0 [ 406.220559][T29261] copy_signal+0x54/0x340 [ 406.220578][T29261] copy_process+0xcd5/0x1f60 [ 406.220678][T29261] kernel_clone+0x168/0x5d0 [ 406.220715][T29261] __x64_sys_clone+0xe9/0x120 [ 406.220746][T29261] x64_sys_call+0x2dc9/0x2e10 [ 406.220765][T29261] do_syscall_64+0xc9/0x1a0 [ 406.220792][T29261] ? clear_bhb_loop+0x25/0x80 [ 406.220863][T29261] ? clear_bhb_loop+0x25/0x80 [ 406.220886][T29261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.220909][T29261] RIP: 0033:0x7f42f390e169 [ 406.220923][T29261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.220938][T29261] RSP: 002b:00007f42f1f55fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 406.220974][T29261] RAX: ffffffffffffffda RBX: 00007f42f3b36080 RCX: 00007f42f390e169 [ 406.220985][T29261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a004000 [ 406.220997][T29261] RBP: 00007f42f1f56090 R08: 0000000000000000 R09: 0000000000000000 [ 406.221007][T29261] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 406.221017][T29261] R13: 0000000000000000 R14: 00007f42f3b36080 R15: 00007ffde7d1e828 [ 406.221033][T29261] [ 406.292066][T29264] hsr0 speed is unknown, defaulting to 1000 [ 406.417861][T29264] dummy0 speed is unknown, defaulting to 1000 [ 406.615189][T29274] hsr0 speed is unknown, defaulting to 1000 [ 406.677080][T29274] dummy0 speed is unknown, defaulting to 1000 [ 406.709880][T29281] bond1: entered promiscuous mode [ 406.715210][T29281] bond1: entered allmulticast mode [ 406.749005][T29281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.796440][T29281] bond1 (unregistering): Released all slaves [ 406.899305][T29287] loop5: detected capacity change from 0 to 512 [ 406.919659][T29290] netlink: 'syz.0.7694': attribute type 13 has an invalid length. [ 406.933368][T29291] loop6: detected capacity change from 0 to 512 [ 406.939906][T29291] EXT4-fs: Ignoring removed mblk_io_submit option [ 406.947428][T29291] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 406.961026][T29291] EXT4-fs (loop6): 1 truncate cleaned up [ 406.967206][T29287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.986815][T29291] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.001135][T29287] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.048739][T29291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.111617][T26694] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.210968][T29300] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7697'. [ 407.231789][T29301] netlink: 'syz.5.7695': attribute type 13 has an invalid length. [ 407.244871][T29300] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7697'. [ 407.253900][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 407.253913][ T29] audit: type=1400 audit(1745192786.400:48556): avc: denied { execute } for pid=29299 comm="syz.6.7697" path="/selinux/commit_pending_bools" dev="selinuxfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 407.435708][T29308] loop2: detected capacity change from 0 to 512 [ 407.462296][T29310] loop6: detected capacity change from 0 to 512 [ 407.476774][T29310] EXT4-fs: Ignoring removed bh option [ 407.490211][T29310] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 407.517038][T29310] EXT4-fs (loop6): 1 truncate cleaned up [ 407.523034][T29310] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.539658][T29310] pimreg: left allmulticast mode [ 407.594398][T29318] bond1: entered promiscuous mode [ 407.599582][T29318] bond1: entered allmulticast mode [ 407.604994][T29318] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.613308][T22289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.634016][T29318] bond1 (unregistering): Released all slaves [ 407.690817][T29323] bond1: entered promiscuous mode [ 407.695877][T29323] bond1: entered allmulticast mode [ 407.725928][T29323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.738349][ T29] audit: type=1400 audit(1745192786.890:48557): avc: denied { mount } for pid=29328 comm="syz.2.7707" name="/" dev="ramfs" ino=85961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 407.771051][T29323] bond1 (unregistering): Released all slaves [ 407.809039][T29333] hsr0 speed is unknown, defaulting to 1000 [ 407.815214][T29333] dummy0 speed is unknown, defaulting to 1000 [ 407.872130][T29327] netlink: 'syz.6.7706': attribute type 1 has an invalid length. [ 407.943300][ T29] audit: type=1400 audit(1745192787.090:48558): avc: denied { setcheckreqprot } for pid=29340 comm="syz.2.7711" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 407.983788][T29343] FAULT_INJECTION: forcing a failure. [ 407.983788][T29343] name failslab, interval 1, probability 0, space 0, times 0 [ 407.996512][T29343] CPU: 0 UID: 0 PID: 29343 Comm: syz.1.7712 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 407.996545][T29343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 407.996559][T29343] Call Trace: [ 407.996633][T29343] [ 407.996641][T29343] dump_stack_lvl+0xf6/0x150 [ 407.996669][T29343] dump_stack+0x15/0x1a [ 407.996689][T29343] should_fail_ex+0x261/0x270 [ 407.996717][T29343] should_failslab+0x8f/0xb0 [ 407.996743][T29343] __kmalloc_noprof+0xad/0x410 [ 407.996823][T29343] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 407.996923][T29343] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 407.996958][T29343] ? ns_capable+0x7d/0xb0 [ 407.996996][T29343] genl_rcv_msg+0x486/0x6f0 [ 407.997028][T29343] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 407.997093][T29343] ? should_fail_ex+0x31/0x270 [ 407.997120][T29343] ? __rcu_read_unlock+0x4e/0x70 [ 407.997144][T29343] ? avc_has_perm_noaudit+0x1cc/0x210 [ 407.997237][T29343] netlink_rcv_skb+0x12f/0x230 [ 407.997259][T29343] ? __pfx_genl_rcv_msg+0x10/0x10 [ 407.997295][T29343] genl_rcv+0x28/0x40 [ 407.997328][T29343] netlink_unicast+0x605/0x6c0 [ 407.997406][T29343] netlink_sendmsg+0x609/0x720 [ 407.997433][T29343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.997455][T29343] __sock_sendmsg+0x140/0x180 [ 407.997488][T29343] ____sys_sendmsg+0x350/0x4e0 [ 407.997589][T29343] __sys_sendmsg+0x1a0/0x240 [ 407.997632][T29343] __x64_sys_sendmsg+0x46/0x50 [ 407.997657][T29343] x64_sys_call+0x26f3/0x2e10 [ 407.997701][T29343] do_syscall_64+0xc9/0x1a0 [ 407.997728][T29343] ? clear_bhb_loop+0x25/0x80 [ 407.997818][T29343] ? clear_bhb_loop+0x25/0x80 [ 407.997951][T29343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.997975][T29343] RIP: 0033:0x7f42f390e169 [ 407.997992][T29343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.998013][T29343] RSP: 002b:00007f42f1f77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.998036][T29343] RAX: ffffffffffffffda RBX: 00007f42f3b35fa0 RCX: 00007f42f390e169 [ 407.998051][T29343] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 407.998142][T29343] RBP: 00007f42f1f77090 R08: 0000000000000000 R09: 0000000000000000 [ 407.998158][T29343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.998173][T29343] R13: 0000000000000000 R14: 00007f42f3b35fa0 R15: 00007ffde7d1e828 [ 407.998197][T29343] [ 408.006583][ T29] audit: type=1400 audit(1745192787.150:48559): avc: denied { validate_trans } for pid=29340 comm="syz.2.7711" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 408.128841][T29347] loop6: detected capacity change from 0 to 512 [ 408.274612][T29347] EXT4-fs: Ignoring removed bh option [ 408.274918][T29347] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 408.291277][T29347] EXT4-fs (loop6): 1 truncate cleaned up [ 408.297439][T29347] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.319815][T29347] pimreg: entered allmulticast mode [ 408.336139][T29347] pimreg: left allmulticast mode [ 408.351366][T29352] netlink: 'syz.1.7725': attribute type 13 has an invalid length. [ 408.417941][T22289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.527755][ T29] audit: type=1400 audit(1745192787.680:48560): avc: denied { shutdown } for pid=29366 comm="syz.6.7719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 408.711548][T29369] hsr0 speed is unknown, defaulting to 1000 [ 409.339267][T29369] dummy0 speed is unknown, defaulting to 1000 [ 409.430561][T29382] loop6: detected capacity change from 0 to 512 [ 409.493870][T29385] loop2: detected capacity change from 0 to 512 [ 409.500725][T29382] EXT4-fs: Ignoring removed mblk_io_submit option [ 409.508769][T29382] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 409.549104][T29385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.563238][T29385] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.575511][T29382] EXT4-fs (loop6): 1 truncate cleaned up [ 409.581752][T29382] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.648916][T29391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7726'. [ 409.657820][T29391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7726'. [ 409.666783][T29391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7726'. [ 409.680496][T29391] pim6reg: entered allmulticast mode [ 409.733336][T29378] netlink: 'syz.0.7724': attribute type 1 has an invalid length. [ 409.843236][T29382] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.889660][T23784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.972219][T29396] loop1: detected capacity change from 0 to 512 [ 410.009670][T29396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.037778][T29396] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.097532][T29405] loop6: detected capacity change from 0 to 512 [ 410.133237][T29405] EXT4-fs: Ignoring removed bh option [ 410.139286][T25828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.152641][T29405] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 410.176635][T29405] EXT4-fs (loop6): 1 truncate cleaned up [ 410.191013][T29405] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.212858][T29405] pimreg: entered allmulticast mode [ 410.221180][T29405] pimreg: left allmulticast mode [ 410.299430][T22289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.416605][T29424] hsr0 speed is unknown, defaulting to 1000 [ 410.422636][ T29] audit: type=1400 audit(1745192789.560:48561): avc: denied { append } for pid=29425 comm="syz.6.7739" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 410.447919][T29424] dummy0 speed is unknown, defaulting to 1000 [ 410.476871][T29428] netlink: 'syz.6.7740': attribute type 13 has an invalid length. [ 410.568099][T29431] loop5: detected capacity change from 0 to 512 [ 410.589371][T29431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.601994][T29431] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.669256][T26694] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.690628][T29436] loop5: detected capacity change from 0 to 512 [ 410.711265][T29436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.729637][T29436] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.765900][T26694] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.789428][T29444] loop5: detected capacity change from 0 to 512 [ 410.799448][T29444] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.7744: bg 0: block 5: invalid block bitmap [ 410.804197][T29447] loop0: detected capacity change from 0 to 512 [ 410.812464][T29444] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 410.828185][T29444] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7744: invalid indirect mapped block 3 (level 2) [ 410.830095][T29447] EXT4-fs: Ignoring removed mblk_io_submit option [ 410.842097][T29444] EXT4-fs (loop5): 1 orphan inode deleted [ 410.849829][T29447] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 410.853608][T29444] EXT4-fs (loop5): 1 truncate cleaned up [ 410.869643][T29444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.889729][ T29] audit: type=1326 audit(1745192790.040:48562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29442 comm="syz.5.7744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173264e169 code=0x7ffc0000 [ 410.890743][T29447] EXT4-fs (loop0): 1 truncate cleaned up [ 410.919911][T29447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.933412][T29447] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.958579][T26694] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.970312][T29452] Cannot find add_set index 0 as target [ 410.980968][ T29] audit: type=1326 audit(1745192790.130:48563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29453 comm="syz.5.7747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173264e169 code=0x7ffc0000 [ 411.004762][ T29] audit: type=1326 audit(1745192790.130:48564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29453 comm="syz.5.7747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173264e169 code=0x7ffc0000 [ 411.005679][T29455] loop5: detected capacity change from 0 to 2048 [ 411.028383][ T29] audit: type=1326 audit(1745192790.130:48565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29453 comm="syz.5.7747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f173264e169 code=0x7ffc0000 [ 411.146745][T29465] hsr0 speed is unknown, defaulting to 1000 [ 411.156498][T29465] dummy0 speed is unknown, defaulting to 1000 [ 411.172680][T29468] FAULT_INJECTION: forcing a failure. [ 411.172680][T29468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.185813][T29468] CPU: 0 UID: 0 PID: 29468 Comm: syz.0.7753 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 411.185843][T29468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 411.185857][T29468] Call Trace: [ 411.185875][T29468] [ 411.185882][T29468] dump_stack_lvl+0xf6/0x150 [ 411.185928][T29468] dump_stack+0x15/0x1a [ 411.185946][T29468] should_fail_ex+0x261/0x270 [ 411.185972][T29468] should_fail+0xb/0x10 [ 411.185993][T29468] should_fail_usercopy+0x1a/0x20 [ 411.186061][T29468] _copy_from_user+0x1c/0xa0 [ 411.186091][T29468] get_user_ifreq+0x4f/0x100 [ 411.186130][T29468] sock_do_ioctl+0xcb/0x220 [ 411.186161][T29468] sock_ioctl+0x436/0x630 [ 411.186278][T29468] ? __pfx_sock_ioctl+0x10/0x10 [ 411.186385][T29468] __se_sys_ioctl+0xc9/0x140 [ 411.186452][T29468] __x64_sys_ioctl+0x43/0x50 [ 411.186482][T29468] x64_sys_call+0x168d/0x2e10 [ 411.186504][T29468] do_syscall_64+0xc9/0x1a0 [ 411.186539][T29468] ? clear_bhb_loop+0x25/0x80 [ 411.186562][T29468] ? clear_bhb_loop+0x25/0x80 [ 411.186583][T29468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.186684][T29468] RIP: 0033:0x7ff4bcbae169 [ 411.186699][T29468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.186719][T29468] RSP: 002b:00007ff4bb217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.186738][T29468] RAX: ffffffffffffffda RBX: 00007ff4bcdd5fa0 RCX: 00007ff4bcbae169 [ 411.186751][T29468] RDX: 0000200000000500 RSI: 0000000000008946 RDI: 0000000000000003 [ 411.186764][T29468] RBP: 00007ff4bb217090 R08: 0000000000000000 R09: 0000000000000000 [ 411.186776][T29468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.186794][T29468] R13: 0000000000000000 R14: 00007ff4bcdd5fa0 R15: 00007ffd695406c8 [ 411.186813][T29468] [ 411.281916][T29471] loop5: detected capacity change from 0 to 512 [ 411.427651][T29474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7750'. [ 411.436561][T29474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7750'. [ 411.445439][T29474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7750'. [ 411.466822][T29476] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7756'. [ 411.475917][T29476] netlink: 4972 bytes leftover after parsing attributes in process `syz.1.7756'. [ 411.491171][T29471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.504629][T29471] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.700426][T29473] loop0: detected capacity change from 0 to 256 [ 411.769858][T26694] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.851186][T29494] loop1: detected capacity change from 0 to 2048 [ 412.003016][T29502] hsr0 speed is unknown, defaulting to 1000 [ 412.009530][T29502] dummy0 speed is unknown, defaulting to 1000 [ 412.931208][T29530] loop0: detected capacity change from 0 to 256 [ 412.953185][T29532] loop6: detected capacity change from 0 to 256 [ 412.977375][T29534] netlink: 'syz.6.7775': attribute type 13 has an invalid length. [ 413.048710][T29537] loop1: detected capacity change from 0 to 2048 [ 413.077445][T29537] loop1: p1 < > p4 [ 413.086740][T29537] loop1: p4 size 8388608 extends beyond EOD, truncated [ 413.092276][T29539] hsr0 speed is unknown, defaulting to 1000 [ 413.101889][T29543] bond1: entered promiscuous mode [ 413.107047][T29543] bond1: entered allmulticast mode [ 413.112480][T29543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 413.121630][T29543] bond1 (unregistering): Released all slaves [ 413.130080][T29539] dummy0 speed is unknown, defaulting to 1000 [ 413.183078][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 413.183107][ T29] audit: type=1326 audit(1745192792.330:48673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29549 comm="syz.1.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f390e169 code=0x7ffc0000 [ 413.220380][T29550] loop1: detected capacity change from 0 to 2048 [ 413.230888][ T29] audit: type=1326 audit(1745192792.340:48674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29549 comm="syz.1.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f390e169 code=0x7ffc0000 [ 413.254480][ T29] audit: type=1326 audit(1745192792.340:48675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29549 comm="syz.1.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f42f390e169 code=0x7ffc0000 [ 413.278067][ T29] audit: type=1326 audit(1745192792.340:48676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29549 comm="syz.1.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f390e169 code=0x7ffc0000 [ 413.301608][ T29] audit: type=1326 audit(1745192792.340:48677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29549 comm="syz.1.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f390e169 code=0x7ffc0000 [ 413.325166][ T29] audit: type=1326 audit(1745192792.340:48678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29549 comm="syz.1.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42f390e169 code=0x7ffc0000 [ 413.348720][ T29] audit: type=1326 audit(1745192792.340:48679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29549 comm="syz.1.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f390e169 code=0x7ffc0000 [ 413.372334][ T29] audit: type=1326 audit(1745192792.340:48680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29549 comm="syz.1.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42f390e169 code=0x7ffc0000 [ 413.395975][ T29] audit: type=1326 audit(1745192792.340:48681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29549 comm="syz.1.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f390e169 code=0x7ffc0000 [ 413.419630][ T29] audit: type=1326 audit(1745192792.340:48682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29549 comm="syz.1.7780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42f390e169 code=0x7ffc0000 [ 413.453969][T29561] FAULT_INJECTION: forcing a failure. [ 413.453969][T29561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.467040][T29561] CPU: 0 UID: 0 PID: 29561 Comm: syz.2.7784 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 413.467068][T29561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 413.467082][T29561] Call Trace: [ 413.467088][T29561] [ 413.467096][T29561] dump_stack_lvl+0xf6/0x150 [ 413.467200][T29561] dump_stack+0x15/0x1a [ 413.467217][T29561] should_fail_ex+0x261/0x270 [ 413.467242][T29561] should_fail+0xb/0x10 [ 413.467263][T29561] should_fail_usercopy+0x1a/0x20 [ 413.467289][T29561] _copy_to_user+0x20/0xa0 [ 413.467380][T29561] simple_read_from_buffer+0xb2/0x130 [ 413.467467][T29561] proc_fail_nth_read+0x103/0x140 [ 413.467497][T29561] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.467647][T29561] vfs_read+0x1b2/0x710 [ 413.467664][T29561] ? __rcu_read_unlock+0x4e/0x70 [ 413.467685][T29561] ? __fget_files+0x186/0x1c0 [ 413.467710][T29561] ksys_read+0xeb/0x1b0 [ 413.467794][T29561] __x64_sys_read+0x42/0x50 [ 413.467808][T29561] x64_sys_call+0x2a3b/0x2e10 [ 413.467829][T29561] do_syscall_64+0xc9/0x1a0 [ 413.467854][T29561] ? clear_bhb_loop+0x25/0x80 [ 413.467876][T29561] ? clear_bhb_loop+0x25/0x80 [ 413.467963][T29561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.468063][T29561] RIP: 0033:0x7f067de8cb7c [ 413.468078][T29561] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 413.468095][T29561] RSP: 002b:00007f067c4f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.468114][T29561] RAX: ffffffffffffffda RBX: 00007f067e0b5fa0 RCX: 00007f067de8cb7c [ 413.468138][T29561] RDX: 000000000000000f RSI: 00007f067c4f70a0 RDI: 0000000000000006 [ 413.468148][T29561] RBP: 00007f067c4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 413.468158][T29561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.468167][T29561] R13: 0000000000000000 R14: 00007f067e0b5fa0 R15: 00007ffe7a4ac088 [ 413.468186][T29561] [ 413.672339][T29565] loop0: detected capacity change from 0 to 512 [ 413.679010][T29565] EXT4-fs: Ignoring removed mblk_io_submit option [ 413.704267][T29565] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 413.736222][T29565] EXT4-fs (loop0): 1 truncate cleaned up [ 413.752801][T29565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.778075][T24362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.812275][T29582] bond2: entered promiscuous mode [ 413.817423][T29582] bond2: entered allmulticast mode [ 413.822712][T29582] 8021q: adding VLAN 0 to HW filter on device bond2 [ 413.831946][T29582] bond2 (unregistering): Released all slaves [ 413.896421][T29588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29588 comm=syz.5.7792 [ 413.913132][T29588] loop5: detected capacity change from 0 to 256 [ 414.041678][T29595] loop0: detected capacity change from 0 to 512 [ 414.057933][T29595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.070554][T29595] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.136133][T24362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.202003][T29601] loop0: detected capacity change from 0 to 2048 [ 414.323620][T29607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=29607 comm=syz.6.7799 [ 414.389937][T29615] loop6: detected capacity change from 0 to 512 [ 414.396427][T29615] EXT4-fs: Ignoring removed mblk_io_submit option [ 414.403246][T29615] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 414.414708][T29615] EXT4-fs (loop6): 1 truncate cleaned up [ 414.420648][T29615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.434159][T29615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.463556][T29618] bond2: entered promiscuous mode [ 414.468742][T29618] bond2: entered allmulticast mode [ 414.474079][T29618] 8021q: adding VLAN 0 to HW filter on device bond2 [ 414.483142][T29618] bond2 (unregistering): Released all slaves [ 414.612964][T29626] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 414.633749][T29630] loop1: detected capacity change from 0 to 512 [ 414.642653][T29630] EXT4-fs: Ignoring removed nomblk_io_submit option [ 414.660770][T29630] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.7807: corrupted in-inode xattr: invalid ea_ino [ 414.674390][T29630] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.7807: couldn't read orphan inode 15 (err -117) [ 414.686949][T29621] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 414.687033][T29630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.709325][T29630] EXT4-fs error (device loop1): ext4_lookup:1793: inode #2: comm syz.1.7807: deleted inode referenced: 15 [ 414.745805][T25828] EXT4-fs error (device loop1): htree_dirblock_to_tree:1082: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 414.777919][T29634] loop5: detected capacity change from 0 to 2048 [ 414.799419][T29636] hsr0 speed is unknown, defaulting to 1000 [ 414.809214][T29636] dummy0 speed is unknown, defaulting to 1000 [ 414.905505][T29638] hsr0 speed is unknown, defaulting to 1000 [ 414.911996][T29638] dummy0 speed is unknown, defaulting to 1000 [ 415.015694][T29657] hsr0 speed is unknown, defaulting to 1000 [ 415.022465][T29657] dummy0 speed is unknown, defaulting to 1000 [ 415.023881][T29645] hsr0 speed is unknown, defaulting to 1000 [ 415.046010][T29645] dummy0 speed is unknown, defaulting to 1000 [ 415.141624][T29670] loop2: detected capacity change from 0 to 1024 [ 415.148605][T29670] EXT4-fs: inline encryption not supported [ 415.154534][T29670] EXT4-fs: Ignoring removed bh option [ 415.162129][ T12] bond0 (unregistering): Released all slaves [ 415.229456][ T12] hsr_slave_0: left promiscuous mode [ 415.235177][ T12] hsr_slave_1: left promiscuous mode [ 415.237233][T29676] loop2: detected capacity change from 0 to 2048 [ 415.324738][T29680] FAULT_INJECTION: forcing a failure. [ 415.324738][T29680] name failslab, interval 1, probability 0, space 0, times 0 [ 415.337569][T29680] CPU: 1 UID: 0 PID: 29680 Comm: syz.2.7822 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 415.337591][T29680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 415.337604][T29680] Call Trace: [ 415.337610][T29680] [ 415.337616][T29680] dump_stack_lvl+0xf6/0x150 [ 415.337664][T29680] dump_stack+0x15/0x1a [ 415.337678][T29680] should_fail_ex+0x261/0x270 [ 415.337697][T29680] should_failslab+0x8f/0xb0 [ 415.337731][T29680] __kmalloc_cache_noprof+0x55/0x320 [ 415.337762][T29680] ? xfrm_policy_alloc+0x62/0x1b0 [ 415.337857][T29680] xfrm_policy_alloc+0x62/0x1b0 [ 415.337876][T29680] xfrm_policy_construct+0x31/0x330 [ 415.337918][T29680] xfrm_add_policy+0x148/0x450 [ 415.337945][T29680] xfrm_user_rcv_msg+0x53a/0x630 [ 415.337965][T29680] ? obj_cgroup_charge+0xc6/0x170 [ 415.338007][T29680] ? xas_load+0x3ba/0x3d0 [ 415.338032][T29680] ? __rcu_read_unlock+0x4e/0x70 [ 415.338103][T29680] netlink_rcv_skb+0x12f/0x230 [ 415.338123][T29680] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 415.338152][T29680] xfrm_netlink_rcv+0x47/0x60 [ 415.338177][T29680] netlink_unicast+0x605/0x6c0 [ 415.338221][T29680] netlink_sendmsg+0x609/0x720 [ 415.338244][T29680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.338323][T29680] __sock_sendmsg+0x140/0x180 [ 415.338348][T29680] ____sys_sendmsg+0x350/0x4e0 [ 415.338421][T29680] __sys_sendmsg+0x1a0/0x240 [ 415.338459][T29680] __x64_sys_sendmsg+0x46/0x50 [ 415.338525][T29680] x64_sys_call+0x26f3/0x2e10 [ 415.338545][T29680] do_syscall_64+0xc9/0x1a0 [ 415.338565][T29680] ? clear_bhb_loop+0x25/0x80 [ 415.338582][T29680] ? clear_bhb_loop+0x25/0x80 [ 415.338599][T29680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.338654][T29680] RIP: 0033:0x7f067de8e169 [ 415.338669][T29680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.338685][T29680] RSP: 002b:00007f067c4f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.338701][T29680] RAX: ffffffffffffffda RBX: 00007f067e0b5fa0 RCX: 00007f067de8e169 [ 415.338711][T29680] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 415.338732][T29680] RBP: 00007f067c4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 415.338775][T29680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.338807][T29680] R13: 0000000000000000 R14: 00007f067e0b5fa0 R15: 00007ffe7a4ac088 [ 415.338823][T29680] [ 415.590710][T29645] chnl_net:caif_netlink_parms(): no params data found [ 415.627207][T29683] netlink: 'syz.0.7823': attribute type 13 has an invalid length. [ 415.639744][T29688] loop2: detected capacity change from 0 to 512 [ 415.658105][T29688] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.670228][T29645] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.677336][T29645] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.684590][T29645] bridge_slave_0: entered allmulticast mode [ 415.692169][T29645] bridge_slave_0: entered promiscuous mode [ 415.699086][T29645] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.706137][T29645] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.713594][T29645] bridge_slave_1: entered allmulticast mode [ 415.720155][T29645] bridge_slave_1: entered promiscuous mode [ 415.735861][T29645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.746166][T29645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.766189][T29645] team0: Port device team_slave_0 added [ 415.774763][T29645] team0: Port device team_slave_1 added [ 415.797062][T29645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.804038][T29645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.829992][T29645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.841138][T29645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.848092][T29645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.874044][T29645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.934369][T29645] hsr_slave_0: entered promiscuous mode [ 415.947189][T29645] hsr_slave_1: entered promiscuous mode [ 415.992107][T29707] loop5: detected capacity change from 0 to 512 [ 416.050148][T29707] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.065032][T29645] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 416.080182][T29645] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 416.137130][T29645] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 416.174927][T29645] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 416.200661][T29645] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.207743][T29645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.215203][T29645] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.222251][T29645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.225421][T29713] loop5: detected capacity change from 0 to 2048 [ 416.241026][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.249579][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.327268][T29645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.341770][T29645] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.357378][T21188] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.364455][T21188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.387360][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.394412][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.472105][T29645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.536268][T29727] loop5: detected capacity change from 0 to 512 [ 416.563849][T29727] EXT4-fs: Ignoring removed mblk_io_submit option [ 416.580372][T29727] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 416.587262][T29645] veth0_vlan: entered promiscuous mode [ 416.597771][T29645] veth1_vlan: entered promiscuous mode [ 416.607610][T29727] EXT4-fs (loop5): 1 truncate cleaned up [ 416.610185][T29645] veth0_macvtap: entered promiscuous mode [ 416.620205][T29645] veth1_macvtap: entered promiscuous mode [ 416.632230][T29645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.647110][T29645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.661634][T29645] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.670466][T29645] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.679210][T29645] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.687917][T29645] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.714925][T29742] loop0: detected capacity change from 0 to 128 [ 416.739941][T29741] loop5: detected capacity change from 0 to 512 [ 416.764000][T29741] EXT4-fs: Ignoring removed mblk_io_submit option [ 416.794756][T29741] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 416.827332][T29741] EXT4-fs (loop5): 1 truncate cleaned up [ 416.940168][T29763] loop6: detected capacity change from 0 to 512 [ 416.948274][T29763] EXT4-fs: Ignoring removed bh option [ 416.966388][T29763] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 416.996405][T29763] EXT4-fs (loop6): 1 truncate cleaned up [ 417.006137][T29761] pimreg: entered allmulticast mode [ 417.014184][T29761] pimreg: left allmulticast mode [ 417.120644][T29772] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 417.218063][T29768] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 417.382082][T29774] loop6: detected capacity change from 0 to 512 [ 417.399927][T29774] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.461861][T29780] bond2: entered promiscuous mode [ 417.462745][T29783] loop2: detected capacity change from 0 to 128 [ 417.466960][T29780] bond2: entered allmulticast mode [ 417.479567][T29780] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.498579][T29780] bond2 (unregistering): Released all slaves [ 417.507598][T29785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7849'. [ 417.516641][T29785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7849'. [ 417.548018][T29788] loop2: detected capacity change from 0 to 2048 [ 417.615747][T29798] loop2: detected capacity change from 0 to 512 [ 417.622501][T29798] EXT4-fs: Ignoring removed mblk_io_submit option [ 417.629643][T29798] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 417.652394][T29798] EXT4-fs (loop2): 1 truncate cleaned up [ 417.657428][T29803] loop0: detected capacity change from 0 to 512 [ 417.664671][T29803] EXT4-fs: Ignoring removed bh option [ 417.677919][T29803] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 417.690232][T29805] loop6: detected capacity change from 0 to 256 [ 417.722914][T29803] EXT4-fs (loop0): 1 truncate cleaned up [ 417.732982][T29803] pimreg: entered allmulticast mode [ 417.739461][T29803] pimreg: left allmulticast mode [ 417.806617][T29814] hsr0 speed is unknown, defaulting to 1000 [ 417.812874][T29814] dummy0 speed is unknown, defaulting to 1000 [ 417.822974][T29816] loop2: detected capacity change from 0 to 512 [ 417.838517][T29816] EXT4-fs: Ignoring removed mblk_io_submit option [ 417.845895][T29816] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 417.859199][T29816] EXT4-fs (loop2): 1 truncate cleaned up [ 417.866722][T29818] loop5: detected capacity change from 0 to 128 [ 417.915722][T29824] loop5: detected capacity change from 0 to 512 [ 417.919426][T29826] loop6: detected capacity change from 0 to 512 [ 417.931087][T29826] ext4 filesystem being mounted at /575/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 417.945126][T29826] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7864'. [ 417.954103][T29829] loop0: detected capacity change from 0 to 2048 [ 417.956228][T29826] vlan0: entered allmulticast mode [ 417.965665][T29826] batadv0: entered allmulticast mode [ 417.985792][T29824] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.109792][T29848] loop2: detected capacity change from 0 to 512 [ 418.120964][T29848] EXT4-fs: Ignoring removed bh option [ 418.127965][T29848] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 418.154116][T29848] EXT4-fs (loop2): 1 truncate cleaned up [ 418.176447][T29853] loop6: detected capacity change from 0 to 512 [ 418.182622][T29850] loop7: detected capacity change from 0 to 512 [ 418.183667][T29853] EXT4-fs: Ignoring removed mblk_io_submit option [ 418.195835][T29853] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 418.208298][T29850] EXT4-fs: Ignoring removed mblk_io_submit option [ 418.213229][T29848] pimreg: entered allmulticast mode [ 418.215007][T29850] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 418.234349][T29848] pimreg: left allmulticast mode [ 418.240136][T29853] EXT4-fs (loop6): 1 truncate cleaned up [ 418.249572][T29850] EXT4-fs (loop7): 1 truncate cleaned up [ 418.311123][T29861] loop5: detected capacity change from 0 to 256 [ 418.326536][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 418.326549][ T29] audit: type=1326 audit(1745192797.480:48974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29862 comm="syz.6.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb988e169 code=0x7ffc0000 [ 418.385229][T29869] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 [ 418.393019][T29869] audit: out of memory in audit_log_start [ 418.406434][ T29] audit: type=1326 audit(1745192797.510:48975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29862 comm="syz.6.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb988e169 code=0x7ffc0000 [ 418.430016][ T29] audit: type=1326 audit(1745192797.510:48976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29862 comm="syz.6.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbb988e169 code=0x7ffc0000 [ 418.453675][ T29] audit: type=1326 audit(1745192797.510:48977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29862 comm="syz.6.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb988e169 code=0x7ffc0000 [ 418.477291][ T29] audit: type=1326 audit(1745192797.510:48978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29862 comm="syz.6.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbb988e169 code=0x7ffc0000 [ 418.501020][ T29] audit: type=1326 audit(1745192797.510:48979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29862 comm="syz.6.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb988e169 code=0x7ffc0000 [ 418.524586][ T29] audit: type=1326 audit(1745192797.510:48980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29862 comm="syz.6.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbb988e169 code=0x7ffc0000 [ 418.548179][ T29] audit: type=1326 audit(1745192797.510:48981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29862 comm="syz.6.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbb988e169 code=0x7ffc0000 [ 418.651779][T29884] tipc: Started in network mode [ 418.656872][T29884] tipc: Node identity ac14140f, cluster identity 4711 [ 418.666706][T29884] tipc: New replicast peer: 255.255.255.83 [ 418.672627][T29884] tipc: Enabled bearer , priority 10 [ 418.703152][T29883] netlink: 'syz.2.7885': attribute type 10 has an invalid length. [ 418.736425][T29884] netlink: 'syz.2.7885': attribute type 10 has an invalid length. [ 418.744977][T29884] team0: Port device hsr_slave_0 added [ 418.839783][T29895] loop2: detected capacity change from 0 to 512 [ 418.856025][T29900] loop7: detected capacity change from 0 to 256 [ 418.864888][T29897] bond2: entered promiscuous mode [ 418.870003][T29897] bond2: entered allmulticast mode [ 418.890978][T29895] EXT4-fs: Ignoring removed bh option [ 418.899480][T29895] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 418.912641][T29902] loop5: detected capacity change from 0 to 512 [ 418.919088][T29897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 418.927054][T29902] EXT4-fs: Ignoring removed mblk_io_submit option [ 418.934204][T29902] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 418.945777][T29897] bond2 (unregistering): Released all slaves [ 418.958078][T29902] EXT4-fs (loop5): 1 truncate cleaned up [ 418.964617][T29895] EXT4-fs (loop2): 1 truncate cleaned up [ 418.977209][T29895] pimreg: entered allmulticast mode [ 418.987296][T29895] pimreg: left allmulticast mode [ 418.997142][T29909] loop7: detected capacity change from 0 to 1024 [ 419.005525][T29909] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 419.018343][T29909] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 419.029596][T29909] EXT4-fs (loop7): invalid journal inode [ 419.035319][T29909] EXT4-fs (loop7): can't get journal size [ 419.041395][T29909] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #2: comm syz.7.7894: blocks 48-48 from inode overlap system zone [ 419.055771][T29909] EXT4-fs (loop7): failed to initialize system zone (-117) [ 419.063043][T29909] EXT4-fs (loop7): mount failed [ 419.130723][T29923] loop7: detected capacity change from 0 to 512 [ 419.146689][T29923] EXT4-fs: Ignoring removed orlov option [ 419.164759][T29923] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 419.184957][T29929] loop0: detected capacity change from 0 to 128 [ 419.193972][T29923] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.245917][T29934] syz.0.7902: attempt to access beyond end of device [ 419.245917][T29934] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 419.276385][T29933] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7903'. [ 419.285378][T29933] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7903'. [ 419.309155][T29936] loop5: detected capacity change from 0 to 256 [ 419.321925][T29938] netlink: 76 bytes leftover after parsing attributes in process `syz.7.7900'. [ 419.330975][T29937] loop2: detected capacity change from 0 to 128 [ 419.337329][T29934] syz.0.7902: attempt to access beyond end of device [ 419.337329][T29934] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 419.395376][T29934] syz.0.7902: attempt to access beyond end of device [ 419.395376][T29934] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 419.409954][T29934] syz.0.7902: attempt to access beyond end of device [ 419.409954][T29934] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 419.445105][T29942] loop5: detected capacity change from 0 to 512 [ 419.452389][T29934] syz.0.7902: attempt to access beyond end of device [ 419.452389][T29934] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 419.466722][T29934] syz.0.7902: attempt to access beyond end of device [ 419.466722][T29934] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 419.480443][T29942] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 419.489362][T29934] syz.0.7902: attempt to access beyond end of device [ 419.489362][T29934] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 419.490481][T29942] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 419.502863][T29934] syz.0.7902: attempt to access beyond end of device [ 419.502863][T29934] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 419.511140][T29942] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.7905: corrupted in-inode xattr: e_value size too large [ 419.531342][T29934] syz.0.7902: attempt to access beyond end of device [ 419.531342][T29934] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 419.538550][T29942] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.7905: couldn't read orphan inode 15 (err -117) [ 419.553689][T29934] syz.0.7902: attempt to access beyond end of device [ 419.553689][T29934] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 419.612849][T29945] bond2: entered promiscuous mode [ 419.618153][T29945] bond2: entered allmulticast mode [ 419.623619][T29945] 8021q: adding VLAN 0 to HW filter on device bond2 [ 419.650363][T29950] loop5: detected capacity change from 0 to 512 [ 419.657025][T29950] EXT4-fs: Ignoring removed bh option [ 419.663009][T29950] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 419.679532][T29945] bond2 (unregistering): Released all slaves [ 419.687835][T28709] tipc: Node number set to 2886997007 [ 419.714050][T29954] loop2: detected capacity change from 0 to 512 [ 419.720837][T29954] EXT4-fs: Ignoring removed mblk_io_submit option [ 419.721474][T29950] EXT4-fs (loop5): 1 truncate cleaned up [ 419.733987][T29954] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 419.751269][T29950] pimreg: entered allmulticast mode [ 419.757213][T29950] pimreg: left allmulticast mode [ 419.761786][T29954] EXT4-fs (loop2): 1 truncate cleaned up [ 419.809965][T29964] loop0: detected capacity change from 0 to 512 [ 419.819380][T29964] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 419.834840][T29964] EXT4-fs (loop0): 1 truncate cleaned up [ 419.846077][T29964] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7913'. [ 419.864665][T29964] hub 1-0:1.0: USB hub found [ 419.869412][T29971] loop5: detected capacity change from 0 to 512 [ 419.869728][T29964] hub 1-0:1.0: 8 ports detected [ 419.888240][T29971] EXT4-fs: Ignoring removed mblk_io_submit option [ 419.895295][T29971] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 419.917612][T29971] EXT4-fs (loop5): 1 truncate cleaned up [ 419.978971][T29979] hsr0 speed is unknown, defaulting to 1000 [ 419.989832][T29979] dummy0 speed is unknown, defaulting to 1000 [ 420.009805][T29982] loop6: detected capacity change from 0 to 512 [ 420.016571][T29982] EXT4-fs: Ignoring removed mblk_io_submit option [ 420.036411][T29982] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 420.071071][T29982] EXT4-fs (loop6): 1 truncate cleaned up [ 420.231412][T29993] bond2: entered promiscuous mode [ 420.236516][T29993] bond2: entered allmulticast mode [ 420.241866][T29993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 420.257811][T29993] bond2 (unregistering): Released all slaves [ 420.325274][T30003] loop6: detected capacity change from 0 to 512 [ 420.332164][T30003] EXT4-fs: Ignoring removed bh option [ 420.338004][T30003] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 420.356968][T30003] EXT4-fs (loop6): 1 truncate cleaned up [ 420.432318][T30003] pimreg: entered allmulticast mode [ 420.453526][T30003] pimreg: left allmulticast mode [ 420.524586][T30015] loop5: detected capacity change from 0 to 512 [ 420.556782][T30015] EXT4-fs: Ignoring removed mblk_io_submit option [ 420.563637][T30015] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 420.586872][T30015] EXT4-fs (loop5): 1 truncate cleaned up [ 420.599641][T30018] FAULT_INJECTION: forcing a failure. [ 420.599641][T30018] name failslab, interval 1, probability 0, space 0, times 0 [ 420.612346][T30018] CPU: 1 UID: 0 PID: 30018 Comm: syz.6.7932 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 420.612430][T30018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 420.612454][T30018] Call Trace: [ 420.612466][T30018] [ 420.612479][T30018] dump_stack_lvl+0xf6/0x150 [ 420.612520][T30018] dump_stack+0x15/0x1a [ 420.612551][T30018] should_fail_ex+0x261/0x270 [ 420.612580][T30018] should_failslab+0x8f/0xb0 [ 420.612651][T30018] __kmalloc_cache_noprof+0x55/0x320 [ 420.612686][T30018] ? sctp_add_bind_addr+0x6f/0x1f0 [ 420.612719][T30018] sctp_add_bind_addr+0x6f/0x1f0 [ 420.612751][T30018] sctp_copy_local_addr_list+0x19d/0x220 [ 420.612796][T30018] sctp_copy_one_addr+0x82/0x270 [ 420.612884][T30018] sctp_bind_addr_copy+0x81/0x2b0 [ 420.612916][T30018] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 420.612944][T30018] sctp_connect_new_asoc+0x1df/0x3c0 [ 420.613056][T30018] sctp_sendmsg+0xe96/0x1870 [ 420.613119][T30018] ? __pfx_sctp_sendmsg+0x10/0x10 [ 420.613223][T30018] inet_sendmsg+0xc5/0xd0 [ 420.613262][T30018] __sock_sendmsg+0x102/0x180 [ 420.613348][T30018] __sys_sendto+0x1aa/0x230 [ 420.613382][T30018] __x64_sys_sendto+0x78/0x90 [ 420.613406][T30018] x64_sys_call+0x2bcb/0x2e10 [ 420.613432][T30018] do_syscall_64+0xc9/0x1a0 [ 420.613460][T30018] ? clear_bhb_loop+0x25/0x80 [ 420.613565][T30018] ? clear_bhb_loop+0x25/0x80 [ 420.613590][T30018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.613613][T30018] RIP: 0033:0x7fbbb988e169 [ 420.613631][T30018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.613651][T30018] RSP: 002b:00007fbbb7ef7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 420.613826][T30018] RAX: ffffffffffffffda RBX: 00007fbbb9ab5fa0 RCX: 00007fbbb988e169 [ 420.613839][T30018] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000006 [ 420.613851][T30018] RBP: 00007fbbb7ef7090 R08: 0000200000000140 R09: 000000000000001c [ 420.613863][T30018] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 420.613919][T30018] R13: 0000000000000000 R14: 00007fbbb9ab5fa0 R15: 00007ffffb9d4d58 [ 420.613941][T30018] [ 420.923893][T30020] hsr0 speed is unknown, defaulting to 1000 [ 420.936633][T30020] dummy0 speed is unknown, defaulting to 1000 [ 420.957042][T30028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=30028 comm=syz.2.7938 [ 420.977382][T30024] FAULT_INJECTION: forcing a failure. [ 420.977382][T30024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.990603][T30024] CPU: 1 UID: 0 PID: 30024 Comm: syz.5.7935 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 420.990658][T30024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 420.990670][T30024] Call Trace: [ 420.990676][T30024] [ 420.990681][T30024] dump_stack_lvl+0xf6/0x150 [ 420.990701][T30024] dump_stack+0x15/0x1a [ 420.990715][T30024] should_fail_ex+0x261/0x270 [ 420.990775][T30024] should_fail+0xb/0x10 [ 420.990793][T30024] should_fail_usercopy+0x1a/0x20 [ 420.990814][T30024] _copy_to_user+0x20/0xa0 [ 420.990839][T30024] simple_read_from_buffer+0xb2/0x130 [ 420.990881][T30024] proc_fail_nth_read+0x103/0x140 [ 420.990978][T30024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.991005][T30024] vfs_read+0x1b2/0x710 [ 420.991018][T30024] ? __set_next_task_fair+0x5e/0x160 [ 420.991036][T30024] ? __rcu_read_unlock+0x4e/0x70 [ 420.991126][T30024] ? __fget_files+0x186/0x1c0 [ 420.991146][T30024] ksys_read+0xeb/0x1b0 [ 420.991162][T30024] __x64_sys_read+0x42/0x50 [ 420.991177][T30024] x64_sys_call+0x2a3b/0x2e10 [ 420.991195][T30024] do_syscall_64+0xc9/0x1a0 [ 420.991217][T30024] ? clear_bhb_loop+0x25/0x80 [ 420.991282][T30024] ? clear_bhb_loop+0x25/0x80 [ 420.991300][T30024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.991317][T30024] RIP: 0033:0x7f173264cb7c [ 420.991329][T30024] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 420.991345][T30024] RSP: 002b:00007f1730cb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 420.991398][T30024] RAX: ffffffffffffffda RBX: 00007f1732875fa0 RCX: 00007f173264cb7c [ 420.991408][T30024] RDX: 000000000000000f RSI: 00007f1730cb70a0 RDI: 0000000000000006 [ 420.991418][T30024] RBP: 00007f1730cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 420.991427][T30024] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 420.991437][T30024] R13: 0000000000000000 R14: 00007f1732875fa0 R15: 00007ffdeb1df898 [ 420.991529][T30024] [ 420.991657][T30028] loop2: detected capacity change from 0 to 2048 [ 421.234038][T30032] loop7: detected capacity change from 0 to 512 [ 421.242826][T30038] netlink: 'syz.5.7950': attribute type 13 has an invalid length. [ 421.266204][T30028] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.279557][T30032] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.292026][T30028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=30028 comm=syz.2.7938 [ 421.444602][T30046] loop6: detected capacity change from 0 to 512 [ 421.480196][T30046] ext4 filesystem being mounted at /594/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.526936][T30052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7944'. [ 421.574486][T30052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7944'. [ 421.583433][T30052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7944'. [ 421.642943][T30061] loop2: detected capacity change from 0 to 512 [ 421.650536][T30061] EXT4-fs: Ignoring removed mblk_io_submit option [ 421.667449][T30061] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 421.688304][T30061] EXT4-fs (loop2): 1 truncate cleaned up [ 421.701321][T30067] loop0: detected capacity change from 0 to 512 [ 421.708010][T30067] EXT4-fs: Ignoring removed mblk_io_submit option [ 421.715518][T30067] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 421.729379][T30067] EXT4-fs (loop0): 1 truncate cleaned up [ 421.805837][T30074] FAULT_INJECTION: forcing a failure. [ 421.805837][T30074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.818991][T30074] CPU: 0 UID: 0 PID: 30074 Comm: syz.7.7954 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 421.819078][T30074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 421.819089][T30074] Call Trace: [ 421.819095][T30074] [ 421.819101][T30074] dump_stack_lvl+0xf6/0x150 [ 421.819128][T30074] dump_stack+0x15/0x1a [ 421.819148][T30074] should_fail_ex+0x261/0x270 [ 421.819203][T30074] should_fail+0xb/0x10 [ 421.819223][T30074] should_fail_usercopy+0x1a/0x20 [ 421.819254][T30074] _copy_from_user+0x1c/0xa0 [ 421.819283][T30074] sk_setsockopt+0x1bb/0x1fa0 [ 421.819307][T30074] sock_setsockopt+0x3c/0x50 [ 421.819349][T30074] __sys_setsockopt+0x13d/0x200 [ 421.819371][T30074] __x64_sys_setsockopt+0x66/0x80 [ 421.819392][T30074] x64_sys_call+0x2a09/0x2e10 [ 421.819412][T30074] do_syscall_64+0xc9/0x1a0 [ 421.819468][T30074] ? clear_bhb_loop+0x25/0x80 [ 421.819497][T30074] ? clear_bhb_loop+0x25/0x80 [ 421.819518][T30074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.819540][T30074] RIP: 0033:0x7f42911ce169 [ 421.819555][T30074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.819597][T30074] RSP: 002b:00007f428f837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 421.819616][T30074] RAX: ffffffffffffffda RBX: 00007f42913f5fa0 RCX: 00007f42911ce169 [ 421.819631][T30074] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 421.819645][T30074] RBP: 00007f428f837090 R08: 0000000000000010 R09: 0000000000000000 [ 421.819659][T30074] R10: 0000200000fbe000 R11: 0000000000000246 R12: 0000000000000001 [ 421.819672][T30074] R13: 0000000000000000 R14: 00007f42913f5fa0 R15: 00007ffef5d7e868 [ 421.819695][T30074] [ 422.022466][T30077] bond1: entered promiscuous mode [ 422.027606][T30077] bond1: entered allmulticast mode [ 422.033251][T30077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.054727][T30077] bond1 (unregistering): Released all slaves [ 422.073422][T30084] loop6: detected capacity change from 0 to 512 [ 422.090552][T30082] hsr0 speed is unknown, defaulting to 1000 [ 422.096942][T30082] dummy0 speed is unknown, defaulting to 1000 [ 422.119295][T30084] ext4 filesystem being mounted at /595/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.145747][T30087] loop2: detected capacity change from 0 to 512 [ 422.153827][T30087] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 422.570659][T30097] loop2: detected capacity change from 0 to 128 [ 422.597252][T30097] ext4 filesystem being mounted at /424/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 422.628296][T30100] __nla_validate_parse: 4 callbacks suppressed [ 422.628310][T30100] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7959'. [ 422.688003][T30102] FAULT_INJECTION: forcing a failure. [ 422.688003][T30102] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 422.701286][T30102] CPU: 1 UID: 0 PID: 30102 Comm: syz.5.7961 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 422.701313][T30102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 422.701323][T30102] Call Trace: [ 422.701328][T30102] [ 422.701334][T30102] dump_stack_lvl+0xf6/0x150 [ 422.701397][T30102] dump_stack+0x15/0x1a [ 422.701414][T30102] should_fail_ex+0x261/0x270 [ 422.701437][T30102] should_fail_alloc_page+0xfd/0x110 [ 422.701487][T30102] __alloc_frozen_pages_noprof+0x11d/0x360 [ 422.701507][T30102] alloc_pages_mpol+0xb6/0x260 [ 422.701534][T30102] alloc_pages_noprof+0xe8/0x130 [ 422.701558][T30102] pte_alloc_one+0x2f/0x110 [ 422.701653][T30102] __pte_alloc+0x36/0x2b0 [ 422.701679][T30102] handle_mm_fault+0x1d69/0x2e80 [ 422.701699][T30102] ? mas_walk+0x204/0x320 [ 422.701796][T30102] ? __rcu_read_unlock+0x4e/0x70 [ 422.701855][T30102] exc_page_fault+0x3b9/0x6a0 [ 422.701873][T30102] ? do_syscall_64+0xd6/0x1a0 [ 422.701901][T30102] asm_exc_page_fault+0x26/0x30 [ 422.701922][T30102] RIP: 0033:0x7f1732510c86 [ 422.701937][T30102] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 422.702029][T30102] RSP: 002b:00007f1730cb64a0 EFLAGS: 00010246 [ 422.702043][T30102] RAX: 0000000000000001 RBX: 00007f1730cb6540 RCX: 0000000000000101 [ 422.702053][T30102] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f1730cb65e0 [ 422.702063][T30102] RBP: 0000000000000102 R08: 00007f1728897000 R09: 0000000000000000 [ 422.702072][T30102] R10: 0000000000000000 R11: 00007f1730cb6550 R12: 0000000000000001 [ 422.702084][T30102] R13: 00007f17326ebf40 R14: 0000000000000000 R15: 00007f1730cb65e0 [ 422.702104][T30102] [ 422.702112][T30102] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 422.921676][T30102] loop5: detected capacity change from 0 to 526 [ 422.952502][T30100] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7959'. [ 422.961428][T30100] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7959'. [ 422.962285][T30102] EXT4-fs (loop5): failed to parse options in superblock:  [ 422.970291][T30100] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7959'. [ 422.983059][T30102] EXT4-fs (loop5): Unsupported encryption level 23 [ 423.113341][T30113] hsr0 speed is unknown, defaulting to 1000 [ 423.139895][T30113] dummy0 speed is unknown, defaulting to 1000 [ 423.174467][T30093] ================================================================== [ 423.182595][T30093] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 423.190464][T30093] [ 423.192806][T30093] write to 0xffffea0005596bd8 of 8 bytes by task 30089 on cpu 0: [ 423.200530][T30093] __filemap_remove_folio+0x1ae/0x2c0 [ 423.205928][T30093] filemap_remove_folio+0x6b/0x1c0 [ 423.211060][T30093] truncate_inode_folio+0x42/0x50 [ 423.216097][T30093] shmem_undo_range+0x25d/0xa80 [ 423.220955][T30093] shmem_evict_inode+0x13b/0x520 [ 423.225904][T30093] evict+0x2de/0x550 [ 423.229812][T30093] iput+0x42a/0x5b0 [ 423.233625][T30093] dentry_unlink_inode+0x24f/0x260 [ 423.238751][T30093] __dentry_kill+0x18b/0x4c0 [ 423.243352][T30093] dput+0x5c/0xd0 [ 423.246992][T30093] __fput+0x428/0x640 [ 423.250986][T30093] ____fput+0x1c/0x30 [ 423.254978][T30093] task_work_run+0x13c/0x1b0 [ 423.259574][T30093] syscall_exit_to_user_mode+0xa8/0x120 [ 423.265137][T30093] do_syscall_64+0xd6/0x1a0 [ 423.269671][T30093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.275573][T30093] [ 423.277900][T30093] read to 0xffffea0005596bd8 of 8 bytes by task 30093 on cpu 1: [ 423.285533][T30093] folio_mapping+0xa0/0x120 [ 423.290053][T30093] evict_folios+0x2592/0x2fb0 [ 423.294741][T30093] try_to_shrink_lruvec+0x405/0x590 [ 423.299948][T30093] shrink_lruvec+0x220/0x1970 [ 423.304628][T30093] shrink_node+0x60b/0x1da0 [ 423.309139][T30093] do_try_to_free_pages+0x3c6/0xc10 [ 423.314354][T30093] try_to_free_mem_cgroup_pages+0x1e6/0x4a0 [ 423.320264][T30093] try_charge_memcg+0x3ab/0x890 [ 423.325109][T30093] obj_cgroup_charge_pages+0xc0/0x1a0 [ 423.330481][T30093] __memcg_kmem_charge_page+0x9d/0x170 [ 423.336032][T30093] __alloc_frozen_pages_noprof+0x1a6/0x360 [ 423.341832][T30093] alloc_pages_mpol+0xb6/0x260 [ 423.346596][T30093] alloc_pages_noprof+0xe8/0x130 [ 423.351534][T30093] __vmalloc_node_range_noprof+0x6ea/0xe80 [ 423.357351][T30093] __kvmalloc_node_noprof+0x311/0x520 [ 423.362724][T30093] ip_set_alloc+0x1f/0x30 [ 423.367063][T30093] hash_netiface_create+0x273/0x730 [ 423.372266][T30093] ip_set_create+0x3b6/0x970 [ 423.376864][T30093] nfnetlink_rcv_msg+0x4ba/0x580 [ 423.381805][T30093] netlink_rcv_skb+0x12f/0x230 [ 423.386569][T30093] nfnetlink_rcv+0x187/0x1610 [ 423.391258][T30093] netlink_unicast+0x605/0x6c0 [ 423.396059][T30093] netlink_sendmsg+0x609/0x720 [ 423.400850][T30093] __sock_sendmsg+0x140/0x180 [ 423.405544][T30093] ____sys_sendmsg+0x350/0x4e0 [ 423.410324][T30093] __sys_sendmsg+0x1a0/0x240 [ 423.414918][T30093] __x64_sys_sendmsg+0x46/0x50 [ 423.419703][T30093] x64_sys_call+0x26f3/0x2e10 [ 423.424466][T30093] do_syscall_64+0xc9/0x1a0 [ 423.428966][T30093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.434856][T30093] [ 423.437186][T30093] value changed: 0xffff8881186b1360 -> 0x0000000000000000 [ 423.444291][T30093] [ 423.446616][T30093] Reported by Kernel Concurrency Sanitizer on: [ 423.452764][T30093] CPU: 1 UID: 0 PID: 30093 Comm: syz.7.7957 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 423.465259][T30093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 423.475325][T30093] ================================================================== [ 423.483561][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 423.483576][ T29] audit: type=1326 audit(1745192802.320:49251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.5.7967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173264e169 code=0x7ffc0000 [ 423.514325][ T29] audit: type=1326 audit(1745192802.320:49252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.5.7967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173264e169 code=0x7ffc0000 [ 423.537917][ T29] audit: type=1326 audit(1745192802.320:49253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.5.7967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f173264e169 code=0x7ffc0000 [ 423.561628][ T29] audit: type=1326 audit(1745192802.320:49254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.5.7967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173264e169 code=0x7ffc0000 [ 423.585242][ T29] audit: type=1326 audit(1745192802.320:49255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.5.7967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173264e169 code=0x7ffc0000 [ 423.608833][ T29] audit: type=1326 audit(1745192802.320:49256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.5.7967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f173264e169 code=0x7ffc0000 [ 423.632414][ T29] audit: type=1326 audit(1745192802.320:49257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.5.7967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173264e169 code=0x7ffc0000 [ 423.656235][ T29] audit: type=1326 audit(1745192802.320:49258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.5.7967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f173264e169 code=0x7ffc0000 [ 423.680145][ T29] audit: type=1326 audit(1745192802.670:49259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.5.7967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173264e169 code=0x7ffc0000 [ 423.703809][ T29] audit: type=1326 audit(1745192802.670:49260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30119 comm="syz.5.7967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173264e169 code=0x7ffc0000