last executing test programs: 9m19.204559109s ago: executing program 0 (id=326): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0xa5) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$l2tp6(0xa, 0x2, 0x73) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x2000c8, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES16, @ANYRESOCT], 0xfd, 0x1c8, &(0x7f0000000480)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x400000000000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) 9m18.337184178s ago: executing program 0 (id=328): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70307000800009500000000000800bf91000000000000b7020000010000008500000085000000b7000000a06039a595aa5b0ff7e195001000"/102], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) setgroups(0x4, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0]) 9m18.291601432s ago: executing program 0 (id=330): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0xffa, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES8=r2], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r6, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000440)={0x200000, 0x200001, 0x4, 0x4000, 0x1}) 9m18.290840672s ago: executing program 0 (id=331): socket$netlink(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001e00)=""/4096, 0x1000}], 0x1}, 0x40010000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3, 0x0, 0xf077}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_clone3(&(0x7f0000001500)={0x20000, 0x0, 0x0, &(0x7f0000000340)=0x0, {0xd}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_pidfd_open(r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0], &(0x7f0000000000)=0x10, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x1004081, &(0x7f0000000380)=ANY=[], 0x2, 0x81c, &(0x7f0000001540)="$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") mkdir(&(0x7f0000004bc0)='./file1/file0\x00', 0x3f) r9 = socket$kcm(0x10, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, &(0x7f0000000000), &(0x7f00000000c0)=0x4) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000160081044e81f782db44b9040a1d080206000000040000a118000200fe05000000000e1208000f0100810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803", 0x4c}, {&(0x7f0000000500)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a69d81efd66f3affa37aaa31c99041171824f069f392273bd5ce1ab2b2b6f2dcd0b5b5935c360149c52fd45fec45f0cf2728205888adff194e4191575a40", 0x8c}], 0x2, 0x0, 0x0, 0x7400}, 0x0) 9m18.130415635s ago: executing program 0 (id=334): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000f009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xdbeb9fc1d95c098b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) r7 = dup(r6) ioctl$PTP_EXTTS_REQUEST2(r7, 0x43403d05, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000004850000000e00000095000000000000008b084f27b083778923b71383c0f1cfd739aa143d53b75befad9eee8531aca433fbc0bff0d7e98c84db7700cdd599f9f819b0aed4d6c9f85375c498c48b84ac6dc6206364"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x4, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x45d, &(0x7f0000000a00)="$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") r9 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) fspick(r9, &(0x7f0000000380)='./bus\x00', 0x1) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r10, 0x0, 0xcb, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x9, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x35}, @local}, 0x10) r11 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r12 = accept$inet(r7, &(0x7f0000000180)={0x2, 0x0, @multicast2}, &(0x7f0000000280)=0x10) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f0000000380)={0x4, 0x1, 0x4, 0x0, 0x0, [{{r1}, 0x8001}, {{r3}, 0x10000}, {{r12}, 0x401}, {{r5}}]}) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) 9m17.007725945s ago: executing program 0 (id=348): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x88401) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) pause() r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x1c, 0x1, @ib={0x1b, 0x101, 0x5, {"40c6d2bb7fe6d15a2a93ebe2492ded67"}, 0x8, 0x6, 0x200}}}, 0xa0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 9m17.007216675s ago: executing program 32 (id=348): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x88401) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) pause() r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x1c, 0x1, @ib={0x1b, 0x101, 0x5, {"40c6d2bb7fe6d15a2a93ebe2492ded67"}, 0x8, 0x6, 0x200}}}, 0xa0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 7m40.901873032s ago: executing program 2 (id=1814): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) creat(&(0x7f0000000080)='./file0\x00', 0xa) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f80)="$eJzs3c9rJFkdAPBvdbpjMpPZZNWDLriu7kJm0OlONu5u8LCOIHpaUNf7GJNOCOmkQ7qzOwmLm8E/QBBRwZNevAj+AYIsePG4CAt6VlQU0VkFPejUUt3VmZlMd6cz0/kxyecDlXqvXlV93+tQ1fW6HlUBXFjPRcSNiLibpum1iJjMlxfyKfbaU7be+3feWsymJNL09X8kkeTLOvtK8vnlfLOxiPj6VyK+lTwct7Gzu7ZQq1W38nylub5ZaezsXl9dX1iprlQ35uZmX55/Zf6l+ZmhtPNKRLz6pb/84Ls/+/Krv/rsm3+8+ber386qNZGX39+OIyr2K2w3vXTj4AZbjxjsLMraU+pkxrutMfLQktvHXCcAALrLrvE/HBGfjohrMRkj/S9nAQAAgCdQ+oWJ+F8SkXY32mM5AAAA8AQptMbAFqOcjwWYiEKhXG6P4f1oXCrU6o3mZ5br2xtL7bGyU1EqLK/WqjP5WOGpKCVZfraVvpd/8UB+LiKejojvT4638uXFem3ptH/8AAAAgAvicqvPnxQ6/f9/T7b7/wAAAMA5M3WEdf9zjPUAAAAAjs9R+v8AAADAk0n/HwAAAM61r772WjalnfdfL72xs71Wf+P6UrWxVl7fXiwv1rc2yyv1+krrmX3rh+2vVq9vfi42tm9VmtVGs9LY2b25Xt/eaN5cbb0OHAAAADgFT3/ynd8nEbH3+fHWlBkdbNMBVwPOquJ+KsnnXQ7rPzzVnv/5hCoFnIiRvqWlE6sHcPKKp10B4NT4hgeSQ8p7Dt55N59/arj1AQAAhm/6473v/xf6brnXvxg48xzEcHH1v/8PnGet+/+DjuR1sQDnSskVAFx4g9//P3AR8O6gEdL0yJUCAACGaqI1JYVyfmU/EYVCuRxxpfVagFKyvFqrzkTEUxHxu8nSh7L8bGvL5NA+AwAAAAAAAAAAAAAAAAAAAAAAAADQlqZJpAAAAMC5FlH4a/Lr9rP8pydfmDj4+8Bo8t/JyF8R+uaPX//hrYVmc2s2W/7P/eXNH+XLXzyNXzAAAADgQjjSC/w7/fROPx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhun9O28tdqaTjPv3L0bE1IH4SVZSjLGI0YixKEXEpX8lUbxvu0JEjAwh/nj252Pd2p9k1doPeTB+0tn2Me3d7hs/prJPoUf8y0OIDxfZO9n550a3468Qz7Xm3Y+/YsQD+UfV9fyXG8v/jvQ4/q8MGOOZ935R6Rn/dsQzxe7nn078pEf85weM/81v7O72Kkt/EjHd9fsneSBWpbm+WWns7F5fXV9Yqa5UN+bmZl+ef2X+pfmZyvJqrZr/7Rrje5/45d1+7b/UI/7UIe1/YcD2//+9W3c+0k6WusW/+nyX+L/5ab7Gw/Hz77707TydlU930nvt9P2e/flvn+3X/qUe7T/s/391wPZf+9p3/jTgqgDACWjs7K4t1GrVrWEnCse25yMmsl76GajGWftYJKpbjbeHusM0TdPsmHqM/SRxFj6WVuK0z0wAAMCw3bvoP+2aAAAAAAAAAAAAAAAAAAAAwMV1Eo8TOxhzbz+VDOMR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ/FBAAAA///ROdsN") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 7m40.713333307s ago: executing program 2 (id=1817): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) 7m40.651580122s ago: executing program 2 (id=1819): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={0x38, r1, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfc, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000001100)=@mpls_delroute={0x1c4, 0x19, 0x10, 0x70bd29, 0x25dfdbfd, {0x1c, 0x14, 0x10, 0x5, 0xff, 0x1, 0xc8, 0xa, 0x200}, [@RTA_NEWDST={0x84, 0x13, [{0x8000, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff, 0x0, 0x1}, {0x7}, {0x7}, {0x0, 0x0, 0x1}, {0x4}, {0x4, 0x0, 0x1}, {0x9}, {0x1}, {0x1}, {0x5, 0x0, 0x1}, {0xe}, {0x9, 0x0, 0x1}, {0x6}, {0x9}, {0x401, 0x0, 0x1}, {0x9}, {0x9, 0x0, 0x1}, {0xe000}, {0x3de, 0x0, 0x1}, {0x9}, {0x7}, {0x6}, {0x8}, {0x9}, {0xd5ddc}, {0x2, 0x0, 0x1}, {0x941}, {0x5}, {0xc}, {0x8}]}, @RTA_NEWDST={0x84, 0x13, [{0x4}, {0x2db}, {0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x85, 0x0, 0x1}, {0x6}, {0x2, 0x0, 0x1}, {0x1}, {0x2, 0x0, 0x1}, {0xd47}, {0x7}, {0x4, 0x0, 0x1}, {0xa258, 0x0, 0x1}, {0x4}, {0x1, 0x0, 0x1}, {0x4}, {0x3ff}, {0x4, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9323, 0x0, 0x1}, {0x6}, {0x6, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x6}, {0x7, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xa8c, 0x0, 0x1}, {0x1ff}, {0x80}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x5}, @RTA_NEWDST={0x84, 0x13, [{0xefe}, {0xa}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff80, 0x0, 0x1}, {0xffff7}, {0x7f, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x8}, {0x7}, {0x6, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x8001}, {0x2, 0x0, 0x1}, {0x8}, {0x7fff}, {0x6, 0x0, 0x1}, {0x200}, {0x30, 0x0, 0x1}, {0x3}, {0x2, 0x0, 0x1}, {0x401, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x1}, {0x3}, {0x9a23, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xffffc}]}, @RTA_VIA={0x14, 0x12, {0xf, "b3d97517089ffd21f1497cc8e161"}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x200080c0}, 0x40001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28f2cfb3000000000000000000000000070000000900020073797a31000000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x4000010) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="bd92d44114e9572a2078dfafdb6ec1625688b4041a3b0c61c4f25175b03625436e422bfc5b16efbe60c8082d3252d0345e63e428f3685a544b5276156e9cf7e840d0376188494b000b81c64dd959455ffe3295d54931a38d31a5cf786b5d02bd", @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = fsmount(r5, 0x0, 0x6) readlinkat(r8, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010037000000ffe6df2502", @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) 7m40.559120549s ago: executing program 2 (id=1822): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) socketpair(0x23, 0x800, 0x3, &(0x7f00000001c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f00000001c0)="f14a18f6913026bbc8e195ec033d173c59594e80b11c263107f65f12606a97894a6d668a", 0x24) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r2 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) ptrace$getregs(0xc, r2, 0x401, &(0x7f0000000200)=""/184) ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) sendfile(r1, r0, 0x0, 0x7ffff000) 7m39.67971852s ago: executing program 2 (id=1840): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0) 7m38.92152808s ago: executing program 2 (id=1847): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) 7m38.894707612s ago: executing program 33 (id=1847): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) 4m46.441720628s ago: executing program 3 (id=5631): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_usbip_server_init(0x3) 4m45.888036803s ago: executing program 3 (id=5639): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$rds(0x15, 0x5, 0x0) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x15, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000200018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4m45.783612561s ago: executing program 3 (id=5640): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) 4m45.783449071s ago: executing program 3 (id=5641): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r1, 0x0, 0x8084) 4m45.783201861s ago: executing program 3 (id=5642): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 4m45.702281037s ago: executing program 3 (id=5643): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x202, 0x80002) r1 = dup(r0) sched_getattr(0x0, &(0x7f00000010c0)={0x38}, 0xbe, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000080)={0x3, 0x1, "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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x20, 0x11, 0x2, 0x0, 0x0, 0x5, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./bus\x00', 0x0, 0x48) fcntl$setlease(r4, 0x400, 0x1) fremovexattr(r4, &(0x7f0000000040)=@known='system.posix_acl_default\x00') socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) setfsgid(0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000380)=""/121, 0x79, 0x0, &(0x7f0000000500)=""/253, 0xfd}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2b, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x7, 0xd}, {0x7, 0xd}, {0xfff1, 0x1}}, ["", ""]}, 0x24}}, 0x4004045) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800009c02b7fc68fe6300000000895ee91790af2279001840000001000000000000000000000095003e00000000003535aada2ef64320962a8cd6dc77a076ffb69c8c2a1af2861efc9ac0913b697b9f711d9c9df1f245f52ed76d4469"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r9, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='gpio_value\x00', r3}, 0x18) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x800) 4m30.540506501s ago: executing program 34 (id=5643): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x202, 0x80002) r1 = dup(r0) sched_getattr(0x0, &(0x7f00000010c0)={0x38}, 0xbe, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000080)={0x3, 0x1, "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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x20, 0x11, 0x2, 0x0, 0x0, 0x5, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./bus\x00', 0x0, 0x48) fcntl$setlease(r4, 0x400, 0x1) fremovexattr(r4, &(0x7f0000000040)=@known='system.posix_acl_default\x00') socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) setfsgid(0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000380)=""/121, 0x79, 0x0, &(0x7f0000000500)=""/253, 0xfd}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2b, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x7, 0xd}, {0x7, 0xd}, {0xfff1, 0x1}}, ["", ""]}, 0x24}}, 0x4004045) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800009c02b7fc68fe6300000000895ee91790af2279001840000001000000000000000000000095003e00000000003535aada2ef64320962a8cd6dc77a076ffb69c8c2a1af2861efc9ac0913b697b9f711d9c9df1f245f52ed76d4469"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r9, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='gpio_value\x00', r3}, 0x18) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x800) 5.387569455s ago: executing program 4 (id=9558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009006a0001"], 0x48) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x27, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0xd, 0x3, 0x8, 0x18, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x93}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000900)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0xe, 0xe2b, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000cc0)=[r1, r1, r0], &(0x7f0000000d00)=[{0x1, 0x2, 0xb, 0x1}, {0x5, 0x4, 0x9, 0x6}, {0x1, 0x2, 0xb, 0xb}, {0x0, 0x3, 0x6, 0xc}, {0x3, 0x1, 0xd, 0x4}], 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r7, &(0x7f0000000740)="cc", 0x1) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7fffeffd) 4.545301793s ago: executing program 7 (id=9569): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) ftruncate(r2, 0x7b) 4.287446604s ago: executing program 4 (id=9573): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 4.203120971s ago: executing program 4 (id=9575): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x800000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000f000000050030000000000005002f00a005000008000300", @ANYRES32=r8], 0x2c}}, 0x0) 4.151067835s ago: executing program 6 (id=9576): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280080002400000000e080001400000001405000300630000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 4.010612986s ago: executing program 6 (id=9580): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000fecd230fc0002000080000000000000070000005d0000000000952d62bb00080f8f6a7b9404d7156d247f3e66fde658dbe17d9d78090cf4a5b1a8e35cedee4be5e9dfaf36f7d07e7e06525223d7bd463f9c84d522ef51cefda38bcf5fdae77681be4fd083f06c106503"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x5, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="185200000f000000000000000000000018450000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c00163f5c000d64a5d2fc4d22130000b700000000000009918af0ffffffffff182b0000", @ANYRES32=r1, @ANYBLOB="00000000020000008520000003000000487b4000f0ffffff"], &(0x7f0000000200)='GPL\x00', 0xa, 0x5d, &(0x7f0000001500)=""/93, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x10, 0x80, 0x2e0}, 0x10, 0xffffffffffffffff, r0, 0x1, 0x0, &(0x7f0000001580)=[{0x2, 0x1, 0xd, 0x8}], 0x10, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xd, &(0x7f00000029c0)=ANY=[@ANYRES64=r1, @ANYBLOB="157d9704e6aa0d8ac14d58ee7b3ad6d43c72f49871649d3221a5ffbce54492cffdfd9bd3f2aa3ef41f0bc417b563764259f67398d3c167ace94e7547b7e1d43b1e419736ed0124e164e7211bf7834f929fe369be63a742f47168b23bd7e64209ea166373fb7a0d129415241c62f40c8e0243edd912b22e971e00cd4827076a9a2412d053f4a1f22d127b824d5b904450c0af456f2ba2b9fc5a1d368c88674f238afc625577a4b10dd2cdcd5ee5223aa381089087afb3f4e7c7e3081ed5e4e20e282e27f70c71b093e9a1eaf419ee0546da8c07dee2405deadbd1ee0772f67b1ee1db0609b64a14c44bb3f8fb9e73ba3b41665161359f5b056726395c73133238b7364fda079007646c2ae59d5857ac8956a88cb1f35186a805d2cb91990d4c5397e7fe5f90188c71191b44efd697c1bd26dd27e1a65ce3f7e9fb4dcc364ca41bf3ce31d5f51c2d646f11fd7cfbfcd89c8158f052361f7b5d19a39c8a13b822337ea9a6551669d6b78b1e807f4f56238791e0eda615c4ebe8bff6e871653f6b1bd396f763cf65cddd32f203a7109ee53b1c057a233596baec8eaabf32b665fdd4cce76805361c3944e4b61a12ad9fb0827477cee367338b4520ebe378364238c5570ba33c2d4512b0e47ed2d0f1482328285621188095d455dbf1f16e0e391b735f355cb8272def6959492eb127be0c1c71192571562d0df5bf799c1e6e537b96690d15fd458efcc378802407d25ddac0591b3096d88ffb0bd65737defded895434479c812af44da85f1673438eb19cd53662f1654b27009fb973ca7e5dc081505140d32bb8d5a11be07870bd729fa400835755038d890568ddfd0451203bd0ed19185cd7fd43aa3cab719217c5e98d5ea6734117b9b49bf75c8adb66c3e12620842cb4df5053b90bf4840d9ed4db81c412472ecb253611b72ba73aba89e5d9037db33b672559771fd3b0c5b7b606f79cb736a5cbac7910aaad96f2f2f8efa89a99d7ebca5d74451f5a4408456d42d03b0845e4b5ef5cdd31b0b1c7fad85ce3483bf9a915ba72c3e6d05d3f4cfe5389db23a5a4885ae12a49868fd5b71876e19718d36e9d16083ae0c38dd88241a9f7fd9efa94c4b03975c3a6819ef9ebb56c02ee80123d088922e4adc04c50cd033364e13b267fc288de297a4e1de6390ad07db13d6ca7b060ec4b53b26f69f118fcc3b6a3a109ca14da094219d4e4d0a5d75c36d3315d9395ed7292c29b5da8ccc42696a6ca4f2984ebaf0e76022c25123d2446a4d2d12f4625b513a07ab2fd859f4cfdac0e5a3b344ba307415044ea79f77593431c24e8539b81c9292435b762815b5c6e067287a0b790c3703bd970d83976455d8bbc3483309cc92d1541481c773a7b877d008e495c051643b66e85d95ea3d200a9b41abc390f23b459d799bd98ff4db51ddfab755f52909090f6b2fc2755c38babdba493250e00a1a18356c8f9550fe7b6d5d0a14d5acba6050ec4796e4e084137c20ac2e95a42795190420ede9558109992d2dcdefed69e2e5a8ae87693993df34eacb1f23772a8ff45a546264196d6afc3d4be56abc4f0d0debd6dae66d0cca0e797c7d8538a6621a641aa653077676a0aec8fa0c3c9caa1994a3221f86e3328f543772c4bc582ba91dec2e7738737091ef930e5df29de1fd8727fd6f08cd0d7c62fdd4f2b1b77ffc3e38f7a7acde846aaadeebb787fcd7a457087509a73b84503b631dd6202558800c3fd37dfe987754570d07a8c26a593d9226e3cfb672f66ce544855508a23e18b4a079d70ea01cbceeb2c7365b75d6ee3bc73c015b2891d423823943303564747fcaa99df8b68575854b53ed2a5f2939a73ff63922dfbb1144a16c1a89fd3ec735195b57794edf7261fe8f39a0c097329ec2557198f0225530596c2af5c15eb2dae13c49a393ec54e2fd6fb79c7486018bb86de3f140573c5cb0f9e19389d721187b46b4d60659151210c8a7fd4295f0d5baead54b18aa472930f734d83151b6e9c7d97033495b2ea7d22a0a69ae369f39bae3f98b1f3deba7ee57b3891994810f16e438d942ed9a2db0ae79245f05ccf68baebb14eff46da3f9a604e3a1a2b231235aee6413e086f87a2e0ecd90581ad1200227d84bb59a58b96868d2da157905fc2ba39a87589a2029feb5c92db68cb04417c31b40725b32286ae3c8fdc9325453ece1d83b9fca4e3f0b458a33e30b71f3620de3d17258cdb855108ffbb34dbb6ea39df19aafb405da71cd7eb5541714cb03887773da112e259f7174e65e10de68524a4ceace1d1c864e9533fec0b9d2ad5698725e4196ae255e5fb1a69cbb6e1b5dced27cbdb4467196a69c03eab378bf603738f98289b140a67cdf826b9a21c394406644a1c774f720d49ecb270a5571311304127e35e9c6f5a134f99280e3ac2efd66f60b7b378d49140296277057ea0d4135934167169b35e71f866969e7aceeb6318b9093269e05e2918dcb37556342e1d1a69334ce6b4eea56f93965f6ffa74a9b58eda52d57175b06b4c79c91035b3470a7f3cb97f52ca06d4919f4b5b7ebc4a1afbb2d2a2ddfe2d0a092104ac96d942d6c9bdb3d6c052b6ad2b3ff3b457160966b25c955c551278ae93945749f2e6a10e80795089b3f8a7fbcce08c78ea212388430c8c3e56beaf74bd499e80a79ad72eecef1af55d97edaa86330848c3b5f5f07d3c6e2021278aeead033eb645470ae8d9e0255b28c2093dacb1fdcc416d986086be478308a573d76c50a6c77353d3088a9e220d1221695fd7e01fb91bad4a6f0775133597e8215bafb2e495180204dbe32682c216eecadd9c74ffbae9ed3579eb85377ef432339a5874f24c27229cedbc2b9d41dd2de23f344a50f3ed3762b2cc53b06f875a8889d887320eaf93259d9448583851a9064ab35d6a3853c34775e42117c466e410f630610706472f0a4960d5f26d022b3947352d34395b7c1a80de384455b6ac2bbb2fd952f3d6d49ac5bf58e72ce3e33f190523f419042c8e1697227cef740f8a826398e5cdf51bd52baef72e13ec934e8b07e28fdc4ec51e912b90d20aa9b63a2bda3d533e69a2f20c150917f4722a27462288ba29ef2461b4e4193ecd7800ad5f7f1dfdad05c9e5d50299a0a07b1ff4d9b979372bec182280ea5c6786f76561566b750af523a3d32f897158681b93028b27669499720629d0b7288d9c2c80ae0989d3fff5be5d7dcda1879942e5c12b5954fb902c912d86e70a337b0f4f271994b0d9a263041e798a962bef20c99aaa22b1e6c1f5fd8503865447c02dca91d368c1b9dc0b0d671d7b8b558bcb22d8dd768dcedbd6f2aa48c453933fd2cc2c4416fbab836968789783b32b1ff9445c1cbf528f494d68808a299f122e58a1934e8c93cf342acc4b360e5251a2ceba7be31c21aff364893f36d0dd81990c111a9d57ad0c8f25b5909be74edf66935d5f63666bcdf2ab557208a569ab666d06ead8bada79d2ad0f9132e22e35a2f1c51ffc7a3f0b96e8ce295129e28ed7f75f2a94b12357fadfc6c4470e6f0551c41ee410e88974bdcdaa1893516bf8927990a682b08f651cd9e17cef02b0dc84b65e36bd5abb86a0406356bd048be80aa1e7599998aafbc20380653611852c418d31b886f175d093be114f8d80ffaa618708ebf55ad4967cd9f70261e7acd70ad71c946e6fdcc174c5f943e00800c2d37ffe567336eb801b03f88e9804eff0d51c00ae6c78604b9e70a0ca2b63d6649ba654cce6f446859df8e18e1e1e71f84a7f02a8dd02e9fe0887ed13c01b306a1509b3cb71137e29b63b94948997a6cfee9b374b61d385e145eaa2cf11791f93351d40881b933fbdc1c97fef38c7fd51d749504604dddecf92d6da9da7ca04aa25170050a2601225d98b03a454002011a1c48aadb69c93b23448a4e455729e420ffa7a5910ea26ddb2266f9c25a95a83ec04a3b7eca438498e0cfd4331d41ceeaafcb70b953d78b934a509492cbf9d2c8986c0dc335212e127af1ca2e5216decb238f3920ef2667fc5b661e57e16f157137c1a0b761dc06830eee021d2180f3a743657ca9ef742dcb732227611818f9a04b8412aafc7317badac317f76a2376bff24431a431c5203afa38e1a54c28fc6846440feee97db077a9b7ee414736532261410d5109fbcc50915ee0a8e4c70bb3638e19142ffe25affa8e5dc58dc2ae5a2bbc87b615d7f084aad633953c5a53e8c797a5c476e23880b294a0918d7d92ba979dd9fd297ac12f95f2110acfa1ca679df92e46dc40f068962cb3a753181ba1db3de280563a823d7ead93fcca35105d56c5adebf7bb81888089978428e55c0f0f3ee7b72c71e0bf79e9d30255f09bfe06f1cb386d5490fa102cf5b720f4e7524e9b1558d56aa0cc0ed7363b05526beb1d11c037b9866244d6fcff536ea0e83d1a3239cbb0682dd42116acf2482f593f1d26c1525597ee31d1b89e07a9d6a9a3bec12dac359c2f47f2d116890fcce78f930dcca0bb8ece5c1c1f31b9a546cf04d8d503659c32e57e1729ddfcbc14a6f0942a87e45ed61308b0259cf128f0f433b358e55c72d80fd5df8377de048cc0002a26934f4c2a91e78eb788f9d292940e5e04660508ef3c081ecb768288ad024abac21bba2bc96b49ae772e22bdc6532b02cab04f8ebedc6411df754d11b00705655ff40fc8a45ee0e7abaeab9ec36862315f57672ff3979e208f7d14040df2d0a4039f3585096b1e1d13c45fb2a0a2ed7e1bfbf1398fa229aa5a7235c9320f03aae9667f12108de5564d2c8d64f9736b92c2a2ceea176194bbd0cf49f916dfb88745b0f41f44f11e940559ca441719f90a8de02529d12b2892764b5a018caf320fcc8452dd53be9a39bd0f789fee981b1ecc3ebbc7238b29b22a671328cac7f6d6798c753192c5e45c1936ff7dbfcbfa6600d467688c91863ae796a50a12a14fc7c5f3e1cf9a82ea98f77ae2018b4cb2445bcad5146c559c10705cc512cefaea525df34f82b956d5bffd1ccdb8dbcf738bb82325a5e829fca88f1012f9c979c6a91beed04da45ed6f27fa5030fc01a22b1ed1609d7b92909b71b30daf5e2ac2009e713de4958844a32c1210a9196c89a7e7df0c8a0562901003e2e83f18d1830e69c52d83239f848566df1c54dd4d3da419d79ccb9944e0c92ea49e6c28556ca2140be9a8a7bafe21e5354e83f4525dee76efcdd660ff46af87717afbad00520ead5b64d79bacb4b55883d6c4ee8deedcd251569bd7e2fbd717ff804cb0bd9a52cef03e83239685226b18dd5b41107d23900454cdd6f76f70b091b8f2ed6fed91137532a0f46be633ec8ff407bb3b65010e572298dfed285cbbf708aaee91adfc0110c8663d2b861ab423a021bd1c3c3cf65b38f8268277e0f9df9d8e26fdc639e13ac71fbc8f0ea2235804913edfd2d1f9e6851a84d7a3e5a7a5db99fcfc03459552c52347990b7b14005036d99f0fa346fec1cbd75609305b953a9a7a3e1736c8a381c921b9fd7783e60ec4a54a81b0b96ebd1870e9e0a27cbab038554da393a359d3261087525a83185d8aa2af7981988b7de9e1219c0718b7758f62225c9e2869481d6d11e118eccc6da406dbd733ce6c6efdd1bd47595c7bdf69e5dfc89d73394377a4b63760a9dfd5d0e4e677c77cfadfe0f93ce2432e5fb76ec93c98f17ea046481de8e0afc54c35f9648cff956f15c8d0b3a6f40e97a12f0cd2af5c62c95484f8d3c991c42cb380069370429ac0eccc3a9ff0c7a9c126552ccd3d8aa4d4beae522585c8387368d7788ae5a3274728b04fe8d4f2bc1b8ea9a5", @ANYBLOB="0000000000000000b7080000001100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000009c451f5b704000000000000850000000100000095d8f5cc52eaf47637f33b8ab10c111338c868b2ec545b5c6326858ead8c287b97214ce5f7470dc9deb8cdcb4875d0c574d7ed9d18c0e39ef70e7da7ec230250041f5f8805acb4a1681c8d4f2f2fa0616f60e55e1290451c96f4f9c46c41eb7472b49b7dcf381168c416d9915ddbfe2f99992d9f48c11a379fce7cc9caa59c8b8e1fb551ca37ef0c59481420afc7d2de139d8e088eaf79452df330680fce787f51c0b813de1b669c2bae3116b5e2162c65e1e62e041e4b7259cea0da74b4070cc34170155586af433f4bed", @ANYRES64=r0, @ANYRESOCT=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='mem_connect\x00', r5}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0x200000000000011, 0x2, 0x0) unshare(0x6a040000) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r8 = gettid() r9 = eventfd2(0x0, 0x0) write$eventfd(r9, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r9, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r7, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r7, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) 3.828460121s ago: executing program 5 (id=9584): socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) 3.700562201s ago: executing program 5 (id=9585): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000080), 0x2, 0x53a, &(0x7f0000000c80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB], 0xfe44, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x60) flock(r4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240), 0x3, 0x43a, &(0x7f0000000340)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x28000400) shutdown(r6, 0x1) flock(r4, 0x2) 3.580852291s ago: executing program 7 (id=9586): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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") 3.062173953s ago: executing program 6 (id=9587): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x62, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000060000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000004888b70000000100090018", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000740)=""/227, 0xe3, 0x10, &(0x7f0000000100)=@l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x4}, 0x80) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40810) getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000700)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a320000000008004100727865001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffffff, 0x0, 0x80800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000540)={[], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_gt}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syzkaller0\x00'}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x7, 0x5e1005) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.779809766s ago: executing program 5 (id=9588): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x20000008, 0x8}, 0x48) keyctl$negate(0xd, 0x0, 0x9, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r5, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf7, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x11, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5b, 0x5b, 0xb, [@func={0x6, 0x0, 0x0, 0xc, 0x5}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x66, 0x4}, @datasec={0x5, 0x2, 0x0, 0xf, 0x3, [{0x1, 0x4, 0x4}, {0x3, 0x5, 0x4}], "c11cef"}, @fwd={0xa}, @typedef={0x2, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x0, 0x2e, 0x61, 0x2e, 0x5f, 0x30, 0x0, 0x30, 0x2e]}}, &(0x7f0000000300)=""/72, 0x7f, 0x48, 0x0, 0x0, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r9, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) 1.85710956s ago: executing program 5 (id=9593): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x8, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000300), 0x6}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x2000a, 0xb, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) 1.765988628s ago: executing program 5 (id=9594): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x10000, 0x7b}, 0x20, 0x10000, 0x0, 0x7, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x2000000000000329, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) sendmmsg$inet6(r7, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) ppoll(&(0x7f0000000240)=[{r7, 0x2}], 0x1, &(0x7f0000000300), 0x0, 0x0) 1.249952019s ago: executing program 7 (id=9598): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000080), 0x2, 0x53a, &(0x7f0000000c80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB], 0xfe44, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x60) flock(r4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240), 0x3, 0x43a, &(0x7f0000000340)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x28000400) shutdown(r6, 0x1) flock(r4, 0x2) 1.081667332s ago: executing program 5 (id=9599): readv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000640)=""/90, 0x5a}, {&(0x7f0000000140)=""/11, 0xb}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000de7034252540f4cfed0c457d4a977587587ab2a8b0c0c7a82e3c8f4807b135fd2ad8d87f9819fbe36f82316b5e553e50ff736d42c25e42d5b5104ff07929590cdd160de68e94ffcdf73b4fcdf764411e7dfcec6ec55e080f694c", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_usb_connect$uac1(0x2, 0xa8, 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004740)=@newtaction={0x14, 0x30, 0x200, 0xf0bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r3) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='1q'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0xf0f, 0x7, 0xd}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 789.479596ms ago: executing program 6 (id=9600): bpf$MAP_CREATE(0x0, 0x0, 0x48) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000300), 0x4) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x8b7c, 0x800, 0x7, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4ef2040030020000140003006e657464657673696d300000000000000500210003000000864a5e8f5b071c1a4a283a4895d5498c32951a06bfd77d22e896a03fc06a9e4180ed2f69ae600fa9a9ad0dce37329cd2479e4ec70d6b58cbb4255ba8ad36e9c41d677915b5823ecac0fbc352a2cd37dccc914633436344a9b36970d9231a1a52942af1974cc4fa873671e971c3b175a2389ccef7e6a2a8763e5ade418e2207e8352e6e085aa1111493da0899032c213dc5fa70d9505498dc3fcd"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fremovexattr(r9, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) 682.741895ms ago: executing program 6 (id=9601): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0xb, 0x0, @vifc_lcl_addr=@empty, @remote}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000183100000100"/40], &(0x7f0000000480)='GPL\x00', 0x1, 0xa, &(0x7f00000004c0)=""/10, 0x40f00, 0x73, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000500)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xf, 0x200, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[r3], &(0x7f0000000640)=[{0x2, 0x5, 0xe, 0x7}, {0x5, 0x3ff, 0xe, 0x3}], 0x10, 0x6}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r8, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f00000002c0)=r9}, 0x20) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)}, 0x24040010) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) recvfrom$inet6(r4, &(0x7f0000000040)=""/73, 0x49, 0x2001, &(0x7f0000000180)={0xa, 0x4e22, 0x28c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1000}, 0x1c) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x2, 0x3, 0xb44, 0x2090, r10, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5, 0x2}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r11], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 589.743772ms ago: executing program 6 (id=9602): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009006a0001"], 0x48) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x27, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0xd, 0x3, 0x8, 0x18, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x93}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000900)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0xe, 0xe2b, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000cc0)=[r4, r4, r0], &(0x7f0000000d00)=[{0x1, 0x2, 0xb, 0x1}, {0x5, 0x4, 0x9, 0x6}, {0x1, 0x2, 0xb, 0xb}, {0x0, 0x3, 0x6, 0xc}, {0x3, 0x1, 0xd, 0x4}], 0x10, 0x5}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r11, &(0x7f0000000740)="cc", 0x1) sendfile(r11, r10, 0x0, 0x3ffff) sendfile(r11, r10, 0x0, 0x7fffeffd) socketpair$tipc(0x1e, 0x1b134774a7872156, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r13, 0x11b, 0x8, &(0x7f0000001b80), &(0x7f00000004c0)=0x80) sendmsg$unix(r10, &(0x7f0000000280)={&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000300)="788f4a416306dd400426e0e584f43c91f03da86acdc86eb3f48a9c6b5d3c4ebe1753e73549caaabd4d8fa200308dc48b56d2f5956a5d0248d3fa74e2ba060a8ea3f155cc098cba0c36bf4bc672b1e708940d63e78df8d4a0d25a953f001844f8a3c5f2e57de6dd35642aecee585eeba3daca942542a4b54d435f090e44c1b06a590a86a286", 0x85}, {&(0x7f00000009c0)="499512b68ac6af8757f454b791ccb2355dd59e01681902544aa84bd34f1674df910c59ba22ae7b664d0f2c67d2daaae1d5d7527825989e7fd35d2c2a657c3749033980658c5a37630efa23d6277454850a8c9309573967f847c53a9fb4c90a81d4d325d03d64ccf89fd00b3da3f36bca580849af5fc41a14c7b6ee5167e5e61b2c7f3d67d775cf0c6f237989b37252a6cfc4cd68cbcb4588fc10c7eeebd340a48797ba0a3d6a2034bc9283d0860fc943f87147450e3bc6117dfebaa2e94fe4155cac69686963f937eb", 0xc9}], 0x2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="284614fa870053df17fb36760400"/26, @ANYRES32=r11, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r12, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="30000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r13, @ANYRES32=r1], 0x78, 0x8004}, 0x4000) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f00000003c0)={'ip6erspan0\x00', {0x2, 0x0, @multicast1}}) 480.211121ms ago: executing program 4 (id=9603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009006a0001"], 0x48) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$eJzs281rXFUbAPDn3nyUt2nfxFq/2qrTBjGgJk2iQsBNRUVBcKE7FxKaaSlOmtKM2BYXKoKr4saVrlzpH+DGhSDuXQmudC+FIMW1jNyZe5txMhMzyYyjvb8fTHLO3DOc88yZZ+bcc2cCKK1K9ieJOBIRP0fEdKv61waV1r/fb793Prsl0Wi8/lvSbJfVi6bF46byylwakX6UxMku/W5ev/H2aq1WvZrXF+rrVxY2r9946tL66sXqxerl5ZVnzi4trzy7sjywWG/ePvXTxuev/fHJmV+mnr/51gvZeI/kx9rjGJRKVKKR6zz22KA7G7GjbeVkfIQDoS9jEZFN10Qz/6djLLYnbzpe/HCkgwOGKvtsOtT78PsN4C6WxKhHAIxG8UFfnNsP4zz432zrXOsEaGf845HmbSY6zm8HKTvbuvbmx99mtxjSPgQAQLvvsvXPk93WP2nc39bu//m1oZmIuCcijkXEvRFxPCLui2i2fSAiHuyz/0pHfef6J721r8D2KFv/Pdd1/Vus/mJmLK8dbcY/kVy4VKuezZ+TuZg4lNUXd+njx1e++rLXsUrb+i+7Zf0Xa8F8HLfGOzbo1lbrqweJud3WBxEnuq5/kztXApKIeCgiTuyzj2/ONT7rdezv4x+uxhcRj3ed/+2roMnu1ycXmq+HheJVsdOpd6+s9ep/1PFn83949/hnkvbrtZv99/H1zOmtXsf2+/qfTN5olifz+66t1utXFyMmk1d33r+0/diiXrTP4p+b7Z7/x2L7mTiZzWNEPBwRj0TEo/nYT0fEmYiY3SX+l2Zfru4//uHK4l/ra/77L6wvff9Dr/73Nv9PN0tz+T17ef/b6wAP8twBAADAf0Xa/A58ks7fKafp/HzrO/zH43Ba29isP3Fh453La63vys/ERFrsdE237Ycu5nvDRX2po76c7xt/Ova/Zn3+/Eat56YY8I+Y6pH/mV/HRj06YOj8XgvKS/5Decl/KC/5D+Ul/6G85D+Ul/yH8pL/UF7yH8pL/kMpHeR3/QoKCndrYdTvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIPxZwAAAP//jYTnFQ==") getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x27, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0xd, 0x3, 0x8, 0x18, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x93}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000900)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0xe, 0xe2b, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000cc0)=[r1, r1, r0], &(0x7f0000000d00)=[{0x1, 0x2, 0xb, 0x1}, {0x5, 0x4, 0x9, 0x6}, {0x1, 0x2, 0xb, 0xb}, {0x0, 0x3, 0x6, 0xc}, {0x3, 0x1, 0xd, 0x4}], 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) sendfile(r7, r6, 0x0, 0x7fffeffd) 459.213693ms ago: executing program 1 (id=9604): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x8, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000300), 0x6}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x2000a, 0xb, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) 414.362347ms ago: executing program 1 (id=9605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009006a0001"], 0x48) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x27, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0xd, 0x3, 0x8, 0x18, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x93}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000900)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0xe, 0xe2b, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000cc0)=[r1, r1, r0], &(0x7f0000000d00)=[{0x1, 0x2, 0xb, 0x1}, {0x5, 0x4, 0x9, 0x6}, {0x1, 0x2, 0xb, 0xb}, {0x0, 0x3, 0x6, 0xc}, {0x3, 0x1, 0xd, 0x4}], 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r5, &(0x7f0000000740)="cc", 0x1) 382.794299ms ago: executing program 1 (id=9606): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0x0, 0x1001f0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x13, 0x6, &(0x7f0000000c00)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x0, 0x6, 0x8, 0x2, 0x1b, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1ff}, @ldst={0x1, 0x1, 0x2, 0x8, 0x0, 0x20, 0x10}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00'}, 0x18) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x50010, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x2, 0x8, 0x2a, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r4, 0x0) 332.035783ms ago: executing program 4 (id=9607): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier}, {@barrier}, {@data_err_ignore}, {@resgid}, {@bsdgroups}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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") io_setup(0x8f0, &(0x7f0000002400)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) io_cancel(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="8e70fd1f51d863c3d7aae7a57da9c64030786dd23af0d68343b5b916ea4a1865be51e3c4ed546dab2bd7de3a3f8ffff2f280900784743c46b028e04b0448feae02425b9cab546b8a49980e79e1283bf752a70cda90592aff", 0x58, 0x9, 0x0, 0x2}, &(0x7f00000003c0)) 266.300578ms ago: executing program 1 (id=9608): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 187.380995ms ago: executing program 7 (id=9609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000000480)={0x0}) sendmsg$key(r1, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYRES64=r0, @ANYRESDEC=r2, @ANYBLOB="ae79c1181756610eb31f5c939f7c31ac4272f8018339b5dc73da8a38ab056606845386a7ed063e9d3f2a77c3abe86a275d1c96c9ab291411c0068a157eaa8e216a0463578b8f553b14c7050bb431fe665916ef6a2cc373b4023649fa8007b31e23750fe2029db1fef77b934514e19b686b9eb4d13698ac08dbaa8519600d7099505344a469925e3162dbaa6188d5065f0106256fdb082cdeb5b6bc6881b2fedc5eb8f1a051f8fcd78b67e286af2939c186353491435491e73cd03dea9e773e8173005db9b13818d4602e0980d7ff6740886038860ac9f9d1b82453fed80b9c85f9"], 0xa8}}, 0x40002) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0xb}, {0x0, 0x1}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 178.251926ms ago: executing program 1 (id=9610): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(r8) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7001fbdbdf250100000008000100020000002c000480050003000100000005000300020000000500030002000000050003000000000005000300010000000800020002"], 0x50}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r9, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000810) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, r3, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x24}, 0x4, 0x700000002000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x28000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x80) r12 = syz_open_dev$loop(&(0x7f0000000000), 0x9a, 0x80) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$BLKTRACESETUP(r12, 0xc0481273, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x8, 0x8, 0x5, r13}) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r1) 78.377214ms ago: executing program 7 (id=9611): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 40.659687ms ago: executing program 7 (id=9612): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000fecd230fc0002000080000000000000070000005d0000000000952d62bb00080f8f6a7b9404d7156d247f3e66fde658dbe17d9d78090cf4a5b1a8e35cedee4be5e9dfaf36f7d07e7e06525223d7bd463f9c84d522ef51cefda38bcf5fdae77681be4fd083f06c106503"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x5, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="185200000f000000000000000000000018450000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c00163f5c000d64a5d2fc4d22130000b700000000000009918af0ffffffffff182b0000", @ANYRES32=r1, @ANYBLOB="000000000200000085200000"], &(0x7f0000000200)='GPL\x00', 0xa, 0x5d, &(0x7f0000001500)=""/93, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x10, 0x80, 0x2e0}, 0x10, 0xffffffffffffffff, r0, 0x1, 0x0, &(0x7f0000001580)=[{0x2, 0x1, 0xd, 0x8}], 0x10, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xd, &(0x7f00000029c0)=ANY=[@ANYRES64=r1, @ANYBLOB="157d9704e6aa0d8ac14d58ee7b3ad6d43c72f49871649d3221a5ffbce54492cffdfd9bd3f2aa3ef41f0bc417b563764259f67398d3c167ace94e7547b7e1d43b1e419736ed0124e164e7211bf7834f929fe369be63a742f47168b23bd7e64209ea166373fb7a0d129415241c62f40c8e0243edd912b22e971e00cd4827076a9a2412d053f4a1f22d127b824d5b904450c0af456f2ba2b9fc5a1d368c88674f238afc625577a4b10dd2cdcd5ee5223aa381089087afb3f4e7c7e3081ed5e4e20e282e27f70c71b093e9a1eaf419ee0546da8c07dee2405deadbd1ee0772f67b1ee1db0609b64a14c44bb3f8fb9e73ba3b41665161359f5b056726395c73133238b7364fda079007646c2ae59d5857ac8956a88cb1f35186a805d2cb91990d4c5397e7fe5f90188c71191b44efd697c1bd26dd27e1a65ce3f7e9fb4dcc364ca41bf3ce31d5f51c2d646f11fd7cfbfcd89c8158f052361f7b5d19a39c8a13b822337ea9a6551669d6b78b1e807f4f56238791e0eda615c4ebe8bff6e871653f6b1bd396f763cf65cddd32f203a7109ee53b1c057a233596baec8eaabf32b665fdd4cce76805361c3944e4b61a12ad9fb0827477cee367338b4520ebe378364238c5570ba33c2d4512b0e47ed2d0f1482328285621188095d455dbf1f16e0e391b735f355cb8272def6959492eb127be0c1c71192571562d0df5bf799c1e6e537b96690d15fd458efcc378802407d25ddac0591b3096d88ffb0bd65737defded895434479c812af44da85f1673438eb19cd53662f1654b27009fb973ca7e5dc081505140d32bb8d5a11be07870bd729fa400835755038d890568ddfd0451203bd0ed19185cd7fd43aa3cab719217c5e98d5ea6734117b9b49bf75c8adb66c3e12620842cb4df5053b90bf4840d9ed4db81c412472ecb253611b72ba73aba89e5d9037db33b672559771fd3b0c5b7b606f79cb736a5cbac7910aaad96f2f2f8efa89a99d7ebca5d74451f5a4408456d42d03b0845e4b5ef5cdd31b0b1c7fad85ce3483bf9a915ba72c3e6d05d3f4cfe5389db23a5a4885ae12a49868fd5b71876e19718d36e9d16083ae0c38dd88241a9f7fd9efa94c4b03975c3a6819ef9ebb56c02ee80123d088922e4adc04c50cd033364e13b267fc288de297a4e1de6390ad07db13d6ca7b060ec4b53b26f69f118fcc3b6a3a109ca14da094219d4e4d0a5d75c36d3315d9395ed7292c29b5da8ccc42696a6ca4f2984ebaf0e76022c25123d2446a4d2d12f4625b513a07ab2fd859f4cfdac0e5a3b344ba307415044ea79f77593431c24e8539b81c9292435b762815b5c6e067287a0b790c3703bd970d83976455d8bbc3483309cc92d1541481c773a7b877d008e495c051643b66e85d95ea3d200a9b41abc390f23b459d799bd98ff4db51ddfab755f52909090f6b2fc2755c38babdba493250e00a1a18356c8f9550fe7b6d5d0a14d5acba6050ec4796e4e084137c20ac2e95a42795190420ede9558109992d2dcdefed69e2e5a8ae87693993df34eacb1f23772a8ff45a546264196d6afc3d4be56abc4f0d0debd6dae66d0cca0e797c7d8538a6621a641aa653077676a0aec8fa0c3c9caa1994a3221f86e3328f543772c4bc582ba91dec2e7738737091ef930e5df29de1fd8727fd6f08cd0d7c62fdd4f2b1b77ffc3e38f7a7acde846aaadeebb787fcd7a457087509a73b84503b631dd6202558800c3fd37dfe987754570d07a8c26a593d9226e3cfb672f66ce544855508a23e18b4a079d70ea01cbceeb2c7365b75d6ee3bc73c015b2891d423823943303564747fcaa99df8b68575854b53ed2a5f2939a73ff63922dfbb1144a16c1a89fd3ec735195b57794edf7261fe8f39a0c097329ec2557198f0225530596c2af5c15eb2dae13c49a393ec54e2fd6fb79c7486018bb86de3f140573c5cb0f9e19389d721187b46b4d60659151210c8a7fd4295f0d5baead54b18aa472930f734d83151b6e9c7d97033495b2ea7d22a0a69ae369f39bae3f98b1f3deba7ee57b3891994810f16e438d942ed9a2db0ae79245f05ccf68baebb14eff46da3f9a604e3a1a2b231235aee6413e086f87a2e0ecd90581ad1200227d84bb59a58b96868d2da157905fc2ba39a87589a2029feb5c92db68cb04417c31b40725b32286ae3c8fdc9325453ece1d83b9fca4e3f0b458a33e30b71f3620de3d17258cdb855108ffbb34dbb6ea39df19aafb405da71cd7eb5541714cb03887773da112e259f7174e65e10de68524a4ceace1d1c864e9533fec0b9d2ad5698725e4196ae255e5fb1a69cbb6e1b5dced27cbdb4467196a69c03eab378bf603738f98289b140a67cdf826b9a21c394406644a1c774f720d49ecb270a5571311304127e35e9c6f5a134f99280e3ac2efd66f60b7b378d49140296277057ea0d4135934167169b35e71f866969e7aceeb6318b9093269e05e2918dcb37556342e1d1a69334ce6b4eea56f93965f6ffa74a9b58eda52d57175b06b4c79c91035b3470a7f3cb97f52ca06d4919f4b5b7ebc4a1afbb2d2a2ddfe2d0a092104ac96d942d6c9bdb3d6c052b6ad2b3ff3b457160966b25c955c551278ae93945749f2e6a10e80795089b3f8a7fbcce08c78ea212388430c8c3e56beaf74bd499e80a79ad72eecef1af55d97edaa86330848c3b5f5f07d3c6e2021278aeead033eb645470ae8d9e0255b28c2093dacb1fdcc416d986086be478308a573d76c50a6c77353d3088a9e220d1221695fd7e01fb91bad4a6f0775133597e8215bafb2e495180204dbe32682c216eecadd9c74ffbae9ed3579eb85377ef432339a5874f24c27229cedbc2b9d41dd2de23f344a50f3ed3762b2cc53b06f875a8889d887320eaf93259d9448583851a9064ab35d6a3853c34775e42117c466e410f630610706472f0a4960d5f26d022b3947352d34395b7c1a80de384455b6ac2bbb2fd952f3d6d49ac5bf58e72ce3e33f190523f419042c8e1697227cef740f8a826398e5cdf51bd52baef72e13ec934e8b07e28fdc4ec51e912b90d20aa9b63a2bda3d533e69a2f20c150917f4722a27462288ba29ef2461b4e4193ecd7800ad5f7f1dfdad05c9e5d50299a0a07b1ff4d9b979372bec182280ea5c6786f76561566b750af523a3d32f897158681b93028b27669499720629d0b7288d9c2c80ae0989d3fff5be5d7dcda1879942e5c12b5954fb902c912d86e70a337b0f4f271994b0d9a263041e798a962bef20c99aaa22b1e6c1f5fd8503865447c02dca91d368c1b9dc0b0d671d7b8b558bcb22d8dd768dcedbd6f2aa48c453933fd2cc2c4416fbab836968789783b32b1ff9445c1cbf528f494d68808a299f122e58a1934e8c93cf342acc4b360e5251a2ceba7be31c21aff364893f36d0dd81990c111a9d57ad0c8f25b5909be74edf66935d5f63666bcdf2ab557208a569ab666d06ead8bada79d2ad0f9132e22e35a2f1c51ffc7a3f0b96e8ce295129e28ed7f75f2a94b12357fadfc6c4470e6f0551c41ee410e88974bdcdaa1893516bf8927990a682b08f651cd9e17cef02b0dc84b65e36bd5abb86a0406356bd048be80aa1e7599998aafbc20380653611852c418d31b886f175d093be114f8d80ffaa618708ebf55ad4967cd9f70261e7acd70ad71c946e6fdcc174c5f943e00800c2d37ffe567336eb801b03f88e9804eff0d51c00ae6c78604b9e70a0ca2b63d6649ba654cce6f446859df8e18e1e1e71f84a7f02a8dd02e9fe0887ed13c01b306a1509b3cb71137e29b63b94948997a6cfee9b374b61d385e145eaa2cf11791f93351d40881b933fbdc1c97fef38c7fd51d749504604dddecf92d6da9da7ca04aa25170050a2601225d98b03a454002011a1c48aadb69c93b23448a4e455729e420ffa7a5910ea26ddb2266f9c25a95a83ec04a3b7eca438498e0cfd4331d41ceeaafcb70b953d78b934a509492cbf9d2c8986c0dc335212e127af1ca2e5216decb238f3920ef2667fc5b661e57e16f157137c1a0b761dc06830eee021d2180f3a743657ca9ef742dcb732227611818f9a04b8412aafc7317badac317f76a2376bff24431a431c5203afa38e1a54c28fc6846440feee97db077a9b7ee414736532261410d5109fbcc50915ee0a8e4c70bb3638e19142ffe25affa8e5dc58dc2ae5a2bbc87b615d7f084aad633953c5a53e8c797a5c476e23880b294a0918d7d92ba979dd9fd297ac12f95f2110acfa1ca679df92e46dc40f068962cb3a753181ba1db3de280563a823d7ead93fcca35105d56c5adebf7bb81888089978428e55c0f0f3ee7b72c71e0bf79e9d30255f09bfe06f1cb386d5490fa102cf5b720f4e7524e9b1558d56aa0cc0ed7363b05526beb1d11c037b9866244d6fcff536ea0e83d1a3239cbb0682dd42116acf2482f593f1d26c1525597ee31d1b89e07a9d6a9a3bec12dac359c2f47f2d116890fcce78f930dcca0bb8ece5c1c1f31b9a546cf04d8d503659c32e57e1729ddfcbc14a6f0942a87e45ed61308b0259cf128f0f433b358e55c72d80fd5df8377de048cc0002a26934f4c2a91e78eb788f9d292940e5e04660508ef3c081ecb768288ad024abac21bba2bc96b49ae772e22bdc6532b02cab04f8ebedc6411df754d11b00705655ff40fc8a45ee0e7abaeab9ec36862315f57672ff3979e208f7d14040df2d0a4039f3585096b1e1d13c45fb2a0a2ed7e1bfbf1398fa229aa5a7235c9320f03aae9667f12108de5564d2c8d64f9736b92c2a2ceea176194bbd0cf49f916dfb88745b0f41f44f11e940559ca441719f90a8de02529d12b2892764b5a018caf320fcc8452dd53be9a39bd0f789fee981b1ecc3ebbc7238b29b22a671328cac7f6d6798c753192c5e45c1936ff7dbfcbfa6600d467688c91863ae796a50a12a14fc7c5f3e1cf9a82ea98f77ae2018b4cb2445bcad5146c559c10705cc512cefaea525df34f82b956d5bffd1ccdb8dbcf738bb82325a5e829fca88f1012f9c979c6a91beed04da45ed6f27fa5030fc01a22b1ed1609d7b92909b71b30daf5e2ac2009e713de4958844a32c1210a9196c89a7e7df0c8a0562901003e2e83f18d1830e69c52d83239f848566df1c54dd4d3da419d79ccb9944e0c92ea49e6c28556ca2140be9a8a7bafe21e5354e83f4525dee76efcdd660ff46af87717afbad00520ead5b64d79bacb4b55883d6c4ee8deedcd251569bd7e2fbd717ff804cb0bd9a52cef03e83239685226b18dd5b41107d23900454cdd6f76f70b091b8f2ed6fed91137532a0f46be633ec8ff407bb3b65010e572298dfed285cbbf708aaee91adfc0110c8663d2b861ab423a021bd1c3c3cf65b38f8268277e0f9df9d8e26fdc639e13ac71fbc8f0ea2235804913edfd2d1f9e6851a84d7a3e5a7a5db99fcfc03459552c52347990b7b14005036d99f0fa346fec1cbd75609305b953a9a7a3e1736c8a381c921b9fd7783e60ec4a54a81b0b96ebd1870e9e0a27cbab038554da393a359d3261087525a83185d8aa2af7981988b7de9e1219c0718b7758f62225c9e2869481d6d11e118eccc6da406dbd733ce6c6efdd1bd47595c7bdf69e5dfc89d73394377a4b63760a9dfd5d0e4e677c77cfadfe0f93ce2432e5fb76ec93c98f17ea046481de8e0afc54c35f9648cff956f15c8d0b3a6f40e97a12f0cd2af5c62c95484f8d3c991c42cb380069370429ac0eccc3a9ff0c7a9c126552ccd3d8aa4d4beae522585c8387368d7788ae5a3274728b04fe8d4f2bc1b8ea9a5", @ANYBLOB="0000000000000000b7080000001100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000009c451f5b704000000000000850000000100000095d8f5cc52eaf47637f33b8ab10c111338c868b2ec545b5c6326858ead8c287b97214ce5f7470dc9deb8cdcb4875d0c574d7ed9d18c0e39ef70e7da7ec230250041f5f8805acb4a1681c8d4f2f2fa0616f60e55e1290451c96f4f9c46c41eb7472b49b7dcf381168c416d9915ddbfe2f99992d9f48c11a379fce7cc9caa59c8b8e1fb551ca37ef0c59481420afc7d2de139d8e088eaf79452df330680fce787f51c0b813de1b669c2bae3116b5e2162c65e1e62e041e4b7259cea0da74b4070cc34170155586af433f4bed", @ANYRES64=r0, @ANYRESOCT=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='mem_connect\x00', r5}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0x200000000000011, 0x2, 0x0) unshare(0x6a040000) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r8 = gettid() r9 = eventfd2(0x0, 0x0) write$eventfd(r9, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r9, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r10, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x2}, 0x1c, &(0x7f00000001c0)}}], 0x1, 0x8081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r7, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r7, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) 39.677727ms ago: executing program 1 (id=9613): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000f000000050030000000000005002f00a005000008000300", @ANYRES32=r7], 0x2c}}, 0x0) 0s ago: executing program 4 (id=9614): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000fecd230fc0002000080000000000000070000005d0000000000952d62bb00080f8f6a7b9404d7156d247f3e66fde658dbe17d9d78090cf4a5b1a8e35cedee4be5e9dfaf36f7d07e7e06525223d7bd463f9c84d522ef51cefda38bcf5fdae77681be4fd083f06c106503"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x5, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="185200000f000000000000000000000018450000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c00163f5c000d64a5d2fc4d22130000b700000000000009918af0ffffffffff182b0000", @ANYRES32=r1, @ANYBLOB="00000000020000008520000003000000487b4000f0ffffff"], &(0x7f0000000200)='GPL\x00', 0xa, 0x5d, &(0x7f0000001500)=""/93, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x10, 0x80, 0x2e0}, 0x10, 0xffffffffffffffff, r0, 0x1, 0x0, &(0x7f0000001580)=[{0x2, 0x1, 0xd, 0x8}], 0x10, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xd, &(0x7f00000029c0)=ANY=[@ANYRES64=r1, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64=r0, @ANYRESOCT=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='mem_connect\x00', r5}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0x200000000000011, 0x2, 0x0) unshare(0x6a040000) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r8 = gettid() r9 = eventfd2(0x0, 0x0) write$eventfd(r9, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r9, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r7, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r7, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) kernel console output (not intermixed with test programs): -fs (loop5): mount failed [ 577.062433][T29867] hsr_slave_0: entered promiscuous mode [ 577.085975][T29867] hsr_slave_1: entered promiscuous mode [ 577.180764][T29926] loop5: detected capacity change from 0 to 4096 [ 577.215321][T29926] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 577.263732][T29926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.295275][T29867] debugfs: 'hsr0' already exists in 'hsr' [ 577.301124][T29867] Cannot create hsr debugfs directory [ 577.512692][ T133] ------------[ cut here ]------------ [ 577.518252][ T133] WARNING: CPU: 1 PID: 133 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x17c/0x1f0 [ 577.527865][ T133] Modules linked in: [ 577.531813][ T133] CPU: 1 UID: 0 PID: 133 Comm: kworker/u8:4 Tainted: G W 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 577.545634][ T133] Tainted: [W]=WARN [ 577.549459][ T133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 577.559552][ T133] Workqueue: netns cleanup_net [ 577.564401][ T133] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 577.570064][ T133] Code: 48 8d bb 70 0e 00 00 e8 72 f1 bf fc 48 8b bb 70 0e 00 00 e8 f6 57 cc fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 45 e0 a5 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 37 e0 a5 fc 90 0f 0b 90 4c 89 f7 e8 3b [ 577.589780][ T133] RSP: 0018:ffffc90000e9bc60 EFLAGS: 00010293 [ 577.595914][ T133] RAX: ffffffff84b1c4ab RBX: ffff88810bf60000 RCX: ffff888101626180 [ 577.603922][ T133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810bf60e40 [ 577.611945][ T133] RBP: ffffffff86c80a60 R08: 0001ffff86847daf R09: 0000000000000000 [ 577.619996][ T133] R10: ffffc90000e9bbe8 R11: 0001c90000e9bbe8 R12: ffffffff86c80a80 [ 577.628019][ T133] R13: ffff88810bf60028 R14: ffff88810bf60e40 R15: ffff88810bf60000 [ 577.636116][ T133] FS: 0000000000000000(0000) GS:ffff8882aef69000(0000) knlGS:0000000000000000 [ 577.645217][ T133] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 577.651863][ T133] CR2: 00007fab1d9502d8 CR3: 000000010fb00000 CR4: 00000000003506f0 [ 577.659903][ T133] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 577.667918][ T133] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 577.675975][ T133] Call Trace: [ 577.679296][ T133] [ 577.682288][ T133] xfrm_net_exit+0x2d/0x60 [ 577.686753][ T133] ops_undo_list+0x278/0x410 [ 577.691452][ T133] cleanup_net+0x2de/0x4d0 [ 577.695955][ T133] process_scheduled_works+0x4cb/0x9d0 [ 577.701519][ T133] worker_thread+0x582/0x770 [ 577.706218][ T133] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 577.712067][ T133] ? schedule+0x5f/0xd0 [ 577.716302][ T133] kthread+0x489/0x510 [ 577.720399][ T133] ? finish_task_switch+0xad/0x2b0 [ 577.725570][ T133] ? __pfx_worker_thread+0x10/0x10 [ 577.730865][ T133] ? __pfx_kthread+0x10/0x10 [ 577.735520][ T133] ret_from_fork+0xdd/0x150 [ 577.740111][ T133] ? __pfx_kthread+0x10/0x10 [ 577.744799][ T133] ret_from_fork_asm+0x1a/0x30 [ 577.749824][ T133] [ 577.752913][ T133] ---[ end trace 0000000000000000 ]--- [ 577.879698][T29936] loop6: detected capacity change from 0 to 2048 [ 577.926195][T29936] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.941476][T29938] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9094'. [ 577.978953][T29941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9095'. [ 577.989529][T26335] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.172871][ T4980] usb 16-1: device descriptor read/8, error -110 [ 578.192076][T29867] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 578.202104][T29867] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 578.211610][T29867] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 578.221823][T29867] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 578.267632][T29867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.282420][T29867] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.289576][ T4980] usb 16-1: new SuperSpeed USB device number 42 using vhci_hcd [ 578.301654][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.308770][ T3319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.317091][ T4980] usb 16-1: enqueue for inactive port 0 [ 578.324646][ T4980] usb 16-1: enqueue for inactive port 0 [ 578.330581][ T4980] usb 16-1: enqueue for inactive port 0 [ 578.348374][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.355626][ T3319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.376580][T29867] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 578.387150][T29867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 578.459912][T29867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.589503][T29709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.625932][T29867] veth0_vlan: entered promiscuous mode [ 578.648660][T29972] syzkaller0: entered promiscuous mode [ 578.654462][T29972] syzkaller0: entered allmulticast mode [ 578.663362][T29867] veth1_vlan: entered promiscuous mode [ 578.685622][T29867] veth0_macvtap: entered promiscuous mode [ 578.691991][T29974] loop7: detected capacity change from 0 to 1024 [ 578.696091][T29867] veth1_macvtap: entered promiscuous mode [ 578.702709][T29974] EXT4-fs: Ignoring removed nobh option [ 578.710711][T29974] EXT4-fs: Ignoring removed bh option [ 578.721726][T29867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.737152][T29974] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.738645][T29867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.762397][T29867] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.771335][T29867] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.771441][T29972] loop5: detected capacity change from 0 to 512 [ 578.780277][T29867] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.796384][T29867] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.809315][T29972] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 578.836412][T29972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.853068][T29972] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.905219][T20386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.944983][T29993] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 578.951650][T29993] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 578.959581][T29993] vhci_hcd vhci_hcd.0: Device attached [ 579.020603][T30001] netlink: 256 bytes leftover after parsing attributes in process `syz.5.9108'. [ 579.047141][T30003] loop7: detected capacity change from 0 to 1024 [ 579.065698][T30003] EXT4-fs: Ignoring removed oldalloc option [ 579.077693][T30003] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 579.140738][T29990] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9104'. [ 579.203732][T30010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9109'. [ 579.288914][T30019] tipc: Enabling of bearer rejected, failed to enable media [ 579.373505][ T4980] usb usb16-port1: attempt power cycle [ 579.722562][T29994] vhci_hcd: connection closed [ 579.722928][ T37] vhci_hcd: stop threads [ 579.732715][ T37] vhci_hcd: release socket [ 579.737359][ T37] vhci_hcd: disconnect device [ 580.018221][T30045] loop4: detected capacity change from 0 to 512 [ 580.027027][T30045] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 580.064292][T30045] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.9125: bad orphan inode 15 [ 580.097053][T30045] ext4_test_bit(bit=14, block=18) = 1 [ 580.102564][T30045] is_bad_inode(inode)=0 [ 580.106822][T30045] NEXT_ORPHAN(inode)=1023 [ 580.111187][T30045] max_ino=32 [ 580.114449][T30045] i_nlink=0 [ 580.118949][T30045] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.9125: corrupted xattr block 19: invalid header [ 580.134306][T30045] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 580.144461][T30045] ext2 filesystem being mounted at /6/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 580.170137][T30045] lo speed is unknown, defaulting to 1000 [ 580.185112][T30045] lo speed is unknown, defaulting to 1000 [ 580.196636][T30045] lo speed is unknown, defaulting to 1000 [ 580.203873][T30045] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 580.214122][T30045] lo speed is unknown, defaulting to 1000 [ 580.220209][T30045] lo speed is unknown, defaulting to 1000 [ 580.226613][T30045] lo speed is unknown, defaulting to 1000 [ 580.232942][T30045] lo speed is unknown, defaulting to 1000 [ 580.239293][T30045] lo speed is unknown, defaulting to 1000 [ 580.276440][T30045] lo speed is unknown, defaulting to 1000 [ 580.492889][ T36] usb 4-1: device descriptor read/8, error -110 [ 580.615626][ T36] usb 4-1: new SuperSpeed USB device number 45 using vhci_hcd [ 580.664267][ T36] usb 4-1: enqueue for inactive port 0 [ 580.689906][ T36] usb 4-1: enqueue for inactive port 0 [ 580.695750][ T36] usb 4-1: enqueue for inactive port 0 [ 580.826658][T30072] pimreg: entered allmulticast mode [ 580.955250][T30078] lo speed is unknown, defaulting to 1000 [ 580.964698][T30071] pimreg: left allmulticast mode [ 580.969532][T30080] loop5: detected capacity change from 0 to 512 [ 581.008468][T30080] EXT4-fs (loop5): orphan cleanup on readonly fs [ 581.034756][T30080] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.9137: bad orphan inode 13 [ 581.077697][T30089] netlink: 'syz.4.9142': attribute type 10 has an invalid length. [ 581.100977][T30080] ext4_test_bit(bit=12, block=18) = 1 [ 581.106582][T30080] is_bad_inode(inode)=0 [ 581.110968][T30080] NEXT_ORPHAN(inode)=2130706432 [ 581.115961][T30080] max_ino=32 [ 581.119200][T30080] i_nlink=1 [ 581.147506][T30091] lo speed is unknown, defaulting to 1000 [ 581.191997][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 581.192012][ T29] audit: type=1400 audit(1753838079.943:31953): avc: denied { mount } for pid=30074 comm="syz.5.9137" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 581.236910][T30080] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 581.246575][ T4980] usb usb16-port1: unable to enumerate USB device [ 581.259840][ T29] audit: type=1400 audit(1753838079.993:31954): avc: denied { execute } for pid=30074 comm="syz.5.9137" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 581.282705][ T29] audit: type=1400 audit(1753838079.993:31955): avc: denied { read open } for pid=30074 comm="syz.5.9137" path="/12/bus/file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 581.326092][ T29] audit: type=1400 audit(1753838080.013:31956): avc: denied { create } for pid=30093 comm="syz.4.9144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 581.346577][ T29] audit: type=1400 audit(1753838080.013:31957): avc: denied { write } for pid=30093 comm="syz.4.9144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 581.367134][ T29] audit: type=1400 audit(1753838080.073:31958): avc: denied { write } for pid=30090 comm="syz.6.9143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 581.388266][T30096] loop4: detected capacity change from 0 to 1024 [ 581.395127][T30096] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 581.395270][T30094] infiniband syz2: set down [ 581.407946][T30094] infiniband syz2: added syzkaller0 [ 581.415933][T30080] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9137: bg 0: block 248: padding at end of block bitmap is not set [ 581.433764][T30080] Quota error (device loop5): write_blk: dquota write failed [ 581.441405][T30080] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 581.451526][T30080] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.9137: Failed to acquire dquot type 1 [ 581.465405][T30094] RDS/IB: syz2: added [ 581.470036][T30094] smc: adding ib device syz2 with port count 1 [ 581.476584][T30080] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 581.494624][T30094] smc: ib device syz2 port 1 has pnetid [ 581.513145][ T29] audit: type=1400 audit(1753838080.263:31959): avc: denied { unmount } for pid=29709 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 581.604300][T30100] pimreg: entered allmulticast mode [ 581.619891][ T29] audit: type=1400 audit(1753838080.373:31960): avc: denied { create } for pid=30099 comm="syz.5.9145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 581.644505][T30099] pimreg: left allmulticast mode [ 581.753138][ T36] usb usb4-port1: unable to enumerate USB device [ 581.885119][T14548] smc: removing ib device syz2 [ 581.900639][T30113] loop7: detected capacity change from 0 to 1024 [ 581.910814][T30113] EXT4-fs: Ignoring removed nobh option [ 581.916674][T30113] EXT4-fs: Ignoring removed bh option [ 582.246436][T30127] netlink: 'syz.4.9156': attribute type 10 has an invalid length. [ 582.266638][T30125] loop7: detected capacity change from 0 to 2048 [ 582.313392][T30125] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 582.343165][T30125] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 582.355671][T30125] EXT4-fs (loop7): This should not happen!! Data will be lost [ 582.355671][T30125] [ 582.365453][T30125] EXT4-fs (loop7): Total free blocks count 0 [ 582.371535][T30125] EXT4-fs (loop7): Free/Dirty block details [ 582.377490][T30125] EXT4-fs (loop7): free_blocks=2415919504 [ 582.383303][T30125] EXT4-fs (loop7): dirty_blocks=48 [ 582.388465][T30125] EXT4-fs (loop7): Block reservation details [ 582.394534][T30125] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 583.023676][T30155] pimreg: entered allmulticast mode [ 583.117714][T30158] pimreg: left allmulticast mode [ 583.119515][T30157] infiniband syz2: set down [ 583.127379][T30157] infiniband syz2: added syzkaller0 [ 583.198811][T30161] loop7: detected capacity change from 0 to 1024 [ 583.205813][T30161] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 583.217095][T30157] RDS/IB: syz2: added [ 583.233440][T30157] smc: adding ib device syz2 with port count 1 [ 583.239659][T30157] smc: ib device syz2 port 1 has pnetid [ 583.430785][T30174] FAULT_INJECTION: forcing a failure. [ 583.430785][T30174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.443949][T30174] CPU: 1 UID: 0 PID: 30174 Comm: syz.6.9174 Tainted: G W 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 583.443983][T30174] Tainted: [W]=WARN [ 583.443990][T30174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 583.444013][T30174] Call Trace: [ 583.444021][T30174] [ 583.444045][T30174] __dump_stack+0x1d/0x30 [ 583.444071][T30174] dump_stack_lvl+0xe8/0x140 [ 583.444097][T30174] dump_stack+0x15/0x1b [ 583.444114][T30174] should_fail_ex+0x265/0x280 [ 583.444141][T30174] should_fail+0xb/0x20 [ 583.444162][T30174] should_fail_usercopy+0x1a/0x20 [ 583.444228][T30174] _copy_to_user+0x20/0xa0 [ 583.444265][T30174] simple_read_from_buffer+0xb5/0x130 [ 583.444304][T30174] proc_fail_nth_read+0x100/0x140 [ 583.444339][T30174] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 583.444433][T30174] vfs_read+0x19d/0x6f0 [ 583.444468][T30174] ? __rcu_read_unlock+0x4f/0x70 [ 583.444498][T30174] ? __fget_files+0x184/0x1c0 [ 583.444526][T30174] ksys_read+0xda/0x1a0 [ 583.444611][T30174] __x64_sys_read+0x40/0x50 [ 583.444705][T30174] x64_sys_call+0x27bc/0x2ff0 [ 583.444743][T30174] do_syscall_64+0xd2/0x200 [ 583.444769][T30174] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 583.444796][T30174] ? clear_bhb_loop+0x40/0x90 [ 583.444818][T30174] ? clear_bhb_loop+0x40/0x90 [ 583.444859][T30174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.444886][T30174] RIP: 0033:0x7f4e8cf2d3bc [ 583.444907][T30174] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 583.444930][T30174] RSP: 002b:00007f4e8b58f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 583.445023][T30174] RAX: ffffffffffffffda RBX: 00007f4e8d155fa0 RCX: 00007f4e8cf2d3bc [ 583.445036][T30174] RDX: 000000000000000f RSI: 00007f4e8b58f0a0 RDI: 0000000000000004 [ 583.445049][T30174] RBP: 00007f4e8b58f090 R08: 0000000000000000 R09: 0000000000000000 [ 583.445062][T30174] R10: 0000000000009a80 R11: 0000000000000246 R12: 0000000000000001 [ 583.445078][T30174] R13: 0000000000000000 R14: 00007f4e8d155fa0 R15: 00007fff645fcf68 [ 583.445182][T30174] [ 583.730893][ T12] smc: removing ib device syz2 [ 584.273296][T30206] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9189'. [ 584.328885][T30204] infiniband syz2: set down [ 584.333778][T30204] infiniband syz2: added syzkaller0 [ 584.360921][T30204] RDS/IB: syz2: added [ 584.368908][T30204] smc: adding ib device syz2 with port count 1 [ 584.375273][T30204] smc: ib device syz2 port 1 has pnetid [ 584.657982][ T12] smc: removing ib device syz2 [ 584.693719][T30214] wg2: entered promiscuous mode [ 584.698685][T30214] wg2: entered allmulticast mode [ 584.993367][T30224] netlink: 'syz.1.9195': attribute type 1 has an invalid length. [ 585.032648][T30224] 8021q: adding VLAN 0 to HW filter on device bond1 [ 585.085940][T30228] 8021q: adding VLAN 0 to HW filter on device bond1 [ 585.113839][T30224] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9195'. [ 585.123681][T30228] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 585.135504][T30228] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 585.144755][T30229] loop6: detected capacity change from 0 to 1024 [ 585.151617][T30229] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 585.210329][T30224] macvlan2: entered promiscuous mode [ 585.215972][T30224] macvlan2: entered allmulticast mode [ 585.237091][T30224] bond1: entered promiscuous mode [ 585.242393][T30224] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 585.279544][T30234] loop7: detected capacity change from 0 to 2048 [ 585.308232][T30224] bond1: left promiscuous mode [ 585.350908][T30234] Alternate GPT is invalid, using primary GPT. [ 585.357282][T30234] loop7: p1 p2 p3 [ 585.474987][T30242] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9200'. [ 585.539219][T30241] lo speed is unknown, defaulting to 1000 [ 585.554832][T30248] netlink: 197276 bytes leftover after parsing attributes in process `syz.7.9205'. [ 585.580664][T30248] loop7: detected capacity change from 0 to 512 [ 585.605682][T30250] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 585.612348][T30250] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 585.621127][T30250] vhci_hcd vhci_hcd.0: Device attached [ 585.633005][T30248] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 585.669435][T30248] EXT4-fs mount: 11 callbacks suppressed [ 585.669498][T30248] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.689140][T30248] ext4 filesystem being mounted at /593/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 585.712369][T30264] pimreg: entered allmulticast mode [ 585.760783][T30263] pimreg: left allmulticast mode [ 585.796570][T20386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.882300][T30272] loop4: detected capacity change from 0 to 128 [ 585.903135][ T3647] usb 14-1: SetAddress Request (31) to port 0 [ 585.909891][ T3647] usb 14-1: new SuperSpeed USB device number 31 using vhci_hcd [ 585.947395][T30272] bio_check_eod: 24 callbacks suppressed [ 585.947416][T30272] syz.4.9213: attempt to access beyond end of device [ 585.947416][T30272] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 586.004381][T30272] syz.4.9213: attempt to access beyond end of device [ 586.004381][T30272] loop4: rw=34817, sector=169, nr_sectors = 848 limit=128 [ 586.054841][T30280] ip6gre7: entered allmulticast mode [ 586.067038][T30274] infiniband syz2: set down [ 586.071624][T30274] infiniband syz2: added syzkaller0 [ 586.088617][T30274] RDS/IB: syz2: added [ 586.095639][T30274] smc: adding ib device syz2 with port count 1 [ 586.102608][T30274] smc: ib device syz2 port 1 has pnetid [ 586.250702][T30284] loop5: detected capacity change from 0 to 1024 [ 586.268937][T30280] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 586.318932][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 586.318946][ T29] audit: type=1400 audit(1753838085.073:32263): avc: denied { unmount } for pid=29867 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 586.368823][ T29] audit: type=1400 audit(1753838085.123:32264): avc: denied { watch watch_reads } for pid=30286 comm="syz.7.9218" path="/597/file1" dev="tmpfs" ino=3241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 586.383642][T30284] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 586.437071][T30290] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 586.445657][T30290] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 586.447458][ T29] audit: type=1400 audit(1753838085.163:32265): avc: denied { execute } for pid=30286 comm="syz.7.9218" name="file1" dev="tmpfs" ino=3241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 586.477532][ T29] audit: type=1400 audit(1753838085.163:32266): avc: denied { execute_no_trans } for pid=30286 comm="syz.7.9218" path="/597/file1" dev="tmpfs" ino=3241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 586.503195][ T29] audit: type=1400 audit(1753838085.163:32267): avc: denied { bind } for pid=30285 comm="syz.1.9216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 586.523477][ T29] audit: type=1400 audit(1753838085.183:32268): avc: denied { read } for pid=30289 comm="syz.4.9217" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 586.547703][ T29] audit: type=1400 audit(1753838085.183:32269): avc: denied { open } for pid=30289 comm="syz.4.9217" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 586.571688][ T29] audit: type=1400 audit(1753838085.183:32270): avc: denied { create } for pid=30289 comm="syz.4.9217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 586.593018][T30251] vhci_hcd: connection reset by peer [ 586.635323][ T3436] vhci_hcd: stop threads [ 586.639696][ T3436] vhci_hcd: release socket [ 586.644190][ T3436] vhci_hcd: disconnect device [ 586.732663][ T29] audit: type=1400 audit(1753838085.233:32271): avc: denied { allowed } for pid=30289 comm="syz.4.9217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 586.753147][ T29] audit: type=1400 audit(1753838085.233:32272): avc: denied { create } for pid=30289 comm="syz.4.9217" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 586.777701][T14548] smc: removing ib device syz2 [ 586.800795][T30300] pimreg: entered allmulticast mode [ 586.831122][T30299] pimreg: left allmulticast mode [ 586.913279][T30303] lo speed is unknown, defaulting to 1000 [ 587.070982][T30316] loop4: detected capacity change from 0 to 2048 [ 587.098654][T30304] lo speed is unknown, defaulting to 1000 [ 587.137736][T30316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.157853][T30312] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 587.171550][T30320] lo speed is unknown, defaulting to 1000 [ 587.182486][T30312] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 587.194990][T30312] EXT4-fs (loop4): This should not happen!! Data will be lost [ 587.194990][T30312] [ 587.204689][T30312] EXT4-fs (loop4): Total free blocks count 0 [ 587.210735][T30312] EXT4-fs (loop4): Free/Dirty block details [ 587.216716][T30312] EXT4-fs (loop4): free_blocks=2415919504 [ 587.222588][T30312] EXT4-fs (loop4): dirty_blocks=48 [ 587.227744][T30312] EXT4-fs (loop4): Block reservation details [ 587.233829][T30312] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 587.297470][T30304] chnl_net:caif_netlink_parms(): no params data found [ 587.331985][ T3319] bridge_slave_1: left allmulticast mode [ 587.337761][ T3319] bridge_slave_1: left promiscuous mode [ 587.343619][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.354649][ T3319] bridge_slave_0: left allmulticast mode [ 587.360337][ T3319] bridge_slave_0: left promiscuous mode [ 587.366114][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.474830][ T3319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.484561][ T3319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.493953][ T3319] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 587.504234][ T3319] bond0 (unregistering): Released all slaves [ 587.513184][ T3319] bond1 (unregistering): Released all slaves [ 587.521683][ T3319] bond2 (unregistering): Released all slaves [ 587.556508][T30304] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.563683][T30304] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.572002][T30304] bridge_slave_0: entered allmulticast mode [ 587.579022][T30304] bridge_slave_0: entered promiscuous mode [ 587.586032][T30304] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.593248][T30304] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.600634][T30304] bridge_slave_1: entered allmulticast mode [ 587.607480][T30304] bridge_slave_1: entered promiscuous mode [ 587.614037][ T3319] tipc: Left network mode [ 587.627107][T30304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.637146][ T3319] hsr_slave_0: left promiscuous mode [ 587.642930][ T3319] hsr_slave_1: left promiscuous mode [ 587.648770][ T3319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.656451][ T3319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.685329][ T3319] team0 (unregistering): Port device team_slave_1 removed [ 587.704756][ T3319] team0 (unregistering): Port device team_slave_0 removed [ 587.781545][T30304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.813908][T30304] team0: Port device team_slave_0 added [ 587.820641][T30304] team0: Port device team_slave_1 added [ 587.844183][T30304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.851218][T30304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.877308][T30304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.889849][T29867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.891429][T30304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.905979][T30304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.906040][T30304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.982417][T30334] netlink: 'syz.4.9228': attribute type 10 has an invalid length. [ 588.000751][T30342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9230'. [ 588.000999][T30337] loop5: detected capacity change from 0 to 512 [ 588.016918][T30337] journal_path: Lookup failure for './file0/../file0' [ 588.023803][T30337] EXT4-fs: error: could not find journal device path [ 588.031859][T30340] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 588.035134][T30337] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 588.053338][T30304] hsr_slave_0: entered promiscuous mode [ 588.062450][T30304] hsr_slave_1: entered promiscuous mode [ 588.071439][T30304] debugfs: 'hsr0' already exists in 'hsr' [ 588.077345][T30304] Cannot create hsr debugfs directory [ 588.136495][T30351] pimreg: entered allmulticast mode [ 588.163517][T30350] pimreg: left allmulticast mode [ 588.175442][T30352] loop4: detected capacity change from 0 to 512 [ 588.189017][T30352] EXT4-fs (loop4): orphan cleanup on readonly fs [ 588.189727][ T3319] IPVS: stop unused estimator thread 0... [ 588.202425][T30352] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.9232: bad orphan inode 13 [ 588.227212][T30352] ext4_test_bit(bit=12, block=18) = 1 [ 588.232930][T30352] is_bad_inode(inode)=0 [ 588.237256][T30352] NEXT_ORPHAN(inode)=2130706432 [ 588.242125][T30352] max_ino=32 [ 588.245401][T30352] i_nlink=1 [ 588.281091][T30352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 588.294561][ T3319] ------------[ cut here ]------------ [ 588.300082][ T3319] WARNING: CPU: 1 PID: 3319 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x17c/0x1f0 [ 588.309828][ T3319] Modules linked in: [ 588.314027][ T3319] CPU: 1 UID: 0 PID: 3319 Comm: kworker/u8:6 Tainted: G W 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 588.328034][ T3319] Tainted: [W]=WARN [ 588.331865][ T3319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 588.342035][ T3319] Workqueue: netns cleanup_net [ 588.346857][ T3319] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 588.352445][ T3319] Code: 48 8d bb 70 0e 00 00 e8 72 f1 bf fc 48 8b bb 70 0e 00 00 e8 f6 57 cc fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 45 e0 a5 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 37 e0 a5 fc 90 0f 0b 90 4c 89 f7 e8 3b [ 588.372175][ T3319] RSP: 0018:ffffc900016abc60 EFLAGS: 00010293 [ 588.378417][ T3319] RAX: ffffffff84b1c4ab RBX: ffff888109de2800 RCX: ffff8881045c8000 [ 588.386473][ T3319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888109de3640 [ 588.394489][ T3319] RBP: ffffffff86c80a60 R08: 0001ffff86847daf R09: 0000000000000000 [ 588.402471][ T3319] R10: ffffc900016abbe8 R11: 0001c900016abbe8 R12: ffffffff86c80a80 [ 588.410572][ T3319] R13: ffff888109de2828 R14: ffff888109de3640 R15: ffff888109de2800 [ 588.418920][ T3319] FS: 0000000000000000(0000) GS:ffff8882aef69000(0000) knlGS:0000000000000000 [ 588.428113][ T3319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 588.434806][ T3319] CR2: 000055558b1e2468 CR3: 0000000118a38000 CR4: 00000000003506f0 [ 588.442788][ T3319] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 588.450826][ T3319] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 588.458846][ T3319] Call Trace: [ 588.462160][ T3319] [ 588.465166][ T3319] xfrm_net_exit+0x2d/0x60 [ 588.469599][ T3319] ops_undo_list+0x278/0x410 [ 588.474241][ T3319] cleanup_net+0x2de/0x4d0 [ 588.478670][ T3319] process_scheduled_works+0x4cb/0x9d0 [ 588.484198][ T3319] worker_thread+0x582/0x770 [ 588.488852][ T3319] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 588.494829][ T3319] ? schedule+0x5f/0xd0 [ 588.499259][ T3319] kthread+0x489/0x510 [ 588.503413][ T3319] ? finish_task_switch+0xad/0x2b0 [ 588.508675][ T3319] ? __pfx_worker_thread+0x10/0x10 [ 588.513925][ T3319] ? __pfx_kthread+0x10/0x10 [ 588.518597][ T3319] ret_from_fork+0xdd/0x150 [ 588.523223][ T3319] ? __pfx_kthread+0x10/0x10 [ 588.527926][ T3319] ret_from_fork_asm+0x1a/0x30 [ 588.532710][ T3319] [ 588.535779][ T3319] ---[ end trace 0000000000000000 ]--- [ 588.561909][T30348] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 588.577540][T30360] lo speed is unknown, defaulting to 1000 [ 588.591245][T30348] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9232: bg 0: block 248: padding at end of block bitmap is not set [ 588.612477][T30348] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.9232: Failed to acquire dquot type 1 [ 588.630799][T30348] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 588.669523][T29867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.750903][T30369] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.758175][T30369] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.804544][T30369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.815252][T30369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.888697][T30369] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.897909][T30369] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.906891][T30369] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.915844][T30369] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.937505][T30375] FAULT_INJECTION: forcing a failure. [ 588.937505][T30375] name failslab, interval 1, probability 0, space 0, times 0 [ 588.951174][T30375] CPU: 0 UID: 0 PID: 30375 Comm: syz.6.9240 Tainted: G W 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 588.951212][T30375] Tainted: [W]=WARN [ 588.951219][T30375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 588.951232][T30375] Call Trace: [ 588.951238][T30375] [ 588.951245][T30375] __dump_stack+0x1d/0x30 [ 588.951321][T30375] dump_stack_lvl+0xe8/0x140 [ 588.951391][T30375] dump_stack+0x15/0x1b [ 588.951413][T30375] should_fail_ex+0x265/0x280 [ 588.951447][T30375] should_failslab+0x8c/0xb0 [ 588.951544][T30375] __kmalloc_noprof+0xa5/0x3e0 [ 588.951574][T30375] ? sk_prot_alloc+0xa8/0x190 [ 588.951619][T30375] sk_prot_alloc+0xa8/0x190 [ 588.951652][T30375] sk_alloc+0x34/0x360 [ 588.951680][T30375] ? __pfx_genl_release+0x10/0x10 [ 588.951770][T30375] ? __pfx_genl_release+0x10/0x10 [ 588.951813][T30375] netlink_create+0x32a/0x460 [ 588.951920][T30375] ? __pfx_genl_unbind+0x10/0x10 [ 588.951960][T30375] ? __pfx_genl_bind+0x10/0x10 [ 588.952004][T30375] __sock_create+0x2e9/0x5b0 [ 588.952079][T30375] __sys_socket+0xb0/0x180 [ 588.952100][T30375] __x64_sys_socket+0x3f/0x50 [ 588.952118][T30375] x64_sys_call+0x1147/0x2ff0 [ 588.952145][T30375] do_syscall_64+0xd2/0x200 [ 588.952227][T30375] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 588.952255][T30375] ? clear_bhb_loop+0x40/0x90 [ 588.952323][T30375] ? clear_bhb_loop+0x40/0x90 [ 588.952354][T30375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.952376][T30375] RIP: 0033:0x7f4e8cf308c7 [ 588.952393][T30375] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.952415][T30375] RSP: 002b:00007f4e8b58dfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 588.952441][T30375] RAX: ffffffffffffffda RBX: 00007f4e8d155fa0 RCX: 00007f4e8cf308c7 [ 588.952535][T30375] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 588.952549][T30375] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 588.952617][T30375] R10: 00002000000001c0 R11: 0000000000000286 R12: 0000000000000001 [ 588.952635][T30375] R13: 0000000000000000 R14: 00007f4e8d155fa0 R15: 00007fff645fcf68 [ 588.952664][T30375] [ 589.183851][ T10] lo speed is unknown, defaulting to 1000 [ 589.189676][ T10] syz0: Port: 1 Link DOWN [ 589.246579][T30383] loop5: detected capacity change from 0 to 512 [ 589.255940][T30383] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 589.270729][T30383] EXT4-fs (loop5): 1 truncate cleaned up [ 589.294479][T30383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.325460][T30388] pimreg: entered allmulticast mode [ 589.334551][T30383] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9243'. [ 589.344421][T30383] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9243'. [ 589.354456][T30383] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.361667][T30383] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.372014][T30387] pimreg: left allmulticast mode [ 589.410250][T29709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.497278][T30398] lo speed is unknown, defaulting to 1000 [ 589.522774][T30304] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 589.547265][T30304] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 589.584609][T30304] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 589.614920][T30304] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 589.706601][T30304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.728139][T30304] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.752236][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.759385][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.801167][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.808299][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.863938][T30304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 589.874402][T30304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 589.967616][T30304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.189475][T30304] veth0_vlan: entered promiscuous mode [ 590.217420][T30304] veth1_vlan: entered promiscuous mode [ 590.251031][T30304] veth0_macvtap: entered promiscuous mode [ 590.271157][T30304] veth1_macvtap: entered promiscuous mode [ 590.297313][T30304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.309035][T30304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.338833][T30304] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.347818][T30304] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.356999][T30304] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.365888][T30304] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.525398][T30449] loop6: detected capacity change from 0 to 1024 [ 590.540776][T30451] pimreg: entered allmulticast mode [ 590.550263][T30450] pimreg: left allmulticast mode [ 590.570530][T30449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.611173][T30457] FAULT_INJECTION: forcing a failure. [ 590.611173][T30457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.624479][T30457] CPU: 0 UID: 0 PID: 30457 Comm: syz.7.9259 Tainted: G W 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 590.624573][T30457] Tainted: [W]=WARN [ 590.624582][T30457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 590.624597][T30457] Call Trace: [ 590.624603][T30457] [ 590.624621][T30457] __dump_stack+0x1d/0x30 [ 590.624671][T30457] dump_stack_lvl+0xe8/0x140 [ 590.624701][T30457] dump_stack+0x15/0x1b [ 590.624794][T30457] should_fail_ex+0x265/0x280 [ 590.624823][T30457] should_fail+0xb/0x20 [ 590.624848][T30457] should_fail_usercopy+0x1a/0x20 [ 590.624887][T30457] _copy_from_user+0x1c/0xb0 [ 590.624946][T30457] __sys_connect+0xd0/0x2b0 [ 590.624991][T30457] __x64_sys_connect+0x3f/0x50 [ 590.625019][T30457] x64_sys_call+0x2c08/0x2ff0 [ 590.625046][T30457] do_syscall_64+0xd2/0x200 [ 590.625112][T30457] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 590.625141][T30457] ? clear_bhb_loop+0x40/0x90 [ 590.625247][T30457] ? clear_bhb_loop+0x40/0x90 [ 590.625302][T30457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.625333][T30457] RIP: 0033:0x7f5f3472e9a9 [ 590.625357][T30457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.625384][T30457] RSP: 002b:00007f5f32d8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 590.625467][T30457] RAX: ffffffffffffffda RBX: 00007f5f34955fa0 RCX: 00007f5f3472e9a9 [ 590.625481][T30457] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 590.625495][T30457] RBP: 00007f5f32d8f090 R08: 0000000000000000 R09: 0000000000000000 [ 590.625514][T30457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.625533][T30457] R13: 0000000000000000 R14: 00007f5f34955fa0 R15: 00007ffd023e0f38 [ 590.625558][T30457] [ 590.924221][T30463] loop7: detected capacity change from 0 to 2048 [ 590.959822][T30464] loop5: detected capacity change from 0 to 1024 [ 590.969835][T30463] Alternate GPT is invalid, using primary GPT. [ 590.974118][ T3647] usb 14-1: device descriptor read/8, error -110 [ 590.976932][T30463] loop7: p1 p2 p3 [ 590.989366][T26335] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.999669][T30464] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 591.010731][T30464] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 591.051302][T30464] JBD2: no valid journal superblock found [ 591.057294][T30464] EXT4-fs (loop5): Could not load journal inode [ 591.092979][ T3647] usb 14-1: new SuperSpeed USB device number 31 using vhci_hcd [ 591.112880][ T3647] usb 14-1: enqueue for inactive port 0 [ 591.118961][ T3647] usb 14-1: enqueue for inactive port 0 [ 591.137443][ T3647] usb 14-1: enqueue for inactive port 0 [ 591.176332][T30475] FAULT_INJECTION: forcing a failure. [ 591.176332][T30475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.192122][T30475] CPU: 1 UID: 0 PID: 30475 Comm: syz.5.9267 Tainted: G W 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 591.192159][T30475] Tainted: [W]=WARN [ 591.192166][T30475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 591.192182][T30475] Call Trace: [ 591.192192][T30475] [ 591.192203][T30475] __dump_stack+0x1d/0x30 [ 591.192344][T30475] dump_stack_lvl+0xe8/0x140 [ 591.192419][T30475] dump_stack+0x15/0x1b [ 591.192437][T30475] should_fail_ex+0x265/0x280 [ 591.192528][T30475] should_fail+0xb/0x20 [ 591.192557][T30475] should_fail_usercopy+0x1a/0x20 [ 591.192654][T30475] _copy_from_user+0x1c/0xb0 [ 591.192700][T30475] kstrtouint_from_user+0x69/0xf0 [ 591.192765][T30475] ? 0xffffffff81000000 [ 591.192781][T30475] ? selinux_file_permission+0x1e4/0x320 [ 591.192823][T30475] proc_fail_nth_write+0x50/0x160 [ 591.192892][T30475] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 591.192919][T30475] vfs_write+0x266/0x8e0 [ 591.192955][T30475] ? vfs_read+0x47f/0x6f0 [ 591.193036][T30475] ? __rcu_read_unlock+0x4f/0x70 [ 591.193063][T30475] ? __fget_files+0x184/0x1c0 [ 591.193091][T30475] ksys_write+0xda/0x1a0 [ 591.193151][T30475] __x64_sys_write+0x40/0x50 [ 591.193266][T30475] x64_sys_call+0x27fe/0x2ff0 [ 591.193294][T30475] do_syscall_64+0xd2/0x200 [ 591.193326][T30475] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 591.193424][T30475] ? clear_bhb_loop+0x40/0x90 [ 591.193451][T30475] ? clear_bhb_loop+0x40/0x90 [ 591.193480][T30475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.193507][T30475] RIP: 0033:0x7fec9a39d45f [ 591.193532][T30475] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 591.193602][T30475] RSP: 002b:00007fec98a07030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 591.193663][T30475] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fec9a39d45f [ 591.193680][T30475] RDX: 0000000000000001 RSI: 00007fec98a070a0 RDI: 0000000000000008 [ 591.193692][T30475] RBP: 00007fec98a07090 R08: 0000000000000000 R09: 0000000000000000 [ 591.193712][T30475] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 591.193728][T30475] R13: 0000000000000000 R14: 00007fec9a5c5fa0 R15: 00007ffde30abd88 [ 591.193758][T30475] [ 591.541300][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 591.541320][ T29] audit: type=1326 audit(1753838090.283:32504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30476 comm="syz.7.9268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3472e9a9 code=0x7ffc0000 [ 591.575402][ T29] audit: type=1326 audit(1753838090.283:32505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30476 comm="syz.7.9268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3472e9a9 code=0x7ffc0000 [ 591.600544][ T29] audit: type=1326 audit(1753838090.283:32506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30476 comm="syz.7.9268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f5f3472e9a9 code=0x7ffc0000 [ 591.627793][ T29] audit: type=1326 audit(1753838090.283:32507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30476 comm="syz.7.9268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3472e9a9 code=0x7ffc0000 [ 591.654523][ T29] audit: type=1400 audit(1753838090.293:32508): avc: denied { watch watch_reads } for pid=30478 comm="syz.5.9269" path="/34/file1" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 591.703132][T30483] loop7: detected capacity change from 0 to 1024 [ 591.707586][T30486] pimreg: entered allmulticast mode [ 591.710069][T30483] EXT4-fs: Ignoring removed nomblk_io_submit option [ 591.729698][T30485] pimreg: left allmulticast mode [ 591.760675][T30483] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.781321][ T29] audit: type=1400 audit(1753838090.533:32509): avc: denied { setattr } for pid=30482 comm="syz.7.9272" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 591.792430][T30487] infiniband syz2: set down [ 591.810014][T30487] infiniband syz2: added syzkaller0 [ 591.818724][ T29] audit: type=1400 audit(1753838090.573:32510): avc: denied { remove_name } for pid=30482 comm="syz.7.9272" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 591.843166][ T29] audit: type=1400 audit(1753838090.573:32511): avc: denied { unlink } for pid=30482 comm="syz.7.9272" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 591.843649][T30493] loop5: detected capacity change from 0 to 1024 [ 591.871942][ T29] audit: type=1400 audit(1753838090.623:32512): avc: denied { write } for pid=30482 comm="syz.7.9272" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 591.960749][T30487] RDS/IB: syz2: added [ 591.963530][T30493] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 591.965821][T30487] smc: adding ib device syz2 with port count 1 [ 591.979492][T30496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9275'. [ 591.980722][T30487] smc: ib device syz2 port 1 has pnetid [ 592.173468][T30502] vhci_hcd: invalid port number 0 [ 592.217050][T30504] serio: Serial port ptm0 [ 592.229481][T14548] smc: removing ib device syz2 [ 592.371798][T30504] FAULT_INJECTION: forcing a failure. [ 592.371798][T30504] name failslab, interval 1, probability 0, space 0, times 0 [ 592.387247][T30504] CPU: 0 UID: 0 PID: 30504 Comm: syz.6.9278 Tainted: G W 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 592.387284][T30504] Tainted: [W]=WARN [ 592.387291][T30504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 592.387307][T30504] Call Trace: [ 592.387314][T30504] [ 592.387324][T30504] __dump_stack+0x1d/0x30 [ 592.387411][T30504] dump_stack_lvl+0xe8/0x140 [ 592.387520][T30504] dump_stack+0x15/0x1b [ 592.387539][T30504] should_fail_ex+0x265/0x280 [ 592.387646][T30504] ? kobject_uevent_env+0x1c0/0x570 [ 592.387666][T30504] should_failslab+0x8c/0xb0 [ 592.387689][T30504] __kmalloc_cache_noprof+0x4c/0x320 [ 592.387718][T30504] ? kobject_put+0x10b/0x190 [ 592.387790][T30504] kobject_uevent_env+0x1c0/0x570 [ 592.387809][T30504] ? device_pm_check_callbacks+0x683/0x6a0 [ 592.387833][T30504] kobject_uevent+0x1d/0x30 [ 592.387853][T30504] device_del+0x710/0x790 [ 592.387932][T30504] serio_destroy_port+0x264/0x320 [ 592.387991][T30504] serio_unregister_port+0xe1/0x100 [ 592.388040][T30504] serport_ldisc_read+0x2cd/0x300 [ 592.388089][T30504] ? __pfx_autoremove_wake_function+0x10/0x10 [ 592.388134][T30504] tty_read+0x154/0x470 [ 592.388185][T30504] ? __import_iovec+0x428/0x540 [ 592.388205][T30504] do_iter_readv_writev+0x41e/0x4c0 [ 592.388248][T30504] vfs_readv+0x1ea/0x690 [ 592.388292][T30504] do_readv+0xe7/0x210 [ 592.388346][T30504] __x64_sys_readv+0x45/0x50 [ 592.388366][T30504] x64_sys_call+0x29f8/0x2ff0 [ 592.388387][T30504] do_syscall_64+0xd2/0x200 [ 592.388412][T30504] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 592.388463][T30504] ? clear_bhb_loop+0x40/0x90 [ 592.388527][T30504] ? clear_bhb_loop+0x40/0x90 [ 592.388557][T30504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.388584][T30504] RIP: 0033:0x7f4e8cf2e9a9 [ 592.388604][T30504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.388651][T30504] RSP: 002b:00007f4e8b58f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 592.388801][T30504] RAX: ffffffffffffffda RBX: 00007f4e8d155fa0 RCX: 00007f4e8cf2e9a9 [ 592.388814][T30504] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 592.388876][T30504] RBP: 00007f4e8b58f090 R08: 0000000000000000 R09: 0000000000000000 [ 592.388889][T30504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.388905][T30504] R13: 0000000000000000 R14: 00007f4e8d155fa0 R15: 00007fff645fcf68 [ 592.388931][T30504] [ 592.795653][ T3647] usb usb14-port1: attempt power cycle [ 592.812607][ T29] audit: type=1400 audit(1753838091.553:32513): avc: denied { create } for pid=30506 comm="syz.1.9279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 592.913469][T30512] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9280'. [ 592.947883][T30515] ip6gre4: entered allmulticast mode [ 592.963902][T30515] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 592.977302][T30304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.126608][T30530] netlink: 'syz.4.9289': attribute type 3 has an invalid length. [ 593.134871][T30530] netlink: 'syz.4.9289': attribute type 3 has an invalid length. [ 593.172637][T30532] loop4: detected capacity change from 0 to 1024 [ 593.184274][T30532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.253918][T30533] loop6: detected capacity change from 0 to 128 [ 593.265132][T30533] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 593.273078][T30533] FAT-fs (loop6): Filesystem has been set read-only [ 593.296260][T29867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.300057][T30533] lo speed is unknown, defaulting to 1000 [ 593.426539][T30538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9291'. [ 593.867725][T30548] loop7: detected capacity change from 0 to 512 [ 593.885170][T30548] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.9295: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 593.909671][T30548] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.9295: Bad quota inode: 3, type: 0 [ 593.921944][T30548] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 593.945368][T30548] EXT4-fs (loop7): mount failed [ 593.969496][T30552] ip6gre1: entered allmulticast mode [ 593.983166][T30552] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 594.108183][T30548] loop7: detected capacity change from 0 to 4096 [ 594.115522][T30548] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 594.117437][T30563] FAULT_INJECTION: forcing a failure. [ 594.117437][T30563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.139195][T30563] CPU: 1 UID: 0 PID: 30563 Comm: syz.5.9300 Tainted: G W 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 594.139236][T30563] Tainted: [W]=WARN [ 594.139244][T30563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 594.139277][T30563] Call Trace: [ 594.139293][T30563] [ 594.139305][T30563] __dump_stack+0x1d/0x30 [ 594.139332][T30563] dump_stack_lvl+0xe8/0x140 [ 594.139387][T30563] dump_stack+0x15/0x1b [ 594.139409][T30563] should_fail_ex+0x265/0x280 [ 594.139442][T30563] should_fail+0xb/0x20 [ 594.139470][T30563] should_fail_usercopy+0x1a/0x20 [ 594.139504][T30563] _copy_from_user+0x1c/0xb0 [ 594.139550][T30563] get_sg_io_hdr+0x82/0x360 [ 594.139594][T30563] ? path_openat+0x1bf8/0x2170 [ 594.139687][T30563] ? __rcu_read_unlock+0x4f/0x70 [ 594.139716][T30563] sg_new_write+0xc3/0x890 [ 594.139772][T30563] ? do_vfs_ioctl+0x866/0xe10 [ 594.139811][T30563] sg_ioctl+0xb81/0x1360 [ 594.139842][T30563] ? __pfx_sg_ioctl+0x10/0x10 [ 594.139946][T30563] __se_sys_ioctl+0xcb/0x140 [ 594.139982][T30563] __x64_sys_ioctl+0x43/0x50 [ 594.140052][T30563] x64_sys_call+0x1816/0x2ff0 [ 594.140080][T30563] do_syscall_64+0xd2/0x200 [ 594.140108][T30563] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 594.140177][T30563] ? clear_bhb_loop+0x40/0x90 [ 594.140284][T30563] ? clear_bhb_loop+0x40/0x90 [ 594.140368][T30563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.140423][T30563] RIP: 0033:0x7fec9a39e9a9 [ 594.140443][T30563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.140466][T30563] RSP: 002b:00007fec98a07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 594.140491][T30563] RAX: ffffffffffffffda RBX: 00007fec9a5c5fa0 RCX: 00007fec9a39e9a9 [ 594.140591][T30563] RDX: 00002000000033c0 RSI: 0000000000002285 RDI: 0000000000000003 [ 594.140614][T30563] RBP: 00007fec98a07090 R08: 0000000000000000 R09: 0000000000000000 [ 594.140632][T30563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.140724][T30563] R13: 0000000000000000 R14: 00007fec9a5c5fa0 R15: 00007ffde30abd88 [ 594.140753][T30563] [ 594.359970][T30566] lo speed is unknown, defaulting to 1000 [ 594.369634][T30548] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.425977][T30573] loop5: detected capacity change from 0 to 512 [ 594.433535][T30304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.475977][T30573] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.9305: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 594.495220][T30573] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.9305: Bad quota inode: 3, type: 0 [ 594.507735][T30573] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 594.524024][T30573] EXT4-fs (loop5): mount failed [ 594.536078][T30582] ip6gre1: entered allmulticast mode [ 594.550159][T30582] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 594.647915][T30591] FAULT_INJECTION: forcing a failure. [ 594.647915][T30591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.661156][T30591] CPU: 1 UID: 0 PID: 30591 Comm: syz.7.9312 Tainted: G W 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 594.661198][T30591] Tainted: [W]=WARN [ 594.661208][T30591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 594.661224][T30591] Call Trace: [ 594.661233][T30591] [ 594.661244][T30591] __dump_stack+0x1d/0x30 [ 594.661271][T30591] dump_stack_lvl+0xe8/0x140 [ 594.661364][T30591] dump_stack+0x15/0x1b [ 594.661387][T30591] should_fail_ex+0x265/0x280 [ 594.661421][T30591] should_fail+0xb/0x20 [ 594.661450][T30591] should_fail_usercopy+0x1a/0x20 [ 594.661514][T30591] strncpy_from_user+0x25/0x230 [ 594.661532][T30591] ? kmem_cache_alloc_noprof+0x186/0x310 [ 594.661597][T30591] ? getname_flags+0x80/0x3b0 [ 594.661619][T30591] getname_flags+0xae/0x3b0 [ 594.661639][T30591] do_sys_openat2+0x60/0x110 [ 594.661665][T30591] __x64_sys_openat+0xf2/0x120 [ 594.661704][T30591] x64_sys_call+0x2e9c/0x2ff0 [ 594.661723][T30591] do_syscall_64+0xd2/0x200 [ 594.661747][T30591] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 594.661822][T30591] ? clear_bhb_loop+0x40/0x90 [ 594.661841][T30591] ? clear_bhb_loop+0x40/0x90 [ 594.661862][T30591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.661938][T30591] RIP: 0033:0x7f5f3472d310 [ 594.661953][T30591] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 594.661969][T30591] RSP: 002b:00007f5f32d8ef00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 594.662050][T30591] RAX: ffffffffffffffda RBX: 00000000001c5440 RCX: 00007f5f3472d310 [ 594.662062][T30591] RDX: 00000000001c5440 RSI: 00007f5f32d8efa0 RDI: 00000000ffffff9c [ 594.662073][T30591] RBP: 00007f5f32d8efa0 R08: 0000000000000000 R09: 00007f5f32d8ed17 [ 594.662085][T30591] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 594.662117][T30591] R13: 0000000000000000 R14: 00007f5f34955fa0 R15: 00007ffd023e0f38 [ 594.662137][T30591] [ 594.862243][ T3647] usb usb14-port1: unable to enumerate USB device [ 594.927790][T30593] loop5: detected capacity change from 0 to 4096 [ 594.985519][T30598] siw: device registration error -23 [ 595.196050][T30608] loop7: detected capacity change from 0 to 1024 [ 595.209537][T30603] infiniband syz2: set down [ 595.214174][T30603] infiniband syz2: added syzkaller0 [ 595.220022][T30608] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 595.232516][T30593] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 595.260602][T30593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.277660][T30603] RDS/IB: syz2: added [ 595.283339][T30603] smc: adding ib device syz2 with port count 1 [ 595.289782][T30603] smc: ib device syz2 port 1 has pnetid [ 595.525042][ T12] smc: removing ib device syz2 [ 595.740360][T30614] loop4: detected capacity change from 0 to 2048 [ 595.796439][T30614] Alternate GPT is invalid, using primary GPT. [ 595.803186][T30614] loop4: p1 p2 p3 [ 595.915403][T30618] ip6gre5: entered allmulticast mode [ 595.974937][T30618] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 596.085661][T30629] FAULT_INJECTION: forcing a failure. [ 596.085661][T30629] name failslab, interval 1, probability 0, space 0, times 0 [ 596.098533][T30629] CPU: 1 UID: 0 PID: 30629 Comm: syz.6.9326 Tainted: G W 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 596.098576][T30629] Tainted: [W]=WARN [ 596.098585][T30629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 596.098602][T30629] Call Trace: [ 596.098610][T30629] [ 596.098621][T30629] __dump_stack+0x1d/0x30 [ 596.098642][T30629] dump_stack_lvl+0xe8/0x140 [ 596.098720][T30629] dump_stack+0x15/0x1b [ 596.098736][T30629] should_fail_ex+0x265/0x280 [ 596.098783][T30629] should_failslab+0x8c/0xb0 [ 596.098811][T30629] kmem_cache_alloc_noprof+0x50/0x310 [ 596.098899][T30629] ? io_submit_one+0xb8/0x11d0 [ 596.098925][T30629] io_submit_one+0xb8/0x11d0 [ 596.098957][T30629] __se_sys_io_submit+0xfb/0x280 [ 596.099053][T30629] __x64_sys_io_submit+0x43/0x50 [ 596.099160][T30629] x64_sys_call+0x2d5d/0x2ff0 [ 596.099189][T30629] do_syscall_64+0xd2/0x200 [ 596.099221][T30629] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 596.099250][T30629] ? clear_bhb_loop+0x40/0x90 [ 596.099273][T30629] ? clear_bhb_loop+0x40/0x90 [ 596.099347][T30629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.099379][T30629] RIP: 0033:0x7f4e8cf2e9a9 [ 596.099398][T30629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.099422][T30629] RSP: 002b:00007f4e8b58f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 596.099499][T30629] RAX: ffffffffffffffda RBX: 00007f4e8d155fa0 RCX: 00007f4e8cf2e9a9 [ 596.099517][T30629] RDX: 0000200000000280 RSI: 0000000000000001 RDI: 00007f4e8b55f000 [ 596.099534][T30629] RBP: 00007f4e8b58f090 R08: 0000000000000000 R09: 0000000000000000 [ 596.099550][T30629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.099567][T30629] R13: 0000000000000000 R14: 00007f4e8d155fa0 R15: 00007fff645fcf68 [ 596.099657][T30629] [ 596.150681][T30634] lo speed is unknown, defaulting to 1000 [ 596.225420][T30636] pimreg: entered allmulticast mode [ 596.325630][T30635] pimreg: left allmulticast mode [ 596.459525][T30647] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 596.466103][T30647] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 596.473871][T30647] vhci_hcd vhci_hcd.0: Device attached [ 596.495704][T29709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.543505][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 596.543523][ T29] audit: type=1326 audit(1753838095.303:32694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30640 comm="syz.7.9330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f3472e9a9 code=0x7ffc0000 [ 596.614845][ T29] audit: type=1400 audit(1753838095.343:32695): avc: denied { read write } for pid=26335 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 596.639509][ T29] audit: type=1400 audit(1753838095.343:32696): avc: denied { open } for pid=26335 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 596.664005][ T29] audit: type=1400 audit(1753838095.343:32697): avc: denied { ioctl } for pid=26335 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 596.690323][ T29] audit: type=1400 audit(1753838095.343:32698): avc: denied { allowed } for pid=30654 comm="syz.1.9336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 596.710032][ T29] audit: type=1400 audit(1753838095.343:32699): avc: denied { create } for pid=30654 comm="syz.1.9336" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 596.731642][ T29] audit: type=1400 audit(1753838095.343:32700): avc: denied { map } for pid=30654 comm="syz.1.9336" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=99483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 596.756435][ T29] audit: type=1400 audit(1753838095.343:32701): avc: denied { read write } for pid=30654 comm="syz.1.9336" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=99483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 596.862268][ T29] audit: type=1400 audit(1753838095.543:32702): avc: denied { create } for pid=30666 comm="syz.5.9339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 596.881972][ T29] audit: type=1400 audit(1753838095.543:32703): avc: denied { write } for pid=30666 comm="syz.5.9339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 596.905244][T30663] netlink: 'syz.6.9338': attribute type 1 has an invalid length. [ 596.919857][T30669] loop5: detected capacity change from 0 to 1024 [ 596.928295][T30669] EXT4-fs: Ignoring removed nobh option [ 596.934051][T30669] EXT4-fs: Ignoring removed bh option [ 596.948172][T30663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 596.955935][T30665] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9338'. [ 596.964951][ T36] usb 16-1: SetAddress Request (46) to port 0 [ 596.975075][T30665] bond1 (unregistering): Released all slaves [ 596.982485][ T36] usb 16-1: new SuperSpeed USB device number 46 using vhci_hcd [ 596.997770][T30669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.091152][T30675] netlink: 'syz.4.9341': attribute type 10 has an invalid length. [ 597.121773][T30663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=30663 comm=syz.6.9338 [ 597.139503][T30663] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9338'. [ 597.148674][T30663] netlink: 108 bytes leftover after parsing attributes in process `syz.6.9338'. [ 597.159493][T30663] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9338'. [ 597.168816][T30663] netlink: 108 bytes leftover after parsing attributes in process `syz.6.9338'. [ 597.178146][T30663] netlink: 84 bytes leftover after parsing attributes in process `syz.6.9338'. [ 597.198537][T29709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.207980][T30680] lo speed is unknown, defaulting to 1000 [ 597.297790][T30689] loop5: detected capacity change from 0 to 512 [ 597.308480][T30648] vhci_hcd: connection reset by peer [ 597.319179][T30689] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.9345: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 597.337472][ T133] vhci_hcd: stop threads [ 597.341836][ T133] vhci_hcd: release socket [ 597.346347][ T133] vhci_hcd: disconnect device [ 597.359468][T30689] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.9345: Bad quota inode: 3, type: 0 [ 597.391613][T30689] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 597.417424][T30699] geneve2: entered promiscuous mode [ 597.422706][T30699] geneve2: entered allmulticast mode [ 597.446477][T30689] EXT4-fs (loop5): mount failed [ 597.662267][T30701] infiniband syz2: set down [ 597.666939][T30701] infiniband syz2: added syzkaller0 [ 597.700035][T30708] loop5: detected capacity change from 0 to 4096 [ 597.709704][T30708] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 597.727430][T30707] lo speed is unknown, defaulting to 1000 [ 597.739757][T30710] loop6: detected capacity change from 0 to 1024 [ 597.757058][T30710] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 597.805286][T30708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.827734][T30701] RDS/IB: syz2: added [ 597.841949][T30701] smc: adding ib device syz2 with port count 1 [ 597.861673][T30701] smc: ib device syz2 port 1 has pnetid [ 598.507399][ T37] smc: removing ib device syz2 [ 598.894561][T29709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.987458][T30724] loop5: detected capacity change from 0 to 512 [ 599.005786][T30724] journal_path: Lookup failure for './file0/../file0' [ 599.012772][T30724] EXT4-fs: error: could not find journal device path [ 599.145875][T30731] loop5: detected capacity change from 0 to 2048 [ 599.150617][T30733] program syz.6.9359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.163650][T30727] loop4: detected capacity change from 0 to 256 [ 599.183115][T30731] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.202083][T30727] FAT-fs (loop4): Directory bread(block 64) failed [ 599.208863][T30727] FAT-fs (loop4): Directory bread(block 65) failed [ 599.211612][T30731] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 599.215492][T30727] FAT-fs (loop4): Directory bread(block 66) failed [ 599.237577][T30727] FAT-fs (loop4): Directory bread(block 67) failed [ 599.244207][T30727] FAT-fs (loop4): Directory bread(block 68) failed [ 599.250812][T30727] FAT-fs (loop4): Directory bread(block 69) failed [ 599.257493][T30727] FAT-fs (loop4): Directory bread(block 70) failed [ 599.264065][T30727] FAT-fs (loop4): Directory bread(block 71) failed [ 599.270675][T30727] FAT-fs (loop4): Directory bread(block 72) failed [ 599.277247][T30727] FAT-fs (loop4): Directory bread(block 73) failed [ 599.286613][T30731] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 599.299087][T30731] EXT4-fs (loop5): This should not happen!! Data will be lost [ 599.299087][T30731] [ 599.308957][T30731] EXT4-fs (loop5): Total free blocks count 0 [ 599.314979][T30731] EXT4-fs (loop5): Free/Dirty block details [ 599.320982][T30731] EXT4-fs (loop5): free_blocks=2415919504 [ 599.326759][T30731] EXT4-fs (loop5): dirty_blocks=48 [ 599.331941][T30731] EXT4-fs (loop5): Block reservation details [ 599.337988][T30731] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 599.435439][T29709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.738161][T30743] loop4: detected capacity change from 0 to 512 [ 599.772969][T30743] EXT4-fs (loop4): orphan cleanup on readonly fs [ 599.805030][T30743] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.9362: bad orphan inode 13 [ 599.851399][T30743] ext4_test_bit(bit=12, block=18) = 1 [ 599.856903][T30743] is_bad_inode(inode)=0 [ 599.861100][T30743] NEXT_ORPHAN(inode)=2130706432 [ 599.866043][T30743] max_ino=32 [ 599.869296][T30743] i_nlink=1 [ 599.923577][T30743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 600.090116][T29867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.409989][T30748] lo speed is unknown, defaulting to 1000 [ 600.561671][T30752] infiniband syz2: set down [ 600.566301][T30752] infiniband syz2: added syzkaller0 [ 600.602079][T30752] RDS/IB: syz2: added [ 600.613804][T30751] loop5: detected capacity change from 0 to 1024 [ 600.629731][T30752] smc: adding ib device syz2 with port count 1 [ 600.643159][T30751] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 600.661256][T30752] smc: ib device syz2 port 1 has pnetid [ 600.801345][T30761] lo speed is unknown, defaulting to 1000 [ 601.062667][T14550] smc: removing ib device syz2 [ 601.249518][T30767] ip6gre2: entered allmulticast mode [ 601.293153][T30767] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 601.370348][T30773] loop7: detected capacity change from 0 to 2048 [ 601.381778][T30775] netlink: 'syz.5.9374': attribute type 10 has an invalid length. [ 601.404710][T30773] Alternate GPT is invalid, using primary GPT. [ 601.411292][T30773] loop7: p1 p2 p3 [ 601.454899][T30782] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9376'. [ 601.463983][T30782] netlink: 108 bytes leftover after parsing attributes in process `syz.7.9376'. [ 601.473462][T30782] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9376'. [ 601.482536][T30782] netlink: 108 bytes leftover after parsing attributes in process `syz.7.9376'. [ 601.523852][T30785] lo speed is unknown, defaulting to 1000 [ 601.565773][T30780] infiniband syz2: set down [ 601.570450][T30780] infiniband syz2: added syzkaller0 [ 601.575137][T30786] loop5: detected capacity change from 0 to 1024 [ 601.589549][T30786] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 601.602967][T30780] RDS/IB: syz2: added [ 601.607003][T30780] smc: adding ib device syz2 with port count 1 [ 601.617009][T30780] smc: ib device syz2 port 1 has pnetid [ 601.667701][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 601.667716][ T29] audit: type=1400 audit(1753838100.423:32812): avc: denied { write } for pid=30791 comm="syz.7.9380" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 601.780693][T30795] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 601.787277][T30795] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 601.795202][T30795] vhci_hcd vhci_hcd.0: Device attached [ 601.821400][ T29] audit: type=1400 audit(1753838100.573:32813): avc: denied { mounton } for pid=30791 comm="syz.7.9380" path="/18/file0" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 601.884289][ T29] audit: type=1326 audit(1753838100.623:32814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30791 comm="syz.7.9380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3472e9a9 code=0x7ffc0000 [ 601.908010][ T29] audit: type=1326 audit(1753838100.623:32815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30791 comm="syz.7.9380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3472e9a9 code=0x7ffc0000 [ 601.931775][ T29] audit: type=1326 audit(1753838100.623:32816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30791 comm="syz.7.9380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f3472e9a9 code=0x7ffc0000 [ 601.972141][T30790] lo speed is unknown, defaulting to 1000 [ 602.095098][ T3436] smc: removing ib device syz2 [ 602.117332][T30803] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 602.281731][T30805] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 602.456810][ T29] audit: type=1326 audit(1753838101.213:32817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30806 comm="syz.1.9383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122344e9a9 code=0x7ffc0000 [ 602.480540][ T29] audit: type=1326 audit(1753838101.213:32818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30806 comm="syz.1.9383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122344e9a9 code=0x7ffc0000 [ 602.506010][ T29] audit: type=1326 audit(1753838101.213:32819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30806 comm="syz.1.9383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f122344e9a9 code=0x7ffc0000 [ 602.530437][ T29] audit: type=1326 audit(1753838101.213:32820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30806 comm="syz.1.9383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122344e9a9 code=0x7ffc0000 [ 602.554631][ T29] audit: type=1400 audit(1753838101.283:32821): avc: denied { egress } for pid=29 comm="kauditd" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 602.645585][T30796] vhci_hcd: connection reset by peer [ 602.651116][T14548] vhci_hcd: stop threads [ 602.655457][T14548] vhci_hcd: release socket [ 602.660139][T14548] vhci_hcd: disconnect device [ 602.664951][ T36] usb 16-1: device descriptor read/8, error -110 [ 602.723873][T30815] pimreg: entered allmulticast mode [ 602.734734][T30815] netlink: 'syz.6.9388': attribute type 10 has an invalid length. [ 602.758403][T30814] pimreg: left allmulticast mode [ 602.772980][ T36] usb 16-1: new SuperSpeed USB device number 46 using vhci_hcd [ 602.793742][ T36] usb 16-1: enqueue for inactive port 0 [ 602.803044][T30820] loop5: detected capacity change from 0 to 512 [ 602.811115][ T36] usb 16-1: enqueue for inactive port 0 [ 602.814199][T30820] EXT4-fs (loop5): orphan cleanup on readonly fs [ 602.820184][ T36] usb 16-1: enqueue for inactive port 0 [ 602.844300][T30820] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.9389: bad orphan inode 13 [ 602.898035][T30820] ext4_test_bit(bit=12, block=18) = 1 [ 602.903517][T30820] is_bad_inode(inode)=0 [ 602.907788][T30820] NEXT_ORPHAN(inode)=2130706432 [ 602.912729][T30820] max_ino=32 [ 602.915973][T30820] i_nlink=1 [ 602.963767][T30824] loop6: detected capacity change from 0 to 2048 [ 602.979757][T30824] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.022686][T30820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 603.044482][T30824] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 603.076195][T30824] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 603.088930][T30824] EXT4-fs (loop6): This should not happen!! Data will be lost [ 603.088930][T30824] [ 603.099062][T30824] EXT4-fs (loop6): Total free blocks count 0 [ 603.105360][T30824] EXT4-fs (loop6): Free/Dirty block details [ 603.111356][T30824] EXT4-fs (loop6): free_blocks=2415919504 [ 603.117193][T30824] EXT4-fs (loop6): dirty_blocks=48 [ 603.122332][T30824] EXT4-fs (loop6): Block reservation details [ 603.128431][T30824] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 603.154127][T30820] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 603.193331][T30820] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 603.255622][T29709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.744057][T26335] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.853074][ T36] usb usb16-port1: attempt power cycle [ 603.855006][T30846] pimreg: entered allmulticast mode [ 603.910982][T30846] netlink: 'syz.1.9397': attribute type 10 has an invalid length. [ 603.951404][T30845] pimreg: left allmulticast mode [ 603.963751][T30848] loop6: detected capacity change from 0 to 1024 [ 603.981210][T30848] EXT4-fs: Ignoring removed nobh option [ 603.986864][T30848] EXT4-fs: Ignoring removed bh option [ 604.026379][T30848] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.180059][T30855] binfmt_misc: register: failed to install interpreter file ./file2 [ 604.199966][T26335] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.277810][T30860] loop5: detected capacity change from 0 to 512 [ 604.302442][T30860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.323232][T30860] set match dimension is over the limit! [ 604.425377][T30863] loop6: detected capacity change from 0 to 2048 [ 604.455583][T30863] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.537637][T26335] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.591665][T30871] siw: device registration error -23 [ 604.669868][T30880] loop4: detected capacity change from 0 to 1024 [ 604.680113][T30875] infiniband syz2: set down [ 604.684736][T30875] infiniband syz2: added syzkaller0 [ 604.700959][T30884] loop7: detected capacity change from 0 to 1024 [ 604.708349][T30884] EXT4-fs: Ignoring removed nobh option [ 604.714357][T30884] EXT4-fs: Ignoring removed bh option [ 604.723652][T30880] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 604.738097][T30875] RDS/IB: syz2: added [ 604.745198][T30884] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.763168][T30875] smc: adding ib device syz2 with port count 1 [ 604.769846][T30875] smc: ib device syz2 port 1 has pnetid [ 604.873706][T30304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.257700][T29709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.300696][T14548] smc: removing ib device syz2 [ 605.310147][T30915] netlink: 'syz.7.9424': attribute type 3 has an invalid length. [ 605.330964][T30917] loop6: detected capacity change from 0 to 512 [ 605.333076][T30915] netlink: 'syz.7.9424': attribute type 3 has an invalid length. [ 605.355814][T30916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.382957][T30916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.411016][T30924] loop7: detected capacity change from 0 to 1024 [ 605.417637][T30917] EXT4-fs (loop6): orphan cleanup on readonly fs [ 605.448146][T30917] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.9422: bad orphan inode 13 [ 605.472842][T30924] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.501037][T30917] ext4_test_bit(bit=12, block=18) = 1 [ 605.506623][T30917] is_bad_inode(inode)=0 [ 605.510794][T30917] NEXT_ORPHAN(inode)=2130706432 [ 605.515734][T30917] max_ino=32 [ 605.518951][T30917] i_nlink=1 [ 605.535758][T30917] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 605.562442][T30910] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 605.584424][T30910] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 605.605484][T26335] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.616503][T30304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.633482][T30931] ip6gre5: entered allmulticast mode [ 605.645329][T30931] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 605.712483][T30941] FAULT_INJECTION: forcing a failure. [ 605.712483][T30941] name failslab, interval 1, probability 0, space 0, times 0 [ 605.722348][T30935] infiniband syz2: set down [ 605.725238][T30941] CPU: 0 UID: 0 PID: 30941 Comm: syz.6.9431 Tainted: G W 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 605.725318][T30941] Tainted: [W]=WARN [ 605.725328][T30941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 605.725346][T30941] Call Trace: [ 605.725355][T30941] [ 605.725368][T30941] __dump_stack+0x1d/0x30 [ 605.725397][T30941] dump_stack_lvl+0xe8/0x140 [ 605.725475][T30941] dump_stack+0x15/0x1b [ 605.725500][T30941] should_fail_ex+0x265/0x280 [ 605.725536][T30941] should_failslab+0x8c/0xb0 [ 605.725569][T30941] kmem_cache_alloc_noprof+0x50/0x310 [ 605.725613][T30941] ? getname_kernel+0x3c/0x1f0 [ 605.725649][T30941] getname_kernel+0x3c/0x1f0 [ 605.725680][T30941] kern_path+0x23/0x130 [ 605.725731][T30941] lookup_bdev+0x66/0x150 [ 605.725778][T30941] __se_sys_quotactl+0x1b7/0x670 [ 605.725896][T30941] __x64_sys_quotactl+0x55/0x70 [ 605.725937][T30941] x64_sys_call+0x15d6/0x2ff0 [ 605.725968][T30941] do_syscall_64+0xd2/0x200 [ 605.726061][T30941] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 605.726164][T30941] ? clear_bhb_loop+0x40/0x90 [ 605.726195][T30941] ? clear_bhb_loop+0x40/0x90 [ 605.726227][T30941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.726296][T30941] RIP: 0033:0x7f4e8cf2e9a9 [ 605.726320][T30941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.726390][T30941] RSP: 002b:00007f4e8b58f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 605.726417][T30941] RAX: ffffffffffffffda RBX: 00007f4e8d155fa0 RCX: 00007f4e8cf2e9a9 [ 605.726435][T30941] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffff80000202 [ 605.726454][T30941] RBP: 00007f4e8b58f090 R08: 0000000000000000 R09: 0000000000000000 [ 605.726472][T30941] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 605.726490][T30941] R13: 0000000000000001 R14: 00007f4e8d155fa0 R15: 00007fff645fcf68 [ 605.726521][T30941] [ 605.773428][T30944] loop4: detected capacity change from 0 to 1024 [ 605.777081][T30935] infiniband syz2: added syzkaller0 [ 605.778020][ T36] usb usb16-port1: unable to enumerate USB device [ 605.801461][T30944] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 605.927533][T30935] RDS/IB: syz2: added [ 605.940231][T30953] loop7: detected capacity change from 0 to 512 [ 605.955431][T30935] smc: adding ib device syz2 with port count 1 [ 605.981423][T30935] smc: ib device syz2 port 1 has pnetid [ 606.048298][T30953] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.063765][T30953] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 606.179331][T30952] siw: device registration error -23 [ 606.188220][ T37] smc: removing ib device syz2 [ 606.226500][T30971] pimreg: entered allmulticast mode [ 606.256048][T30971] netlink: 'syz.6.9443': attribute type 10 has an invalid length. [ 606.274200][T30970] pimreg: left allmulticast mode [ 606.378100][T30977] __nla_validate_parse: 1 callbacks suppressed [ 606.378122][T30977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9444'. [ 606.421821][T30986] netlink: 'syz.4.9449': attribute type 10 has an invalid length. [ 606.466171][T30996] netlink: 'syz.1.9453': attribute type 3 has an invalid length. [ 606.474534][T30996] netlink: 'syz.1.9453': attribute type 3 has an invalid length. [ 606.482587][T30998] netlink: 'syz.4.9454': attribute type 1 has an invalid length. [ 606.497269][T30998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 606.511704][T30998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9454'. [ 606.516410][T31001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9455'. [ 606.531438][T30998] bond1 (unregistering): Released all slaves [ 606.558409][T31003] FAULT_INJECTION: forcing a failure. [ 606.558409][T31003] name failslab, interval 1, probability 0, space 0, times 0 [ 606.571293][T31003] CPU: 0 UID: 0 PID: 31003 Comm: syz.6.9456 Tainted: G W 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 606.571337][T31003] Tainted: [W]=WARN [ 606.571345][T31003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 606.571358][T31003] Call Trace: [ 606.571443][T31003] [ 606.571455][T31003] __dump_stack+0x1d/0x30 [ 606.571484][T31003] dump_stack_lvl+0xe8/0x140 [ 606.571510][T31003] dump_stack+0x15/0x1b [ 606.571532][T31003] should_fail_ex+0x265/0x280 [ 606.571567][T31003] should_failslab+0x8c/0xb0 [ 606.571636][T31003] kmem_cache_alloc_noprof+0x50/0x310 [ 606.571672][T31003] ? fcntl_getlk+0x3d/0x6e0 [ 606.571716][T31003] fcntl_getlk+0x3d/0x6e0 [ 606.571781][T31003] ? should_fail_ex+0xdb/0x280 [ 606.571810][T31003] do_fcntl+0x6d5/0xdf0 [ 606.571840][T31003] ? selinux_file_fcntl+0x1cb/0x1e0 [ 606.571919][T31003] __se_sys_fcntl+0xb1/0x120 [ 606.571952][T31003] __x64_sys_fcntl+0x43/0x50 [ 606.571981][T31003] x64_sys_call+0x29a0/0x2ff0 [ 606.572030][T31003] do_syscall_64+0xd2/0x200 [ 606.572064][T31003] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 606.572144][T31003] ? clear_bhb_loop+0x40/0x90 [ 606.572220][T31003] ? clear_bhb_loop+0x40/0x90 [ 606.572258][T31003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.572292][T31003] RIP: 0033:0x7f4e8cf2e9a9 [ 606.572313][T31003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.572337][T31003] RSP: 002b:00007f4e8b58f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 606.572361][T31003] RAX: ffffffffffffffda RBX: 00007f4e8d155fa0 RCX: 00007f4e8cf2e9a9 [ 606.572392][T31003] RDX: 0000200000001100 RSI: 0000000000000024 RDI: 0000000000000005 [ 606.572409][T31003] RBP: 00007f4e8b58f090 R08: 0000000000000000 R09: 0000000000000000 [ 606.572425][T31003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.572442][T31003] R13: 0000000000000000 R14: 00007f4e8d155fa0 R15: 00007fff645fcf68 [ 606.572468][T31003] [ 606.784890][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 606.784908][ T29] audit: type=1400 audit(1753838105.533:33076): avc: denied { ioctl } for pid=31000 comm="syz.1.9455" path="socket:[101169]" dev="sockfs" ino=101169 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 606.793114][T31005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9454'. [ 606.825457][T31005] netlink: 108 bytes leftover after parsing attributes in process `syz.4.9454'. [ 606.826836][ T29] audit: type=1400 audit(1753838105.543:33077): avc: denied { firmware_load } for pid=30997 comm="syz.4.9454" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 606.861534][T30304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.880883][T31005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9454'. [ 606.898282][T31005] netlink: 108 bytes leftover after parsing attributes in process `syz.4.9454'. [ 606.907513][T31005] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9454'. [ 606.918337][T31006] syzkaller1: entered promiscuous mode [ 606.923911][T31006] syzkaller1: entered allmulticast mode [ 606.933094][ T29] audit: type=1326 audit(1753838105.683:33078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31012 comm="syz.6.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8cf2e9a9 code=0x7ffc0000 [ 606.957112][ T29] audit: type=1326 audit(1753838105.693:33079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31012 comm="syz.6.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4e8cf2e9a9 code=0x7ffc0000 [ 606.981170][ T29] audit: type=1326 audit(1753838105.693:33080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31012 comm="syz.6.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8cf2e9a9 code=0x7ffc0000 [ 607.005224][ T29] audit: type=1326 audit(1753838105.693:33081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31012 comm="syz.6.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8cf2e9a9 code=0x7ffc0000 [ 607.028867][ T29] audit: type=1326 audit(1753838105.693:33082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31012 comm="syz.6.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f4e8cf2e9a9 code=0x7ffc0000 [ 607.052591][ T29] audit: type=1326 audit(1753838105.693:33083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31012 comm="syz.6.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8cf2e9a9 code=0x7ffc0000 [ 607.076372][ T29] audit: type=1326 audit(1753838105.693:33084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31012 comm="syz.6.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4e8cf2e9a9 code=0x7ffc0000 [ 607.099858][ T29] audit: type=1326 audit(1753838105.693:33085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31012 comm="syz.6.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8cf2e9a9 code=0x7ffc0000 [ 607.158937][T31011] lo speed is unknown, defaulting to 1000 [ 607.234312][T31017] infiniband syz2: set down [ 607.238892][T31017] infiniband syz2: added syzkaller0 [ 607.258353][T31024] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 607.258353][T31024] program syz.4.9462 not setting count and/or reply_len properly [ 607.274598][T31017] RDS/IB: syz2: added [ 607.279379][T31017] smc: adding ib device syz2 with port count 1 [ 607.286009][T31017] smc: ib device syz2 port 1 has pnetid [ 607.304876][T31026] netlink: 'syz.6.9463': attribute type 10 has an invalid length. [ 607.355357][T31027] loop5: detected capacity change from 0 to 1024 [ 607.362035][T31027] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 607.386775][T31036] netlink: 'syz.1.9466': attribute type 3 has an invalid length. [ 607.395666][T31036] netlink: 'syz.1.9466': attribute type 3 has an invalid length. [ 607.443237][T31040] netlink: 'syz.4.9469': attribute type 1 has an invalid length. [ 607.476542][T31040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 607.489878][T31043] pimreg: entered allmulticast mode [ 607.506733][T31040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 607.515179][T31040] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 607.525588][T31035] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 607.534987][T31040] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 607.542531][T31035] loop6: detected capacity change from 0 to 1024 [ 607.543541][T31043] netlink: 'syz.1.9470': attribute type 10 has an invalid length. [ 607.549974][T31035] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 607.568770][T14548] smc: removing ib device syz2 [ 607.577302][T31045] wireguard0: entered promiscuous mode [ 607.582899][T31045] wireguard0: entered allmulticast mode [ 607.596808][T31041] pimreg: left allmulticast mode [ 607.778909][T31057] pimreg: entered allmulticast mode [ 607.788465][T31057] netlink: 'syz.4.9475': attribute type 10 has an invalid length. [ 607.802196][T31057] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 607.833280][T31063] loop7: detected capacity change from 0 to 512 [ 607.841694][T31056] pimreg: left allmulticast mode [ 607.846935][T31069] loop5: detected capacity change from 0 to 512 [ 607.857527][T31069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.865212][T31063] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 607.886179][T31069] set match dimension is over the limit! [ 607.896419][T31063] EXT4-fs (loop7): mount failed [ 607.902830][T31074] program syz.6.9481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 607.918022][T31063] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9478'. [ 607.927325][T31063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.934855][T31063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.943896][T31063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.951316][T31063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.984651][T31076] pimreg: entered allmulticast mode [ 607.995551][T31075] pimreg: left allmulticast mode [ 608.209092][T31084] lo speed is unknown, defaulting to 1000 [ 608.221155][T31085] loop7: detected capacity change from 0 to 1024 [ 608.228175][T31080] infiniband syz2: set down [ 608.232826][T31080] infiniband syz2: added syzkaller0 [ 608.239395][T31085] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 608.254630][T31080] RDS/IB: syz2: added [ 608.258673][T31080] smc: adding ib device syz2 with port count 1 [ 608.266579][T31080] smc: ib device syz2 port 1 has pnetid [ 608.486523][ T37] smc: removing ib device syz2 [ 608.692367][T29709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.728722][T31091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 608.741920][T31091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9488'. [ 608.753417][T31091] bond1 (unregistering): Released all slaves [ 608.794410][T31096] infiniband syz2: set down [ 608.799041][T31096] infiniband syz2: added syzkaller0 [ 608.809375][T31096] RDS/IB: syz2: added [ 608.813560][T31096] smc: adding ib device syz2 with port count 1 [ 608.819843][T31096] smc: ib device syz2 port 1 has pnetid [ 608.833036][T31100] loop7: detected capacity change from 0 to 1024 [ 608.841767][T31100] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 608.877575][T31103] loop5: detected capacity change from 0 to 512 [ 608.886770][T31103] journal_path: Lookup failure for './file0/../file0' [ 608.893939][T31103] EXT4-fs: error: could not find journal device path [ 609.016408][T31109] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.098194][T31110] loop5: detected capacity change from 0 to 512 [ 609.155069][T31109] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.165793][T31110] EXT4-fs (loop5): orphan cleanup on readonly fs [ 609.180870][ T12] smc: removing ib device syz2 [ 609.180892][T31110] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.9493: bad orphan inode 13 [ 609.197693][T31110] ext4_test_bit(bit=12, block=18) = 1 [ 609.203193][T31110] is_bad_inode(inode)=0 [ 609.207378][T31110] NEXT_ORPHAN(inode)=2130706432 [ 609.212242][T31110] max_ino=32 [ 609.215574][T31110] i_nlink=1 [ 609.232203][T31110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 609.276623][T31109] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.347710][T31109] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.379657][T31108] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 609.430153][T31108] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9493: bg 0: block 248: padding at end of block bitmap is not set [ 609.447401][T31108] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.9493: Failed to acquire dquot type 1 [ 609.468446][T31108] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 609.493298][T31109] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.536272][T31109] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.552520][T29709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.555373][T31109] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.575271][T31109] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.589733][T31133] loop6: detected capacity change from 0 to 512 [ 609.599862][T31135] loop5: detected capacity change from 0 to 512 [ 609.616714][T31133] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.634533][T31131] infiniband syz2: set down [ 609.639255][T31131] infiniband syz2: added syzkaller0 [ 609.642149][T31135] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.663595][T31135] set match dimension is over the limit! [ 609.671100][T31140] loop7: detected capacity change from 0 to 1024 [ 609.677726][T31133] set match dimension is over the limit! [ 609.688305][T31131] RDS/IB: syz2: added [ 609.692415][T31131] smc: adding ib device syz2 with port count 1 [ 609.698963][T31131] smc: ib device syz2 port 1 has pnetid [ 609.705615][T31140] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 609.750911][T31143] loop4: detected capacity change from 0 to 512 [ 609.860448][T31143] EXT4-fs (loop4): orphan cleanup on readonly fs [ 609.951142][T31143] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.9503: bad orphan inode 13 [ 609.999249][T31143] ext4_test_bit(bit=12, block=18) = 1 [ 610.004943][T31143] is_bad_inode(inode)=0 [ 610.009130][T31143] NEXT_ORPHAN(inode)=2130706432 [ 610.014051][T31143] max_ino=32 [ 610.017276][T31143] i_nlink=1 [ 610.026808][ T3436] smc: removing ib device syz2 [ 610.054145][T31147] siw: device registration error -23 [ 610.190730][T31143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 610.264436][T31143] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 610.320769][T31143] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9503: bg 0: block 248: padding at end of block bitmap is not set [ 610.341822][T31143] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.9503: Failed to acquire dquot type 1 [ 610.363970][T31158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.386950][T31158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.480039][T31143] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 610.500914][T29709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.533860][T31161] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 610.554961][T29867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.625704][T26335] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.828854][T31189] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 610.830763][T31185] infiniband syz2: set down [ 610.840006][T31185] infiniband syz2: added syzkaller0 [ 610.858559][T31192] loop5: detected capacity change from 0 to 1024 [ 610.860752][T31189] loop4: detected capacity change from 0 to 1024 [ 610.865848][T31192] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 610.889626][T31185] RDS/IB: syz2: added [ 610.891816][T31189] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 610.894695][T31185] smc: adding ib device syz2 with port count 1 [ 610.907987][T31185] smc: ib device syz2 port 1 has pnetid [ 611.080632][ T37] smc: removing ib device syz2 [ 611.410979][T31197] loop5: detected capacity change from 0 to 512 [ 611.444513][T31197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.609750][T31202] __nla_validate_parse: 1 callbacks suppressed [ 611.609767][T31202] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9524'. [ 611.757029][T31206] loop7: detected capacity change from 0 to 128 [ 611.769236][T31206] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 611.777191][T31206] FAT-fs (loop7): Filesystem has been set read-only [ 611.783962][T31206] syz.7.9526: attempt to access beyond end of device [ 611.783962][T31206] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 611.797857][T31206] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 611.805802][T31206] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 611.814092][T31206] syz.7.9526: attempt to access beyond end of device [ 611.814092][T31206] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 611.828081][T31206] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 611.836085][T31206] syz.7.9526: attempt to access beyond end of device [ 611.836085][T31206] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 611.850090][T31207] syz.7.9526: attempt to access beyond end of device [ 611.850090][T31207] loop7: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 611.863645][T31207] buffer_io_error: 24 callbacks suppressed [ 611.863665][T31207] Buffer I/O error on dev loop7, logical block 2065, async page read [ 611.877918][T31206] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 611.885822][T31206] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 611.896003][T31207] syz.7.9526: attempt to access beyond end of device [ 611.896003][T31207] loop7: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 611.909346][T31207] Buffer I/O error on dev loop7, logical block 2066, async page read [ 611.917706][T31207] syz.7.9526: attempt to access beyond end of device [ 611.917706][T31207] loop7: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 611.931024][T31207] Buffer I/O error on dev loop7, logical block 2067, async page read [ 611.939467][T31207] syz.7.9526: attempt to access beyond end of device [ 611.939467][T31207] loop7: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 611.952888][T31207] Buffer I/O error on dev loop7, logical block 2068, async page read [ 611.961238][T31207] syz.7.9526: attempt to access beyond end of device [ 611.961238][T31207] loop7: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 611.974560][T31207] Buffer I/O error on dev loop7, logical block 2069, async page read [ 611.982959][T31207] syz.7.9526: attempt to access beyond end of device [ 611.982959][T31207] loop7: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 611.996787][T31207] Buffer I/O error on dev loop7, logical block 2070, async page read [ 612.005090][T31207] syz.7.9526: attempt to access beyond end of device [ 612.005090][T31207] loop7: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 612.018588][T31207] Buffer I/O error on dev loop7, logical block 2071, async page read [ 612.027122][T31207] Buffer I/O error on dev loop7, logical block 2072, async page read [ 612.035511][T31206] Buffer I/O error on dev loop7, logical block 2065, async page read [ 612.043841][T31206] Buffer I/O error on dev loop7, logical block 2066, async page read [ 612.104628][T31210] validate_nla: 8 callbacks suppressed [ 612.104642][T31210] netlink: 'syz.4.9527': attribute type 10 has an invalid length. [ 612.275526][T29709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.286682][T31214] loop4: detected capacity change from 0 to 1024 [ 612.304491][T31213] infiniband syz2: set down [ 612.309143][T31213] infiniband syz2: added syzkaller0 [ 612.315942][T31214] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 612.326533][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 612.326550][ T29] audit: type=1400 audit(1753838111.083:33196): avc: denied { write } for pid=31215 comm="syz.5.9529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 612.359569][T31213] RDS/IB: syz2: added [ 612.364718][T31213] smc: adding ib device syz2 with port count 1 [ 612.371266][ T29] audit: type=1400 audit(1753838111.083:33197): avc: denied { read } for pid=31215 comm="syz.5.9529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 612.373884][T31213] smc: ib device syz2 port 1 has pnetid [ 612.391785][ T29] audit: type=1400 audit(1753838111.083:33198): avc: denied { execute } for pid=31215 comm="syz.5.9529" name="file1" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 612.420257][ T29] audit: type=1400 audit(1753838111.083:33199): avc: denied { execute_no_trans } for pid=31215 comm="syz.5.9529" path="/78/file1" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 612.605187][ T29] audit: type=1400 audit(1753838111.363:33200): avc: denied { create } for pid=31222 comm="syz.6.9532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 612.638510][T31223] lo speed is unknown, defaulting to 1000 [ 612.649955][ T29] audit: type=1400 audit(1753838111.403:33201): avc: denied { unmount } for pid=30304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 612.692762][ T29] audit: type=1400 audit(1753838111.443:33202): avc: denied { create } for pid=31226 comm="syz.7.9533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 612.713359][ T29] audit: type=1400 audit(1753838111.473:33203): avc: denied { setopt } for pid=31226 comm="syz.7.9533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 612.724264][ T133] smc: removing ib device syz2 [ 612.757011][T31227] pimreg: entered allmulticast mode [ 612.773028][ T29] audit: type=1400 audit(1753838111.523:33204): avc: denied { write } for pid=31226 comm="syz.7.9533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 612.793549][T31227] netlink: 'syz.5.9534': attribute type 10 has an invalid length. [ 612.806116][ T29] audit: type=1400 audit(1753838111.533:33205): avc: denied { create } for pid=31224 comm="syz.5.9534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 612.834525][T31227] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 612.852433][T31231] wg2: entered promiscuous mode [ 612.857486][T31231] wg2: entered allmulticast mode [ 612.870206][T31224] pimreg: left allmulticast mode [ 612.996410][T31235] pimreg: entered allmulticast mode [ 613.005695][T31235] netlink: 'syz.5.9536': attribute type 10 has an invalid length. [ 613.018147][T31234] pimreg: left allmulticast mode [ 613.098975][T31239] netlink: 'syz.7.9538': attribute type 10 has an invalid length. [ 613.163237][T31246] lo speed is unknown, defaulting to 1000 [ 613.176721][T31248] program syz.7.9542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 613.194350][T31249] loop5: detected capacity change from 0 to 512 [ 613.208161][T31249] EXT4-fs (loop5): orphan cleanup on readonly fs [ 613.215684][T31249] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.9539: bad orphan inode 13 [ 613.226304][T31249] ext4_test_bit(bit=12, block=18) = 1 [ 613.231712][T31249] is_bad_inode(inode)=0 [ 613.236016][T31249] NEXT_ORPHAN(inode)=2130706432 [ 613.240884][T31249] max_ino=32 [ 613.244126][T31249] i_nlink=1 [ 613.248745][T31249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 613.269591][T31249] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 613.293547][T31249] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9539: bg 0: block 248: padding at end of block bitmap is not set [ 613.308731][T31249] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.9539: Failed to acquire dquot type 1 [ 613.320495][T31249] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 613.347167][T29709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.465508][T31259] lo speed is unknown, defaulting to 1000 [ 614.076373][T31267] infiniband syz2: set down [ 614.080942][T31267] infiniband syz2: added syzkaller0 [ 614.090891][T31267] RDS/IB: syz2: added [ 614.095296][T31267] smc: adding ib device syz2 with port count 1 [ 614.101577][T31267] smc: ib device syz2 port 1 has pnetid [ 614.111906][T31269] loop4: detected capacity change from 0 to 1024 [ 614.125013][T31269] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 614.282177][ T12] smc: removing ib device syz2 [ 614.320292][T31271] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9549'. [ 614.329361][T31271] netlink: 108 bytes leftover after parsing attributes in process `syz.6.9549'. [ 614.340206][T31271] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9549'. [ 614.355977][T31271] netlink: 108 bytes leftover after parsing attributes in process `syz.6.9549'. [ 614.365161][T31271] netlink: 84 bytes leftover after parsing attributes in process `syz.6.9549'. [ 614.411539][T31275] netlink: 'syz.5.9551': attribute type 10 has an invalid length. [ 614.539724][T31286] lo speed is unknown, defaulting to 1000 [ 614.563864][T31292] loop4: detected capacity change from 0 to 512 [ 614.571894][T31292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.588814][T31292] set match dimension is over the limit! [ 614.639752][T31299] loop6: detected capacity change from 0 to 512 [ 614.655857][T31301] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9561'. [ 614.665000][T31301] netlink: 108 bytes leftover after parsing attributes in process `syz.5.9561'. [ 614.674592][T31301] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9561'. [ 614.675762][T31299] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.683952][T31301] netlink: 108 bytes leftover after parsing attributes in process `syz.5.9561'. [ 614.727681][T31299] set match dimension is over the limit! [ 614.741689][T31305] loop5: detected capacity change from 0 to 512 [ 614.764831][T26335] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.774647][T31305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.787901][T31307] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.847941][T31307] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.918249][T31307] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.950777][T31313] infiniband syz2: set down [ 614.955508][T31313] infiniband syz2: added syzkaller0 [ 614.976569][T31307] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.998474][T31317] loop6: detected capacity change from 0 to 1024 [ 615.005508][T31317] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 615.016635][T31313] RDS/IB: syz2: added [ 615.020800][T31313] smc: adding ib device syz2 with port count 1 [ 615.027618][T31313] smc: ib device syz2 port 1 has pnetid [ 615.043392][T31307] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.064617][T31307] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.077866][T31307] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.090805][T31307] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.447661][ T133] smc: removing ib device syz2 [ 615.628994][T29709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.690681][T29867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.693188][T31332] program syz.1.9574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 615.740360][T31333] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 615.751679][T31333] loop5: detected capacity change from 0 to 1024 [ 615.759903][T31333] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 615.826284][T31340] loop6: detected capacity change from 0 to 128 [ 615.940176][T31349] loop5: detected capacity change from 0 to 512 [ 615.946929][T31349] journal_path: Lookup failure for './file0/../file0' [ 615.953924][T31349] EXT4-fs: error: could not find journal device path [ 615.989998][T31351] lo speed is unknown, defaulting to 1000 [ 616.100663][T31359] loop5: detected capacity change from 0 to 512 [ 616.109082][T31359] journal_path: Lookup failure for './file0/../file0' [ 616.115949][T31359] EXT4-fs: error: could not find journal device path [ 616.274651][T31363] loop5: detected capacity change from 0 to 512 [ 616.285636][T31363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.298860][T31363] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 616.394701][T31367] loop7: detected capacity change from 0 to 512 [ 616.424288][T31367] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.9586: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 616.444245][T31367] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.9586: Bad quota inode: 3, type: 0 [ 616.465729][T31367] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 616.481058][T31367] EXT4-fs (loop7): mount failed [ 616.763350][T31373] loop7: detected capacity change from 0 to 4096 [ 616.771783][T31373] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 616.805568][T31373] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.095421][T31376] loop6: detected capacity change from 0 to 1024 [ 617.147612][T29709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.196833][T31376] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 617.415494][T31377] infiniband syz2: set down [ 617.420063][T31377] infiniband syz2: added syzkaller0 [ 617.449225][T31379] netlink: 'syz.1.9589': attribute type 10 has an invalid length. [ 617.474872][T31377] RDS/IB: syz2: added [ 617.489115][T31377] smc: adding ib device syz2 with port count 1 [ 617.506380][T31377] smc: ib device syz2 port 1 has pnetid [ 617.684250][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 617.684269][ T29] audit: type=1400 audit(1753838116.443:33233): avc: denied { create } for pid=31386 comm="syz.5.9588" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 617.686297][T31387] tipc: Started in network mode [ 617.690448][ T29] audit: type=1400 audit(1753838116.443:33234): avc: denied { write } for pid=31386 comm="syz.5.9588" name="file0" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 617.711446][T31387] tipc: Node identity ac14140f, cluster identity 4711 [ 617.716302][ T29] audit: type=1400 audit(1753838116.443:33235): avc: denied { open } for pid=31386 comm="syz.5.9588" path="/103/file0" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 617.859657][T31390] binfmt_misc: register: failed to install interpreter file ./file2 [ 617.894324][T31387] tipc: New replicast peer: 255.255.255.255 [ 617.900445][T31387] tipc: Enabled bearer , priority 10 [ 617.947571][T31391] __nla_validate_parse: 6 callbacks suppressed [ 617.947588][T31391] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9588'. [ 617.962877][T31391] tipc: Disabling bearer [ 618.269510][T31398] bond_slave_0: entered promiscuous mode [ 618.275239][T31398] bond_slave_1: entered promiscuous mode [ 618.292058][ T133] smc: removing ib device syz2 [ 618.322267][T31401] netlink: 'syz.5.9594': attribute type 21 has an invalid length. [ 618.330173][T31401] netlink: 156 bytes leftover after parsing attributes in process `syz.5.9594'. [ 618.380612][T31398] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 618.487010][T31398] bond_slave_0: left promiscuous mode [ 618.492469][T31398] bond_slave_1: left promiscuous mode [ 618.671696][T31406] lo speed is unknown, defaulting to 1000 [ 618.715037][ T29] audit: type=1400 audit(1753838116.613:33236): avc: denied { egress } for pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 618.716706][T30304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.739604][ T29] audit: type=1400 audit(1753838116.613:33237): avc: denied { sendto } for pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 618.771339][ T29] audit: type=1400 audit(1753838116.783:33238): avc: denied { ioctl } for pid=31386 comm="syz.5.9588" path="/103/file0" dev="tmpfs" ino=579 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 618.795738][ T29] audit: type=1400 audit(1753838116.863:33239): avc: denied { unlink } for pid=29709 comm="syz-executor" name="file0" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 618.818801][ T29] audit: type=1400 audit(1753838117.013:33240): avc: denied { create } for pid=31397 comm="syz.5.9594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 618.838747][ T29] audit: type=1400 audit(1753838117.013:33241): avc: denied { connect } for pid=31397 comm="syz.5.9594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 618.858815][ T29] audit: type=1400 audit(1753838117.183:33242): avc: denied { create } for pid=31402 comm="syz.1.9596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 618.890137][T31411] program syz.5.9599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 618.906470][T31409] loop7: detected capacity change from 0 to 512 [ 618.935559][T31409] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.948429][T31409] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 619.236903][T31419] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 619.292369][T31424] pimreg: entered allmulticast mode [ 619.301973][T31424] netlink: 'syz.6.9601': attribute type 10 has an invalid length. [ 619.312548][T31423] pimreg: left allmulticast mode [ 619.385075][T31426] loop6: detected capacity change from 0 to 512 [ 619.394896][T31426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.412128][T31426] set match dimension is over the limit! [ 619.496112][T31430] loop4: detected capacity change from 0 to 512 [ 619.514184][T31430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.603156][T31430] set match dimension is over the limit! [ 619.635933][T29867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.675003][T31440] loop4: detected capacity change from 0 to 1024 [ 619.682279][T31440] EXT4-fs: Ignoring removed nobh option [ 619.687982][T31440] EXT4-fs: Ignoring removed bh option [ 619.706079][T31442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9608'. [ 619.715112][T31442] netlink: 108 bytes leftover after parsing attributes in process `syz.1.9608'. [ 619.736102][T31442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9608'. [ 619.747046][T30304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.757012][T31442] netlink: 108 bytes leftover after parsing attributes in process `syz.1.9608'. [ 619.766163][T31442] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9608'. [ 619.816407][T31440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.856770][T31451] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9609'. [ 619.930323][T31459] lo speed is unknown, defaulting to 1000 [ 619.966130][T29867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.057174][T31463] lo speed is unknown, defaulting to 1000 [ 620.243542][T31426] ================================================================== [ 620.251676][T31426] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 620.259507][T31426] [ 620.261833][T31426] write to 0xffffea000429a358 of 8 bytes by task 31428 on cpu 1: [ 620.269554][T31426] __filemap_remove_folio+0x1a5/0x2a0 [ 620.274956][T31426] folio_unmap_invalidate+0x1dd/0x360 [ 620.280338][T31426] invalidate_inode_pages2_range+0x27c/0x3d0 [ 620.286333][T31426] filemap_invalidate_pages+0x16d/0x1a0 [ 620.291899][T31426] kiocb_invalidate_pages+0x6e/0x80 [ 620.297120][T31426] __iomap_dio_rw+0x5d4/0x1250 [ 620.301907][T31426] iomap_dio_rw+0x40/0x90 [ 620.306567][T31426] ext4_file_write_iter+0xad9/0xf00 [ 620.311788][T31426] iter_file_splice_write+0x5ef/0x970 [ 620.317172][T31426] direct_splice_actor+0x153/0x2a0 [ 620.322300][T31426] splice_direct_to_actor+0x30f/0x680 [ 620.327720][T31426] do_splice_direct+0xda/0x150 [ 620.332495][T31426] do_sendfile+0x380/0x650 [ 620.336915][T31426] __x64_sys_sendfile64+0x105/0x150 [ 620.342148][T31426] x64_sys_call+0x2bb0/0x2ff0 [ 620.346828][T31426] do_syscall_64+0xd2/0x200 [ 620.351341][T31426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.357240][T31426] [ 620.359571][T31426] read to 0xffffea000429a358 of 8 bytes by task 31426 on cpu 0: [ 620.367201][T31426] folio_mapping+0xa1/0x120 [ 620.371714][T31426] lru_add+0x80/0x430 [ 620.375710][T31426] folio_batch_move_lru+0x177/0x230 [ 620.380922][T31426] lru_add_drain_cpu+0x77/0x250 [ 620.385789][T31426] __folio_batch_release+0x44/0xb0 [ 620.390933][T31426] filemap_splice_read+0x521/0x6b0 [ 620.396068][T31426] ext4_file_splice_read+0x8f/0xb0 [ 620.401192][T31426] splice_direct_to_actor+0x26f/0x680 [ 620.406579][T31426] do_splice_direct+0xda/0x150 [ 620.411377][T31426] do_sendfile+0x380/0x650 [ 620.415808][T31426] __x64_sys_sendfile64+0x105/0x150 [ 620.421012][T31426] x64_sys_call+0x2bb0/0x2ff0 [ 620.425706][T31426] do_syscall_64+0xd2/0x200 [ 620.430216][T31426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.436115][T31426] [ 620.438438][T31426] value changed: 0xffff88811a155838 -> 0x0000000000000000 [ 620.445539][T31426] [ 620.447861][T31426] Reported by Kernel Concurrency Sanitizer on: [ 620.454022][T31426] CPU: 0 UID: 0 PID: 31426 Comm: syz.6.9602 Tainted: G W 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 620.467755][T31426] Tainted: [W]=WARN [ 620.471557][T31426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 620.481626][T31426] ================================================================== [ 620.714652][T26335] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.409358][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 628.409376][ T29] audit: type=1400 audit(1753838127.163:33299): avc: denied { recv } for pid=3286 comm="syz-executor" saddr=10.128.0.163 src=39064 daddr=10.128.10.17 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1