last executing test programs: 6m34.96402983s ago: executing program 3 (id=879): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r0}, 0x10) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 6m34.9451581s ago: executing program 3 (id=881): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="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", 0x194}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df328509806e960", 0x7d}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e2", 0xce}, {&(0x7f0000000f00)="397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfebf169e77257f308b498e5b417227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f", 0x3e}, {&(0x7f00000003c0)="9059c5aee5fca0529f3f9109a29885942349a08c6be8241fb9050c74", 0x1c}], 0x5}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa", 0x7d}, {&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c9100000000000000006a8f4f5405596e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c", 0xa9}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000840)="3f1c4a04940ee0b20aec8b4090986a3bff84255d40657e7ee0d40a25584e869ef417cfb843df9bab6a733f72f13c385945fbe4f6592503b0013edc972aa7f382cfe6f924e9b3058c5dc3a39af5f6868c9031d7f0fba663fed16b868a4e53436b1be7a082f8260147", 0x68}, {&(0x7f00000008c0)}, {&(0x7f0000000940)="2c5e42e310fe2f095389d5264f44036f83f52415194225b1d75664af0bb8c7db4032895089bf7ed9c49da28ec002a2250c905af982041e9c842ea9dab20db6473e1556aca64e9c40548f5b0381db15e028b2a4f9983a447bb0aacb1b0267c1f54c88d99ea07b387d4be282d5d56e7acb15ebce07ad8846bcbbb754e3cee15d0455ceb58e34bd0c398ab5", 0x8a}, {&(0x7f0000000b80)="5e93f51c80552080613760264b6008795ee1e8b68965025b8a5b43", 0x1b}], 0x4}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 6m34.879416742s ago: executing program 3 (id=883): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x48005) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000380)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) 6m34.846960092s ago: executing program 3 (id=884): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) move_mount(r0, &(0x7f0000000100)='./file0/../file0\x00', r0, &(0x7f00000001c0)='./file0/file0\x00', 0x210) 6m34.792120432s ago: executing program 3 (id=885): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kfree\x00', r2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c000000200001002dbd7000000000000a008000000000010000000014000200fc0200000000000000000000000000000c001400", @ANYRES32], 0x3c}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/11], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r5}, 0x18) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) 6m34.720291644s ago: executing program 3 (id=887): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001840)=0x5d4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001a}}, 0x1c}}, 0x0) 6m34.619078705s ago: executing program 32 (id=887): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001840)=0x5d4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001a}}, 0x1c}}, 0x0) 1m37.275299593s ago: executing program 2 (id=5520): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000b0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000100}, 0x0) (fail_nth: 3) 1m37.262665743s ago: executing program 2 (id=5523): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r1, &(0x7f0000000780)={'#! ', './file0'}, 0xb) close_range(0xffffffffffffffff, r1, 0x0) 1m37.215476803s ago: executing program 2 (id=5525): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) (fail_nth: 3) 1m37.171043374s ago: executing program 2 (id=5527): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x6000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r2, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x275a, 0x0) r4 = creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x5) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) creat(&(0x7f0000000340)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x142) fallocate(r3, 0x0, 0x0, 0x10fff9) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r4, 0x8, 0x0, 0x2, 0x3ff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="14feffff0f0001000000090a0104000000000000000002000008140000001000010000000000000000000084000ad67ea17308192964eeb7b0f9c293b5d8bc3403f281f401b984d92087abe48195ba7280ce48b358540c6b1e1e4cbd3ec651dbb5ce04c6bdebf91fe8559237302b1d3fa3bbf51737c175731c1154ae4b173deb0727bdd2f1f29117798e9d9c0e7f3900eb26112ff11fd3edf97f45bb42816263baccba49df65fb3dcbad13cc"], 0x3c}, 0x1, 0x0, 0x0, 0x4000100}, 0x0) 1m36.939319808s ago: executing program 2 (id=5530): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r2}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r3, 0x0, 0x8000000000000}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000005c0), 0x4) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r4, 0x4, 0x0) r5 = add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000280)={0x1, 0x0, @b}, 0x48, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) keyctl$chown(0x4, r5, 0xffffffffffffffff, r6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 1m35.715448527s ago: executing program 2 (id=5543): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setpriority(0x2, 0xffffffffffffffff, 0xb972) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x2a) 1m34.789941442s ago: executing program 33 (id=5543): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setpriority(0x2, 0xffffffffffffffff, 0xb972) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x2a) 57.451974552s ago: executing program 6 (id=6085): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r3, &(0x7f0000000780)={'#! ', './file0'}, 0xb) 57.413320422s ago: executing program 6 (id=6087): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)}], 0x1}, 0x48002) 57.330318513s ago: executing program 6 (id=6090): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) socket$xdp(0x2c, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8000c62) 57.165359306s ago: executing program 6 (id=6094): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="04000000040000000400000005", @ANYRESDEC=r0, @ANYRESHEX=r0], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) syz_io_uring_setup(0x8000083f, &(0x7f00000000c0)={0x0, 0x9b1b, 0x2000, 0x1, 0x8002aa}, &(0x7f0000000400), &(0x7f0000000280)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@discard}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfea7) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) copy_file_range(r4, 0x0, r3, 0x0, 0xffffffffa003e45c, 0x700000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000200)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa0f}}]}, 0x1, 0x4c4, &(0x7f0000000500)="$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") socket$nl_generic(0x10, 0x3, 0x10) 56.380538609s ago: executing program 6 (id=6105): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x4, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) 55.387121435s ago: executing program 6 (id=6126): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/45, 0x2d, 0x40000000, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="48050000150019", 0x7}], 0x1) socket$inet6(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000805, 0x0) socket$key(0xf, 0x3, 0x2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="5802009400140091d491323b478925458db45602117fffefd7ff81000e226c1add024bf752e31ad096339c5e74a48d52a42b3ecbad9c50ff11025395f49d6b51602f4da57b8c63e261d39a587443ea5717", 0x51}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r1]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001500)={0x1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 55.364304395s ago: executing program 34 (id=6126): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/45, 0x2d, 0x40000000, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="48050000150019", 0x7}], 0x1) socket$inet6(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000805, 0x0) socket$key(0xf, 0x3, 0x2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="5802009400140091d491323b478925458db45602117fffefd7ff81000e226c1add024bf752e31ad096339c5e74a48d52a42b3ecbad9c50ff11025395f49d6b51602f4da57b8c63e261d39a587443ea5717", 0x51}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r1]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001500)={0x1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 51.88057203s ago: executing program 4 (id=6191): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCPKT(r0, 0x5420, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x2) 51.84228143s ago: executing program 7 (id=6192): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000e2566c6abccae48db602a0efdda7fab8857dd299a321679fa88b7d8603f295aac8ba4642157a02fc77471d4ffd152b9c7bbdba2482a4c636cd400b1dc806d186161d14f2c1f13f32a578eb8938d7d16805510421894faf74638bd2f9c772f9359ed480f0f46f3111e423b7366312faa6bae8cc589ca0cb01d043b5bfe35962bed99f0d45ee2d861a0e1d3263e56a66e2df9369f79e6dab7f247628743aef44bf6b033f75aa3b22bc1ab89d090202a48e98007519661e611bcf60af77bbd4783c88e3", @ANYRES16, @ANYBLOB="010328bd7000fedbdf251c000000"], 0x14}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$kcm(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) 51.829097881s ago: executing program 4 (id=6193): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$rds(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r4, &(0x7f0000000780)={'#! ', './file0'}, 0xb) close_range(r3, r4, 0x0) 51.800664901s ago: executing program 4 (id=6194): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000880)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x10, 0xffff, 0x1, 0xe9f}}, &(0x7f0000000140), 0x200) 51.775383762s ago: executing program 4 (id=6195): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="04000000040000000400000005", @ANYRESDEC=r0, @ANYRESHEX=r0], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) syz_io_uring_setup(0x8000083f, &(0x7f00000000c0)={0x0, 0x9b1b, 0x2000, 0x1, 0x8002aa}, &(0x7f0000000400), &(0x7f0000000280)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@discard}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfea7) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) copy_file_range(r3, 0x0, r2, 0x0, 0xffffffffa003e45c, 0x700000000000000) 50.790967327s ago: executing program 4 (id=6202): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8070000000000000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095000005000000000000"], 0x0, 0x0, 0x0, 0x0, 0x1b86a14636108b94, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES64=0x0, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001000000f6ff0000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x2) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000400)={0x2, 0x1, 0x10, 0x0, 0x2}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 50.499428402s ago: executing program 4 (id=6208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe88, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) write$binfmt_misc(r2, &(0x7f0000001280), 0x6) 50.499245201s ago: executing program 35 (id=6208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe88, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) write$binfmt_misc(r2, &(0x7f0000001280), 0x6) 50.170418977s ago: executing program 7 (id=6209): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x6, 0x1, 0x38, 0x5, 0x0, 0x0, 0x201, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0xffffffff, 0x1}, 0x1, 0x5, 0x7, 0x9, 0x6, 0x8, 0x0, 0x0, 0x386, 0x0, 0x7}, r4, 0xe, r1, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10) listen(0xffffffffffffffff, 0x3) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) waitid(0x1, r6, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\x05\xe3{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) request_key(&(0x7f0000000280)='big_key\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='\x00', 0xfffffffffffffffa) 49.681517794s ago: executing program 7 (id=6213): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x248) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x1, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f0000000380)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 49.143567993s ago: executing program 7 (id=6221): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="04000000040000000400000005", @ANYRESDEC=r0, @ANYRESHEX=r0], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) syz_io_uring_setup(0x8000083f, &(0x7f00000000c0)={0x0, 0x9b1b, 0x2000, 0x1, 0x8002aa}, &(0x7f0000000400), &(0x7f0000000280)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@discard}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfea7) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) copy_file_range(r3, 0x0, r2, 0x0, 0xffffffffa003e45c, 0x700000000000000) 47.979483051s ago: executing program 7 (id=6229): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$rds(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r4, &(0x7f0000000780)={'#! ', './file0'}, 0xb) close_range(r3, r4, 0x0) 44.597187205s ago: executing program 7 (id=6271): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000880)}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x10, 0xffff, 0x1, 0xe9f}}, &(0x7f0000000140), 0x200) 44.596959775s ago: executing program 36 (id=6271): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000880)}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x10, 0xffff, 0x1, 0xe9f}}, &(0x7f0000000140), 0x200) 2.398526411s ago: executing program 1 (id=6867): r0 = epoll_create(0xeed) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20409b, &(0x7f0000000180), 0x7, 0x511, &(0x7f0000001c40)="$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") epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000003}) epoll_wait(r0, &(0x7f0000001180)=[{}], 0x1, 0x7) 2.214382074s ago: executing program 1 (id=6869): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") 2.152387185s ago: executing program 1 (id=6872): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000e2566c6abccae48db602a0efdda7fab8857dd299a321679fa88b7d8603f295aac8ba4642157a02fc77471d4ffd152b9c7bbdba2482a4c636cd400b1dc806d186161d14f2c1f13f32a578eb8938d7d16805510421894faf74638bd2f9c772f9359ed480f0f46f3111e423b7366312faa6bae8cc589ca0cb01d043b5bfe35962bed99f0d45ee2d861a0e1d3263e56a66e2df9369f79e6dab7f247628743aef44bf6b033f75aa3b22bc1ab89d090202a48e98007519661e611bcf60af77bbd4783c88e3", @ANYRES16, @ANYBLOB="010328bd7000fedbdf251c000000"], 0x14}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001440)="f6e14ee68a9418", 0x7}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) 2.070318106s ago: executing program 8 (id=6876): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) pivot_root(&(0x7f0000001400)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000500)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000005c0)={0x60, 0x1, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000540)=[{0xef, 0xd0, 0x9154}], 0x1, 0x8, 0x2c, 0x40, 0x51, 0x8}) fcntl$notify(r4, 0x402, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) 1.961779208s ago: executing program 8 (id=6879): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000000c0)=0x32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0xfe, 0x597, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rename(&(0x7f0000000780)='./file1\x00', &(0x7f00000002c0)='./file0/file0\x00') 1.699469022s ago: executing program 5 (id=6885): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x4) 1.698033162s ago: executing program 5 (id=6887): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") r1 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1324, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r3, &(0x7f0000000880)={0x0, 0x500, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x11}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f0000000580)={0x200800400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0074167af71d7756bd1700cf77135a13d4c4fa7e14c878aef11c1a28c36f85171aa31ebfea0fa50c3aef0bff2727a968ebc0fa387f5086f68365fd1177ff672e016805e721956ecf80970e8c3f2ce3bbc2f5331483c8690897ce2fe691501855190de1253683b341063671503a555b26b8139349c9a48cfaee30e20c0dd20b9ab388b9be50f582f981b7c416f1c3692b5d6a165744781ede40f63b36d84ee63e49e7f9681c0e5b5d66a08eb50fad30aba1daf113e932808c6e387812f0ae36204dea194657e3525ed1f63c", @ANYRES16=r6, @ANYBLOB="010000000000000000001a00000018000180140002006261746164765f736c6176655f310000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = syz_pidfd_open(r1, 0x0) close_range(r7, 0xffffffffffffffff, 0x2) r8 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x16000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff1}, {0xe, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x91, 0x3, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) unshare(0x2040400) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="389fe100031401002dbd7000ffdbdf250900020073790500000001000000410073697700141b3300765bb11a4f10a7746c305f746f5f62726964796400"/72], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) open_tree(r0, &(0x7f0000000000)='./file1\x00', 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r11, 0x20, 0x4000, 0x8000) 1.633561063s ago: executing program 9 (id=6888): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x1, @private=0xa010101}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r3, &(0x7f0000000780)={'#! ', './file0'}, 0xb) close_range(r2, r3, 0x0) 1.632716573s ago: executing program 0 (id=6889): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) 1.628920493s ago: executing program 9 (id=6890): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc1}}) getsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000280), &(0x7f00000003c0)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000007000000000000000100000d0a00"], 0x0, 0x4f, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 1.562980365s ago: executing program 0 (id=6891): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) (fail_nth: 1) 1.536323475s ago: executing program 8 (id=6892): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x248) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f0000000380)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.451072216s ago: executing program 0 (id=6893): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000000c0)=0x32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0xfe, 0x597, &(0x7f0000000b80)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='Q', 0x1, 0x200980) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1.354878218s ago: executing program 1 (id=6894): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000017000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000100), 0x84880) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, r2, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x64010102, 0x2000, 0xfffe, 0x4e24, 0x40, 0xa, 0x0, 0x80, 0xee}, {0x6, 0x48bb978d, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x20000}, {{@in6=@empty, 0xfffffffd, 0x6c}, 0x0, @in=@broadcast, 0x3505, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xfffc}}}}}}, 0x0) 1.354179668s ago: executing program 9 (id=6895): unshare(0x22020600) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)=0x7ffffffc) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x4, 0xfffffd0d, 0x80, 0x48000, r4, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xa, @value=r5, @void, @void, @value}, 0x50) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) futex(&(0x7f00000003c0)=0x2, 0xb, 0x0, &(0x7f0000000540)={0x0, 0x3938700}, &(0x7f0000000580)=0x2, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1044}, 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.318099698s ago: executing program 1 (id=6896): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000080007b8af8ff00000000bfa2000000000000070208e56a85640d9511000008000000b70400000200000085000000030000009500000000000000"], 0x0, 0x40000000, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r9, 0x0, 0x74bd}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000a000000380003801400020076657468305f766972745f7769666900060007004e2400000800030000000000080001"], 0x4c}}, 0x0) r12 = dup(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[], [], 0x6b}}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b120500ab0a0000240012800b00010069703667726500001400028008000100", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x4000051}, 0x10) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x40000) 1.268750159s ago: executing program 9 (id=6897): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000380)=""/79, 0x4f}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x7a000000}, 0x0) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0) 1.116753251s ago: executing program 1 (id=6898): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x494816459c341ca6}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") r1 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1324, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r2, &(0x7f0000000880)={0x0, 0x500, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x11}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f0000000580)={0x200800400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0074167af71d7756bd1700cf77135a13d4c4fa7e14c878aef11c1a28c36f85171aa31ebfea0fa50c3aef0bff2727a968ebc0fa387f5086f68365fd1177ff672e016805e721956ecf80970e8c3f2ce3bbc2f5331483c8690897ce2fe691501855190de1253683b341063671503a555b26b8139349c9a48cfaee30e20c0dd20b9ab388b9be50f582f981b7c416f1c3692b5d6a165744781ede40f63b36d84ee63e49e7f9681c0e5b5d66a08eb50fad30aba1daf113e932808c6e387812f0ae36204dea194657e3525ed1f63c", @ANYRES16=r5, @ANYBLOB="010000000000000000001a00000018000180140002006261746164765f736c6176655f310000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = syz_pidfd_open(r1, 0x0) close_range(r6, 0xffffffffffffffff, 0x2) r7 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x16000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff1}, {0xe, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x91, 0x3, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) unshare(0x2040400) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="389fe100031401002dbd7000ffdbdf250900020073790500000001000000410073697700141b3300765bb11a4f10a7746c305f746f5f62726964796400"/72], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) open_tree(r0, &(0x7f0000000000)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 955.903854ms ago: executing program 0 (id=6899): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 893.190945ms ago: executing program 0 (id=6900): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe7f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 873.431475ms ago: executing program 5 (id=6901): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x3, 0x800000000000}, 0x1510b, 0x3, 0xfffffffc, 0x5, 0x3, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x100000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0x5, 0x80, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x4) (async) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x141024, 0x0) (async, rerun: 32) listen(0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x3) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x8, 0xffff}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x0, 0xff}}}}]}, 0x44}}, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xe}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}}, 0x4000) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) 782.674087ms ago: executing program 5 (id=6902): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r3, &(0x7f0000000780)={'#! ', './file0'}, 0xb) 754.265467ms ago: executing program 5 (id=6903): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f00000000c0)={0x4b5a9da54893e123, 0x7, 0x8, 0x2, 0x1000}, 0xffa3, 0x7, 0x1fc, 0x0, 0x0, 0x20000, 0x0}) 663.380628ms ago: executing program 5 (id=6904): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000e2566c6abccae48db602a0efdda7fab8857dd299a321679fa88b7d8603f295aac8ba4642157a02fc77471d4ffd152b9c7bbdba2482a4c636cd400b1dc806d186161d14f2c1f13f32a578eb8938d7d16805510421894faf74638bd2f9c772f9359ed480f0f46f3111e423b7366312faa6bae8cc589ca0cb01d043b5bfe35962bed99f0d45ee2d861a0e1d3263e56a66e2df9369f79e6dab7f247628743aef44bf6b033f75aa3b22bc1ab89d090202a48e98007519661e611bcf60af77bbd4783c88e3", @ANYRES16, @ANYBLOB="010328bd7000fedbdf251c000000"], 0x14}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {&(0x7f0000001440)="f6e14ee68a9418", 0x7}], 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) 359.262943ms ago: executing program 8 (id=6905): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) time(&(0x7f00000000c0)) 342.686264ms ago: executing program 8 (id=6906): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000017000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000100), 0x84880) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, r2, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x64010102, 0x2000, 0xfffe, 0x4e24, 0x40, 0xa, 0x0, 0x80, 0xee}, {0x6, 0x48bb978d, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x20000}, {{@in6=@empty, 0xfffffffd, 0x6c}, 0x0, @in=@broadcast, 0x3505, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xfffc}}}}}}, 0x0) 314.347484ms ago: executing program 9 (id=6907): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x4, 0x2ee, &(0x7f00000006c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) 286.848695ms ago: executing program 8 (id=6908): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8070000000000000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095000005000000000000"], 0x0, 0x0, 0x0, 0x0, 0x1b86a14636108b94, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES64=0x0, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001000000f6ff0000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x2) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000400)={0x2, 0x1, 0x10, 0x0, 0x2}, 0xc) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x85c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x848, 0x1, [@m_police={0x844, 0x1, 0x0, 0x0, {{0xb}, {0x818, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x1, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2f, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0xfffffffe, 0x8fc, 0x84, 0x9, 0x3, 0x9, 0x80000001, 0x6, 0x0, 0x8, 0x7, 0x9, 0x1, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x4, 0x1, 0x7f, 0xfffffffd, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x4, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x7, 0x5, 0x6, 0x5, 0x4, 0x2, 0x81, 0x0, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x4, 0x89, 0x2e5, 0x6, 0x100, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0xe7b2, 0x3, 0x2, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xb, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x7ffffffe, 0x1, 0x1, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x4, 0x4, 0xfffffa0c, 0x3, 0x0, 0x4, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0x0, 0x1, 0x727, 0x0, 0xe, 0x8, 0x4, 0x6, 0x7, 0x1, 0xfffffbff, 0x7, 0x3, 0x8, 0x57, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000001, 0x0, 0x9, 0xf, 0xfffffffe, 0x928, 0x4, 0xfffffffd, 0x5, 0x6042, 0xb8c, 0x6, 0x8d8d, 0x55, 0x101, 0x2, 0x64e8, 0xc, 0x82f, 0x2, 0x80a, 0xfff, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x85c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac0800010000000000090002"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) connect$pptp(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) 168.927716ms ago: executing program 9 (id=6909): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000000c0)=0x32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0xfe, 0x597, &(0x7f0000000b80)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='Q', 0x1, 0x200980) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 0s ago: executing program 0 (id=6910): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x494816459c341ca6}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") r1 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1324, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r2, &(0x7f0000000880)={0x0, 0x500, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x11}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f0000000580)={0x200800400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0074167af71d7756bd1700cf77135a13d4c4fa7e14c878aef11c1a28c36f85171aa31ebfea0fa50c3aef0bff2727a968ebc0fa387f5086f68365fd1177ff672e016805e721956ecf80970e8c3f2ce3bbc2f5331483c8690897ce2fe691501855190de1253683b341063671503a555b26b8139349c9a48cfaee30e20c0dd20b9ab388b9be50f582f981b7c416f1c3692b5d6a165744781ede40f63b36d84ee63e49e7f9681c0e5b5d66a08eb50fad30aba1daf113e932808c6e387812f0ae36204dea194657e3525ed1f63c", @ANYRES16=r5, @ANYBLOB="010000000000000000001a00000018000180140002006261746164765f736c6176655f310000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = syz_pidfd_open(r1, 0x0) close_range(r6, 0xffffffffffffffff, 0x2) r7 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x16000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff1}, {0xe, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x91, 0x3, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) unshare(0x2040400) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="389fe100031401002dbd7000ffdbdf250900020073790500000001000000410073697700141b3300765bb11a4f10a7746c305f746f5f62726964796400"/72], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) open_tree(r0, &(0x7f0000000000)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x20, 0x4000, 0x8000) kernel console output (not intermixed with test programs): de [ 463.778398][T21240] veth0_to_team: entered allmulticast mode [ 463.784485][T21240] veth1_to_team: entered promiscuous mode [ 463.790325][T21240] veth1_to_team: entered allmulticast mode [ 463.796360][T21240] veth0_to_batadv: entered promiscuous mode [ 463.802329][T21240] veth0_to_batadv: entered allmulticast mode [ 463.808481][T21240] batadv_slave_0: entered promiscuous mode [ 463.814298][T21240] batadv_slave_0: entered allmulticast mode [ 463.820385][T21240] veth1_to_batadv: entered promiscuous mode [ 463.826375][T21240] veth1_to_batadv: entered allmulticast mode [ 463.832683][T21240] batadv_slave_1: entered promiscuous mode [ 463.838561][T21240] batadv_slave_1: entered allmulticast mode [ 463.844636][T21240] xfrm0: entered promiscuous mode [ 463.849715][T21240] xfrm0: entered allmulticast mode [ 463.854952][T21240] veth0_to_hsr: entered promiscuous mode [ 463.860651][T21240] veth0_to_hsr: entered allmulticast mode [ 463.866481][T21240] hsr_slave_0: entered allmulticast mode [ 463.872408][T21240] veth1_to_hsr: entered promiscuous mode [ 463.878051][T21240] veth1_to_hsr: entered allmulticast mode [ 463.883885][T21240] hsr_slave_1: entered allmulticast mode [ 463.889656][T21240] hsr0: entered promiscuous mode [ 463.894700][T21240] hsr0: entered allmulticast mode [ 463.899893][T21240] veth1_virt_wifi: entered promiscuous mode [ 463.905908][T21240] veth1_virt_wifi: entered allmulticast mode [ 463.912040][T21240] veth0_virt_wifi: entered promiscuous mode [ 463.917956][T21240] veth0_virt_wifi: entered allmulticast mode [ 463.924068][T21240] veth1_vlan: entered allmulticast mode [ 463.929721][T21240] veth0_vlan: entered allmulticast mode [ 463.935342][T21240] vlan0: entered promiscuous mode [ 463.940471][T21240] vlan0: entered allmulticast mode [ 463.945674][T21240] vlan1: entered promiscuous mode [ 463.950875][T21240] vlan1: entered allmulticast mode [ 463.956242][T21240] macvlan0: entered promiscuous mode [ 463.961589][T21240] macvlan0: entered allmulticast mode [ 463.967081][T21240] macvlan1: entered promiscuous mode [ 463.972398][T21240] macvlan1: entered allmulticast mode [ 463.977915][T21240] ipvlan0: entered promiscuous mode [ 463.983135][T21240] ipvlan0: entered allmulticast mode [ 463.988596][T21240] ipvlan1: entered promiscuous mode [ 463.993814][T21240] ipvlan1: entered allmulticast mode [ 463.999285][T21240] veth1_macvtap: entered allmulticast mode [ 464.005300][T21240] veth0_macvtap: entered allmulticast mode [ 464.011187][T21240] macvtap0: entered promiscuous mode [ 464.016670][T21240] macvtap0: entered allmulticast mode [ 464.022201][T21240] macsec0: entered promiscuous mode [ 464.027546][T21240] macsec0: entered allmulticast mode [ 464.032981][T21240] geneve0: entered promiscuous mode [ 464.038235][T21240] geneve0: entered allmulticast mode [ 464.043637][T21240] geneve1: entered promiscuous mode [ 464.048932][T21240] geneve1: entered allmulticast mode [ 464.054520][T21240] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 464.061829][T21240] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 464.069437][T21240] netdevsim netdevsim8 netdevsim1: entered promiscuous mode [ 464.076991][T21240] netdevsim netdevsim8 netdevsim1: entered allmulticast mode [ 464.090904][T21240] netdevsim netdevsim8 netdevsim2: entered promiscuous mode [ 464.098323][T21240] netdevsim netdevsim8 netdevsim2: entered allmulticast mode [ 464.106855][T21240] netdevsim netdevsim8 netdevsim3: entered promiscuous mode [ 464.114256][T21240] netdevsim netdevsim8 netdevsim3: entered allmulticast mode [ 464.121935][ T29] audit: type=1400 audit(1744571891.900:19373): avc: denied { write } for pid=2984 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.143640][ T29] audit: type=1400 audit(1744571891.900:19374): avc: denied { remove_name } for pid=2984 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.166477][ T29] audit: type=1400 audit(1744571891.900:19375): avc: denied { rename } for pid=2984 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 464.167011][T21240] pim6reg: entered promiscuous mode [ 464.189031][ T29] audit: type=1400 audit(1744571891.900:19376): avc: denied { add_name } for pid=2984 comm="syslogd" name="messages.0" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.189142][ T29] audit: type=1400 audit(1744571891.900:19377): avc: denied { unlink } for pid=2984 comm="syslogd" name="messages.0" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 464.233916][T21240] veth2: entered promiscuous mode [ 464.239707][ T29] audit: type=1400 audit(1744571891.900:19378): avc: denied { create } for pid=2984 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 464.244763][T21240] veth2: entered allmulticast mode [ 464.270930][T21240] veth3: entered promiscuous mode [ 464.276047][T21240] veth3: entered allmulticast mode [ 464.327957][T21270] loop9: detected capacity change from 0 to 1024 [ 464.341407][T21270] EXT4-fs mount: 18 callbacks suppressed [ 464.341428][T21270] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.359969][T21270] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.397132][ T29] audit: type=1400 audit(1744571892.204:19379): avc: denied { rename } for pid=21269 comm="syz.9.6461" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 464.397575][T21270] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6461: bg 0: block 393: padding at end of block bitmap is not set [ 464.434908][T21270] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 464.447550][T21270] EXT4-fs (loop9): This should not happen!! Data will be lost [ 464.447550][T21270] [ 464.481612][T21282] xfrm0 speed is unknown, defaulting to 1000 [ 464.492826][T20513] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.559961][T21287] loop1: detected capacity change from 0 to 1024 [ 464.617361][T21287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.644934][T21287] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.652764][T21299] netlink: 'syz.0.6471': attribute type 27 has an invalid length. [ 464.663331][T21297] loop5: detected capacity change from 0 to 764 [ 464.670727][T21287] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.687150][T21297] rock: directory entry would overflow storage [ 464.693564][T21297] rock: sig=0x4f50, size=4, remaining=3 [ 464.695286][T20702] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.699105][T21297] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 464.892056][T21300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.900925][T21300] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.011565][T21300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 465.081722][T21295] Set syz1 is full, maxelem 65536 reached [ 465.201911][T21314] loop5: detected capacity change from 0 to 1024 [ 465.280438][T21319] random: crng reseeded on system resumption [ 465.406970][T21314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.627930][T21328] xfrm0 speed is unknown, defaulting to 1000 [ 465.803216][T21333] loop1: detected capacity change from 0 to 1024 [ 465.829025][T21333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.858052][T21333] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.887758][T21333] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.103392][T14742] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.170839][T21342] loop5: detected capacity change from 0 to 1024 [ 466.199128][T21342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.228394][T21342] ext4 filesystem being mounted at /573/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.256531][T21342] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.412636][T21338] loop1: detected capacity change from 0 to 1024 [ 466.427747][T21338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.442520][T21338] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.464959][T21338] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6481: bg 0: block 393: padding at end of block bitmap is not set [ 466.484102][T21338] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 466.496900][T21338] EXT4-fs (loop1): This should not happen!! Data will be lost [ 466.496900][T21338] [ 466.664922][T20868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.801738][T21362] netlink: 'syz.9.6490': attribute type 27 has an invalid length. [ 466.879694][T21362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.887828][T21362] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.898490][T21362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 466.920235][T21365] pim6reg: entered allmulticast mode [ 466.937998][T21365] pim6reg: left allmulticast mode [ 466.978154][T21368] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 466.985610][T21368] vhci_hcd: default hub control req: 2307 v0008 i0002 l4096 [ 467.060396][T21370] loop8: detected capacity change from 0 to 1024 [ 467.068523][T21372] random: crng reseeded on system resumption [ 467.079859][T21374] ref_ctr_offset mismatch. inode: 0xca offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 467.142895][T21380] loop1: detected capacity change from 0 to 1024 [ 467.148422][T21370] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.169206][T21380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.213260][T21380] lo: entered promiscuous mode [ 467.218174][T21380] lo: entered allmulticast mode [ 467.225023][T21380] tunl0: entered promiscuous mode [ 467.230152][T21380] tunl0: entered allmulticast mode [ 467.240137][T21380] gre0: entered promiscuous mode [ 467.245273][T21380] gre0: entered allmulticast mode [ 467.257278][T21380] gretap0: entered promiscuous mode [ 467.262596][T21380] gretap0: entered allmulticast mode [ 467.269211][T21380] erspan0: entered promiscuous mode [ 467.274697][T21380] erspan0: entered allmulticast mode [ 467.280837][T21380] ip_vti0: entered promiscuous mode [ 467.286136][T21380] ip_vti0: entered allmulticast mode [ 467.292471][T21380] ip6_vti0: entered promiscuous mode [ 467.297783][T21380] ip6_vti0: entered allmulticast mode [ 467.304646][T21380] sit0: entered promiscuous mode [ 467.309590][T21380] sit0: entered allmulticast mode [ 467.317013][T21380] ip6tnl0: entered promiscuous mode [ 467.322277][T21380] ip6tnl0: entered allmulticast mode [ 467.329761][T21380] ip6gre0: entered promiscuous mode [ 467.335042][T21380] ip6gre0: entered allmulticast mode [ 467.346224][T21380] syz_tun: entered promiscuous mode [ 467.351769][T21380] syz_tun: entered allmulticast mode [ 467.362964][T21380] ip6gretap0: entered promiscuous mode [ 467.368586][T21380] ip6gretap0: entered allmulticast mode [ 467.375654][T21380] bridge0: entered promiscuous mode [ 467.380993][T21380] bridge0: entered allmulticast mode [ 467.393698][T21380] vcan0: entered promiscuous mode [ 467.398808][T21380] vcan0: entered allmulticast mode [ 467.408904][T21380] bond0: entered promiscuous mode [ 467.413999][T21380] bond_slave_0: entered promiscuous mode [ 467.419729][T21380] bond_slave_1: entered promiscuous mode [ 467.425676][T21380] bond0: entered allmulticast mode [ 467.430832][T21380] bond_slave_0: entered allmulticast mode [ 467.436587][T21380] bond_slave_1: entered allmulticast mode [ 467.450513][T21380] team0: entered promiscuous mode [ 467.455662][T21380] team_slave_0: entered promiscuous mode [ 467.455734][T21399] loop5: detected capacity change from 0 to 764 [ 467.461431][T21380] team_slave_1: entered promiscuous mode [ 467.473354][T21380] team0: entered allmulticast mode [ 467.474409][T21399] rock: directory entry would overflow storage [ 467.478464][T21380] team_slave_0: entered allmulticast mode [ 467.484718][T21399] rock: sig=0x4f50, size=4, remaining=3 [ 467.490374][T21380] team_slave_1: entered allmulticast mode [ 467.491378][T21380] dummy0: entered promiscuous mode [ 467.495965][T21399] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 467.501653][T21380] dummy0: entered allmulticast mode [ 467.564576][T21380] nlmon0: entered promiscuous mode [ 467.569834][T21380] nlmon0: entered allmulticast mode [ 467.576267][T21380] caif0: entered promiscuous mode [ 467.581359][T21380] caif0: entered allmulticast mode [ 467.586659][T21380] batadv0: entered promiscuous mode [ 467.591899][T21380] batadv0: entered allmulticast mode [ 467.597293][T21380] vxcan0: entered promiscuous mode [ 467.602409][T21380] vxcan0: entered allmulticast mode [ 467.607700][T21380] vxcan1: entered promiscuous mode [ 467.612820][T21380] vxcan1: entered allmulticast mode [ 467.618100][T21380] veth0: entered promiscuous mode [ 467.623126][T21380] veth0: entered allmulticast mode [ 467.628419][T21380] veth1: entered promiscuous mode [ 467.633515][T21380] veth1: entered allmulticast mode [ 467.638751][T21380] wg0: entered promiscuous mode [ 467.643637][T21380] wg0: entered allmulticast mode [ 467.648617][T21380] wg1: entered promiscuous mode [ 467.653499][T21380] wg1: entered allmulticast mode [ 467.658652][T21380] wg2: entered promiscuous mode [ 467.663528][T21380] wg2: entered allmulticast mode [ 467.668518][T21380] veth0_to_bridge: entered promiscuous mode [ 467.674451][T21380] veth0_to_bridge: entered allmulticast mode [ 467.680570][T21380] veth1_to_bridge: entered promiscuous mode [ 467.686524][T21380] veth1_to_bridge: entered allmulticast mode [ 467.692745][T21380] veth0_to_bond: entered promiscuous mode [ 467.698468][T21380] veth0_to_bond: entered allmulticast mode [ 467.704434][T21380] veth1_to_bond: entered promiscuous mode [ 467.710207][T21380] veth1_to_bond: entered allmulticast mode [ 467.716228][T21380] veth0_to_team: entered promiscuous mode [ 467.721975][T21380] veth0_to_team: entered allmulticast mode [ 467.727940][T21380] veth1_to_team: entered promiscuous mode [ 467.733771][T21380] veth1_to_team: entered allmulticast mode [ 467.739788][T21380] veth0_to_batadv: entered promiscuous mode [ 467.745684][T21380] veth0_to_batadv: entered allmulticast mode [ 467.751774][T21380] batadv_slave_0: entered promiscuous mode [ 467.757697][T21380] batadv_slave_0: entered allmulticast mode [ 467.763648][T21380] veth1_to_batadv: entered promiscuous mode [ 467.769651][T21380] veth1_to_batadv: entered allmulticast mode [ 467.775714][T21380] batadv_slave_1: entered promiscuous mode [ 467.781612][T21380] batadv_slave_1: entered allmulticast mode [ 467.787605][T21380] xfrm0: entered promiscuous mode [ 467.792644][T21380] xfrm0: entered allmulticast mode [ 467.797871][T21380] veth0_to_hsr: entered promiscuous mode [ 467.803525][T21380] veth0_to_hsr: entered allmulticast mode [ 467.809329][T21380] hsr_slave_0: entered allmulticast mode [ 467.815110][T21380] veth1_to_hsr: entered promiscuous mode [ 467.820816][T21380] veth1_to_hsr: entered allmulticast mode [ 467.826646][T21380] hsr_slave_1: entered allmulticast mode [ 467.832372][T21380] hsr0: entered promiscuous mode [ 467.837368][T21380] hsr0: entered allmulticast mode [ 467.842483][T21380] veth1_virt_wifi: entered promiscuous mode [ 467.848413][T21380] veth1_virt_wifi: entered allmulticast mode [ 467.854560][T21380] veth0_virt_wifi: entered promiscuous mode [ 467.860457][T21380] veth0_virt_wifi: entered allmulticast mode [ 467.866540][T21380] veth1_vlan: entered allmulticast mode [ 467.872270][T21380] veth0_vlan: entered allmulticast mode [ 467.877865][T21380] vlan0: entered promiscuous mode [ 467.883068][T21380] vlan0: entered allmulticast mode [ 467.888280][T21380] vlan1: entered promiscuous mode [ 467.893451][T21380] vlan1: entered allmulticast mode [ 467.898715][T21380] macvlan0: entered promiscuous mode [ 467.904127][T21380] macvlan0: entered allmulticast mode [ 467.909589][T21380] macvlan1: entered promiscuous mode [ 467.914905][T21380] macvlan1: entered allmulticast mode [ 467.920341][T21380] ipvlan0: entered promiscuous mode [ 467.925547][T21380] ipvlan0: entered allmulticast mode [ 467.930988][T21380] ipvlan1: entered promiscuous mode [ 467.936217][T21380] ipvlan1: entered allmulticast mode [ 467.941607][T21380] veth1_macvtap: entered allmulticast mode [ 467.947528][T21380] veth0_macvtap: entered allmulticast mode [ 467.953495][T21380] macvtap0: entered promiscuous mode [ 467.958905][T21380] macvtap0: entered allmulticast mode [ 467.964323][T21380] macsec0: entered promiscuous mode [ 467.969567][T21380] macsec0: entered allmulticast mode [ 467.975034][T21380] geneve0: entered promiscuous mode [ 467.980264][T21380] geneve0: entered allmulticast mode [ 467.985598][T21380] geneve1: entered promiscuous mode [ 467.990927][T21380] geneve1: entered allmulticast mode [ 468.096035][T21402] loop9: detected capacity change from 0 to 1024 [ 468.111006][T21402] EXT4-fs: Ignoring removed nobh option [ 468.116799][T21402] EXT4-fs: Ignoring removed bh option [ 468.159235][T21402] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.178146][T21402] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.6501: Allocating blocks 385-513 which overlap fs metadata [ 468.200986][T21401] EXT4-fs (loop9): pa ffff888106564ee0: logic 16, phys. 129, len 24 [ 468.209153][T21401] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 468.224673][T21380] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 468.232164][T21380] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 468.244039][T21380] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 468.251356][T21380] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 468.276903][T21380] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 468.284320][T21380] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 468.297461][T20702] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.307672][T21380] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 468.315098][T21380] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 468.322685][T21380] ÿÿÿ: entered promiscuous mode [ 468.327673][T21380] ÿÿÿ: entered allmulticast mode [ 468.408019][T20868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.447103][T21406] loop5: detected capacity change from 0 to 128 [ 468.570587][T20513] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.667069][T21415] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 468.700397][T21415] vhci_hcd: default hub control req: 2307 v0008 i0002 l4096 [ 468.783511][ T4693] bio_check_eod: 214 callbacks suppressed [ 468.783529][ T4693] kworker/u8:8: attempt to access beyond end of device [ 468.783529][ T4693] loop5: rw=1, sector=153, nr_sectors = 8 limit=128 [ 468.835760][ T4693] kworker/u8:8: attempt to access beyond end of device [ 468.835760][ T4693] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 468.867361][ T4693] kworker/u8:8: attempt to access beyond end of device [ 468.867361][ T4693] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 468.888369][ T4693] kworker/u8:8: attempt to access beyond end of device [ 468.888369][ T4693] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 468.902492][ T4693] kworker/u8:8: attempt to access beyond end of device [ 468.902492][ T4693] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 468.916374][ T4693] kworker/u8:8: attempt to access beyond end of device [ 468.916374][ T4693] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 468.929871][ T4693] kworker/u8:8: attempt to access beyond end of device [ 468.929871][ T4693] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 468.943304][ T4693] kworker/u8:8: attempt to access beyond end of device [ 468.943304][ T4693] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 468.956855][ T4693] kworker/u8:8: attempt to access beyond end of device [ 468.956855][ T4693] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 468.970509][ T4693] kworker/u8:8: attempt to access beyond end of device [ 468.970509][ T4693] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 469.010408][T21410] loop9: detected capacity change from 0 to 1024 [ 469.044966][T21410] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.055250][T21427] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 469.066832][T21410] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.097027][T21410] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6502: bg 0: block 393: padding at end of block bitmap is not set [ 469.130064][T21437] pim6reg: entered allmulticast mode [ 469.137542][T21437] pim6reg: left allmulticast mode [ 469.143060][T21410] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 469.155768][T21410] EXT4-fs (loop9): This should not happen!! Data will be lost [ 469.155768][T21410] [ 469.190344][T21441] loop5: detected capacity change from 0 to 1024 [ 469.207344][T21443] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 469.214690][T21443] vhci_hcd: default hub control req: 2307 v0008 i0002 l4096 [ 469.218975][T21441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.244528][T21450] loop1: detected capacity change from 0 to 128 [ 469.369153][T20702] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.383504][T21445] loop8: detected capacity change from 0 to 1024 [ 469.406116][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 469.406129][ T29] audit: type=1326 audit(1744571897.464:19391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21455 comm="syz.0.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a206d169 code=0x7ffc0000 [ 469.437454][ T29] audit: type=1326 audit(1744571897.496:19392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21455 comm="syz.0.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f89a206d169 code=0x7ffc0000 [ 469.461170][ T29] audit: type=1326 audit(1744571897.496:19393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21455 comm="syz.0.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a206d169 code=0x7ffc0000 [ 469.484829][ T29] audit: type=1326 audit(1744571897.496:19394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21455 comm="syz.0.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a206d169 code=0x7ffc0000 [ 469.515725][T21445] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.528331][T21445] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.877763][T21465] Set syz1 is full, maxelem 65536 reached [ 469.884572][ T7595] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 393: padding at end of block bitmap is not set [ 469.903873][T21460] loop1: detected capacity change from 0 to 1024 [ 469.911013][ T7595] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 469.923845][ T7595] EXT4-fs (loop8): This should not happen!! Data will be lost [ 469.923845][ T7595] [ 469.955893][T20513] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.961033][T21481] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 469.980087][T21460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.998792][ T29] audit: type=1326 audit(1744571898.084:19395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21485 comm="syz.8.6531" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f830347d169 code=0x0 [ 470.025637][T21460] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.039543][T14742] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.109420][T21493] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6536'. [ 470.247743][T21497] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6536'. [ 470.448802][ T7595] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 393: padding at end of block bitmap is not set [ 470.476366][ T7595] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 470.489199][ T7595] EXT4-fs (loop1): This should not happen!! Data will be lost [ 470.489199][ T7595] [ 470.501542][T20868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.519096][T21518] netlink: 'syz.5.6548': attribute type 27 has an invalid length. [ 470.527378][T21516] loop9: detected capacity change from 0 to 1024 [ 470.535043][T21518] lo: left promiscuous mode [ 470.539623][T21518] lo: left allmulticast mode [ 470.544450][T21518] tunl0: left promiscuous mode [ 470.549330][T21518] tunl0: left allmulticast mode [ 470.554398][T21518] gre0: left promiscuous mode [ 470.559139][T21518] gre0: left allmulticast mode [ 470.564042][T21518] gretap0: left promiscuous mode [ 470.569091][T21518] gretap0: left allmulticast mode [ 470.574195][T21518] erspan0: left promiscuous mode [ 470.579200][T21518] erspan0: left allmulticast mode [ 470.580775][T21516] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.584317][T21518] ip_vti0: left promiscuous mode [ 470.601349][T21518] ip_vti0: left allmulticast mode [ 470.606550][T21518] ip6_vti0: left promiscuous mode [ 470.611734][T21518] ip6_vti0: left allmulticast mode [ 470.617027][T21518] sit0: left promiscuous mode [ 470.621764][T21518] sit0: left allmulticast mode [ 470.626630][T21518] ip6tnl0: left promiscuous mode [ 470.631688][T21518] ip6tnl0: left allmulticast mode [ 470.636847][T21518] ip6gre0: left promiscuous mode [ 470.641804][T21518] ip6gre0: left allmulticast mode [ 470.646984][T21518] syz_tun: left promiscuous mode [ 470.651938][T21518] syz_tun: left allmulticast mode [ 470.657123][T21518] ip6gretap0: left promiscuous mode [ 470.662323][T21518] ip6gretap0: left allmulticast mode [ 470.667792][T21518] bridge0: left promiscuous mode [ 470.672787][T21518] bridge0: left allmulticast mode [ 470.677975][T21518] vcan0: left promiscuous mode [ 470.682807][T21518] vcan0: left allmulticast mode [ 470.687713][T21518] bond0: left promiscuous mode [ 470.692831][T21518] bond0: left allmulticast mode [ 470.698004][T21518] team0: left promiscuous mode [ 470.703115][T21518] team0: left allmulticast mode [ 470.714222][T21518] dummy0: left promiscuous mode [ 470.719112][T21518] dummy0: left allmulticast mode [ 470.724304][T21518] nlmon0: left promiscuous mode [ 470.729235][T21518] nlmon0: left allmulticast mode [ 470.734331][T21518] caif0: left promiscuous mode [ 470.739199][T21518] caif0: left allmulticast mode [ 470.744208][T21518] batadv0: left promiscuous mode [ 470.749210][T21518] batadv0: left allmulticast mode [ 470.754302][T21518] vxcan0: left promiscuous mode [ 470.759223][T21518] vxcan0: left allmulticast mode [ 470.764392][T21518] vxcan1: left promiscuous mode [ 470.769441][T21518] vxcan1: left allmulticast mode [ 470.774626][T21518] veth0: left promiscuous mode [ 470.779455][T21518] veth0: left allmulticast mode [ 470.784530][T21518] veth1: left promiscuous mode [ 470.789490][T21518] veth1: left allmulticast mode [ 470.794423][T21518] wg0: left promiscuous mode [ 470.799069][T21518] wg0: left allmulticast mode [ 470.803938][T21518] wg1: left promiscuous mode [ 470.808753][T21518] wg1: left allmulticast mode [ 470.813646][T21518] wg2: left promiscuous mode [ 470.818444][T21518] wg2: left allmulticast mode [ 470.821143][T21531] loop1: detected capacity change from 0 to 1024 [ 470.823182][T21518] veth0_to_bridge: left promiscuous mode [ 470.835293][T21518] veth0_to_bridge: left allmulticast mode [ 470.841172][T21518] veth1_to_bridge: left promiscuous mode [ 470.846927][T21518] veth1_to_bridge: left allmulticast mode [ 470.852932][T21518] veth0_to_bond: left promiscuous mode [ 470.858659][T21518] veth0_to_bond: left allmulticast mode [ 470.864322][T21518] bond_slave_0: left promiscuous mode [ 470.869717][T21518] bond_slave_0: left allmulticast mode [ 470.875289][T21518] veth1_to_bond: left promiscuous mode [ 470.880763][T21518] veth1_to_bond: left allmulticast mode [ 470.886524][T21518] bond_slave_1: left promiscuous mode [ 470.891946][T21518] bond_slave_1: left allmulticast mode [ 470.892690][T21535] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 470.897515][T21518] veth0_to_team: left promiscuous mode [ 470.909039][T21535] vhci_hcd: default hub control req: 2307 v0008 i0002 l4096 [ 470.910411][T21518] veth0_to_team: left allmulticast mode [ 470.919047][T21531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.923276][T21518] team_slave_0: left promiscuous mode [ 470.935381][T21531] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.940634][T21518] team_slave_0: left allmulticast mode [ 470.940854][T21518] veth1_to_team: left promiscuous mode [ 470.962123][T21518] veth1_to_team: left allmulticast mode [ 470.964926][T21531] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.967796][T21518] team_slave_1: left promiscuous mode [ 470.982166][T21518] team_slave_1: left allmulticast mode [ 470.987803][T21518] veth0_to_batadv: left promiscuous mode [ 470.993675][T21518] veth0_to_batadv: left allmulticast mode [ 470.999647][T21518] batadv_slave_0: left promiscuous mode [ 471.005229][T21518] batadv_slave_0: left allmulticast mode [ 471.010963][T21518] veth1_to_batadv: left promiscuous mode [ 471.016653][T21518] veth1_to_batadv: left allmulticast mode [ 471.022483][T21518] batadv_slave_1: left promiscuous mode [ 471.028089][T21518] batadv_slave_1: left allmulticast mode [ 471.033876][T21518] xfrm0: left promiscuous mode [ 471.038699][T21518] xfrm0: left allmulticast mode [ 471.043647][T21518] veth0_to_hsr: left promiscuous mode [ 471.049058][T21518] veth0_to_hsr: left allmulticast mode [ 471.054787][T21518] veth1_to_hsr: left promiscuous mode [ 471.060171][T21518] veth1_to_hsr: left allmulticast mode [ 471.065901][T21518] hsr0: left promiscuous mode [ 471.070609][T21518] hsr0: left allmulticast mode [ 471.075427][T21518] hsr_slave_0: left allmulticast mode [ 471.080866][T21518] hsr_slave_1: left allmulticast mode [ 471.086414][T21518] veth1_virt_wifi: left promiscuous mode [ 471.092200][T21518] veth1_virt_wifi: left allmulticast mode [ 471.098106][T21518] veth0_virt_wifi: left promiscuous mode [ 471.103816][T21518] veth0_virt_wifi: left allmulticast mode [ 471.109708][T21518] veth1_vlan: left allmulticast mode [ 471.115278][T21518] vlan0: left promiscuous mode [ 471.120293][T21518] vlan0: left allmulticast mode [ 471.125494][T21518] vlan1: left promiscuous mode [ 471.130391][T21518] vlan1: left allmulticast mode [ 471.135304][T21518] macvlan0: left promiscuous mode [ 471.140409][T21518] macvlan0: left allmulticast mode [ 471.145563][T21518] macvlan1: left promiscuous mode [ 471.150723][T21518] macvlan1: left allmulticast mode [ 471.155881][T21518] ipvlan0: left promiscuous mode [ 471.160872][T21518] ipvlan0: left allmulticast mode [ 471.166048][T21518] ipvlan1: left promiscuous mode [ 471.171050][T21518] ipvlan1: left allmulticast mode [ 471.176079][T21518] veth0_vlan: left allmulticast mode [ 471.181581][T21518] veth1_macvtap: left allmulticast mode [ 471.187349][T21518] veth0_macvtap: left allmulticast mode [ 471.192975][T21518] macvtap0: left promiscuous mode [ 471.198037][T21518] macvtap0: left allmulticast mode [ 471.203210][T21518] macsec0: left promiscuous mode [ 471.208336][T21518] macsec0: left allmulticast mode [ 471.213438][T21518] geneve0: left promiscuous mode [ 471.218424][T21518] geneve0: left allmulticast mode [ 471.223577][T21518] geneve1: left promiscuous mode [ 471.228589][T21518] geneve1: left allmulticast mode [ 471.234041][T21518] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 471.241099][T21518] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 471.248442][T21518] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 471.255597][T21518] netdevsim netdevsim5 netdevsim1: left allmulticast mode [ 471.263205][T21518] netdevsim netdevsim5 netdevsim2: left promiscuous mode [ 471.270406][T21518] netdevsim netdevsim5 netdevsim2: left allmulticast mode [ 471.277637][T21518] netdevsim netdevsim5 netdevsim3: left promiscuous mode [ 471.284753][T21518] netdevsim netdevsim5 netdevsim3: left allmulticast mode [ 471.291987][T21518] ip6gretap1: left promiscuous mode [ 471.297243][T21518] ip6gretap1: left allmulticast mode [ 471.302816][T21518] ÿÿÿ: left promiscuous mode [ 471.307509][T21518] ÿÿÿ: left allmulticast mode [ 471.312481][T21518] syztnl1: left promiscuous mode [ 471.317448][T21518] syztnl1: left allmulticast mode [ 471.322666][T21518] ip6_vti1: left promiscuous mode [ 471.327714][T21518] ip6_vti1: left allmulticast mode [ 471.332935][T21518] veth2: left promiscuous mode [ 471.337716][T21518] veth2: left allmulticast mode [ 471.342749][T21518] veth3: left promiscuous mode [ 471.347555][T21518] veth3: left allmulticast mode [ 471.352666][T21518] veth4: left promiscuous mode [ 471.357590][T21518] veth4: left allmulticast mode [ 471.362748][T21518] veth5: left promiscuous mode [ 471.367644][T21518] veth5: left allmulticast mode [ 471.372563][T21518] veth6: left promiscuous mode [ 471.377515][T21518] veth6: left allmulticast mode [ 471.382665][T21518] veth7: left promiscuous mode [ 471.387494][T21518] veth7: left allmulticast mode [ 471.392418][T21518] veth8: left promiscuous mode [ 471.397399][T21518] veth8: left allmulticast mode [ 471.402621][T21518] veth9: left promiscuous mode [ 471.407468][T21518] veth9: left allmulticast mode [ 471.412521][T21518] veth10: left promiscuous mode [ 471.417478][T21518] veth10: left allmulticast mode [ 471.422628][T21518] veth11: left promiscuous mode [ 471.427690][T21518] veth11: left allmulticast mode [ 471.484124][ T29] audit: type=1326 audit(1744571899.638:19396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21561 comm="syz.1.6562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fded7f4d169 code=0x0 [ 471.508604][T21527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.517866][T21527] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.528725][T21527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 471.546661][T21537] lo: entered promiscuous mode [ 471.551585][T21537] lo: entered allmulticast mode [ 471.575021][T21537] tunl0: entered promiscuous mode [ 471.580188][T21537] tunl0: entered allmulticast mode [ 471.585620][ T29] audit: type=1326 audit(1744571899.732:19397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21565 comm="syz.0.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a206d169 code=0x7ffc0000 [ 471.600558][T21537] gre0: entered promiscuous mode [ 471.609313][ T29] audit: type=1326 audit(1744571899.732:19398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21565 comm="syz.0.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a206d169 code=0x7ffc0000 [ 471.614190][T21537] gre0: entered allmulticast mode [ 471.637874][ T29] audit: type=1326 audit(1744571899.732:19399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21565 comm="syz.0.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f89a206d169 code=0x7ffc0000 [ 471.666477][ T29] audit: type=1326 audit(1744571899.732:19400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21565 comm="syz.0.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a206d169 code=0x7ffc0000 [ 471.704293][T21537] gretap0: entered promiscuous mode [ 471.709610][T21537] gretap0: entered allmulticast mode [ 471.717689][T21537] erspan0: entered promiscuous mode [ 471.723051][T21537] erspan0: entered allmulticast mode [ 471.730639][T21537] ip_vti0: entered promiscuous mode [ 471.735905][T21537] ip_vti0: entered allmulticast mode [ 471.753460][T21537] ip6_vti0: entered promiscuous mode [ 471.758997][T21537] ip6_vti0: entered allmulticast mode [ 471.772096][T21537] sit0: entered promiscuous mode [ 471.777120][T21537] sit0: entered allmulticast mode [ 471.801290][T21537] ip6tnl0: entered promiscuous mode [ 471.806665][T21537] ip6tnl0: entered allmulticast mode [ 471.828143][T21576] random: crng reseeded on system resumption [ 471.835777][T21537] ip6gre0: entered promiscuous mode [ 471.841012][T21537] ip6gre0: entered allmulticast mode [ 471.909693][T21537] syz_tun: entered promiscuous mode [ 471.915180][T21537] syz_tun: entered allmulticast mode [ 471.961160][T21537] ip6gretap0: entered promiscuous mode [ 471.966820][T21537] ip6gretap0: entered allmulticast mode [ 471.985157][T21537] bridge0: entered promiscuous mode [ 471.990558][T21537] bridge0: entered allmulticast mode [ 472.004209][T21537] vcan0: entered promiscuous mode [ 472.009442][T21537] vcan0: entered allmulticast mode [ 472.026415][T21537] bond0: entered promiscuous mode [ 472.031510][T21537] bond_slave_0: entered promiscuous mode [ 472.037283][T21537] bond_slave_1: entered promiscuous mode [ 472.043074][T21537] bond0: entered allmulticast mode [ 472.048291][T21537] bond_slave_0: entered allmulticast mode [ 472.054058][T21537] bond_slave_1: entered allmulticast mode [ 472.118769][T21537] team0: entered promiscuous mode [ 472.123991][T21537] team_slave_0: entered promiscuous mode [ 472.129922][T21537] team_slave_1: entered promiscuous mode [ 472.135646][T21537] team0: entered allmulticast mode [ 472.140880][T21537] team_slave_0: entered allmulticast mode [ 472.146671][T21537] team_slave_1: entered allmulticast mode [ 472.160591][T21537] dummy0: entered promiscuous mode [ 472.165807][T21537] dummy0: entered allmulticast mode [ 472.178323][T21537] nlmon0: entered promiscuous mode [ 472.183541][T21537] nlmon0: entered allmulticast mode [ 472.206089][T21537] caif0: entered promiscuous mode [ 472.211171][T21537] caif0: entered allmulticast mode [ 472.216427][T21537] batadv0: entered promiscuous mode [ 472.221651][T21537] batadv0: entered allmulticast mode [ 472.227183][T21537] vxcan0: entered promiscuous mode [ 472.232383][T21537] vxcan0: entered allmulticast mode [ 472.237691][T21537] vxcan1: entered promiscuous mode [ 472.242823][T21537] vxcan1: entered allmulticast mode [ 472.248286][T21537] veth0: entered promiscuous mode [ 472.253371][T21537] veth0: entered allmulticast mode [ 472.258585][T21537] veth1: entered promiscuous mode [ 472.263715][T21537] veth1: entered allmulticast mode [ 472.268942][T21537] wg0: entered promiscuous mode [ 472.273875][T21537] wg0: entered allmulticast mode [ 472.278879][T21537] wg1: entered promiscuous mode [ 472.283851][T21537] wg1: entered allmulticast mode [ 472.288930][T21537] wg2: entered promiscuous mode [ 472.293820][T21537] wg2: entered allmulticast mode [ 472.298954][T21537] veth0_to_bridge: entered promiscuous mode [ 472.304885][T21537] veth0_to_bridge: entered allmulticast mode [ 472.311104][T21537] veth1_to_bridge: entered promiscuous mode [ 472.317005][T21537] veth1_to_bridge: entered allmulticast mode [ 472.323124][T21537] veth0_to_bond: entered promiscuous mode [ 472.328903][T21537] veth0_to_bond: entered allmulticast mode [ 472.334863][T21537] veth1_to_bond: entered promiscuous mode [ 472.340729][T21537] veth1_to_bond: entered allmulticast mode [ 472.346722][T21537] veth0_to_team: entered promiscuous mode [ 472.352489][T21537] veth0_to_team: entered allmulticast mode [ 472.358592][T21537] veth1_to_team: entered promiscuous mode [ 472.364389][T21537] veth1_to_team: entered allmulticast mode [ 472.370573][T21537] veth0_to_batadv: entered promiscuous mode [ 472.376511][T21537] veth0_to_batadv: entered allmulticast mode [ 472.382638][T21537] batadv_slave_0: entered promiscuous mode [ 472.388624][T21537] batadv_slave_0: entered allmulticast mode [ 472.394681][T21537] veth1_to_batadv: entered promiscuous mode [ 472.397874][T21583] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 472.400593][T21537] veth1_to_batadv: entered allmulticast mode [ 472.413585][T21583] vhci_hcd: default hub control req: 2307 v0008 i0002 l4096 [ 472.413964][T21537] batadv_slave_1: entered promiscuous mode [ 472.427216][T21537] batadv_slave_1: entered allmulticast mode [ 472.433380][T21537] xfrm0: entered promiscuous mode [ 472.438444][T21537] xfrm0: entered allmulticast mode [ 472.443643][T21537] veth0_to_hsr: entered promiscuous mode [ 472.449342][T21537] veth0_to_hsr: entered allmulticast mode [ 472.455250][T21537] hsr_slave_0: entered allmulticast mode [ 472.460962][T21537] veth1_to_hsr: entered promiscuous mode [ 472.466635][T21537] veth1_to_hsr: entered allmulticast mode [ 472.472481][T21537] hsr_slave_1: entered allmulticast mode [ 472.478197][T21537] hsr0: entered promiscuous mode [ 472.483218][T21537] hsr0: entered allmulticast mode [ 472.488420][T21537] veth1_virt_wifi: entered promiscuous mode [ 472.494370][T21537] veth1_virt_wifi: entered allmulticast mode [ 472.500432][T21537] veth0_virt_wifi: entered promiscuous mode [ 472.506501][T21537] veth0_virt_wifi: entered allmulticast mode [ 472.512662][T21537] veth1_vlan: entered allmulticast mode [ 472.518438][T21537] veth0_vlan: entered allmulticast mode [ 472.524134][T21537] vlan0: entered promiscuous mode [ 472.529316][T21537] vlan0: entered allmulticast mode [ 472.534582][T21537] vlan1: entered promiscuous mode [ 472.539714][T21537] vlan1: entered allmulticast mode [ 472.544927][T21537] macvlan0: entered promiscuous mode [ 472.550252][T21537] macvlan0: entered allmulticast mode [ 472.555752][T21537] macvlan1: entered promiscuous mode [ 472.561088][T21537] macvlan1: entered allmulticast mode [ 472.566554][T21537] ipvlan0: entered promiscuous mode [ 472.571821][T21537] ipvlan0: entered allmulticast mode [ 472.577264][T21537] ipvlan1: entered promiscuous mode [ 472.582548][T21537] ipvlan1: entered allmulticast mode [ 472.587941][T21537] veth1_macvtap: entered allmulticast mode [ 472.593864][T21537] veth0_macvtap: entered allmulticast mode [ 472.599903][T21537] macvtap0: entered promiscuous mode [ 472.605194][T21537] macvtap0: entered allmulticast mode [ 472.610714][T21537] macsec0: entered promiscuous mode [ 472.615984][T21537] macsec0: entered allmulticast mode [ 472.621492][T21537] geneve0: entered promiscuous mode [ 472.626733][T21537] geneve0: entered allmulticast mode [ 472.632062][T21537] geneve1: entered promiscuous mode [ 472.637315][T21537] geneve1: entered allmulticast mode [ 472.642829][T21537] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 472.650244][T21537] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 472.658211][T21537] netdevsim netdevsim9 netdevsim1: entered promiscuous mode [ 472.665620][T21537] netdevsim netdevsim9 netdevsim1: entered allmulticast mode [ 472.673756][T21537] netdevsim netdevsim9 netdevsim2: entered promiscuous mode [ 472.681128][T21537] netdevsim netdevsim9 netdevsim2: entered allmulticast mode [ 472.689319][T21537] netdevsim netdevsim9 netdevsim3: entered promiscuous mode [ 472.696788][T21537] netdevsim netdevsim9 netdevsim3: entered allmulticast mode [ 472.704289][T21537] pim6reg: entered promiscuous mode [ 472.786495][T20702] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.149460][T21623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6588'. [ 473.220736][T21625] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6588'. [ 473.525978][T21628] pim6reg: entered allmulticast mode [ 473.532359][T21628] pim6reg: left allmulticast mode [ 473.575928][T21633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6590'. [ 473.626963][T21634] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6590'. [ 473.775222][T21639] loop9: detected capacity change from 0 to 128 [ 473.927554][ T7595] bio_check_eod: 214 callbacks suppressed [ 473.927570][ T7595] kworker/u8:10: attempt to access beyond end of device [ 473.927570][ T7595] loop9: rw=1, sector=153, nr_sectors = 8 limit=128 [ 473.932693][T21643] loop1: detected capacity change from 0 to 1024 [ 473.947088][ T7595] kworker/u8:10: attempt to access beyond end of device [ 473.947088][ T7595] loop9: rw=1, sector=169, nr_sectors = 8 limit=128 [ 473.956850][T21643] EXT4-fs: Ignoring removed nobh option [ 473.972427][T21643] EXT4-fs: Ignoring removed bh option [ 473.981079][ T7595] kworker/u8:10: attempt to access beyond end of device [ 473.981079][ T7595] loop9: rw=1, sector=185, nr_sectors = 8 limit=128 [ 473.994765][ T7595] kworker/u8:10: attempt to access beyond end of device [ 473.994765][ T7595] loop9: rw=1, sector=201, nr_sectors = 8 limit=128 [ 474.008983][ T7595] kworker/u8:10: attempt to access beyond end of device [ 474.008983][ T7595] loop9: rw=1, sector=217, nr_sectors = 8 limit=128 [ 474.023941][T21647] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 474.024100][T21650] loop8: detected capacity change from 0 to 764 [ 474.031368][T21647] vhci_hcd: default hub control req: 2307 v0008 i0002 l4096 [ 474.045645][T21643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.063071][ T7595] kworker/u8:10: attempt to access beyond end of device [ 474.063071][ T7595] loop9: rw=1, sector=233, nr_sectors = 8 limit=128 [ 474.079860][T21650] rock: directory entry would overflow storage [ 474.080832][ T7595] kworker/u8:10: attempt to access beyond end of device [ 474.080832][ T7595] loop9: rw=1, sector=249, nr_sectors = 8 limit=128 [ 474.086067][T21650] rock: sig=0x4f50, size=4, remaining=3 [ 474.086084][T21650] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 474.108099][T21643] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.6593: Allocating blocks 385-513 which overlap fs metadata [ 474.117785][ T7595] kworker/u8:10: attempt to access beyond end of device [ 474.117785][ T7595] loop9: rw=1, sector=265, nr_sectors = 8 limit=128 [ 474.140111][ T7595] kworker/u8:10: attempt to access beyond end of device [ 474.140111][ T7595] loop9: rw=1, sector=281, nr_sectors = 8 limit=128 [ 474.153757][ T7595] kworker/u8:10: attempt to access beyond end of device [ 474.153757][ T7595] loop9: rw=1, sector=297, nr_sectors = 8 limit=128 [ 474.177776][T21642] EXT4-fs (loop1): pa ffff888106564f50: logic 16, phys. 129, len 24 [ 474.185811][T21642] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 474.222266][T20868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.312607][T21663] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 474.317262][T21671] pim6reg: entered allmulticast mode [ 474.329857][T21663] vhci_hcd: default hub control req: 2307 v0008 i0002 l4096 [ 474.357019][T21679] loop9: detected capacity change from 0 to 128 [ 474.363579][T21671] pim6reg: left allmulticast mode [ 474.398186][T21681] pim6reg: entered allmulticast mode [ 474.405368][T21681] pim6reg: left allmulticast mode [ 474.518860][T21694] random: crng reseeded on system resumption [ 474.524405][T21695] loop9: detected capacity change from 0 to 1024 [ 474.559990][T21695] EXT4-fs: Ignoring removed nobh option [ 474.565629][T21695] EXT4-fs: Ignoring removed bh option [ 474.595981][T21697] loop8: detected capacity change from 0 to 764 [ 474.622553][T21695] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.641100][T21695] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.6613: Allocating blocks 385-513 which overlap fs metadata [ 474.644225][T21697] rock: directory entry would overflow storage [ 474.661254][T21697] rock: sig=0x4f50, size=4, remaining=3 [ 474.666833][T21697] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 474.688214][T21693] EXT4-fs (loop9): pa ffff888106530620: logic 16, phys. 129, len 24 [ 474.696337][T21693] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 474.741982][T20702] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.770463][T21713] pim6reg: entered allmulticast mode [ 474.779990][T21715] pim6reg: entered allmulticast mode [ 474.787430][T21715] pim6reg: left allmulticast mode [ 474.813494][T21713] pim6reg: left allmulticast mode [ 474.829017][T21722] random: crng reseeded on system resumption [ 475.053889][T21750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6639'. [ 475.158300][T21755] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6639'. [ 475.197772][T21740] loop1: detected capacity change from 0 to 1024 [ 475.331445][T21740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.360455][T21740] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.382879][T21769] random: crng reseeded on system resumption [ 475.398899][T21740] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6633: bg 0: block 393: padding at end of block bitmap is not set [ 475.482074][T21740] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 475.494794][T21740] EXT4-fs (loop1): This should not happen!! Data will be lost [ 475.494794][T21740] [ 475.640155][T21774] xfrm0 speed is unknown, defaulting to 1000 [ 475.747374][T21774] chnl_net:caif_netlink_parms(): no params data found [ 475.923905][T21774] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.931308][T21774] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.951748][T21774] bridge_slave_0: entered allmulticast mode [ 475.958494][T21774] bridge_slave_0: entered promiscuous mode [ 475.963001][T20868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.965981][T21774] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.980717][T21774] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.988138][T21774] bridge_slave_1: entered allmulticast mode [ 475.994674][T21774] bridge_slave_1: entered promiscuous mode [ 476.027254][T21813] random: crng reseeded on system resumption [ 476.049139][T21774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.071024][T21774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.122239][T21774] team0: Port device team_slave_0 added [ 476.129213][T21774] team0: Port device team_slave_1 added [ 476.168072][T21774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.175054][T21774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.201105][T21774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.233691][T21774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.240734][T21774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.266799][T21774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.304633][T21774] hsr_slave_0: entered promiscuous mode [ 476.315705][T21774] hsr_slave_1: entered promiscuous mode [ 476.322020][T21774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.335814][T21774] Cannot create hsr debugfs directory [ 476.496100][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 476.496116][ T29] audit: type=1326 audit(1744571904.898:19407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21833 comm="syz.0.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a206d169 code=0x7ffc0000 [ 476.538421][ T29] audit: type=1326 audit(1744571904.940:19408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21833 comm="syz.0.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f89a206d169 code=0x7ffc0000 [ 476.562199][ T29] audit: type=1326 audit(1744571904.940:19409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21833 comm="syz.0.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a206d169 code=0x7ffc0000 [ 476.719307][T21774] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 476.728489][T21774] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 476.754108][T21774] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 476.772993][T21774] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 476.804440][T21850] loop9: detected capacity change from 0 to 1024 [ 476.849093][T21850] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.860526][T21774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.873874][T21774] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.894015][T21774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 476.904529][T21774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 476.920648][T21850] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.925770][ T4905] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.938196][ T4905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.939188][T21850] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.957141][ T4905] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.964330][ T4905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.035317][T21774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.062869][ T29] audit: type=1326 audit(1744571905.486:19410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.9.6679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4505dd169 code=0x7ffc0000 [ 477.086695][ T29] audit: type=1326 audit(1744571905.486:19411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.9.6679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fa4505dd169 code=0x7ffc0000 [ 477.110412][ T29] audit: type=1326 audit(1744571905.486:19412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.9.6679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4505dd169 code=0x7ffc0000 [ 477.173329][T21774] veth0_vlan: entered promiscuous mode [ 477.194066][T21774] veth1_vlan: entered promiscuous mode [ 477.222819][T21774] veth0_macvtap: entered promiscuous mode [ 477.234727][T21774] veth1_macvtap: entered promiscuous mode [ 477.255329][T21860] loop8: detected capacity change from 0 to 1024 [ 477.255563][T21774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.275961][T21774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.281553][T21860] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.285188][T21774] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.304221][T21774] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.308437][T21860] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.312933][T21774] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.332101][T21774] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.333315][T21860] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6678: bg 0: block 393: padding at end of block bitmap is not set [ 477.359734][T21860] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 477.372500][T21860] EXT4-fs (loop8): This should not happen!! Data will be lost [ 477.372500][T21860] [ 477.497124][T20513] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.528768][T21894] loop5: detected capacity change from 0 to 1024 [ 477.573238][T21894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.596706][T21894] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.660395][T21906] lo: entered promiscuous mode [ 477.665400][T21906] lo: entered allmulticast mode [ 477.671501][T21906] tunl0: entered promiscuous mode [ 477.676713][T21906] tunl0: entered allmulticast mode [ 477.701819][T21906] gre0: entered promiscuous mode [ 477.706883][T21906] gre0: entered allmulticast mode [ 477.731683][T21906] gretap0: entered promiscuous mode [ 477.734565][T21006] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:11: bg 0: block 393: padding at end of block bitmap is not set [ 477.736919][T21906] gretap0: entered allmulticast mode [ 477.756968][T21006] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 477.769605][T21006] EXT4-fs (loop5): This should not happen!! Data will be lost [ 477.769605][T21006] [ 477.779514][T21906] erspan0: entered promiscuous mode [ 477.784754][T21774] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.793820][T21906] erspan0: entered allmulticast mode [ 477.801399][T21906] ip_vti0: entered promiscuous mode [ 477.806763][T21906] ip_vti0: entered allmulticast mode [ 477.813699][T21906] ip6_vti0: entered promiscuous mode [ 477.819166][T21906] ip6_vti0: entered allmulticast mode [ 477.826382][T21906] sit0: entered promiscuous mode [ 477.831433][T21906] sit0: entered allmulticast mode [ 477.839253][T21906] ip6tnl0: entered promiscuous mode [ 477.844871][T21906] ip6tnl0: entered allmulticast mode [ 477.851620][T21906] ip6gre0: entered promiscuous mode [ 477.856887][T21906] ip6gre0: entered allmulticast mode [ 477.864687][T21906] syz_tun: entered promiscuous mode [ 477.869931][T21906] syz_tun: entered allmulticast mode [ 477.876903][T21906] ip6gretap0: entered promiscuous mode [ 477.882410][T21906] ip6gretap0: entered allmulticast mode [ 477.889173][T21906] bridge0: entered promiscuous mode [ 477.894471][T21906] bridge0: entered allmulticast mode [ 477.903512][T21906] vcan0: entered promiscuous mode [ 477.908668][T21906] vcan0: entered allmulticast mode [ 477.915198][T21906] bond0: entered promiscuous mode [ 477.920292][T21906] bond_slave_0: entered promiscuous mode [ 477.926062][T21906] bond_slave_1: entered promiscuous mode [ 477.931808][T21906] bond0: entered allmulticast mode [ 477.936978][T21906] bond_slave_0: entered allmulticast mode [ 477.942751][T21906] bond_slave_1: entered allmulticast mode [ 477.950331][T21906] team0: entered promiscuous mode [ 477.955411][T21906] team_slave_0: entered promiscuous mode [ 477.961172][T21906] team_slave_1: entered promiscuous mode [ 477.966884][T21906] team0: entered allmulticast mode [ 477.972063][T21906] team_slave_0: entered allmulticast mode [ 477.977875][T21906] team_slave_1: entered allmulticast mode [ 478.023892][T21906] dummy0: entered promiscuous mode [ 478.029215][T21906] dummy0: entered allmulticast mode [ 478.036009][T21910] loop5: detected capacity change from 0 to 1024 [ 478.078865][T21906] nlmon0: entered promiscuous mode [ 478.084311][T21906] nlmon0: entered allmulticast mode [ 478.097194][T21906] caif0: entered promiscuous mode [ 478.102412][T21906] caif0: entered allmulticast mode [ 478.107667][T21906] batadv0: entered promiscuous mode [ 478.112947][T21906] batadv0: entered allmulticast mode [ 478.118319][T21906] vxcan0: entered promiscuous mode [ 478.123538][T21906] vxcan0: entered allmulticast mode [ 478.128797][T21906] vxcan1: entered promiscuous mode [ 478.134021][T21906] vxcan1: entered allmulticast mode [ 478.139368][T21906] veth0: entered promiscuous mode [ 478.144405][T21906] veth0: entered allmulticast mode [ 478.149686][T21906] veth1: entered promiscuous mode [ 478.154721][T21906] veth1: entered allmulticast mode [ 478.159950][T21906] wg0: entered promiscuous mode [ 478.164949][T21906] wg0: entered allmulticast mode [ 478.170001][T21906] wg1: entered promiscuous mode [ 478.174869][T21906] wg1: entered allmulticast mode [ 478.179943][T21906] wg2: entered promiscuous mode [ 478.184832][T21906] wg2: entered allmulticast mode [ 478.189978][T21906] veth0_to_bridge: entered promiscuous mode [ 478.195891][T21906] veth0_to_bridge: entered allmulticast mode [ 478.202113][T21906] veth1_to_bridge: entered promiscuous mode [ 478.208086][T21906] veth1_to_bridge: entered allmulticast mode [ 478.214403][T21906] veth0_to_bond: entered promiscuous mode [ 478.220170][T21906] veth0_to_bond: entered allmulticast mode [ 478.226274][T21906] veth1_to_bond: entered promiscuous mode [ 478.232017][T21906] veth1_to_bond: entered allmulticast mode [ 478.238044][T21906] veth0_to_team: entered promiscuous mode [ 478.243784][T21906] veth0_to_team: entered allmulticast mode [ 478.249757][T21906] veth1_to_team: entered promiscuous mode [ 478.255662][T21906] veth1_to_team: entered allmulticast mode [ 478.261669][T21906] veth0_to_batadv: entered promiscuous mode [ 478.267604][T21906] veth0_to_batadv: entered allmulticast mode [ 478.273968][T21906] batadv_slave_0: entered promiscuous mode [ 478.279796][T21906] batadv_slave_0: entered allmulticast mode [ 478.285871][T21906] veth1_to_batadv: entered promiscuous mode [ 478.291898][T21906] veth1_to_batadv: entered allmulticast mode [ 478.297956][T21906] batadv_slave_1: entered promiscuous mode [ 478.303832][T21906] batadv_slave_1: entered allmulticast mode [ 478.309846][T21906] xfrm0: entered promiscuous mode [ 478.314915][T21906] xfrm0: entered allmulticast mode [ 478.320162][T21906] veth0_to_hsr: entered promiscuous mode [ 478.325871][T21906] veth0_to_hsr: entered allmulticast mode [ 478.331831][T21906] hsr_slave_0: entered allmulticast mode [ 478.337733][T21906] veth1_to_hsr: entered promiscuous mode [ 478.343415][T21906] veth1_to_hsr: entered allmulticast mode [ 478.349290][T21906] hsr_slave_1: entered allmulticast mode [ 478.355203][T21906] hsr0: entered promiscuous mode [ 478.360264][T21906] hsr0: entered allmulticast mode [ 478.363375][T21910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.365454][T21906] veth1_virt_wifi: entered promiscuous mode [ 478.381734][T21910] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.383361][T21906] veth1_virt_wifi: entered allmulticast mode [ 478.395125][T21910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.399628][T21906] veth0_virt_wifi: entered promiscuous mode [ 478.410172][T21926] random: crng reseeded on system resumption [ 478.414416][T21906] veth0_virt_wifi: entered allmulticast mode [ 478.414510][T21906] veth1_vlan: entered allmulticast mode [ 478.432128][T21906] veth0_vlan: entered allmulticast mode [ 478.437789][T21906] vlan0: entered promiscuous mode [ 478.443030][T21906] vlan0: entered allmulticast mode [ 478.448276][T21906] vlan1: entered promiscuous mode [ 478.453436][T21906] vlan1: entered allmulticast mode [ 478.458829][T21906] macvlan0: entered promiscuous mode [ 478.464234][T21906] macvlan0: entered allmulticast mode [ 478.469718][T21906] macvlan1: entered promiscuous mode [ 478.475032][T21906] macvlan1: entered allmulticast mode [ 478.480480][T21906] ipvlan0: entered promiscuous mode [ 478.485711][T21906] ipvlan0: entered allmulticast mode [ 478.491109][T21906] ipvlan1: entered promiscuous mode [ 478.496442][T21906] ipvlan1: entered allmulticast mode [ 478.501922][T21906] veth1_macvtap: entered allmulticast mode [ 478.507888][T21906] veth0_macvtap: entered allmulticast mode [ 478.513855][T21906] macvtap0: entered promiscuous mode [ 478.519167][T21906] macvtap0: entered allmulticast mode [ 478.524725][T21906] macsec0: entered promiscuous mode [ 478.529978][T21906] macsec0: entered allmulticast mode [ 478.535393][T21906] geneve0: entered promiscuous mode [ 478.540629][T21906] geneve0: entered allmulticast mode [ 478.546085][T21906] geneve1: entered promiscuous mode [ 478.551386][T21906] geneve1: entered allmulticast mode [ 478.557409][T21906] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 478.564798][T21906] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 478.575561][T21906] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 478.582992][T21906] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 478.590684][T21906] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 478.598167][T21906] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 478.605636][T21906] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 478.613021][T21906] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 478.620586][T21906] veth2: entered promiscuous mode [ 478.625655][T21906] veth2: entered allmulticast mode [ 478.630885][T21906] veth3: entered promiscuous mode [ 478.635952][T21906] veth3: entered allmulticast mode [ 478.641142][T21906] veth4: entered promiscuous mode [ 478.646279][T21906] veth4: entered allmulticast mode [ 478.651606][T21906] veth5: entered promiscuous mode [ 478.656766][T21906] veth5: entered allmulticast mode [ 478.662012][T21906] ÿÿÿ: entered promiscuous mode [ 478.667011][T21906] ÿÿÿ: entered allmulticast mode [ 478.672179][T21906] veth6: entered promiscuous mode [ 478.677234][T21906] veth6: entered allmulticast mode [ 478.682661][T21906] veth7: entered promiscuous mode [ 478.687727][T21906] veth7: entered allmulticast mode [ 478.693009][T21906] veth8: entered promiscuous mode [ 478.698056][T21906] veth8: entered allmulticast mode [ 478.703273][T21906] veth9: entered promiscuous mode [ 478.708318][T21906] veth9: entered allmulticast mode [ 478.713523][T21906] veth10: entered promiscuous mode [ 478.718654][T21906] veth10: entered allmulticast mode [ 478.724037][T21906] veth11: entered promiscuous mode [ 478.729222][T21906] veth11: entered allmulticast mode [ 478.803635][T21936] netlink: 'syz.1.6698': attribute type 27 has an invalid length. [ 478.811656][T21936] lo: left promiscuous mode [ 478.816214][T21936] lo: left allmulticast mode [ 478.820906][T21936] tunl0: left promiscuous mode [ 478.820923][T21935] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 478.825740][T21936] tunl0: left allmulticast mode [ 478.838107][T21936] gre0: left promiscuous mode [ 478.842809][T21936] gre0: left allmulticast mode [ 478.848068][T21936] gretap0: left promiscuous mode [ 478.848903][T21935] vhci_hcd: default hub control req: 2307 v0008 i0002 l4096 [ 478.853186][T21936] gretap0: left allmulticast mode [ 478.865714][T21936] erspan0: left promiscuous mode [ 478.870668][T21936] erspan0: left allmulticast mode [ 478.875795][T21936] ip_vti0: left promiscuous mode [ 478.880744][T21936] ip_vti0: left allmulticast mode [ 478.885950][T21936] ip6_vti0: left promiscuous mode [ 478.890994][T21936] ip6_vti0: left allmulticast mode [ 478.896234][T21936] sit0: left promiscuous mode [ 478.900960][T21936] sit0: left allmulticast mode [ 478.905889][T21936] ip6tnl0: left promiscuous mode [ 478.910868][T21936] ip6tnl0: left allmulticast mode [ 478.915966][T21936] ip6gre0: left promiscuous mode [ 478.920987][T21936] ip6gre0: left allmulticast mode [ 478.926153][T21936] syz_tun: left promiscuous mode [ 478.931123][T21936] syz_tun: left allmulticast mode [ 478.936334][T21936] ip6gretap0: left promiscuous mode [ 478.941580][T21936] ip6gretap0: left allmulticast mode [ 478.947011][T21936] bridge0: left promiscuous mode [ 478.952011][T21936] bridge0: left allmulticast mode [ 478.957207][T21936] vcan0: left promiscuous mode [ 478.962024][T21936] vcan0: left allmulticast mode [ 478.967035][T21936] bond0: left promiscuous mode [ 478.972101][T21936] bond0: left allmulticast mode [ 478.977210][T21936] team0: left promiscuous mode [ 478.982261][T21936] team0: left allmulticast mode [ 478.996678][T21936] dummy0: left promiscuous mode [ 479.001609][T21936] dummy0: left allmulticast mode [ 479.006709][T21936] nlmon0: left promiscuous mode [ 479.011589][T21936] nlmon0: left allmulticast mode [ 479.016634][T21936] caif0: left promiscuous mode [ 479.021454][T21936] caif0: left allmulticast mode [ 479.026411][T21936] batadv0: left promiscuous mode [ 479.031415][T21936] batadv0: left allmulticast mode [ 479.036588][T21936] vxcan0: left promiscuous mode [ 479.041541][T21936] vxcan0: left allmulticast mode [ 479.046723][T21936] vxcan1: left promiscuous mode [ 479.051590][T21936] vxcan1: left allmulticast mode [ 479.056656][T21936] veth0: left promiscuous mode [ 479.061442][T21936] veth0: left allmulticast mode [ 479.066435][T21936] veth1: left promiscuous mode [ 479.071253][T21936] veth1: left allmulticast mode [ 479.076228][T21936] wg0: left promiscuous mode [ 479.080946][T21936] wg0: left allmulticast mode [ 479.085796][T21936] wg1: left promiscuous mode [ 479.090398][T21936] wg1: left allmulticast mode [ 479.095232][T21936] wg2: left promiscuous mode [ 479.099848][T21936] wg2: left allmulticast mode [ 479.104673][T21936] veth0_to_bridge: left promiscuous mode [ 479.110322][T21936] veth0_to_bridge: left allmulticast mode [ 479.116237][T21936] veth1_to_bridge: left promiscuous mode [ 479.121916][T21936] veth1_to_bridge: left allmulticast mode [ 479.127782][T21936] veth0_to_bond: left promiscuous mode [ 479.133359][T21936] veth0_to_bond: left allmulticast mode [ 479.138978][T21936] bond_slave_0: left promiscuous mode [ 479.142282][T21954] loop5: detected capacity change from 0 to 1024 [ 479.144377][T21936] bond_slave_0: left allmulticast mode [ 479.156275][T21936] veth1_to_bond: left promiscuous mode [ 479.161784][T21936] veth1_to_bond: left allmulticast mode [ 479.165729][T21954] EXT4-fs: Ignoring removed nobh option [ 479.167380][T21936] bond_slave_1: left promiscuous mode [ 479.172982][T21954] EXT4-fs: Ignoring removed bh option [ 479.178318][T21936] bond_slave_1: left allmulticast mode [ 479.189399][T21936] veth0_to_team: left promiscuous mode [ 479.194873][T21936] veth0_to_team: left allmulticast mode [ 479.200502][T21936] team_slave_0: left promiscuous mode [ 479.205950][T21936] team_slave_0: left allmulticast mode [ 479.211522][T21936] veth1_to_team: left promiscuous mode [ 479.217024][T21936] veth1_to_team: left allmulticast mode [ 479.222668][T21936] team_slave_1: left promiscuous mode [ 479.228160][T21936] team_slave_1: left allmulticast mode [ 479.233713][T21936] veth0_to_batadv: left promiscuous mode [ 479.239378][T21936] veth0_to_batadv: left allmulticast mode [ 479.245208][T21936] batadv_slave_0: left promiscuous mode [ 479.250760][T21936] batadv_slave_0: left allmulticast mode [ 479.256467][T21936] veth1_to_batadv: left promiscuous mode [ 479.262179][T21936] veth1_to_batadv: left allmulticast mode [ 479.268026][T21936] batadv_slave_1: left promiscuous mode [ 479.273638][T21936] batadv_slave_1: left allmulticast mode [ 479.278037][T21954] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.279368][T21936] xfrm0: left promiscuous mode [ 479.279384][T21936] xfrm0: left allmulticast mode [ 479.301096][T21936] veth0_to_hsr: left promiscuous mode [ 479.306605][T21936] veth0_to_hsr: left allmulticast mode [ 479.312219][T21936] veth1_to_hsr: left promiscuous mode [ 479.317607][T21936] veth1_to_hsr: left allmulticast mode [ 479.323194][T21936] hsr0: left promiscuous mode [ 479.327954][T21936] hsr0: left allmulticast mode [ 479.332788][T21936] hsr_slave_0: left allmulticast mode [ 479.338245][T21936] hsr_slave_1: left allmulticast mode [ 479.343840][T21936] veth1_virt_wifi: left promiscuous mode [ 479.349544][T21936] veth1_virt_wifi: left allmulticast mode [ 479.355401][T21936] veth0_virt_wifi: left promiscuous mode [ 479.361082][T21936] veth0_virt_wifi: left allmulticast mode [ 479.366925][T21936] veth1_vlan: left allmulticast mode [ 479.372399][T21936] vlan0: left promiscuous mode [ 479.377208][T21936] vlan0: left allmulticast mode [ 479.382220][T21936] vlan1: left promiscuous mode [ 479.387105][T21936] vlan1: left allmulticast mode [ 479.392131][T21936] macvlan0: left promiscuous mode [ 479.397186][T21936] macvlan0: left allmulticast mode [ 479.402369][T21936] macvlan1: left promiscuous mode [ 479.407428][T21936] macvlan1: left allmulticast mode [ 479.412632][T21936] ipvlan0: left promiscuous mode [ 479.417614][T21936] ipvlan0: left allmulticast mode [ 479.422747][T21936] ipvlan1: left promiscuous mode [ 479.427724][T21936] ipvlan1: left allmulticast mode [ 479.432797][T21936] veth0_vlan: left allmulticast mode [ 479.437281][T21954] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.6706: Allocating blocks 385-513 which overlap fs metadata [ 479.438173][T21936] veth1_macvtap: left allmulticast mode [ 479.457626][T21936] veth0_macvtap: left allmulticast mode [ 479.463342][T21936] macvtap0: left promiscuous mode [ 479.468385][T21936] macvtap0: left allmulticast mode [ 479.471635][T21953] EXT4-fs (loop5): pa ffff888106530460: logic 16, phys. 129, len 24 [ 479.473678][T21936] macsec0: left promiscuous mode [ 479.481575][T21953] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, [ 479.486466][T21936] macsec0: left allmulticast mode [ 479.486530][T21936] geneve0: left promiscuous mode [ 479.495033][T21953] free 0, pa_free 8 [ 479.500126][T21936] geneve0: left allmulticast mode [ 479.514012][T21936] geneve1: left promiscuous mode [ 479.519013][T21936] geneve1: left allmulticast mode [ 479.525208][T21936] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 479.532409][T21936] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 479.545307][T21936] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 479.552582][T21936] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 479.565741][T21936] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 479.573191][T21936] netdevsim netdevsim1 netdevsim2: left allmulticast mode [ 479.587510][T21774] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.587534][T21936] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 479.603703][T21936] netdevsim netdevsim1 netdevsim3: left allmulticast mode [ 479.610988][T21936] ÿÿÿ: left promiscuous mode [ 479.615752][T21936] ÿÿÿ: left allmulticast mode [ 479.697914][T21967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6711'. [ 479.748189][T21970] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6711'. [ 479.987536][T21984] loop5: detected capacity change from 0 to 1024 [ 480.011335][T21987] loop9: detected capacity change from 0 to 1024 [ 480.030941][T21987] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.044338][T21987] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.048536][T21984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.056203][T21987] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.093500][T21984] lo: entered promiscuous mode [ 480.098345][T21984] lo: entered allmulticast mode [ 480.112039][T21984] tunl0: entered promiscuous mode [ 480.117229][T21984] tunl0: entered allmulticast mode [ 480.146071][T21978] loop8: detected capacity change from 0 to 1024 [ 480.152955][T21984] gre0: entered promiscuous mode [ 480.157953][T21984] gre0: entered allmulticast mode [ 480.200580][T21978] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.239729][T21984] gretap0: entered promiscuous mode [ 480.245023][T21984] gretap0: entered allmulticast mode [ 480.249182][T21978] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.273127][T21984] erspan0: entered promiscuous mode [ 480.278395][T21984] erspan0: entered allmulticast mode [ 480.310064][T21984] ip_vti0: entered promiscuous mode [ 480.315489][T21984] ip_vti0: entered allmulticast mode [ 480.358612][T21984] ip6_vti0: entered promiscuous mode [ 480.364211][T21984] ip6_vti0: entered allmulticast mode [ 480.371900][T21984] sit0: entered promiscuous mode [ 480.376869][T21984] sit0: entered allmulticast mode [ 480.384896][T21984] ip6tnl0: entered promiscuous mode [ 480.390225][T21984] ip6tnl0: entered allmulticast mode [ 480.397409][T21984] ip6gre0: entered promiscuous mode [ 480.402674][T21984] ip6gre0: entered allmulticast mode [ 480.477153][T21984] syz_tun: entered promiscuous mode [ 480.482522][T21984] syz_tun: entered allmulticast mode [ 480.506140][T21984] ip6gretap0: entered promiscuous mode [ 480.512288][T21984] ip6gretap0: entered allmulticast mode [ 480.518688][T20513] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.590834][T21984] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.598507][T21984] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.707221][T21984] bridge0: entered promiscuous mode [ 480.712587][T21984] bridge0: entered allmulticast mode [ 480.794670][T21984] vcan0: entered promiscuous mode [ 480.799933][T21984] vcan0: entered allmulticast mode [ 480.845502][T21984] bond0: entered promiscuous mode [ 480.850665][T21984] bond_slave_0: entered promiscuous mode [ 480.856453][T21984] bond_slave_1: entered promiscuous mode [ 480.862279][T21984] bond0: entered allmulticast mode [ 480.867580][T21984] bond_slave_0: entered allmulticast mode [ 480.873379][T21984] bond_slave_1: entered allmulticast mode [ 481.141900][T22011] loop1: detected capacity change from 0 to 1024 [ 481.222146][T21984] team0: entered promiscuous mode [ 481.227339][T21984] team_slave_0: entered promiscuous mode [ 481.233083][T21984] team_slave_1: entered promiscuous mode [ 481.238821][T21984] team0: entered allmulticast mode [ 481.243941][T21984] team_slave_0: entered allmulticast mode [ 481.249700][T21984] team_slave_1: entered allmulticast mode [ 481.521305][T21984] dummy0: entered promiscuous mode [ 481.526490][T21984] dummy0: entered allmulticast mode [ 481.567548][T21984] nlmon0: entered promiscuous mode [ 481.572762][T21984] nlmon0: entered allmulticast mode [ 481.616853][T21984] caif0: entered promiscuous mode [ 481.621924][T21984] caif0: entered allmulticast mode [ 481.663512][T21984] batadv0: entered promiscuous mode [ 481.668793][T21984] batadv0: entered allmulticast mode [ 481.702642][T21984] vxcan0: entered promiscuous mode [ 481.707821][T21984] vxcan0: entered allmulticast mode [ 481.755702][T21984] vxcan1: entered promiscuous mode [ 481.760942][T21984] vxcan1: entered allmulticast mode [ 481.797410][T21984] veth0: entered promiscuous mode [ 481.802549][T21984] veth0: entered allmulticast mode [ 481.846348][T21984] veth1: entered promiscuous mode [ 481.851553][T21984] veth1: entered allmulticast mode [ 481.877521][T22011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.911319][T22011] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.937457][T22011] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6727: bg 0: block 393: padding at end of block bitmap is not set [ 481.991451][T22011] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 482.006301][T21984] wg0: entered promiscuous mode [ 482.011285][T21984] wg0: entered allmulticast mode [ 482.054285][T21984] wg1: entered promiscuous mode [ 482.059200][T21984] wg1: entered allmulticast mode [ 482.073477][T21984] wg2: entered promiscuous mode [ 482.078390][T21984] wg2: entered allmulticast mode [ 482.102836][T21984] veth0_to_bridge: entered promiscuous mode [ 482.108799][T21984] veth0_to_bridge: entered allmulticast mode [ 482.158415][T21984] veth1_to_bridge: entered promiscuous mode [ 482.164563][T21984] veth1_to_bridge: entered allmulticast mode [ 482.188239][T20868] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.223207][T21984] veth0_to_bond: entered promiscuous mode [ 482.229067][T21984] veth0_to_bond: entered allmulticast mode [ 482.279958][T21984] veth1_to_bond: entered promiscuous mode [ 482.285972][T21984] veth1_to_bond: entered allmulticast mode [ 482.328282][T21984] veth0_to_team: entered promiscuous mode [ 482.334075][T21984] veth0_to_team: entered allmulticast mode [ 482.387399][T21984] veth1_to_team: entered promiscuous mode [ 482.393190][T21984] veth1_to_team: entered allmulticast mode [ 482.444841][T21984] veth0_to_batadv: entered promiscuous mode [ 482.450862][T21984] veth0_to_batadv: entered allmulticast mode [ 482.489879][T21984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.507589][T21984] batadv_slave_0: entered promiscuous mode [ 482.513482][T21984] batadv_slave_0: entered allmulticast mode [ 482.541683][T21984] veth1_to_batadv: entered promiscuous mode [ 482.547690][T21984] veth1_to_batadv: entered allmulticast mode [ 482.569970][T21984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.577500][T21984] batadv_slave_1: entered promiscuous mode [ 482.583410][T21984] batadv_slave_1: entered allmulticast mode [ 482.619065][T21984] xfrm0: entered promiscuous mode [ 482.624188][T21984] xfrm0: entered allmulticast mode [ 482.661163][T21984] veth0_to_hsr: entered promiscuous mode [ 482.667028][T21984] veth0_to_hsr: entered allmulticast mode [ 482.693500][T21984] hsr_slave_0: entered allmulticast mode [ 482.700104][T21984] veth1_to_hsr: entered promiscuous mode [ 482.705842][T21984] veth1_to_hsr: entered allmulticast mode [ 482.754185][T22039] rdma_op ffff88810c31c980 conn xmit_rdma 0000000000000000 [ 482.773335][T21984] hsr_slave_1: entered allmulticast mode [ 482.793903][T21984] hsr0: entered promiscuous mode [ 482.798946][T21984] hsr0: entered allmulticast mode [ 482.838029][T21984] veth1_virt_wifi: entered promiscuous mode [ 482.843964][T21984] veth1_virt_wifi: entered allmulticast mode [ 482.883481][T21984] veth0_virt_wifi: entered promiscuous mode [ 482.889452][T21984] veth0_virt_wifi: entered allmulticast mode [ 482.907846][T21984] veth1_vlan: entered allmulticast mode [ 482.921710][T21984] veth0_vlan: entered allmulticast mode [ 482.941540][T21984] vlan0: entered promiscuous mode [ 482.946989][T21984] vlan0: entered allmulticast mode [ 482.952286][T21984] vlan1: entered promiscuous mode [ 482.957403][T21984] vlan1: entered allmulticast mode [ 482.969330][T21984] macvlan0: entered promiscuous mode [ 482.974717][T21984] macvlan0: entered allmulticast mode [ 482.990658][T21984] macvlan1: entered promiscuous mode [ 482.996033][T21984] macvlan1: entered allmulticast mode [ 483.063514][T21984] ipvlan0: entered promiscuous mode [ 483.068798][T21984] ipvlan0: entered allmulticast mode [ 483.074337][T21984] ipvlan1: entered promiscuous mode [ 483.079561][T21984] ipvlan1: entered allmulticast mode [ 483.117631][T21984] veth1_macvtap: entered allmulticast mode [ 483.152575][T21984] veth0_macvtap: entered allmulticast mode [ 483.179015][T21984] macvtap0: entered promiscuous mode [ 483.184359][T21984] macvtap0: entered allmulticast mode [ 483.192061][T21984] macsec0: entered promiscuous mode [ 483.197322][T21984] macsec0: entered allmulticast mode [ 483.212468][T21984] geneve0: entered promiscuous mode [ 483.217959][T21984] geneve0: entered allmulticast mode [ 483.231024][T21984] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.239985][T21984] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.248989][T21984] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.258099][T21984] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.297018][T21984] geneve1: entered promiscuous mode [ 483.302356][T21984] geneve1: entered allmulticast mode [ 483.334351][T21984] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 483.341772][T21984] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 483.379362][T21984] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 483.386799][T21984] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 483.411071][T21984] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 483.418469][T21984] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 483.428616][T21984] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 483.436117][T21984] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 483.578052][T22048] loop9: detected capacity change from 0 to 1024 [ 483.607992][T22048] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.622802][T22048] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.633973][T22048] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.646254][T21774] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.704678][T22066] loop9: detected capacity change from 0 to 1024 [ 483.815787][T22066] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.833174][T22066] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.856148][T22066] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.704800][T22084] FAULT_INJECTION: forcing a failure. [ 484.704800][T22084] name failslab, interval 1, probability 0, space 0, times 0 [ 484.717605][T22084] CPU: 1 UID: 0 PID: 22084 Comm: syz.0.6752 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 484.717659][T22084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 484.717676][T22084] Call Trace: [ 484.717682][T22084] [ 484.717689][T22084] dump_stack_lvl+0xf6/0x150 [ 484.717751][T22084] dump_stack+0x15/0x1a [ 484.717771][T22084] should_fail_ex+0x261/0x270 [ 484.717863][T22084] should_failslab+0x8f/0xb0 [ 484.717902][T22084] __kmalloc_noprof+0xad/0x410 [ 484.717927][T22084] ? sock_kmalloc+0x83/0xc0 [ 484.717962][T22084] sock_kmalloc+0x83/0xc0 [ 484.718058][T22084] ____sys_sendmsg+0x12c/0x4e0 [ 484.718085][T22084] ? copy_msghdr_from_user+0x25d/0x2b0 [ 484.718177][T22084] __sys_sendmsg+0x1a0/0x240 [ 484.718226][T22084] __x64_sys_sendmsg+0x46/0x50 [ 484.718255][T22084] x64_sys_call+0x26f3/0x2e10 [ 484.718280][T22084] do_syscall_64+0xc9/0x1c0 [ 484.718354][T22084] ? clear_bhb_loop+0x25/0x80 [ 484.718374][T22084] ? clear_bhb_loop+0x25/0x80 [ 484.718399][T22084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.718468][T22084] RIP: 0033:0x7f89a206d169 [ 484.718482][T22084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.718523][T22084] RSP: 002b:00007f89a06cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.718545][T22084] RAX: ffffffffffffffda RBX: 00007f89a2285fa0 RCX: 00007f89a206d169 [ 484.718560][T22084] RDX: 0000000000000000 RSI: 0000200000001d00 RDI: 0000000000000006 [ 484.718575][T22084] RBP: 00007f89a06cf090 R08: 0000000000000000 R09: 0000000000000000 [ 484.718633][T22084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.718655][T22084] R13: 0000000000000000 R14: 00007f89a2285fa0 R15: 00007ffd8fc35068 [ 484.718677][T22084] [ 484.957270][T22087] loop9: detected capacity change from 0 to 1024 [ 485.007198][T22087] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.034162][ T29] audit: type=1400 audit(1744571913.864:19413): avc: denied { create } for pid=22092 comm="syz.0.6755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 485.069049][ T29] audit: type=1400 audit(1744571913.896:19414): avc: denied { write } for pid=22092 comm="syz.0.6755" path="socket:[75436]" dev="sockfs" ino=75436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 485.093595][ T29] audit: type=1400 audit(1744571913.896:19415): avc: denied { nlmsg_read } for pid=22092 comm="syz.0.6755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 485.944159][T20702] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.967149][T22124] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 487.003066][T22124] vhci_hcd: default hub control req: 2307 v0008 i0002 l4096 [ 487.024568][T22132] loop9: detected capacity change from 0 to 1024 [ 487.080466][T22138] mmap: syz.0.6773 (22138): VmData 167485440 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 487.109944][T22132] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.126896][T22132] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.139490][T22132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.151875][T22141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6774'. [ 487.163625][T22141] netlink: 'syz.0.6774': attribute type 21 has an invalid length. [ 487.180307][T22141] netlink: 'syz.0.6774': attribute type 1 has an invalid length. [ 487.188240][T22141] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6774'. [ 487.213513][T22134] loop5: detected capacity change from 0 to 1024 [ 487.220309][ T29] audit: type=1326 audit(1744571916.153:19416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22140 comm="syz.0.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a206d169 code=0x7ffc0000 [ 487.244049][ T29] audit: type=1326 audit(1744571916.153:19417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22140 comm="syz.0.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f89a206d169 code=0x7ffc0000 [ 487.267666][ T29] audit: type=1326 audit(1744571916.153:19418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22140 comm="syz.0.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a206d169 code=0x7ffc0000 [ 487.291353][ T29] audit: type=1326 audit(1744571916.153:19419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22140 comm="syz.0.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f89a206d169 code=0x7ffc0000 [ 487.303183][T22151] loop1: detected capacity change from 0 to 1024 [ 487.314974][ T29] audit: type=1326 audit(1744571916.153:19420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22140 comm="syz.0.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a206d169 code=0x7ffc0000 [ 487.344958][ T29] audit: type=1326 audit(1744571916.153:19421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22140 comm="syz.0.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f89a206d169 code=0x7ffc0000 [ 487.368649][ T29] audit: type=1326 audit(1744571916.153:19422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22140 comm="syz.0.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f89a206d1a3 code=0x7ffc0000 [ 487.392880][T22151] EXT4-fs: Ignoring removed nobh option [ 487.398511][T22151] EXT4-fs: Ignoring removed bh option [ 487.409663][T22134] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.422759][T22134] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.459888][T22151] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.6778: Allocating blocks 385-513 which overlap fs metadata [ 487.480919][T22150] EXT4-fs (loop1): pa ffff888106564f50: logic 16, phys. 129, len 24 [ 487.489091][T22150] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 487.646200][T22168] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 487.653707][T22168] vhci_hcd: default hub control req: 2307 v0008 i0002 l4096 [ 487.718245][ T37] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 393: padding at end of block bitmap is not set [ 487.747658][T22172] loop1: detected capacity change from 0 to 1024 [ 487.754934][ T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 487.767738][ T37] EXT4-fs (loop5): This should not happen!! Data will be lost [ 487.767738][ T37] [ 487.820440][T22172] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.913583][T22183] loop9: detected capacity change from 0 to 1024 [ 487.961148][T22183] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.032595][T22195] loop5: detected capacity change from 0 to 1024 [ 488.074265][T22195] EXT4-fs: Ignoring removed nobh option [ 488.079919][T22195] EXT4-fs: Ignoring removed bh option [ 488.086994][T22197] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 488.094601][T22197] vhci_hcd: default hub control req: 2307 v0008 i0002 l4096 [ 488.135510][T22195] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.6793: Allocating blocks 385-513 which overlap fs metadata [ 488.146859][T22206] loop1: detected capacity change from 0 to 764 [ 488.160150][T22204] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6797'. [ 488.174743][T22206] rock: directory entry would overflow storage [ 488.179136][T22204] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 488.181019][T22206] rock: sig=0x4f50, size=4, remaining=3 [ 488.196126][T22206] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 488.203943][T22174] loop8: detected capacity change from 0 to 1024 [ 488.207370][T22194] EXT4-fs (loop5): pa ffff888106564ee0: logic 16, phys. 129, len 24 [ 488.218423][T22194] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 488.228835][T22204] loop9: detected capacity change from 0 to 2048 [ 488.253537][T22174] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.272339][T22215] loop5: detected capacity change from 0 to 764 [ 488.287954][T22174] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6787: bg 0: block 393: padding at end of block bitmap is not set [ 488.305153][T22204] Alternate GPT is invalid, using primary GPT. [ 488.311549][T22204] loop9: p2 p3 p7 [ 488.315652][T22174] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 488.328437][T22174] EXT4-fs (loop8): This should not happen!! Data will be lost [ 488.328437][T22174] [ 488.455291][T22221] loop9: detected capacity change from 0 to 764 [ 488.472658][T22221] rock: directory entry would overflow storage [ 488.478900][T22221] rock: sig=0x4f50, size=4, remaining=3 [ 488.484660][T22221] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 488.576151][T22245] loop1: detected capacity change from 0 to 764 [ 488.584620][T22245] rock: directory entry would overflow storage [ 488.590863][T22245] rock: sig=0x4f50, size=4, remaining=3 [ 488.591026][T22248] loop9: detected capacity change from 0 to 764 [ 488.596428][T22245] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 488.639477][T22252] loop9: detected capacity change from 0 to 1024 [ 488.667021][T22252] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.718853][T22256] netlink: 'syz.1.6814': attribute type 27 has an invalid length. [ 488.749144][T22256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.768118][T22256] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.803950][T22256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.945878][T22276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=22276 comm=syz.0.6822 [ 488.959089][T22276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=22276 comm=syz.0.6822 [ 488.979077][T22276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=22276 comm=syz.0.6822 [ 488.995533][T22276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=22276 comm=syz.0.6822 [ 489.025146][T22276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=22276 comm=syz.0.6822 [ 489.044296][T22276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=22276 comm=syz.0.6822 [ 489.061835][T22276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=22276 comm=syz.0.6822 [ 489.085051][T22281] loop5: detected capacity change from 0 to 764 [ 489.086150][T22276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=22276 comm=syz.0.6822 [ 489.107654][T22276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=22276 comm=syz.0.6822 [ 489.108670][T22281] rock: directory entry would overflow storage [ 489.121228][T22276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=22276 comm=syz.0.6822 [ 489.126702][T22281] rock: sig=0x4f50, size=4, remaining=3 [ 489.145104][T22281] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 489.264362][T22284] loop5: detected capacity change from 0 to 764 [ 489.329401][ T3379] hid-generic C990:0003:007F.0004: unknown main item tag 0x1 [ 489.336926][ T3379] hid-generic C990:0003:007F.0004: unknown main item tag 0x0 [ 489.344395][ T3379] hid-generic C990:0003:007F.0004: unknown main item tag 0x0 [ 489.351823][ T3379] hid-generic C990:0003:007F.0004: unknown main item tag 0x0 [ 489.359228][ T3379] hid-generic C990:0003:007F.0004: unknown main item tag 0x0 [ 489.366685][ T3379] hid-generic C990:0003:007F.0004: unknown main item tag 0x0 [ 489.374116][ T3379] hid-generic C990:0003:007F.0004: unknown main item tag 0x4 [ 489.381591][ T3379] hid-generic C990:0003:007F.0004: unknown main item tag 0x0 [ 489.389007][ T3379] hid-generic C990:0003:007F.0004: unknown main item tag 0x0 [ 489.396388][ T3379] hid-generic C990:0003:007F.0004: unknown main item tag 0x0 [ 489.403947][ T3379] hid-generic C990:0003:007F.0004: unknown main item tag 0x0 [ 489.411363][ T3379] hid-generic C990:0003:007F.0004: unknown main item tag 0x2 [ 489.418769][ T3379] hid-generic C990:0003:007F.0004: unknown main item tag 0x0 [ 489.426240][ T3379] hid-generic C990:0003:007F.0004: unknown main item tag 0x0 [ 489.433703][ T3379] hid-generic C990:0003:007F.0004: unknown main item tag 0x0 [ 489.499225][T22289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6827'. [ 489.515220][T22289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.532249][ T3379] hid-generic C990:0003:007F.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 489.550730][T22290] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6827'. [ 489.827194][T22294] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 489.844864][T22294] vhci_hcd: default hub control req: 2307 v0008 i0002 l4096 [ 490.515215][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 490.515233][ T29] audit: type=1400 audit(1744571919.618:19683): avc: denied { create } for pid=22318 comm="syz.9.6839" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 490.517530][T22319] netlink: 'syz.9.6839': attribute type 15 has an invalid length. [ 490.524532][ T29] audit: type=1400 audit(1744571919.618:19684): avc: denied { map } for pid=22318 comm="syz.9.6839" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=76712 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 490.575295][ T29] audit: type=1400 audit(1744571919.618:19685): avc: denied { read write } for pid=22318 comm="syz.9.6839" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=76712 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 490.706148][ T29] audit: type=1400 audit(1744571919.817:19686): avc: denied { ioctl } for pid=22326 comm="syz.5.6843" path="socket:[75743]" dev="sockfs" ino=75743 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 490.706559][T22329] loop9: detected capacity change from 0 to 764 [ 490.744349][T22329] rock: directory entry would overflow storage [ 490.750644][T22329] rock: sig=0x4f50, size=4, remaining=3 [ 490.756249][T22329] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 490.806257][T22328] vlan2: entered allmulticast mode [ 490.990378][T22340] loop8: detected capacity change from 0 to 1024 [ 491.036500][T22340] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.075328][T22340] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6848: bg 0: block 393: padding at end of block bitmap is not set [ 491.094718][T22340] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 491.107339][T22340] EXT4-fs (loop8): This should not happen!! Data will be lost [ 491.107339][T22340] [ 491.470344][T22363] loop1: detected capacity change from 0 to 764 [ 491.482009][T22363] rock: directory entry would overflow storage [ 491.488301][T22363] rock: sig=0x4f50, size=4, remaining=3 [ 491.493904][T22363] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 491.579880][T22365] loop1: detected capacity change from 0 to 512 [ 491.620864][T22365] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 491.700916][T22365] EXT4-fs (loop1): 1 truncate cleaned up [ 491.711319][ T29] audit: type=1400 audit(1744571920.867:19687): avc: denied { create } for pid=22364 comm="syz.1.6858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 492.404796][T22388] loop9: detected capacity change from 0 to 1024 [ 492.425128][T22388] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.448313][T22388] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6866: bg 0: block 393: padding at end of block bitmap is not set [ 492.467074][T22393] loop1: detected capacity change from 0 to 512 [ 492.474446][T22393] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 492.484105][T22388] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 492.496690][T22388] EXT4-fs (loop9): This should not happen!! Data will be lost [ 492.496690][T22388] [ 492.526084][T22393] EXT4-fs (loop1): orphan cleanup on readonly fs [ 492.532923][T22393] EXT4-fs error (device loop1): ext4_orphan_get:1390: inode #15: comm syz.1.6867: iget: bad extended attribute block 19 [ 492.546474][T22393] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.6867: couldn't read orphan inode 15 (err -117) [ 492.561831][ T29] audit: type=1400 audit(1744571921.770:19688): avc: denied { block_suspend } for pid=22392 comm="syz.1.6867" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 492.605281][T22396] loop9: detected capacity change from 0 to 764 [ 492.609711][T22398] loop1: detected capacity change from 0 to 1024 [ 492.620618][T22396] rock: directory entry would overflow storage [ 492.626934][T22396] rock: sig=0x4f50, size=4, remaining=3 [ 492.632755][T22396] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 492.646709][T22398] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.675163][T22404] loop8: detected capacity change from 0 to 1024 [ 492.685497][T22404] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.703891][T22408] netlink: 'syz.1.6872': attribute type 27 has an invalid length. [ 492.784923][T22413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.793233][T22413] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.803997][T22413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 492.836131][T22421] loop5: detected capacity change from 0 to 256 [ 492.845027][T22421] FAT-fs (loop5): bogus number of FAT sectors [ 492.851143][T22421] FAT-fs (loop5): Can't find a valid FAT filesystem [ 492.990003][ T29] audit: type=1400 audit(1744571922.222:19689): avc: denied { read } for pid=22434 comm="syz.9.6883" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 493.014741][ T29] audit: type=1400 audit(1744571922.222:19690): avc: denied { open } for pid=22434 comm="syz.9.6883" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 493.026847][T22438] loop5: detected capacity change from 0 to 764 [ 493.041643][ T29] audit: type=1400 audit(1744571922.222:19691): avc: denied { ioctl } for pid=22434 comm="syz.9.6883" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 493.079970][T22438] rock: directory entry would overflow storage [ 493.086412][T22438] rock: sig=0x4f50, size=4, remaining=3 [ 493.091984][T22438] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 493.092142][T22425] loop8: detected capacity change from 0 to 1024 [ 493.125239][T22425] EXT4-fs mount: 25 callbacks suppressed [ 493.125257][T22425] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.148672][T22425] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.162721][T22446] loop5: detected capacity change from 0 to 1024 [ 493.170863][T22425] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6879: bg 0: block 393: padding at end of block bitmap is not set [ 493.188262][T22425] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 493.213866][ T29] audit: type=1400 audit(1744571922.453:19692): avc: denied { setopt } for pid=22454 comm="syz.9.6890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 493.241323][T22446] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.285235][T22459] FAULT_INJECTION: forcing a failure. [ 493.285235][T22459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.298423][T22459] CPU: 0 UID: 0 PID: 22459 Comm: syz.0.6891 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 493.298454][T22459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 493.298492][T22459] Call Trace: [ 493.298500][T22459] [ 493.298508][T22459] dump_stack_lvl+0xf6/0x150 [ 493.298603][T22459] dump_stack+0x15/0x1a [ 493.298624][T22459] should_fail_ex+0x261/0x270 [ 493.298657][T22459] should_fail+0xb/0x10 [ 493.298680][T22459] should_fail_usercopy+0x1a/0x20 [ 493.298709][T22459] _copy_from_user+0x1c/0xa0 [ 493.298764][T22459] lo_ioctl+0x320/0x1570 [ 493.298790][T22459] ? avc_has_extended_perms+0x6fd/0x8f0 [ 493.298916][T22459] ? blkdev_common_ioctl+0xb24/0x1a10 [ 493.298946][T22459] ? do_vfs_ioctl+0x977/0x1570 [ 493.299038][T22459] ? selinux_file_ioctl+0x2f9/0x380 [ 493.299065][T22459] ? __pfx_lo_ioctl+0x10/0x10 [ 493.299094][T22459] blkdev_ioctl+0x35b/0x450 [ 493.299127][T22459] ? __pfx_blkdev_ioctl+0x10/0x10 [ 493.299163][T22459] __se_sys_ioctl+0xc9/0x140 [ 493.299237][T22459] __x64_sys_ioctl+0x43/0x50 [ 493.299263][T22459] x64_sys_call+0x168d/0x2e10 [ 493.299347][T22459] do_syscall_64+0xc9/0x1c0 [ 493.299383][T22459] ? clear_bhb_loop+0x25/0x80 [ 493.299409][T22459] ? clear_bhb_loop+0x25/0x80 [ 493.299430][T22459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.299450][T22459] RIP: 0033:0x7f89a206d169 [ 493.299539][T22459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.299561][T22459] RSP: 002b:00007f89a06cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.299584][T22459] RAX: ffffffffffffffda RBX: 00007f89a2285fa0 RCX: 00007f89a206d169 [ 493.299599][T22459] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000005 [ 493.299651][T22459] RBP: 00007f89a06cf090 R08: 0000000000000000 R09: 0000000000000000 [ 493.299663][T22459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.299674][T22459] R13: 0000000000000000 R14: 00007f89a2285fa0 R15: 00007ffd8fc35068 [ 493.299696][T22459] [ 493.302711][T20513] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.421304][T22464] ÿÿÿ: entered promiscuous mode [ 493.523107][T22464] ÿÿÿ: entered allmulticast mode [ 493.534366][T22471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6896'. [ 493.598178][T22476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6896'. [ 493.637430][T22476] ip6gre1: entered allmulticast mode [ 493.853265][T22481] lo: entered promiscuous mode [ 493.858330][T22481] lo: entered allmulticast mode [ 493.869783][T22481] tunl0: entered promiscuous mode [ 493.875110][T22481] tunl0: entered allmulticast mode [ 493.882940][T22481] gre0: entered promiscuous mode [ 493.888026][T22481] gre0: entered allmulticast mode [ 493.900977][T22481] gretap0: entered promiscuous mode [ 493.906402][T22481] gretap0: entered allmulticast mode [ 493.913802][T22481] erspan0: entered promiscuous mode [ 493.919054][T22481] erspan0: entered allmulticast mode [ 493.925844][T22481] ip_vti0: entered promiscuous mode [ 493.931109][T22481] ip_vti0: entered allmulticast mode [ 493.937346][T22481] ip6_vti0: entered promiscuous mode [ 493.942873][T22481] ip6_vti0: entered allmulticast mode [ 493.949827][T22481] sit0: entered promiscuous mode [ 493.954901][T22481] sit0: entered allmulticast mode [ 493.962642][T22481] ip6tnl0: entered promiscuous mode [ 493.963430][T21774] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.968012][T22481] ip6tnl0: entered allmulticast mode [ 493.983401][T22481] ip6gre0: entered promiscuous mode [ 493.988667][T22481] ip6gre0: entered allmulticast mode [ 493.996923][T22481] syz_tun: entered promiscuous mode [ 494.002314][T22481] syz_tun: entered allmulticast mode [ 494.008873][T22481] ip6gretap0: entered promiscuous mode [ 494.014393][T22481] ip6gretap0: entered allmulticast mode [ 494.024770][T22481] bridge0: entered promiscuous mode [ 494.030052][T22481] bridge0: entered allmulticast mode [ 494.036919][T22481] vcan0: entered promiscuous mode [ 494.042066][T22481] vcan0: entered allmulticast mode [ 494.048201][T22481] bond0: entered promiscuous mode [ 494.053448][T22481] bond_slave_0: entered promiscuous mode [ 494.059383][T22481] bond_slave_1: entered promiscuous mode [ 494.065161][T22481] bond0: entered allmulticast mode [ 494.070348][T22481] bond_slave_0: entered allmulticast mode [ 494.076158][T22481] bond_slave_1: entered allmulticast mode [ 494.085148][T22481] team0: entered promiscuous mode [ 494.090247][T22481] team_slave_0: entered promiscuous mode [ 494.096139][T22481] team_slave_1: entered promiscuous mode [ 494.101844][T22481] team0: entered allmulticast mode [ 494.107139][T22481] team_slave_0: entered allmulticast mode [ 494.112919][T22481] team_slave_1: entered allmulticast mode [ 494.119554][T22481] dummy0: entered promiscuous mode [ 494.124737][T22481] dummy0: entered allmulticast mode [ 494.125178][T22499] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 494.137571][T22481] nlmon0: entered promiscuous mode [ 494.140665][T22499] vhci_hcd: default hub control req: 2307 v0008 i0002 l4096 [ 494.142858][T22481] nlmon0: entered allmulticast mode [ 494.156687][T22481] caif0: entered promiscuous mode [ 494.161839][T22481] caif0: entered allmulticast mode [ 494.167142][T22481] batadv0: entered promiscuous mode [ 494.172617][T22481] batadv0: entered allmulticast mode [ 494.178123][T22481] vxcan0: entered promiscuous mode [ 494.183358][T22481] vxcan0: entered allmulticast mode [ 494.188775][T22481] vxcan1: entered promiscuous mode [ 494.193955][T22481] vxcan1: entered allmulticast mode [ 494.199371][T22481] veth0: entered promiscuous mode [ 494.204471][T22481] veth0: entered allmulticast mode [ 494.209760][T22481] veth1: entered promiscuous mode [ 494.214802][T22481] veth1: entered allmulticast mode [ 494.220077][T22481] wg0: entered promiscuous mode [ 494.224974][T22481] wg0: entered allmulticast mode [ 494.230090][T22481] wg1: entered promiscuous mode [ 494.232571][T22502] netlink: 'syz.5.6904': attribute type 27 has an invalid length. [ 494.235053][T22481] wg1: entered allmulticast mode [ 494.235183][T22481] wg2: entered promiscuous mode [ 494.252747][T22481] wg2: entered allmulticast mode [ 494.257854][T22481] veth0_to_bridge: entered promiscuous mode [ 494.263786][T22481] veth0_to_bridge: entered allmulticast mode [ 494.269982][T22481] veth1_to_bridge: entered promiscuous mode [ 494.275963][T22481] veth1_to_bridge: entered allmulticast mode [ 494.282138][T22481] veth0_to_bond: entered promiscuous mode [ 494.287997][T22481] veth0_to_bond: entered allmulticast mode [ 494.294077][T22481] veth1_to_bond: entered promiscuous mode [ 494.299802][T22481] veth1_to_bond: entered allmulticast mode [ 494.305916][T22481] veth0_to_team: entered promiscuous mode [ 494.311806][T22481] veth0_to_team: entered allmulticast mode [ 494.317834][T22481] veth1_to_team: entered promiscuous mode [ 494.323689][T22481] veth1_to_team: entered allmulticast mode [ 494.329640][T22481] veth1_to_batadv: entered promiscuous mode [ 494.335613][T22481] veth1_to_batadv: entered allmulticast mode [ 494.341788][T22481] batadv_slave_1: entered promiscuous mode [ 494.347635][T22481] batadv_slave_1: entered allmulticast mode [ 494.353720][T22481] xfrm0: entered promiscuous mode [ 494.358839][T22481] xfrm0: entered allmulticast mode [ 494.364110][T22481] veth0_to_hsr: entered promiscuous mode [ 494.369840][T22481] veth0_to_hsr: entered allmulticast mode [ 494.375688][T22481] hsr_slave_0: entered allmulticast mode [ 494.381482][T22481] veth1_to_hsr: entered promiscuous mode [ 494.387183][T22481] veth1_to_hsr: entered allmulticast mode [ 494.393077][T22481] hsr_slave_1: entered allmulticast mode [ 494.398868][T22481] hsr0: entered promiscuous mode [ 494.403986][T22481] hsr0: entered allmulticast mode [ 494.409138][T22481] veth1_virt_wifi: entered promiscuous mode [ 494.415116][T22481] veth1_virt_wifi: entered allmulticast mode [ 494.421294][T22481] veth0_virt_wifi: entered promiscuous mode [ 494.427307][T22481] veth0_virt_wifi: entered allmulticast mode [ 494.433509][T22481] veth1_vlan: entered allmulticast mode [ 494.439256][T22481] veth0_vlan: entered allmulticast mode [ 494.444987][T22481] vlan0: entered promiscuous mode [ 494.450112][T22481] vlan0: entered allmulticast mode [ 494.455346][T22481] vlan1: entered promiscuous mode [ 494.460492][T22481] vlan1: entered allmulticast mode [ 494.465907][T22481] macvlan0: entered promiscuous mode [ 494.471213][T22481] macvlan0: entered allmulticast mode [ 494.476968][T22481] macvlan1: entered promiscuous mode [ 494.482537][T22481] macvlan1: entered allmulticast mode [ 494.488091][T22481] ipvlan0: entered promiscuous mode [ 494.493469][T22481] ipvlan0: entered allmulticast mode [ 494.498971][T22481] ipvlan1: entered promiscuous mode [ 494.504332][T22481] ipvlan1: entered allmulticast mode [ 494.509778][T22481] veth1_macvtap: entered allmulticast mode [ 494.515772][T22481] veth0_macvtap: entered allmulticast mode [ 494.521899][T22481] macvtap0: entered promiscuous mode [ 494.527417][T22481] macvtap0: entered allmulticast mode [ 494.532964][T22481] macsec0: entered promiscuous mode [ 494.538320][T22481] macsec0: entered allmulticast mode [ 494.543737][T22481] geneve0: entered promiscuous mode [ 494.549136][T22481] geneve0: entered allmulticast mode [ 494.554677][T22481] geneve1: entered promiscuous mode [ 494.556543][T22510] loop9: detected capacity change from 0 to 128 [ 494.559943][T22481] geneve1: entered allmulticast mode [ 494.573116][T22481] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 494.580488][T22481] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 494.599820][T22481] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 494.607226][T22481] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 494.614983][T22481] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 494.622379][T22481] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 494.635007][T22481] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 494.642476][T22481] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 494.650099][T22481] ÿÿÿ: entered promiscuous mode [ 494.655086][T22481] ÿÿÿ: entered allmulticast mode [ 494.665658][T22481] ip6gre1: entered promiscuous mode [ 494.671354][ T4693] bio_check_eod: 214 callbacks suppressed [ 494.671370][ T4693] kworker/u8:8: attempt to access beyond end of device [ 494.671370][ T4693] loop9: rw=1, sector=153, nr_sectors = 8 limit=128 [ 494.677783][T22502] lo: left promiscuous mode [ 494.690586][ T4693] kworker/u8:8: attempt to access beyond end of device [ 494.690586][ T4693] loop9: rw=1, sector=169, nr_sectors = 8 limit=128 [ 494.695090][T22502] lo: left allmulticast mode [ 494.695150][T22502] tunl0: left promiscuous mode [ 494.709020][ T4693] kworker/u8:8: attempt to access beyond end of device [ 494.709020][ T4693] loop9: rw=1, sector=185, nr_sectors = 8 limit=128 [ 494.713144][T22502] tunl0: left allmulticast mode [ 494.713230][T22502] gre0: left promiscuous mode [ 494.717971][ T4693] kworker/u8:8: attempt to access beyond end of device [ 494.717971][ T4693] loop9: rw=1, sector=201, nr_sectors = 8 limit=128 [ 494.731292][T22502] gre0: left allmulticast mode [ 494.736205][ T4693] kworker/u8:8: attempt to access beyond end of device [ 494.736205][ T4693] loop9: rw=1, sector=217, nr_sectors = 8 limit=128 [ 494.740980][T22502] gretap0: left promiscuous mode [ 494.777339][T22502] gretap0: left allmulticast mode [ 494.782469][T22502] erspan0: left promiscuous mode [ 494.787423][T22502] erspan0: left allmulticast mode [ 494.792631][T22502] ip_vti0: left promiscuous mode [ 494.792691][ T4693] kworker/u8:8: attempt to access beyond end of device [ 494.792691][ T4693] loop9: rw=1, sector=233, nr_sectors = 8 limit=128 [ 494.797594][T22502] ip_vti0: left allmulticast mode [ 494.810995][ T4693] kworker/u8:8: attempt to access beyond end of device [ 494.810995][ T4693] loop9: rw=1, sector=249, nr_sectors = 8 limit=128 [ 494.816056][T22502] ip6_vti0: left promiscuous mode [ 494.834413][T22502] ip6_vti0: left allmulticast mode [ 494.839742][T22502] sit0: left promiscuous mode [ 494.840088][ T4693] kworker/u8:8: attempt to access beyond end of device [ 494.840088][ T4693] loop9: rw=1, sector=265, nr_sectors = 8 limit=128 [ 494.844453][T22502] sit0: left allmulticast mode [ 494.858196][ T4693] kworker/u8:8: attempt to access beyond end of device [ 494.858196][ T4693] loop9: rw=1, sector=281, nr_sectors = 8 limit=128 [ 494.862632][T22502] ip6tnl0: left promiscuous mode [ 494.876303][ T4693] kworker/u8:8: attempt to access beyond end of device [ 494.876303][ T4693] loop9: rw=1, sector=297, nr_sectors = 8 limit=128 [ 494.880761][T22502] ip6tnl0: left allmulticast mode [ 494.880850][T22502] ip6gre0: left promiscuous mode [ 494.904298][T22502] ip6gre0: left allmulticast mode [ 494.909447][T22502] syz_tun: left promiscuous mode [ 494.914465][T22502] syz_tun: left allmulticast mode [ 494.919679][T22502] ip6gretap0: left promiscuous mode [ 494.924916][T22502] ip6gretap0: left allmulticast mode [ 494.930411][T22502] bridge0: left promiscuous mode [ 494.935509][T22502] bridge0: left allmulticast mode [ 494.940823][T22502] vcan0: left promiscuous mode [ 494.945674][T22502] vcan0: left allmulticast mode [ 494.950634][T22502] bond0: left promiscuous mode [ 494.955628][T22502] bond0: left allmulticast mode [ 494.960683][T22502] team0: left promiscuous mode [ 494.965663][T22502] team0: left allmulticast mode [ 494.973481][T22502] dummy0: left promiscuous mode [ 494.978402][T22502] dummy0: left allmulticast mode [ 494.983469][T22502] nlmon0: left promiscuous mode [ 494.988385][T22502] nlmon0: left allmulticast mode [ 494.993427][T22502] caif0: left promiscuous mode [ 494.998242][T22502] caif0: left allmulticast mode [ 495.003214][T22502] batadv0: left promiscuous mode [ 495.008242][T22502] batadv0: left allmulticast mode [ 495.013417][T22502] vxcan0: left promiscuous mode [ 495.018321][T22502] vxcan0: left allmulticast mode [ 495.023389][T22502] vxcan1: left promiscuous mode [ 495.028292][T22502] vxcan1: left allmulticast mode [ 495.033352][T22502] veth0: left promiscuous mode [ 495.038205][T22502] veth0: left allmulticast mode [ 495.043165][T22502] veth1: left promiscuous mode [ 495.048017][T22502] veth1: left allmulticast mode [ 495.052946][T22502] wg0: left promiscuous mode [ 495.057632][T22502] wg0: left allmulticast mode [ 495.062400][T22502] wg1: left promiscuous mode [ 495.067077][T22502] wg1: left allmulticast mode [ 495.071888][T22502] wg2: left promiscuous mode [ 495.076617][T22502] wg2: left allmulticast mode [ 495.081404][T22502] veth0_to_bridge: left promiscuous mode [ 495.087203][T22502] veth0_to_bridge: left allmulticast mode [ 495.093094][T22502] veth1_to_bridge: left promiscuous mode [ 495.098742][T22502] veth1_to_bridge: left allmulticast mode [ 495.104788][T22502] veth0_to_bond: left promiscuous mode [ 495.110321][T22502] veth0_to_bond: left allmulticast mode [ 495.115986][T22502] bond_slave_0: left promiscuous mode [ 495.121415][T22502] bond_slave_0: left allmulticast mode [ 495.127279][T22502] veth1_to_bond: left promiscuous mode [ 495.132901][T22502] veth1_to_bond: left allmulticast mode [ 495.138537][T22502] bond_slave_1: left promiscuous mode [ 495.144018][T22502] bond_slave_1: left allmulticast mode [ 495.149609][T22502] veth0_to_team: left promiscuous mode [ 495.155112][T22502] veth0_to_team: left allmulticast mode [ 495.160776][T22502] team_slave_0: left promiscuous mode [ 495.165346][T22519] loop9: detected capacity change from 0 to 1024 [ 495.166153][T22502] team_slave_0: left allmulticast mode [ 495.178034][T22502] veth1_to_team: left promiscuous mode [ 495.183620][T22502] veth1_to_team: left allmulticast mode [ 495.189308][T22502] team_slave_1: left promiscuous mode [ 495.193047][T22519] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.194678][T22502] team_slave_1: left allmulticast mode [ 495.194828][T22502] veth0_to_batadv: left promiscuous mode [ 495.212303][T22519] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.212553][T22502] veth0_to_batadv: left allmulticast mode [ 495.234480][T22502] batadv_slave_0: left promiscuous mode [ 495.240178][T22502] batadv_slave_0: left allmulticast mode [ 495.245963][T22502] veth1_to_batadv: left promiscuous mode [ 495.251918][T22502] veth1_to_batadv: left allmulticast mode [ 495.257790][T22502] batadv_slave_1: left promiscuous mode [ 495.263399][T22502] batadv_slave_1: left allmulticast mode [ 495.269271][T22502] xfrm0: left promiscuous mode [ 495.274137][T22502] xfrm0: left allmulticast mode [ 495.279133][T22502] veth0_to_hsr: left promiscuous mode [ 495.284617][T22502] veth0_to_hsr: left allmulticast mode [ 495.290363][T22502] veth1_to_hsr: left promiscuous mode [ 495.295771][T22502] veth1_to_hsr: left allmulticast mode [ 495.301586][T22502] hsr0: left promiscuous mode [ 495.306371][T22502] hsr0: left allmulticast mode [ 495.311194][T22502] hsr_slave_0: left allmulticast mode [ 495.316636][T22502] hsr_slave_1: left allmulticast mode [ 495.322287][T22502] veth1_virt_wifi: left promiscuous mode [ 495.327941][T22502] veth1_virt_wifi: left allmulticast mode [ 495.333779][T22502] veth0_virt_wifi: left promiscuous mode [ 495.333885][ T2991] ================================================================== [ 495.339443][T22502] veth0_virt_wifi: left allmulticast mode [ 495.347513][ T2991] BUG: KCSAN: data-race in desc_read_finalized_seq / prb_reserve [ 495.353756][T22502] veth1_vlan: left allmulticast mode [ 495.361362][ T2991] [ 495.361372][ T2991] write to 0xffffffff868a6690 of 8 bytes by task 22502 on cpu 1: [ 495.366817][T22502] vlan0: left promiscuous mode [ 495.368962][ T2991] prb_reserve+0x750/0xb80 [ 495.376740][T22502] vlan0: left allmulticast mode [ 495.381407][ T2991] vprintk_store+0x552/0x860 [ 495.381435][ T2991] vprintk_emit+0x1a0/0x6c0 [ 495.381461][ T2991] vprintk_default+0x26/0x30 [ 495.381486][ T2991] vprintk+0x1d/0x30 [ 495.386011][T22502] vlan1: left promiscuous mode [ 495.390781][ T2991] _printk+0x7f/0xb0 [ 495.390807][ T2991] __netdev_printk+0x2d1/0x3e0 [ 495.390836][ T2991] netdev_info+0x9e/0xd0 [ 495.390865][ T2991] __dev_set_promiscuity+0x164/0x340 [ 495.395499][T22502] vlan1: left allmulticast mode [ 495.399928][ T2991] __dev_change_flags+0x1ef/0x410 [ 495.399953][ T2991] netif_change_flags+0x59/0xd0 [ 495.399973][ T2991] do_setlink+0xa95/0x2430 [ 495.399988][ T2991] rtnl_newlink+0xd90/0x12d0 [ 495.404668][T22502] macvlan0: left promiscuous mode [ 495.408440][ T2991] rtnetlink_rcv_msg+0x65a/0x740 [ 495.413199][T22502] macvlan0: left allmulticast mode [ 495.417078][ T2991] netlink_rcv_skb+0x12f/0x230 [ 495.417122][ T2991] rtnetlink_rcv+0x1c/0x30 [ 495.421948][T22502] macvlan1: left promiscuous mode [ 495.426111][ T2991] netlink_unicast+0x605/0x6c0 [ 495.431445][T22502] macvlan1: left allmulticast mode [ 495.436208][ T2991] netlink_sendmsg+0x609/0x720 [ 495.441289][T22502] ipvlan0: left promiscuous mode [ 495.446055][ T2991] __sock_sendmsg+0x140/0x180 [ 495.450465][T22502] ipvlan0: left allmulticast mode [ 495.455034][ T2991] ____sys_sendmsg+0x350/0x4e0 [ 495.460153][T22502] ipvlan1: left promiscuous mode [ 495.464987][ T2991] __sys_sendmsg+0x1a0/0x240 [ 495.465026][ T2991] __x64_sys_sendmsg+0x46/0x50 [ 495.470157][T22502] ipvlan1: left allmulticast mode [ 495.474902][ T2991] x64_sys_call+0x26f3/0x2e10 [ 495.474933][ T2991] do_syscall_64+0xc9/0x1c0 [ 495.479355][T22502] veth0_vlan: left allmulticast mode [ 495.484364][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.484394][ T2991] [ 495.484402][ T2991] read to 0xffffffff868a6690 of 8 bytes by task 2991 on cpu 0: [ 495.489331][T22502] veth1_macvtap: left allmulticast mode [ 495.494258][ T2991] desc_read_finalized_seq+0x163/0x280 [ 495.494291][ T2991] _prb_read_valid+0x142/0x710 [ 495.499195][T22502] veth0_macvtap: left allmulticast mode [ 495.504147][ T2991] prb_read_valid+0x42/0x70 [ 495.504180][ T2991] syslog_print+0x242/0x540 [ 495.508952][T22502] macvtap0: left promiscuous mode [ 495.513863][ T2991] do_syslog+0x3ae/0x810 [ 495.513898][ T2991] __x64_sys_syslog+0x43/0x50 [ 495.518731][T22502] macvtap0: left allmulticast mode [ 495.523656][ T2991] x64_sys_call+0x2b8f/0x2e10 [ 495.523687][ T2991] do_syscall_64+0xc9/0x1c0 [ 495.523721][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.528388][T22502] macsec0: left promiscuous mode [ 495.533044][ T2991] [ 495.533050][ T2991] value changed: 0x0000000000002252 -> 0x0000000000004252 [ 495.533064][ T2991] [ 495.533069][ T2991] Reported by Kernel Concurrency Sanitizer on: [ 495.538073][T22502] macsec0: left allmulticast mode [ 495.542735][ T2991] CPU: 0 UID: 0 PID: 2991 Comm: klogd Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(voluntary) [ 495.547364][T22502] geneve0: left promiscuous mode [ 495.552500][ T2991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 495.552517][ T2991] ================================================================== [ 495.558390][T22502] geneve0: left allmulticast mode [ 495.701955][T22502] geneve1: left promiscuous mode [ 495.706925][T22502] geneve1: left allmulticast mode [ 495.713403][T22502] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 495.720522][T22502] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 495.728070][T22502] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 495.735209][T22502] netdevsim netdevsim5 netdevsim1: left allmulticast mode [ 495.742716][T22502] netdevsim netdevsim5 netdevsim2: left promiscuous mode [ 495.749832][T22502] netdevsim netdevsim5 netdevsim2: left allmulticast mode [ 495.759588][T22502] netdevsim netdevsim5 netdevsim3: left promiscuous mode [ 495.766766][T22502] netdevsim netdevsim5 netdevsim3: left allmulticast mode [ 495.774001][T22502] ÿÿÿ: left promiscuous mode [ 495.778715][T22502] ÿÿÿ: left allmulticast mode [ 495.813564][T22503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.821897][T22503] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.831388][T22503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 495.890808][ T4693] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 393: padding at end of block bitmap is not set [ 495.909351][ T4693] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 495.922071][ T4693] EXT4-fs (loop9): This should not happen!! Data will be lost [ 495.922071][ T4693] [ 495.932579][T20702] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.