last executing test programs: 2m32.610522182s ago: executing program 32 (id=230): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2084040, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17c) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2084040, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") (async) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17c) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) (async) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) (async) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) (async) 1m14.22835125s ago: executing program 5 (id=1532): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x10000000000005, 0x4c334, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x400008, 0xfffb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x6f9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8002, 0x0, 0x0, 0x7, 0x0, 0x1, 0xfffd, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 1m14.17928861s ago: executing program 5 (id=1536): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x80000008000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40003, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x4, 0x3a65, 0x4, 0x0, 0x5, 0xfffb, 0x0, 0x6, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="a1ab000000000000000005"], 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0xc000) 1m13.964926633s ago: executing program 5 (id=1539): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x3c3}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r7, 0x0) 1m13.079170346s ago: executing program 5 (id=1554): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000181100"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file2', 0x3a, [0x46, 0x43, 0x43]}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='net_dev_start_xmit\x00', r1, 0x0, 0x3}, 0x18) sendfile(r2, r1, 0x0, 0x7ffff000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r4, 0x2) getsockname$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x8028}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1m11.927012281s ago: executing program 5 (id=1564): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) 1m10.168389966s ago: executing program 5 (id=1603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 1m10.042361667s ago: executing program 33 (id=1603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 1m8.475250719s ago: executing program 2 (id=1631): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) acct(0x0) 1m8.41374945s ago: executing program 2 (id=1632): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1m8.166359594s ago: executing program 2 (id=1634): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$eJzs3UFrE1sYxvGnTW+TprTJhcuFe0E96EY3oY0fQIO0IAaU2hR1IUztREPGpMyESkRsNuLWD+Gq6M6doC7ddCNu3LsrguCmC3HETNImbVrTNklj+/9BmTd5z8OcttPyptDJ2o1n9/NZL5G1ShqMGA1KFa1L8V9VzUDtOFith9WoonOj3z6duH7z1pVUOj01Y8x0avZ80hgzfurNg0cvTr8rjc69Gn8d1mr89trX5OfVf1f/W/sxey/nmZxnCsWSscx8sViy5h3bLOS8fMKYa45tebbJFTzbbepnneLiYtlYhYWx6KJre56xCmWTt8umVDQlt2ysu1auYBKJhBmL6ngbamNNZmVmxkrt2PZDHd0Rum6k1ZOum6q0bmZWerAnAADQZ3af/4NZf+f5Pz0XHNua/18+l9qb/6VOzv8DPf2C9rlK06PfzP84Elw3ZUVrP7/NmP8BAAAAAAAAAAAAAAAAAAAAAPgTrPt+zPf9WP1Y/whLikiqPz7sfaI79vn9v3BI20WHNfzjXkRyni5lljLBMeinssrJka0JxfS9ej3UBPX05fTUhKmK662zXMsvL2VCCtfzdfFW+ZN/TwZ505z/S9HG8ycV0z+tz59smR/W2TMN+YRi+nBHRTlaqF7Xm/nHk8Zcuprekh+prgMAAAAA4ChImA3bXr9X+9UFEW3vB/k9/H1gy+vrIf3fzi0qAQAAAADAgXnlh3nLcWx3H0VY0gHieyj8ga6fonNFSH2xjS3FRUl9sI1eFRFJwTNmP/EvG/G2Un4ba4YkHfTzivTw0jrs30wAAAAAOm1z6N9D6OOTLu4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDjp937gdXXb2vVG7vEG04X0vuNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjp2fAQAA//91iCZA") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="040000000000000000fe32c9d4969bfa62000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000232cb4f660a709f9b0ab04adedf4af50112865a61c68a7517de7762cf99b966faddba4e8a0bd5b873989b2a779562de4b9cf5597eca081ba7984e6bfba68d48e374b706c30f36bf606ddf4bf7f5df0bb25a27bc5ff56286579a535823a3823de0179b75ee9ad5296733ceeebaa84536e1558cb81d568e9bc3d8266d6c834e3283de0bd4aaeb45c93c4fc54e555159bf18a141783763c83f3c5599114a471761162a949c6f50a8a7ae00939ce710567f6c309412690eff98002117e18e86084a9373be735896197e1827a81965816e3ca18efdf94683f3aa64e48408", @ANYRES32=r3, @ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='objagg_destroy\x00', r4, 0x0, 0x40}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1m7.524419913s ago: executing program 2 (id=1640): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100), 0xfe, 0x570, &(0x7f0000000b40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8aba, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) timer_delete(0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f00000003c0)='.\x00', 0x500, 0x97) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 1m7.111458148s ago: executing program 2 (id=1644): r0 = syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x6e, 0x800) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, 0x0}) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0xffffffffffffffff, r4, r5) r6 = mq_open(&(0x7f00000005c0)='\\$\xe7\x00', 0x800, 0x2c, &(0x7f0000000600)={0x2, 0x6, 0x9, 0x6}) r7 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) getresuid(&(0x7f0000000680)=0x0, &(0x7f00000006c0), &(0x7f0000000700)) sendmmsg$unix(r1, &(0x7f00000007c0)=[{{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000000180)="b1d15c89d75aafb7e0209cf4e3d28aea6f772702086a", 0x16}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}], 0x20, 0x8000}}, {{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000480)="8bb3001ddb1cb111262d303204ee2cfb8456835e9090a25650fa6ebf6727d12c352e8e23aed759dfc1038110c2aa218de7b2ea859875e357c55df4cd4448d035a8478707e7a764f71f98a297682dc4ceb7c975614307407c08b9f689cdb589dc236aaa853b26383083dc382e927f0fa8ad02f565f1088e4f56145aebc328fef02e088c0d5172d54304e4aeac6adfc9de03643ec9f37fc1be9bc1ec57", 0x9c}, {&(0x7f0000000540)="2fbc9819168de3752aaf3effca699c502aba10145c88aed6efd006e96e5a28290e89e4ca1557b968a53ca680ca990e187f9dbbd295ed849220b6838dea6b", 0x3e}], 0x2, &(0x7f0000000740)=[@rights={{0x2c, 0x1, 0x1, [r0, r0, r6, r0, r0, r7, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, 0xee00}}}], 0x50, 0x8090}}], 0x2, 0x20c10) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r10 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_mreq(r9, 0x29, 0x1c, &(0x7f0000000940)={@ipv4={""/10, ""/2, @private}, 0x0}, &(0x7f0000000980)=0x14) sendto$packet(r10, &(0x7f0000000840)="d8a5d556ac39496c7c676bfb1b6ee26810d9b16ec0eb444fc839467b260b5811d94dec09e307bf68bbc2684d6b715715b067b424e6adf09d29b8086e216d86423a1bbcbbe4cac83ec57a8f7edcf7c94c4067e23c7a95ea501ffb86fc0a4513531fa3d3473eec80c86b0b453bc174f5f61be242c44894cfd89ca9cec533f3a5f15af4ce7da6239078783423304fd2d83c5847bf0c4d1edb1eee87efdc76e2568debac2a40df4aef79ee8cc0658af00c6d309c2e25b0594a72e6bdfe1f82f810b4224f31c8416666ac7e3a71d9e06720fb4b9f8b209699e8aab9381c98d0423963ca247c36", 0xe4, 0x48040, &(0x7f00000009c0)={0x11, 0xf5, r11, 0x1, 0x6, 0x6, @multicast}, 0x14) r12 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r12, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmsg(r12, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m5.52259067s ago: executing program 2 (id=1685): syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m5.52227222s ago: executing program 34 (id=1685): syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) 57.014990428s ago: executing program 0 (id=1837): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="020000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000140)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3, 0x0, 0x7}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000240)=ANY=[], 0x1, 0x1210, &(0x7f000000a400)="$eJzs3E9rHGUcB/Bft1sbU/NHrdX2oA968TQ0OXgSJEgKkgWlNkIrCFMz0SXjbsgsgRWx9eTV1yEevRXEN5CLJ1+At1w89iCOONu1puwqe2iW6udzmR/8ni/zPLuwMMs8z/Gb33y2t1tlu/kgWmfORGs/It1PkaIVYy9vja43b21tdDqb11O6tnFj7Y2U0vIrP3z4xXev/ji48MH3y/fOx9HqR8e/rv9ydOno8vHvNz7tVqlbpV5/kPJ0u98f5LfLIu10q70spffKIq+K1O1VxcGJ/m7Z398fpry3s7S4f1BUVcp7w7RXDNOgnwYHw5R/knd7KcuytLQYTHXu34dsf3u/ruuIuj4XT0Vd1/XTsRgX4plYiuW4GxHPxnPxfFyMF+JSvBgvxeVm1GlMHwAAAAAAAAAAAAAAAAAAAP4//mn//0qs2v8PAAAAAAAAAAAAAAAAAAAAp+D9m7e2NjqdzespLUSUXx9uH26PrqP+xm50o4wirsZK/BbN7v+RUX3tnc7m1dRYja/KOw/ydw63z57MrzXHCTzIt5veOL82yqeT+fOx+Pf8eqzExcn3X5+YX4jXX2uON/hTEVmsxE8fRz/K2Gnu/TD/5VpKb7/beSR/pRkHAAAA/wVZ+svE5/csm9Yf5Wf4f+CR5+t2XGnPd+1EVMPP9/KyLO6Oi4OmWBgX5RNW/BwzDL73mKbRekwLbMW8P17Fk1a087I+GzF7fN6/TJyGh1/6vGcCAAAAAAAAAADALKa8/Retqa2ZinZMeLPsrfksFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5gB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQwUAAP//PLrRLA==") r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x12, 0xffffffffffffffff, 0x80000000) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e86", 0x55}, {0x0}], 0x2}}], 0x1, 0xc0) 56.803753671s ago: executing program 0 (id=1842): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, 0x0, r0, 0x0, 0x46) capget(&(0x7f00000000c0)={0x19980330}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000010000280012800b000100697036746e6c00001800028014000200fe8000000000000000000000000000bb08000300", @ANYRES32=r2, @ANYBLOB="4e28042e1a2194980078798ab05200111b5f39544fd31d505b4616996700f633e1d898b150f3ab645d0d0d84"], 0x50}}, 0x24000840) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0x23, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000040000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018000000a30f00000000000002000000b7080000000000007b8af8ff00000000b7080000000800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="308e82d3501b5f11f11d5600000000000000a500000095000000000000001811000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x1b, &(0x7f0000000800)=""/27, 0x0, 0x10, '\x00', r2, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x7, 0x7fff, 0xffffffff}, 0x10, 0x0, r3, 0x8, &(0x7f00000006c0)=[0x1, r0, r0], &(0x7f0000000700)=[{0x1, 0x5, 0x9, 0xa}, {0x0, 0x5, 0x5, 0x1}, {0x5, 0x5, 0xa, 0x2}, {0x2, 0x3, 0x46, 0x1}, {0x5, 0x5, 0x4, 0x5}, {0x3, 0x3, 0x2, 0xb}, {0x3, 0x1, 0xd, 0xc}, {0x5, 0x2, 0x9, 0x7}], 0x10, 0x8, @void, @value}, 0x94) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffc, 0x0, 0x0) r4 = shmget(0x1, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) syz_open_dev$usbfs(&(0x7f0000000000), 0x4, 0x101000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free\x00', r6}, 0x10) r7 = socket$rds(0x15, 0x5, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) openat(r0, 0x0, 0xa2002, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x46, 0x2, 0xffffffffffffffff, 0x9, 0x972]}, &(0x7f0000000080)=0x78) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(r10, 0x0, 0x40000000, 0x0) sendmsg$rds(r1, &(0x7f00000007c0)={&(0x7f0000000780)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000b40), 0x0, 0x8044}, 0x20000004) shmat(r4, &(0x7f0000001000/0x2000)=nil, 0x1000) 56.494958726s ago: executing program 0 (id=1847): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, 0x0, 0x40048c0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$packet(0x11, 0xa, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) 56.18342145s ago: executing program 0 (id=1853): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a"], 0x44}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendto$inet6(r4, &(0x7f0000000580)="050346000b003e000000020081006c66a53e8cd8", 0x14, 0x140, 0x0, 0x0) 56.107162551s ago: executing program 0 (id=1855): mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x301040, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x0, 0x8c7c88, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) open(&(0x7f00000002c0)='./bus\x00', 0x2002, 0x10) 56.088561711s ago: executing program 0 (id=1856): syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendto$packet(r0, &(0x7f0000000080)='I', 0x1, 0x404d001, &(0x7f0000000400)={0x11, 0x1c, r2, 0x1, 0x7, 0x6, @broadcast}, 0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="380500000000000000fffc00", @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400060020010000000000000000000000000002080002000500000008000800ac1e0001"], 0x38}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '(\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ec0), r6) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, r7, 0x201, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0)=r3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000e40)) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0xffffffffffffffff, 0x7, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000001000000050000005000000000"], 0x50) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x8, '\x00', r2, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r17, r19, 0x0) r20 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r20, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) getsockname$l2tp(r20, 0x0, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r19, @ANYBLOB=',wfdno=', @ANYRESHEX=r18]) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xc, 0x2b, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3e2, 0x0, 0x0, 0x0, 0x86a}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7d}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @ldst={0x0, 0x3, 0x0, 0x8, 0x8, 0x8, 0xffffffffffffffff}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffff81}, @alu={0x4, 0x0, 0x9, 0x4, 0x4, 0x1, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x8, 0xc3, &(0x7f00000007c0)=""/195, 0x41000, 0x22, '\x00', r1, @fallback=0x20, r9, 0x8, &(0x7f0000000900)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x4, &(0x7f0000000d00)=[r10, r11, r12, r13, r14, r15, r16, r19], &(0x7f0000000d40)=[{0x5, 0x3, 0xd, 0xb}, {0x2, 0x4, 0x3, 0x7}, {0x2, 0x2, 0xc, 0x1}, {0x1, 0x4, 0xe, 0xb}], 0x10, 0x4, @void, @value}, 0x94) 52.803221787s ago: executing program 6 (id=1922): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) 52.747878218s ago: executing program 6 (id=1926): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) getrusage(0xffffffffffffffff, 0x0) 52.691172408s ago: executing program 6 (id=1927): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0xac, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x28, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x19, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x1f00, 0x1d, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c00000600048036"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 52.690533328s ago: executing program 6 (id=1928): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a9bcc3e448ca92184627a84200000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000b800000000000029b42fadca5301d42112731cb34e8dc50000000000000000000000000a000000000000000000000080400000000000000000080000001000000000000000000000000044000500ac1414aa000000000000000000000000000000003c000000000000006a60c523a51bd4942201aba0ffffffff00000000000000000000000000000000090300"/219], 0xfc}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x0, 0xfffe, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@loopback, @in=@multicast2, @in=@private=0xa0100ff, @in6=@local, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) io_setup(0x5, &(0x7f0000000600)) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r10 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./file1\x00', 0x105042, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r10, 0x0) 52.406096732s ago: executing program 6 (id=1934): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) syz_read_part_table(0x593, &(0x7f00000005c0)="$eJzs0r1LK2kUB+A3A5c0e4lcLli4hWCwigqx0CIpRGJIY0RcsbAWLLQQLCwkEq39+AcUv0BsxD6lGEEUYiUpxXpBsUmVZdfZxmplUdnleZrhPefMHF5+E/hPi8Lv7XY7EUJoJ9//9m+nhbFS98TI5FQIiTAbQij8+stfnUQ88fdXz+NzOT6XktnG/vXo82nHTc9dPX0Yxf1aFMJaCGHh4Sj1b+/G/99Z/jK1vrFU3FzJz98XVx8H5/oKXVuFxZ2hg1xlujM3E/9Ytehz9qcbw8e37fLT7vf+b/VGK3sVz2USH7Ofr/U2/72f1Wa1Nd57sjyQ+dG8qGzHub/IHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GBn+cvU+sZScXMlP39fXH0cnOsrdG0VFneGDnKV6c7cTPQ6V4s+Z3+6MXx82y4/7X7v/1ZvtLJX8Vwm8TH7+Vpv89/7WW1WW+O9J8sDmR/Ni8p2nPuL/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf6gwVuqeGJmcCiERZkMIo1HH0Z/1dvK1n4jnzuNnOa6XktnG/vXo82nHTc9dPX04EddrUQhrIYSFh6PUp1+Gd/sjAAD///tch0s=") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)=ANY=[@ANYBLOB="40010000100001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000040030000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000003300000000000000000000000000000000000000000000000000000000000000000000000000000000000000020400000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000005000000000000000000000000000000c1ff2300f8ffffff480001007368613235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000023283d97fb160fe7b55923106fd83e0000000000000000000000000000000000000076fd36ca51f32653d1ea88106cb9ed7832baad232d0b5b732dcf69e750a759133b7b1c0b27bade7549de611210fe6cb1080000004cb29a8460567bb13f30588bb1475b2b22cb06bcb3a21de2812a0c9a25d089fa9bc038b79f10f53aa83d80e143a2c6b1513d3c4c6b21ae6d0c6bc000b6c6d60e"], 0x140}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='2\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a0084210000"], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000b80)={[], [{@dont_measure}, {@flag='silent'}, {@obj_user={'obj_user', 0x3d, ')@)-!'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@obj_user={'obj_user', 0x3d, 'defcontext'}}, {@subj_type={'subj_type', 0x3d, '*'}}, {@permit_directio}, {@dont_appraise}, {@permit_directio}]}, 0x1, 0x775, &(0x7f0000001900)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000b16240e24aac10d03f68a096f1b79c1c14973d85", @ANYRES32=r6, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r8}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = io_uring_setup(0x773d, &(0x7f0000000a40)={0x0, 0x0, 0x1000, 0x2, 0x3bc}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8005) close_range(r9, 0xffffffffffffffff, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x27) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r10, r5, 0x0, 0x7ffff000) 52.083319037s ago: executing program 6 (id=1936): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x10020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 52.082593217s ago: executing program 35 (id=1936): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x10020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 41.05485204s ago: executing program 36 (id=1856): syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendto$packet(r0, &(0x7f0000000080)='I', 0x1, 0x404d001, &(0x7f0000000400)={0x11, 0x1c, r2, 0x1, 0x7, 0x6, @broadcast}, 0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="380500000000000000fffc00", @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400060020010000000000000000000000000002080002000500000008000800ac1e0001"], 0x38}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '(\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ec0), r6) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, r7, 0x201, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0)=r3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000e40)) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0xffffffffffffffff, 0x7, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000001000000050000005000000000"], 0x50) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x8, '\x00', r2, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r17, r19, 0x0) r20 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r20, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) getsockname$l2tp(r20, 0x0, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r19, @ANYBLOB=',wfdno=', @ANYRESHEX=r18]) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xc, 0x2b, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3e2, 0x0, 0x0, 0x0, 0x86a}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7d}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @ldst={0x0, 0x3, 0x0, 0x8, 0x8, 0x8, 0xffffffffffffffff}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffff81}, @alu={0x4, 0x0, 0x9, 0x4, 0x4, 0x1, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x8, 0xc3, &(0x7f00000007c0)=""/195, 0x41000, 0x22, '\x00', r1, @fallback=0x20, r9, 0x8, &(0x7f0000000900)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x4, &(0x7f0000000d00)=[r10, r11, r12, r13, r14, r15, r16, r19], &(0x7f0000000d40)=[{0x5, 0x3, 0xd, 0xb}, {0x2, 0x4, 0x3, 0x7}, {0x2, 0x2, 0xc, 0x1}, {0x1, 0x4, 0xe, 0xb}], 0x10, 0x4, @void, @value}, 0x94) 33.096163611s ago: executing program 8 (id=2329): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x8, 0x72, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0xf0ff7f, 0x0, 0x0}) syz_open_procfs(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r7}) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x103002, 0x0) ioctl$EVIOCSFF(r9, 0x40304580, &(0x7f00000002c0)={0x57, 0x6, 0x7fff, {0x8000, 0x3}, {0x4, 0x3}, @rumble={0xf, 0x5}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r3, r0, 0x25, 0x14, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000005000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r11}, 0x10) 32.888249013s ago: executing program 8 (id=2334): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0xfffffffffffffffc}, 0x18) r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000740)=ANY=[], 0xffc9) close_range(r10, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r11, 0x0, 0x6}, 0x18) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7fd877140006001e0089e9", 0xe, 0x4008000, &(0x7f0000000540)={0xc9, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f00000009c0)={r1, r2}, 0xc) pread64(r0, 0x0, 0x55, 0x1000) 32.096189484s ago: executing program 8 (id=2353): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002540)={&(0x7f0000001400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x5, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x30, 0x5f, 0x30, 0x2e, 0x5f, 0x5f]}}, 0x0, 0x2c, 0x0, 0x1, 0xfff, 0x0, @void, @value}, 0x28) 32.095340664s ago: executing program 8 (id=2354): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000009008500000082"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f0000000580)}, 0x20) r3 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000400)=@assoc_value, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, 0x0, 0x24000001) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x2, @mcast1, 0x3ff}}, {{0xa, 0x4e23, 0xfffffffd, @empty, 0x8}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000580)={0x60, 0x1403, 0x1, 0x0, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x60}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ff0100000000000000000000000000009fd2a5d700000000000000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") 31.372624604s ago: executing program 8 (id=2370): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r2], 0x3c}}, 0x4000010) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 30.885352591s ago: executing program 8 (id=2376): mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x301040, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x0, 0x8c7c88, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) open(&(0x7f00000002c0)='./bus\x00', 0x2002, 0x10) 30.839804062s ago: executing program 37 (id=2376): mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x301040, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x0, 0x8c7c88, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) open(&(0x7f00000002c0)='./bus\x00', 0x2002, 0x10) 3.231675574s ago: executing program 4 (id=2801): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYRESDEC=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setrlimit(0x9, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x2004, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 3.136153186s ago: executing program 4 (id=2803): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@jqfmt_vfsv1}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@usrjquota}]}, 0xfe, 0x46c, &(0x7f0000000940)="$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") r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000434) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) shutdown(r1, 0x1) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r2, &(0x7f00000001c0)='n', 0x1, 0x4, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x401}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000580)={0x0, 0x5, 0x5, 0x1, 0x5, 0x83, 0xd832, 0x0, {0x0, @in6={{0xa, 0x4e22, 0xffff, @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x9, 0x4, 0x80000000, 0x20e8, 0x8}}, &(0x7f0000000180)=0xb0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000020000240000000000000080"], 0x0) 2.792962711s ago: executing program 7 (id=2805): socket$inet(0x2, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYRES16=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0x2, r0}, 0x38) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1f, 0x2, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) kexec_load(0x406ea20e, 0x5, &(0x7f00000008c0)=[{&(0x7f00000002c0)="db632d20410391532cacae02893258d7c814e04a912562bfb3b49002d2b8fe95fcb2eee59705e0f2f480ebee2b52b5180248ae1f61889f853ed05aec835217e03b67d234ec7cc4af28ae8a9fded3fdca2bcabd702a9df16cebc5026b66a71ae584b8e5497cdefff2ee67f67d5deb224c573c34863f72db53d2fc1232", 0x7c, 0xfffffffffffffff7}, {&(0x7f0000000340)="d3ab1ef7482905388b4c78e96703b104d706296c6df7f08a9d864654c4a53755180c12edfc9a428126fd2af226c9a599ccac9ca1c52657eac0f4cf8e5684ef7740b09f5256740f48404633599f280f523fcb279f3f517f76549ac22a203a96340012c9e90593b538e94d2694e71eaa10a0129b6d215d5092f07dbec4a4bbd769e56db4497ff018e0416b2a2cfe5b5efd69488f3192734515381bf462b611196bff84d33b23b93620d751bb848c42adc3af4083f3acb7221f3f5bd178bbc64268fe280939369feac4a3bbb7", 0xcb, 0x9, 0x6}, {&(0x7f0000000440)="af67430881015ce0e135ed023a4372f7189ce401230d6bc98d5f44d6f46ee78ab096de95f2c4b13efcd994f64eec26bae50b181d9e8837adc4d1cf7f2ea38e8647ea68e6d63e7b65e2516ffff4a56ba5a83c91b7b6a2ba21446fb4bfdee2453f2fb707f56adf6796d2f8f45ff1909060b4c71ac69318ad204f0e894270732b57a9684674812c39c8f9dd9553970411", 0x8f, 0x100000000, 0x80}, {&(0x7f00000005c0)="4ebf6a71511b0794fba6ef73ae523f1efe0b5f834064b8c2d3fdb98c42cda8ce2dc856736115e57df7b9a459095337eb59cc284747d0abb4f8fb14d2eaa76a58e8e4ed3190647b253af5c18e7f703a8e01d8352b62b135568e680a1cff088ee1fcb27b4ef1c3fcbb2c2813751e764d56b75c58c3488d9aa7641c9496c5f0d4f24207f3cb8ac99828ed5ebe0d4b33014723008df944fef67a63377dcc338079a00306f54ddd4d0a1a4ce7", 0xaa, 0xfffffffffffffe00, 0x91a}, {&(0x7f0000000000), 0x0, 0x653c0ee4, 0xead}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mq_unlink(0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) fadvise64(0xffffffffffffffff, 0x4, 0x6cb, 0x2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r4], 0x38}, 0x1, 0x1000000, 0x0, 0x4000814}, 0x0) 2.660185423s ago: executing program 4 (id=2807): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 2.658676563s ago: executing program 7 (id=2808): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x80005, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa041, 0x0, 0x20000, 0xfffffffffffffffd, 0x5, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x3, 0x519, &(0x7f0000001300)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.526532535s ago: executing program 4 (id=2809): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="0548f8fff0ffffff852000000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000182e0000", @ANYRES32, @ANYBLOB="e4005ed5a60806360b36000001000000000000000000000018240000", @ANYRES32, @ANYBLOB="0000000001000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) io_setup(0x9, &(0x7f0000000b80)=0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000007fc0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f0000007f40)={0x0, 0x0, 0x0, 0x2, 0x8, r3, &(0x7f0000006f40)="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", 0x1000, 0x5, 0x0, 0x3}]) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000150000000000000a28000000000a010100001ac600005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x5, @local, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='\t', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="02dc0000"], 0x8) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000008000)=ANY=[@ANYRESDEC=r2], 0x78}}, 0x0) syz_open_dev$loop(&(0x7f0000000a80), 0x88, 0x101101) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000006c80)={'\x00', 0x7, 0x101, 0x5, 0x8, 0x80000000009, r1}) rseq(&(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0, 0x3, 0x7, 0x8}}, 0x20, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000000a0601010000008c65f75702bd0815303f0399ec7d8d595bbb3d50970000000000070000061500010007000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x44040000}, 0x20000014) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x18) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000009c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000500, 0x0, 0x0, 0x200000000530, 0x200000000560], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000feffffff00000000001b0000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000001001100000000000000000000000000000000000000000000000000000000000000fcffffff00"/192]}, 0x138) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000006e80)={'nat\x00', 0x0, 0x3, 0x8f, [0xb, 0xb1e0, 0x7, 0x8000, 0x1ff, 0x6], 0x6, &(0x7f0000006d40)=[{}, {}, {}, {}, {}, {}], &(0x7f0000006dc0)=""/143}, &(0x7f0000006f00)=0x78) rt_sigqueueinfo(0x0, 0x0, 0x0) gettid() recvmmsg(r4, &(0x7f0000006b00)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/136, 0x88}, {&(0x7f00000004c0)=""/172, 0xac}, {&(0x7f0000000580)=""/118, 0x76}, {&(0x7f0000000080)=""/42, 0x2a}], 0x5, &(0x7f00000028c0)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000000680)=@alg, 0x80, &(0x7f0000000240)=[{&(0x7f0000000700)=""/89, 0x59}, {&(0x7f0000000780)=""/78, 0x4e}, {&(0x7f0000000800)=""/243, 0xf3}, {&(0x7f0000000900)=""/204, 0xcc}], 0x4, &(0x7f0000000340)=""/41, 0x29}, 0xfffffffd}, {{&(0x7f0000000a00)=@qipcrtr, 0x80, &(0x7f0000001080)=[{&(0x7f0000000a80)}, {&(0x7f0000000ac0)=""/190, 0xbe}, {&(0x7f0000000bc0)=""/223, 0xdf}, {&(0x7f0000000d40)=""/91, 0x5b}, {&(0x7f0000000dc0)=""/147, 0x93}, {&(0x7f0000000e80)=""/172, 0xac}, {&(0x7f0000000f40)=""/235, 0xeb}, {&(0x7f0000001040)=""/10, 0xa}], 0x8, &(0x7f0000001100)=""/208, 0xd0}, 0x6}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001200)=""/55, 0x37}, {&(0x7f0000001240)=""/108, 0x6c}, {&(0x7f00000012c0)=""/24, 0x18}, {&(0x7f0000001300)=""/49, 0x31}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f0000001340)=""/153, 0x99}, {&(0x7f0000001400)=""/112, 0x70}, {&(0x7f0000001480)=""/64, 0x40}, {&(0x7f00000014c0)=""/209, 0xd1}, {&(0x7f00000015c0)=""/65, 0x41}], 0xa, &(0x7f0000001700)=""/29, 0x1d}, 0x2}, {{0x0, 0x0, &(0x7f0000006980)=[{&(0x7f00000048c0)=""/4096, 0x1000}, {&(0x7f0000001840)=""/16, 0x10}, {&(0x7f0000001780)=""/166, 0xa6}, {&(0x7f00000058c0)=""/142, 0x8e}, {&(0x7f0000005980)=""/4096, 0x1000}], 0x5, &(0x7f0000006a00)=""/212, 0xd4}, 0xa31}], 0x5, 0x100, &(0x7f0000006c40)) fsopen(&(0x7f0000006d00)='afs\x00', 0x1) 1.967487922s ago: executing program 9 (id=2812): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.900141553s ago: executing program 7 (id=2813): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xf2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='kfree\x00', r9, 0x0, 0x2}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x200000000000, 0x1}}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) splice(r6, 0x0, r8, 0x0, 0xbfd3, 0x0) 1.868030114s ago: executing program 7 (id=2814): perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x100000, 0x0, 0x2000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x1}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) write$cgroup_type(r1, &(0x7f0000000080), 0xfffffed8) r5 = openat(r1, 0x0, 0xc082, 0x1db) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000000)={0x1, 0x1, 0x1000, 0xb6, &(0x7f0000000240)="77180c5f0d836700fda8da86fa4d7bdd7561454e9ca69e2141f9f0d93fd2907ed07d33a070828d541c15eef718d75a999fa75dd4790a6fc91ffe375143fc8228d9be2befb6a364c682dd54e149e950fbc66ea056ac097842b4a63e21406d2514491cd49b6fb5a30053a477d6c4a8fc2348093b9040984e583ea44b933d6b15d61790c485a991f5e17e4fdc0845901f75bd492220ffd151281b2d96ba7cea35636c87e2fb7116218693006428d6fbf82c435afb2880f9", 0xc6, 0x0, &(0x7f0000000300)="fff22d4959531afb86ae46e3896f8da93c79808f68a45a3fc14a9a319a11652c5d39195dfb360fb01da2ca274da7ae0b0057721e3117ee313993bcfc7d83df6134e5b67f1cae65eba3d63b8f605e7f9cab5a75fa74b60be719b08cabb6d616a1fbc4a925922b2d9f0eab96d01d63a0150249893072d31d8d07cf2d5b7f554667c62fa11b944544cd58a493398214e7573cc7378be686a6f570fdc244dff39121e4400f4b5722080d57a4c34b5a1aa0164635c4304f2858b89e0472d16891f5d9bd84c9014c5a"}) close(r0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r6}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r7, 0x10001}}, 0x10) close(0xffffffffffffffff) 1.855570354s ago: executing program 9 (id=2815): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071113d00000000008510000002000000850000000500000095000000000000009500a505000000009d626e70e9673322c7b85ffaf65c66ad587d51e8e0c4dfe91759b3f0f9f5ae8e3f9b82270eae11be2c6b3322403a0e3a6ac538f90427f5672fe15e688d62cec17c4a6f411694008948951a47de9b1a3edb8696448c0169532ec1422053b8636554129da48fa59cffe396b8d33b1e214015bc797bea7bc32a0dd1b228af1f0a"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2ab, &(0x7f0000000a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) 1.786731245s ago: executing program 9 (id=2816): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071113d00000000008510000002000000850000000500000095000000000000009500a505000000009d626e70e9673322c7b85ffaf65c66ad587d51e8e0c4dfe91759b3f0f9f5ae8e3f9b82270eae11be2c6b3322403a0e3a6ac538f90427f5672fe15e688d62cec17c4a6f411694008948951a47de9b1a3edb8696448c0169532ec1422053b8636554129da48fa59cffe396b8d33b1e214015bc797bea7bc32a0dd1b228af1f0a"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) 1.714610056s ago: executing program 9 (id=2819): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x200, 0x4) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400200005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r4, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendto$packet(r0, &(0x7f00000002c0)="3f031c000302140006001e0089e9aaa911d7c2290f00c96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe4600"/72, 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0xfc, 0x1, 0x0, 0x5, 0x0, 0x2000, 0x40e0c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_bp={0x0, 0x2}, 0x103431, 0x0, 0x0, 0x7, 0x5f4b, 0x1, 0x0, 0x0, 0x78, 0x0, 0x13}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x47c, &(0x7f0000000a80)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f00000005c0)=""/175, 0xaf) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='cpuset\x00') fchdir(r6) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000000080)=""/37, 0x25) getdents64(r7, &(0x7f0000001f80)=""/4089, 0xff9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x17, 0xb, &(0x7f0000000680)=ANY=[], &(0x7f0000000780)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x2f, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x403, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") mkdir(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 1.551005308s ago: executing program 4 (id=2822): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x190, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x140, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x12c, 0x6, [@m_mirred={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x2a, 0x6, "b9e6cb743efb5818279b291a7d56a99d728d0d3c5750442cdd89714a7135052ff6aa167b6d47"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0xd0, 0x9, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x10000000, 0xae, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3, 0x10000000, 0x8, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1336e5ff, 0x9, 0x6, 0x0, 0x1}, 0x7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x4, 0x20000000, 0x8}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x100, 0x6, 0x7, 0x1f31, 0xfffffff5}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000640)=ANY=[], 0x200002e6) (async) fcntl$setpipe(r1, 0x407, 0x7f) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x5e20, @multicast2}, 0x10) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x2, 0x5}]}) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) (async) pselect6(0x40, &(0x7f0000000840)={0x4, 0x2, 0x3, 0x200fd78, 0x80000001, 0x100000001, 0x7, 0x8001000000000000}, &(0x7f0000000880)={0x7, 0x8, 0x8, 0x1, 0x3, 0x2, 0x4, 0x100000001}, 0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={[0x6]}, 0x8}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2}}, 0x20) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x4, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r8}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) (async) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 1.487072429s ago: executing program 3 (id=2824): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000640)=ANY=[@ANYBLOB='system_u:object_r:setrans_var_run_t:s0 /usr/lib/telepathy/mission-control-5 0000'], 0x61) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000380)='GPL\x00', 0x1, 0xfffffffffffffe4b, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x5}, 0x18) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.469314739s ago: executing program 3 (id=2826): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) socket$kcm(0x11, 0xa, 0x300) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90524fc6010000200d7070000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x1b7, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) 1.38437208s ago: executing program 3 (id=2827): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000000000010000702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (fail_nth: 9) 1.383466771s ago: executing program 9 (id=2828): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f0000000580)}, 0x20) r3 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000400)=@assoc_value, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, 0x0, 0x24000001) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x2, @mcast1, 0x3ff}}, {{0xa, 0x4e23, 0xfffffffd, @empty, 0x8}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000580)={0x60, 0x1403, 0x1, 0x0, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x60}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ff0100000000000000000000000000009fd2a5d700000000000000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") 1.38260718s ago: executing program 4 (id=2829): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x8926, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x0, "5dee000000594000"}) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xe0000000, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0xfffffffffffffd5f, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x2, 0xca, 0x1ff, 0x200, r1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xc0000000, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xe, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}]}}]}, 0x74}}, 0x24040084) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x1c0, 0x12, 0x60d, 0x1c0, 0x202, 0x1c0, 0x2e8, 0x2e8, 0x2b8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @local, [], [], 'nr0\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x1, 0x1}, {0x1, 0x1, 0x2}, 0x9, 0x7}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0x0, 0x41}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xbd}], 0x1, 0x33, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r11, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r11, &(0x7f0000007fc0), 0x800001d, 0x0) 1.346220491s ago: executing program 3 (id=2830): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = fsmount(r1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x10000002}, 0x18) fchdir(r4) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.286223822s ago: executing program 3 (id=2832): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x3000) getuid() getgroups(0x0, &(0x7f0000000000)) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000340)={0x0, 0xfd69, 0x80, 0x7ffff, 0x2000088}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x14, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x480}, 0x0, 0x18, 0x0, 0x12345}) io_uring_enter(r1, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4400c800) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004) 1.168017803s ago: executing program 1 (id=2834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0xfffffff8, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0x1, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)}, 0x20) r6 = syz_open_dev$vcsa(&(0x7f0000000b80), 0x9, 0x204001) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0x20, &(0x7f0000000c80)={&(0x7f0000000c00)=""/30, 0x1e, 0x0, &(0x7f0000000c40)=""/56, 0x38}}, 0x10) r8 = socket$inet6(0xa, 0x3, 0x5) r9 = socket$l2tp6(0xa, 0x2, 0x73) r10 = dup3(r9, r8, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r10, &(0x7f00000005c0)={0xc, 0x8, 0xfa00, {&(0x7f0000001100)}}, 0x10) sendmmsg$inet6(r10, &(0x7f0000001580)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000002900000004"], 0x18}}], 0x1, 0x0) r11 = openat2(0xffffffffffffffff, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0x100, 0x8c}, 0x18) r12 = creat(&(0x7f0000000d80)='./file0\x00', 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x13, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='GPL\x00', 0x95c, 0x45, &(0x7f0000000b00)=""/69, 0x41000, 0x52, '\x00', r2, @fallback=0x4, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x3, 0x10, 0xf7ef, 0x9}, 0x10, r7, r10, 0xa, &(0x7f0000000dc0)=[r11, r12], &(0x7f0000000e00)=[{0x4, 0x3, 0x3, 0x9}, {0x4, 0x4, 0x9, 0xb}, {0x0, 0x4, 0xf}, {0x1, 0x4, 0xd, 0x2}, {0x0, 0x4, 0x1, 0x5}, {0x4, 0x4, 0x3, 0x2}, {0x4, 0x4, 0xf, 0xb}, {0x0, 0x3, 0x1, 0x4}, {0x3, 0x4, 0x5, 0x5}, {0x3, 0x3, 0x1}], 0x10, 0x6, @void, @value}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x4, "a1cc"}]}}}}}}}}, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x5}, 0xc) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x134329cb6d66c607, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000600000000000000000000008507000005009cb2a3e89eadd5b40d2ba52cb700009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x6, 0xdc, &(0x7f0000000280)=""/220, 0x41100, 0x4a, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x2, 0xe, 0x6, 0xd}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000480)=[r15, r16], &(0x7f00000004c0)=[{0x4, 0x3, 0xb, 0x1}, {0x5, 0x2, 0x0, 0x5}, {0x5, 0x3, 0x0, 0x6}, {0x3, 0x2, 0x7}, {0x1, 0x1, 0x3, 0x3}], 0x10, 0x2, @void, @value}, 0x94) r17 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r17, 0x40086602, &(0x7f0000000000)=0x60) ftruncate(r17, 0x9) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x4, 0xb}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xe09}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20000800) socket$inet_sctp(0x2, 0x1, 0x84) 1.098562704s ago: executing program 1 (id=2835): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.040372055s ago: executing program 1 (id=2836): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x10) fcntl$notify(r1, 0x402, 0x8000003d) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) lsm_get_self_attr(0x69, &(0x7f0000000000)={0x0, 0x0, 0x2b, 0xb, ""/11}, &(0x7f0000000080)=0x2b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x6, 0x0) getgroups(0x0, 0x0) 928.440077ms ago: executing program 1 (id=2837): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x10100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfbfb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000026cb0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) mount(0x0, 0x0, 0x0, 0x200000, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) 927.658937ms ago: executing program 7 (id=2838): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getattr(r0, &(0x7f0000000040)={0x38}, 0x38, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='workqueue_activate_work\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x0, 0x0, 0x1, 0x3}}, @TCA_CT_MARK={0x8, 0x10, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x10000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x20fffffe) syz_open_dev$usbfs(&(0x7f0000000100), 0x2, 0x281) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1e0101000000000000000000000000ff020000000000000000000000000001000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000006c000000ac14141c000000000000000000000000fcffffffffffffff0000000000000000000000000000000003000000f8ffffff00000000000000000000000000000000fdffffffffffff0f0000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0001063500000000000000480003006465666c617465000000000000"], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) pipe2$9p(0x0, 0x0) 877.198747ms ago: executing program 1 (id=2839): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x0, 0x10, 0xe6c, 0x585f077c, {{0x8, 0x4, 0x2, 0x27, 0x20, 0x64, 0x0, 0xd, 0x4, 0x0, @multicast1, @empty, {[@cipso={0x86, 0x9, 0x3, [{0x7, 0x3, "fd"}]}]}}}}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x3, 0xaf7f, 0x9, 0x14140, r0, 0x2, '\x00', r1, r2, 0x2, 0x1, 0x3, 0xd, @void, @value, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000004000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x206, @private1, 0x6}], 0x1c) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40103d0b, &(0x7f0000000180)={0xb, 0x1}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000140)={r5}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x138}}, 0x4) 771.194209ms ago: executing program 9 (id=2840): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000440)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000340)={r4, 0x9, 0x3, 0x1ff, 0x5, 0x0, 0x3, 0x8, {0x0, @in6={{0xa, 0x4e20, 0x10, @private0, 0x2}}, 0x10, 0x3ce, 0x495, 0x401, 0x10000001}}, &(0x7f00000002c0)=0xb0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x104040, 0x0) write$rfkill(r5, &(0x7f0000000040)={0x9, 0x6, 0x2}, 0x8) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 71.811348ms ago: executing program 3 (id=2841): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107842, 0x0) sendfile(r2, r2, 0x0, 0x80000000) r3 = getpgid(0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) r6 = dup3(r5, r4, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) ioctl$TIOCSTI(r6, 0x402c542c, &(0x7f0000000000)) r9 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) ioprio_set$pid(0x1, r9, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000001bc0)={0x242c, 0x20, 0x1c, 0x70bd2a, 0x25dfdbfd, {0xe}, [@nested={0x1046, 0xab, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @u32=0x8}, @typed={0x4, 0x107}, @nested={0x4, 0x131}, @typed={0x8, 0x38, 0x0, 0x0, @ipv4=@multicast2}, @generic="4607985ba6287e7200ee6e76639f4eca8e4e27f34160923c0143bf232b30", @generic="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", @typed={0x8, 0xbf, 0x0, 0x0, @pid=r3}, @nested={0x4, 0xfa}]}, @generic="e5f31d780776cdeb7853b862cc43661a71cecc95befb0dc6d6d88ffd332f0725de0c0b8d89bb950386bb9cf38787e65bbdefc449cb8214a1cef1ccfa04fb26c5cbc30711ca91868571f7d9e6808d2d602ddd1d186b11eee9116eea184c49bd3024be80a7eefa201ad856fc7aa589567e2faf787e9fe1d23279782dfd63af7a9924b3dc898126299c90094f0c45b76a15d79ad9ed88f0bbd44a6fa6689ac2cdcd81f1a6170c466dcbadbfaebe2f4e3011dbf846e4fd45270692", @typed={0x8, 0x13b, 0x0, 0x0, @fd=r1}, @generic="108b229adc444d575ccdd16bf2dce07022f2ad6a3b922124c80c31b077c3658e95b537ff6fbf2f77284b767744ff2c977f919d07b0b755d284bd48a98bd490eea22fcf3eb44cd69f83fd99078592aee21e6024fa0c6e16e06e5bc0c7eb8d878d734063b097ea6f", @typed={0x8, 0x7d, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x129f, 0x10c, 0x0, 0x1, [@generic="b0c261a5914f3ef3583e50732bc987d9d94d3dfbde8dadf8270b314c5a3883c80ad79e9bf856b909b77b2bb9fcddd5166cf6dd2ff81a610a16ec9fa7fbf0058d6f4d3dc919cee6aa2d69b02748ffb3edb45281b82011b88b7548bbc9fc2f9dbac8cb03588339bd94564b2864afdfc66731a1bd05970a7410eb2c036b521a10283dc47f6fcec862c17489133cb33f206f5f24326ea44adb4f8347adbc3f966b88eea7ba68406fecc8a5d695859a22266b60aae9592941a33c9ebfa77d39580b6d3033e525f9beaff8c41ffa8e23eeed8d02355f28ce9279feffee59", @generic="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", @nested={0x4, 0x7d}, @typed={0x8, 0x9, 0x0, 0x0, @pid=r9}, @nested={0x4, 0x97}, @nested={0xc, 0x86, 0x0, 0x1, [@typed={0x8, 0x125, 0x0, 0x0, @fd=r8}]}, @generic="3f9d5938503e104d6b032d6e6d7cd1de35cb82b926e84506eeb85a1c3cdd7e0c5b9db785544d3da5dbe7ab642e18abd6a14bd53bb3368b3c80dd1a452ee14523c7cd967f6ed190b6bfcdb359df53c069d3fb0b355b306eee1105836b40a1a6bb17d28ebc54882ccf4ba613c4a99ce3a4ec639eb14f4cdfebcb76dcd10988439495d32e2e21bfc107815c185ccd60ddaac23c4dda36a8f8d594896e918d16dafb52bc10d0071a7450dfd9791a339c5dc0bb777e4cee7a72a8a0957c97f8e7b56cedb9", @typed={0xc, 0x127, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0x13d}, @generic="7b13e27e871a54a0d1fd5041d7c89b433c625894eccf86bc5e37870c854e0b91e03621226338e777f35582173d7f2a13306930a8d1731293ca5e2b9476ebb0e0dbbd3eab862851f2106c814eada14ac65c362a784576f7b1f92559f128e760359b35c64bf1e6233a0aed704bc10225cb2c354cf001e7da2d7c3c3fc6824dd69ce660aea2ed91815246a6dac66ff933d9823578aa3243342330732533f3eae9932a6773700adc07065738085accce7d9ed742be0aa2ba6a5cd94bc5d5555201630abaa208a8ba569dbe10a75bd2151244e696"]}]}, 0x242c}, 0x1, 0x0, 0x0, 0x40080}, 0x4) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x6, 0x14120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xe}, 0x103200, 0x5, 0x840000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x800004, &(0x7f0000000240)={[{@dioread_lock}, {@nodelalloc}, {@dax_inode}, {@data_err_ignore}, {@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x41}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6002adf700303a00fe80000000000000000000000000003fff0200000000000000000000000000010200"], 0x0) 23.504609ms ago: executing program 7 (id=2842): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000002c0)='./file1\x00', 0x810012, &(0x7f00000003c0)=ANY=[@ANYBLOB="26f3a023f330bb11210654972e79d584aff7978ea30bcec608b02ac6ec0bec23cb0063b37b5812025f224ad642479501f4b0bfb0664ffbaff50b1e4c9846f64f8830dac33540902585bdfd2d41a8cc0a258558225a41956f76626145ad500208ecb705681602e911ccfff73e6950dd759dbba19f7d6135a2e2a68336fe3da7d3a70db1a6fcd8ea941a64003ffee05fe1e95d62d32e17de9d8bad6a", @ANYRES8, @ANYRESOCT, @ANYRES64=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES16, @ANYRES8], 0xf9, 0x11ff, &(0x7f0000000f00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4000044}, 0x0) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) 0s ago: executing program 1 (id=2843): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="040000000000000000fe32c9d4969bfa62000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000232cb4f660a709f9b0ab04adedf4af50112865a61c68a7517de7762cf99b966faddba4e8a0bd5b873989b2a779562de4b9cf5597eca081ba7984e6bfba68d48e374b706c30f36bf606ddf4bf7f5df0bb25a27bc5ff56286579a535823a3823de0179b75ee9ad5296733ceeebaa84536e1558cb81d568e9bc3d8266d6c834e3283de0bd4aaeb45c93c4fc54e555159bf18a141783763c83f3c5599114a471761162a949c6f50a8a7ae00939ce710567f6c309412690eff98002117e18e86084a9373be735896197e1827a81965816e3ca18efdf94683f3aa64e48408", @ANYRES32=r2, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='objagg_destroy\x00', r3, 0x0, 0x40}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) kernel console output (not intermixed with test programs): 41546][T10183] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 177.049983][T10183] System zones: 0-2, 18-18, 34-35 [ 177.055626][T10183] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.074562][ T29] audit: type=1400 audit(1746621799.021:6297): avc: denied { ioctl } for pid=10187 comm="syz.3.2292" path="socket:[26468]" dev="sockfs" ino=26468 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 177.099518][ T29] audit: type=1326 audit(1746621799.021:6298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe332e3e969 code=0x7ffc0000 [ 177.123450][ T29] audit: type=1326 audit(1746621799.021:6299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe332e3e969 code=0x7ffc0000 [ 177.147480][ T29] audit: type=1326 audit(1746621799.021:6300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe332e3e969 code=0x7ffc0000 [ 177.171258][ T29] audit: type=1326 audit(1746621799.021:6301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe332e3e969 code=0x7ffc0000 [ 177.195082][ T29] audit: type=1326 audit(1746621799.021:6302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fe332e3e969 code=0x7ffc0000 [ 177.219041][ T29] audit: type=1326 audit(1746621799.021:6303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe332e3e969 code=0x7ffc0000 [ 177.264004][ T9173] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.398959][T10205] loop7: detected capacity change from 0 to 512 [ 177.406866][T10205] ext4: Unknown parameter 'uid>00000000000000060928' [ 177.416296][T10209] __nla_validate_parse: 3 callbacks suppressed [ 177.416314][T10209] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2300'. [ 177.522515][T10214] loop7: detected capacity change from 0 to 1024 [ 177.538083][T10214] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 177.551973][T10214] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 177.570974][T10214] JBD2: no valid journal superblock found [ 177.577459][T10214] EXT4-fs (loop7): Could not load journal inode [ 177.626882][T10226] netlink: 'syz.7.2307': attribute type 7 has an invalid length. [ 177.634963][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2307'. [ 177.668687][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2309'. [ 177.680792][T10233] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2309'. [ 177.693868][T10233] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 178.020201][T10257] loop7: detected capacity change from 0 to 1024 [ 178.027453][T10257] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 178.038649][T10257] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 178.058478][T10257] JBD2: no valid journal superblock found [ 178.064525][T10257] EXT4-fs (loop7): Could not load journal inode [ 178.076279][T10259] netlink: 'syz.9.2319': attribute type 7 has an invalid length. [ 178.084241][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2319'. [ 178.192014][T10264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.238436][T10266] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 178.245120][T10266] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 178.254115][T10266] vhci_hcd vhci_hcd.0: Device attached [ 178.297986][ T9173] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 178.310780][ T9173] CPU: 0 UID: 0 PID: 9173 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 178.310809][ T9173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 178.310821][ T9173] Call Trace: [ 178.310827][ T9173] [ 178.310834][ T9173] __dump_stack+0x1d/0x30 [ 178.310860][ T9173] dump_stack_lvl+0xe8/0x140 [ 178.310894][ T9173] dump_stack+0x15/0x1b [ 178.310915][ T9173] dump_header+0x81/0x220 [ 178.311026][ T9173] oom_kill_process+0x334/0x3f0 [ 178.311055][ T9173] out_of_memory+0x979/0xb80 [ 178.311169][ T9173] ? css_next_descendant_pre+0x138/0x160 [ 178.311212][ T9173] mem_cgroup_out_of_memory+0x13d/0x190 [ 178.311273][ T9173] try_charge_memcg+0x5e2/0x870 [ 178.311302][ T9173] charge_memcg+0x51/0xc0 [ 178.311323][ T9173] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 178.311429][ T9173] __read_swap_cache_async+0x1df/0x350 [ 178.311463][ T9173] swap_cluster_readahead+0x277/0x3e0 [ 178.311498][ T9173] swapin_readahead+0xde/0x6f0 [ 178.311520][ T9173] ? __filemap_get_folio+0x49f/0x650 [ 178.311581][ T9173] ? swap_cache_get_folio+0x77/0x200 [ 178.311611][ T9173] do_swap_page+0x301/0x2460 [ 178.311646][ T9173] ? _raw_spin_unlock+0x26/0x50 [ 178.311679][ T9173] ? finish_task_switch+0xad/0x2b0 [ 178.311808][ T9173] ? __pfx_default_wake_function+0x10/0x10 [ 178.311840][ T9173] handle_mm_fault+0xb60/0x2ae0 [ 178.311868][ T9173] ? mas_walk+0xf2/0x120 [ 178.311951][ T9173] do_user_addr_fault+0x636/0x1090 [ 178.311996][ T9173] ? switch_fpu_return+0xe/0x20 [ 178.312029][ T9173] exc_page_fault+0x54/0xc0 [ 178.312169][ T9173] asm_exc_page_fault+0x26/0x30 [ 178.312195][ T9173] RIP: 0033:0x7ff274c111e5 [ 178.312213][ T9173] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e 33 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 178.312235][ T9173] RSP: 002b:00007ffd890bd1d8 EFLAGS: 00010246 [ 178.312253][ T9173] RAX: 0000000000000000 RBX: 00000000000000ab RCX: 00007ff274c111e3 [ 178.312266][ T9173] RDX: 00007ffd890bd1f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.312277][ T9173] RBP: 00007ffd890bd25c R08: 000000000b69ce41 R09: 0000000000000000 [ 178.312289][ T9173] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 178.312304][ T9173] R13: 00000000000927c0 R14: 000000000002b6dd R15: 00007ffd890bd2b0 [ 178.312388][ T9173] [ 178.312394][ T9173] memory: usage 307200kB, limit 307200kB, failcnt 148 [ 178.466071][T10265] loop7: detected capacity change from 0 to 512 [ 178.471021][ T9173] memory+swap: usage 143072kB, limit 9007199254740988kB, failcnt 0 [ 178.482991][T10265] EXT4-fs error (device loop7): ext4_iget_extra_inode:4693: inode #15: comm syz.7.2321: corrupted in-inode xattr: invalid ea_ino [ 178.483665][ T9173] kmem: usage 134108kB, limit 9007199254740988kB, failcnt 0 [ 178.483682][ T9173] Memory cgroup stats for /syz8 [ 178.519355][T10265] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2321: couldn't read orphan inode 15 (err -117) [ 178.527809][ T9173] : [ 178.536249][T10265] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.567616][ T9173] cache 0 [ 178.633166][ T9173] rss 0 [ 178.636046][ T9173] shmem 0 [ 178.639206][ T9173] mapped_file 0 [ 178.642953][ T9173] dirty 0 [ 178.645955][ T9173] writeback 0 [ 178.649309][ T9173] workingset_refault_anon 3 [ 178.654095][ T9173] workingset_refault_file 0 [ 178.660346][ T9173] swap 270336 [ 178.663695][ T9173] swapcached 12288 [ 178.667578][ T9173] pgpgin 19843 [ 178.671407][ T9173] pgpgout 19840 [ 178.675174][ T9173] pgfault 24245 [ 178.678682][ T9173] pgmajfault 0 [ 178.682121][ T9173] inactive_anon 12288 [ 178.686577][ T9173] active_anon 0 [ 178.691496][ T9173] inactive_file 0 [ 178.692703][T10272] vhci_hcd: connection closed [ 178.695388][ T9173] active_file 0 [ 178.695399][ T9173] unevictable 0 [ 178.695409][ T9173] hierarchical_memory_limit 314572800 [ 178.713097][ T9173] hierarchical_memsw_limit 9223372036854771712 [ 178.721452][ T9173] total_cache 0 [ 178.725185][ T9173] total_rss 0 [ 178.728669][ T9173] total_shmem 0 [ 178.732182][ T9173] total_mapped_file 0 [ 178.736180][ T9173] total_dirty 0 [ 178.739685][ T9173] total_writeback 0 [ 178.744416][ T9173] total_workingset_refault_anon 3 [ 178.751227][ T9173] total_workingset_refault_file 0 [ 178.753832][T10284] loop9: detected capacity change from 0 to 512 [ 178.756351][ T9173] total_swap 270336 [ 178.756362][ T9173] total_swapcached 12288 [ 178.756372][ T9173] total_pgpgin 19843 [ 178.764296][T10284] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 178.766523][ T9173] total_pgpgout 19840 [ 178.766534][ T9173] total_pgfault 24245 [ 178.766544][ T9173] total_pgmajfault 0 [ 178.773463][ T70] vhci_hcd: stop threads [ 178.774968][ T9173] total_inactive_anon 12288 [ 178.774980][ T9173] total_active_anon 0 [ 178.774989][ T9173] total_inactive_file 0 [ 178.785120][ T70] vhci_hcd: release socket [ 178.785135][ T70] vhci_hcd: disconnect device [ 178.786726][T10284] EXT4-fs (loop9): 1 truncate cleaned up [ 178.790380][ T9173] total_active_file 0 [ 178.790392][ T9173] total_unevictable 0 [ 178.790401][ T9173] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 178.796120][T10284] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.798454][ T9173] ,cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2311,pid=10239,uid=0 [ 178.872717][ T9173] Memory cgroup out of memory: Killed process 10239 (syz.8.2311) total-vm:95796kB, anon-rss:936kB, file-rss:22572kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 178.891095][ T8110] vhci_hcd: vhci_device speed not set [ 178.892930][ T8470] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.058657][ T9814] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.133243][T10304] netlink: 'syz.9.2332': attribute type 7 has an invalid length. [ 179.141089][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2332'. [ 179.301403][T10314] lo speed is unknown, defaulting to 1000 [ 179.364341][T10318] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 179.443918][T10318] loop9: detected capacity change from 0 to 512 [ 179.529299][T10331] 9pnet_fd: Insufficient options for proto=fd [ 179.556999][T10338] netlink: 'syz.9.2347': attribute type 7 has an invalid length. [ 179.565606][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2347'. [ 179.647887][T10343] netlink: 'syz.9.2349': attribute type 7 has an invalid length. [ 179.656048][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2349'. [ 179.718665][T10349] loop9: detected capacity change from 0 to 736 [ 179.995257][T10357] rdma_rxe: rxe_newlink: failed to add lo [ 180.017756][T10357] loop8: detected capacity change from 0 to 2048 [ 180.052506][T10357] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.079356][ T9814] rock: directory entry would overflow storage [ 180.085678][ T9814] rock: sig=0x5850, size=36, remaining=14 [ 180.108554][T10366] netlink: 55631 bytes leftover after parsing attributes in process `syz.9.2356'. [ 180.109309][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2357'. [ 180.172454][T10371] loop9: detected capacity change from 0 to 1024 [ 180.203235][T10371] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.216239][T10371] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.270408][T10377] netlink: 'syz.7.2360': attribute type 7 has an invalid length. [ 180.286689][ T9814] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.346646][T10385] loop7: detected capacity change from 0 to 164 [ 180.355512][T10385] ISOFS: unable to read i-node block [ 180.361169][T10385] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 180.427406][T10391] FAULT_INJECTION: forcing a failure. [ 180.427406][T10391] name failslab, interval 1, probability 0, space 0, times 0 [ 180.440249][T10391] CPU: 1 UID: 0 PID: 10391 Comm: syz.7.2367 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 180.440334][T10391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 180.440350][T10391] Call Trace: [ 180.440359][T10391] [ 180.440369][T10391] __dump_stack+0x1d/0x30 [ 180.440395][T10391] dump_stack_lvl+0xe8/0x140 [ 180.440437][T10391] dump_stack+0x15/0x1b [ 180.440464][T10391] should_fail_ex+0x265/0x280 [ 180.440528][T10391] should_failslab+0x8c/0xb0 [ 180.440563][T10391] kmem_cache_alloc_noprof+0x50/0x310 [ 180.440657][T10391] ? skb_clone+0x151/0x1f0 [ 180.440680][T10391] ? __bpf_redirect+0x67f/0x990 [ 180.440703][T10391] skb_clone+0x151/0x1f0 [ 180.440769][T10391] bpf_clone_redirect+0x7a/0x200 [ 180.440792][T10391] bpf_prog_973cd02a7a0e8181+0x5f/0x64 [ 180.440809][T10391] ? should_fail_ex+0x30/0x280 [ 180.440837][T10391] ? __rcu_read_unlock+0x4f/0x70 [ 180.440857][T10391] ? avc_has_perm_noaudit+0x1b1/0x200 [ 180.440950][T10391] ? avc_has_perm+0xd3/0x150 [ 180.441058][T10391] ? __rcu_read_unlock+0x4f/0x70 [ 180.441081][T10391] ? is_bpf_text_address+0x141/0x160 [ 180.441166][T10391] ? kernel_text_address+0x94/0xb0 [ 180.441198][T10391] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 180.441235][T10391] ? __kernel_text_address+0xd/0x40 [ 180.441265][T10391] ? unwind_get_return_address+0x16/0x40 [ 180.441322][T10391] ? arch_stack_walk+0xfc/0x150 [ 180.441394][T10391] ? filter_irq_stacks+0x1d/0x70 [ 180.441425][T10391] ? stack_depot_save_flags+0xa3f/0xb10 [ 180.441517][T10391] ? bpf_test_timer_continue+0xc0/0x260 [ 180.441558][T10391] bpf_test_run+0x1e0/0x490 [ 180.441586][T10391] ? __list_add_valid_or_report+0x38/0xe0 [ 180.441631][T10391] ? bpf_test_run+0xf6/0x490 [ 180.441678][T10391] bpf_prog_test_run_skb+0x834/0xbd0 [ 180.441723][T10391] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 180.441798][T10391] bpf_prog_test_run+0x207/0x390 [ 180.441864][T10391] __sys_bpf+0x3dc/0x790 [ 180.441907][T10391] __x64_sys_bpf+0x41/0x50 [ 180.441939][T10391] x64_sys_call+0x2478/0x2fb0 [ 180.441963][T10391] do_syscall_64+0xd0/0x1a0 [ 180.442113][T10391] ? clear_bhb_loop+0x25/0x80 [ 180.442140][T10391] ? clear_bhb_loop+0x25/0x80 [ 180.442167][T10391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.442191][T10391] RIP: 0033:0x7f58c625e969 [ 180.442208][T10391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.442231][T10391] RSP: 002b:00007f58c48c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.442316][T10391] RAX: ffffffffffffffda RBX: 00007f58c6485fa0 RCX: 00007f58c625e969 [ 180.442329][T10391] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 180.442398][T10391] RBP: 00007f58c48c7090 R08: 0000000000000000 R09: 0000000000000000 [ 180.442415][T10391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.442427][T10391] R13: 0000000000000000 R14: 00007f58c6485fa0 R15: 00007ffc307a4358 [ 180.442494][T10391] [ 180.580791][T10357] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 180.580916][T10357] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 180.581014][T10357] EXT4-fs (loop8): This should not happen!! Data will be lost [ 180.581014][T10357] [ 180.581038][T10357] EXT4-fs (loop8): Total free blocks count 0 [ 180.581117][T10357] EXT4-fs (loop8): Free/Dirty block details [ 180.581131][T10357] EXT4-fs (loop8): free_blocks=2415919104 [ 180.581148][T10357] EXT4-fs (loop8): dirty_blocks=8208 [ 180.581159][T10357] EXT4-fs (loop8): Block reservation details [ 180.581217][T10357] EXT4-fs (loop8): i_reserved_data_blocks=513 [ 180.693187][ T9173] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /75/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 180.945499][ T7224] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 180.972130][ T7145] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.070591][T10404] netlink: 'syz.1.2373': attribute type 7 has an invalid length. [ 181.079875][ T7145] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.097984][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 181.097999][ T29] audit: type=1400 audit(1746621803.041:6746): avc: denied { create } for pid=10403 comm="syz.1.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 181.125786][ T29] audit: type=1400 audit(1746621803.041:6747): avc: denied { write } for pid=10403 comm="syz.1.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 181.147341][ T29] audit: type=1400 audit(1746621803.041:6748): avc: denied { bind } for pid=10403 comm="syz.1.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 181.167294][ T29] audit: type=1400 audit(1746621803.041:6749): avc: denied { write } for pid=10403 comm="syz.1.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 181.211764][ T29] audit: type=1400 audit(1746621803.161:6750): avc: denied { mounton } for pid=10407 comm="syz.1.2375" path="/563/bus" dev="tmpfs" ino=3030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 181.236555][ T7145] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.258918][ T29] audit: type=1400 audit(1746621803.201:6751): avc: denied { execmem } for pid=10409 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 181.351077][ T7145] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.370740][ T29] audit: type=1400 audit(1746621803.231:6752): avc: denied { open } for pid=10410 comm="syz.1.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 181.390310][ T29] audit: type=1400 audit(1746621803.231:6753): avc: denied { kernel } for pid=10410 comm="syz.1.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 181.411717][ T29] audit: type=1400 audit(1746621803.251:6754): avc: denied { read } for pid=10412 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 181.433601][ T29] audit: type=1400 audit(1746621803.251:6755): avc: denied { open } for pid=10412 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 181.546930][T10412] lo speed is unknown, defaulting to 1000 [ 181.570427][ T7145] bridge_slave_1: left allmulticast mode [ 181.576182][ T7145] bridge_slave_1: left promiscuous mode [ 181.582138][ T7145] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.621697][ T7145] bridge_slave_0: left allmulticast mode [ 181.627539][ T7145] bridge_slave_0: left promiscuous mode [ 181.633345][ T7145] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.788255][T10439] netlink: 'syz.1.2385': attribute type 7 has an invalid length. [ 181.901492][ T7145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.911707][ T7145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.922829][ T7145] bond0 (unregistering): Released all slaves [ 181.933758][T10441] ip6gre3: entered allmulticast mode [ 182.029715][T10459] loop7: detected capacity change from 0 to 2048 [ 182.044804][T10463] netlink: 'syz.3.2393': attribute type 8 has an invalid length. [ 182.063495][T10459] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.065082][T10463] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.083015][T10463] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.099162][T10463] bridge0: entered allmulticast mode [ 182.161896][ T7145] hsr_slave_0: left promiscuous mode [ 182.168027][ T7145] hsr_slave_1: left promiscuous mode [ 182.175113][ T7145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.182710][ T7145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.195471][ T7145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.203316][ T7145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.221013][ T7145] veth1_macvtap: left promiscuous mode [ 182.227609][ T7145] veth0_macvtap: left promiscuous mode [ 182.235607][ T7145] veth1_vlan: left promiscuous mode [ 182.244864][ T7145] veth0_vlan: left promiscuous mode [ 182.261900][ T8470] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.299649][T10479] loop7: detected capacity change from 0 to 512 [ 182.323603][T10479] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.342648][T10479] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.384431][T10479] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.2397: corrupted inode contents [ 182.403245][ T7145] team0 (unregistering): Port device team_slave_1 removed [ 182.416088][ T7145] team0 (unregistering): Port device team_slave_0 removed [ 182.424562][T10479] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #2: comm syz.7.2397: mark_inode_dirty error [ 182.438321][T10479] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.2397: corrupted inode contents [ 182.463302][ T8470] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.477216][T10477] __nla_validate_parse: 12 callbacks suppressed [ 182.477237][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2396'. [ 182.493357][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2396'. [ 182.595956][T10412] chnl_net:caif_netlink_parms(): no params data found [ 182.626602][T10495] x_tables: ip_tables: limit.0 match: invalid size 40 (kernel) != (user) 48 [ 182.630826][T10494] netlink: 'syz.3.2401': attribute type 7 has an invalid length. [ 182.644955][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2401'. [ 182.820013][T10502] ip6gre1: entered allmulticast mode [ 182.874391][T10511] netlink: 'syz.3.2406': attribute type 8 has an invalid length. [ 182.882985][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2406'. [ 182.965608][T10412] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.972831][T10412] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.992193][T10412] bridge_slave_0: entered allmulticast mode [ 182.999030][T10412] bridge_slave_0: entered promiscuous mode [ 183.053076][T10412] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.060663][T10412] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.092637][T10412] bridge_slave_1: entered allmulticast mode [ 183.105795][T10412] bridge_slave_1: entered promiscuous mode [ 183.146093][T10412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.179750][T10412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.249745][T10412] team0: Port device team_slave_0 added [ 183.257431][T10412] team0: Port device team_slave_1 added [ 183.299051][T10412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.306302][T10412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.333122][T10412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.357317][T10412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.364379][T10412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.390724][T10412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.455008][T10538] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2412'. [ 183.458554][T10412] hsr_slave_0: entered promiscuous mode [ 183.478359][T10412] hsr_slave_1: entered promiscuous mode [ 183.481108][T10534] loop7: detected capacity change from 0 to 8192 [ 183.487915][T10412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.498842][T10534] vfat: Unknown parameter '&ó #ó0»!T—.yÕ„¯÷—Ž£ ÎÆ°*Æì ì#Ë' [ 183.507311][T10537] netlink: 'syz.3.2413': attribute type 7 has an invalid length. [ 183.515144][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2413'. [ 183.531144][T10412] Cannot create hsr debugfs directory [ 183.590374][T10543] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 183.771168][T10553] ip6gre3: entered allmulticast mode [ 183.852975][T10555] netlink: 'syz.7.2420': attribute type 1 has an invalid length. [ 183.921049][T10412] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.960428][T10412] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.973255][T10558] loop7: detected capacity change from 0 to 8192 [ 183.983443][T10412] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.992937][T10412] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 184.010590][T10558] vfat: Unknown parameter '&ó #ó0»!T—.yÕ„¯÷—Ž£ ÎÆ°*Æì ì#Ë' [ 184.034373][T10564] loop9: detected capacity change from 0 to 1024 [ 184.042511][T10564] EXT4-fs: Ignoring removed bh option [ 184.048143][T10564] EXT4-fs: inline encryption not supported [ 184.075721][T10564] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 184.109817][T10564] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842e018, mo2=0000] [ 184.135954][T10564] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.2425: bad orphan inode 11 [ 184.150683][T10412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.198905][T10574] netlink: 'syz.1.2428': attribute type 29 has an invalid length. [ 184.208874][T10412] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.217186][T10564] ext4_test_bit(bit=10, block=4) = 1 [ 184.222720][T10564] is_bad_inode(inode)=0 [ 184.227097][T10564] NEXT_ORPHAN(inode)=3254779904 [ 184.232127][T10564] max_ino=32 [ 184.235834][T10564] i_nlink=0 [ 184.270625][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.278010][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.286326][T10564] EXT4-fs error (device loop9): ext4_map_blocks:675: inode #3: block 2: comm syz.9.2425: lblock 2 mapped to illegal pblock 2 (length 1) [ 184.298788][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.307717][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.330877][T10564] EXT4-fs error (device loop9): ext4_map_blocks:675: inode #3: block 48: comm syz.9.2425: lblock 0 mapped to illegal pblock 48 (length 1) [ 184.365630][T10564] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.2425: Failed to acquire dquot type 0 [ 184.366502][T10412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 184.387859][T10412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.404109][T10564] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 184.420264][T10586] 9pnet: Could not find request transport: 0xffffffffffffffff [ 184.434650][T10582] tipc: Started in network mode [ 184.439629][T10582] tipc: Node identity 7, cluster identity 4711 [ 184.446246][T10582] tipc: Node number set to 7 [ 184.461009][T10564] EXT4-fs error (device loop9): ext4_evict_inode:259: inode #11: comm syz.9.2425: mark_inode_dirty error [ 184.493564][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2426'. [ 184.506865][T10564] EXT4-fs warning (device loop9): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 184.521533][T10564] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.538190][T10567] macvlan2: entered promiscuous mode [ 184.543802][T10567] bridge0: entered promiscuous mode [ 184.565268][ T9814] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.617067][T10412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.631766][ T9814] EXT4-fs error (device loop9): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 184.676199][ T9814] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 184.702123][ T9814] EXT4-fs error (device loop9): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 184.751777][T10601] loop7: detected capacity change from 0 to 8192 [ 184.761797][T10601] vfat: Unknown parameter '&ó #ó0»!T—.yÕ„¯÷—Ž£ ÎÆ°*Æì ì#Ë' [ 184.873828][T10412] veth0_vlan: entered promiscuous mode [ 184.908933][T10412] veth1_vlan: entered promiscuous mode [ 184.997746][T10412] veth0_macvtap: entered promiscuous mode [ 185.017669][T10412] veth1_macvtap: entered promiscuous mode [ 185.059764][T10412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.070488][T10412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.080881][T10412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.091511][T10412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.196062][T10412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.228780][T10633] bond3 (unregistering): Released all slaves [ 185.275483][T10412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.286225][T10412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.296315][T10412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.306937][T10412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.314314][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2445'. [ 185.325551][T10412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.334877][T10412] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.343879][T10412] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.353052][T10412] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.362003][T10412] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.401799][T10647] loop9: detected capacity change from 0 to 512 [ 185.439707][T10647] EXT4-fs: Mount option(s) incompatible with ext3 [ 185.459336][T10656] @ÿ: renamed from bond_slave_0 [ 185.492433][T10661] loop7: detected capacity change from 0 to 512 [ 185.530550][T10661] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 185.543616][T10661] EXT4-fs (loop7): 1 truncate cleaned up [ 185.550308][T10661] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.621989][T10679] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 185.650220][T10682] loop9: detected capacity change from 0 to 256 [ 185.657496][T10682] FAT-fs (loop9): invalid media value (0x00) [ 185.663739][T10682] FAT-fs (loop9): Can't find a valid FAT filesystem [ 185.691930][T10684] loop4: detected capacity change from 0 to 512 [ 185.710762][ T8470] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.721129][T10684] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 185.760493][T10684] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 185.768702][T10684] System zones: 1-12 [ 185.774368][T10684] EXT4-fs (loop4): 1 truncate cleaned up [ 185.780931][T10684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.796668][T10670] loop9: detected capacity change from 0 to 512 [ 185.832325][T10412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.866674][T10695] loop4: detected capacity change from 0 to 512 [ 185.875340][T10695] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 185.899414][T10695] EXT4-fs (loop4): 1 truncate cleaned up [ 185.924902][T10695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.295526][T10412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.324109][T10713] futex_wake_op: syz.1.2464 tries to shift op by -1; fix this program [ 186.351944][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 186.351960][ T29] audit: type=1400 audit(1746621808.301:7004): avc: denied { bind } for pid=10693 comm="syz.1.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 186.443848][ T29] audit: type=1326 audit(1746621808.341:7005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.1.2464" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a8580e969 code=0x0 [ 186.467197][ T29] audit: type=1400 audit(1746621808.371:7006): avc: denied { create } for pid=10716 comm="syz.4.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 186.486954][ T29] audit: type=1400 audit(1746621808.371:7007): avc: denied { bind } for pid=10716 comm="syz.4.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 186.524098][T10721] FAULT_INJECTION: forcing a failure. [ 186.524098][T10721] name failslab, interval 1, probability 0, space 0, times 0 [ 186.536834][T10721] CPU: 0 UID: 0 PID: 10721 Comm: syz.4.2473 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 186.536862][T10721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 186.536874][T10721] Call Trace: [ 186.536881][T10721] [ 186.536890][T10721] __dump_stack+0x1d/0x30 [ 186.536978][T10721] dump_stack_lvl+0xe8/0x140 [ 186.537002][T10721] dump_stack+0x15/0x1b [ 186.537024][T10721] should_fail_ex+0x265/0x280 [ 186.537109][T10721] should_failslab+0x8c/0xb0 [ 186.537143][T10721] kmem_cache_alloc_node_noprof+0x57/0x320 [ 186.537186][T10721] ? __alloc_skb+0x101/0x320 [ 186.537225][T10721] __alloc_skb+0x101/0x320 [ 186.537265][T10721] ? audit_log_start+0x365/0x6c0 [ 186.537320][T10721] audit_log_start+0x380/0x6c0 [ 186.537361][T10721] audit_seccomp+0x48/0x100 [ 186.537401][T10721] ? __seccomp_filter+0x68c/0x10d0 [ 186.537420][T10721] __seccomp_filter+0x69d/0x10d0 [ 186.537443][T10721] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 186.537512][T10721] ? vfs_write+0x75e/0x8d0 [ 186.537629][T10721] ? __rcu_read_unlock+0x4f/0x70 [ 186.537656][T10721] ? __fget_files+0x184/0x1c0 [ 186.537695][T10721] __secure_computing+0x82/0x150 [ 186.537721][T10721] syscall_trace_enter+0xcf/0x1e0 [ 186.537750][T10721] do_syscall_64+0xaa/0x1a0 [ 186.537771][T10721] ? clear_bhb_loop+0x25/0x80 [ 186.537824][T10721] ? clear_bhb_loop+0x25/0x80 [ 186.537851][T10721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.537877][T10721] RIP: 0033:0x7faa4036e969 [ 186.537891][T10721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.537913][T10721] RSP: 002b:00007faa3e9d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 186.537966][T10721] RAX: ffffffffffffffda RBX: 00007faa40595fa0 RCX: 00007faa4036e969 [ 186.537995][T10721] RDX: 0000200000000040 RSI: 000000000000003d RDI: 0000000000000001 [ 186.538010][T10721] RBP: 00007faa3e9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 186.538023][T10721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.538034][T10721] R13: 0000000000000000 R14: 00007faa40595fa0 R15: 00007ffd06be2938 [ 186.538052][T10721] [ 186.538060][T10721] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 186.642049][ T29] audit: type=1326 audit(1746621808.391:7008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10718 comm="syz.4.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4036e969 code=0x7ffc0000 [ 186.644469][T10721] audit: out of memory in audit_log_start [ 186.799780][ T29] audit: type=1326 audit(1746621808.391:7009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10718 comm="syz.4.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4036e969 code=0x7ffc0000 [ 186.823480][ T29] audit: type=1326 audit(1746621808.391:7010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10718 comm="syz.4.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa4036e969 code=0x7ffc0000 [ 186.847173][ T29] audit: type=1326 audit(1746621808.391:7011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10718 comm="syz.4.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4036e969 code=0x7ffc0000 [ 186.990355][T10736] loop4: detected capacity change from 0 to 512 [ 187.027559][T10736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.041622][T10736] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.054691][T10736] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2478: corrupted xattr block 32: invalid header [ 187.078614][T10750] lo speed is unknown, defaulting to 1000 [ 187.088713][T10751] netlink: 'syz.9.2485': attribute type 7 has an invalid length. [ 187.096792][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2485'. [ 187.110908][T10736] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 187.125587][T10736] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2478: corrupted xattr block 32: invalid header [ 187.160386][T10753] rdma_rxe: rxe_newlink: failed to add lo [ 187.183219][T10736] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 187.185155][T10760] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2478: corrupted xattr block 32: invalid header [ 187.207384][T10760] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 187.217503][T10736] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2478: corrupted xattr block 32: invalid header [ 187.233850][T10736] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 187.272896][T10736] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2478: corrupted xattr block 32: invalid header [ 187.274083][T10758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2486'. [ 187.322069][T10736] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2478: corrupted xattr block 32: invalid header [ 187.340748][T10736] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 187.575647][T10755] lo speed is unknown, defaulting to 1000 [ 187.835125][T10412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.961553][T10791] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2498'. [ 187.993458][T10790] netlink: 'syz.3.2497': attribute type 7 has an invalid length. [ 188.001687][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2497'. [ 188.035022][T10793] rdma_rxe: rxe_newlink: failed to add lo [ 188.051129][T10793] loop4: detected capacity change from 0 to 2048 [ 188.082148][T10791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.098907][T10793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.113176][T10791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.296481][T10806] loop7: detected capacity change from 0 to 1024 [ 188.314018][T10812] lo speed is unknown, defaulting to 1000 [ 188.338360][T10806] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 188.377892][T10806] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 188.415358][T10806] JBD2: no valid journal superblock found [ 188.451901][T10806] EXT4-fs (loop7): Could not load journal inode [ 188.737433][T10820] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 188.834722][T10793] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 188.876830][T10793] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 188.891059][T10793] EXT4-fs (loop4): This should not happen!! Data will be lost [ 188.891059][T10793] [ 188.900919][T10793] EXT4-fs (loop4): Total free blocks count 0 [ 188.906912][T10793] EXT4-fs (loop4): Free/Dirty block details [ 188.912872][T10793] EXT4-fs (loop4): free_blocks=2415919104 [ 188.918625][T10793] EXT4-fs (loop4): dirty_blocks=7168 [ 188.925430][T10793] EXT4-fs (loop4): Block reservation details [ 188.931625][T10793] EXT4-fs (loop4): i_reserved_data_blocks=448 [ 188.967256][ T7145] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 189.042496][T10826] netlink: 'syz.9.2510': attribute type 1 has an invalid length. [ 189.282536][T10828] netlink: 'syz.4.2511': attribute type 7 has an invalid length. [ 189.291091][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2511'. [ 189.337370][T10816] syz.1.2507 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 189.348651][T10816] CPU: 0 UID: 0 PID: 10816 Comm: syz.1.2507 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 189.348681][T10816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 189.348744][T10816] Call Trace: [ 189.348751][T10816] [ 189.348759][T10816] __dump_stack+0x1d/0x30 [ 189.348786][T10816] dump_stack_lvl+0xe8/0x140 [ 189.348804][T10816] dump_stack+0x15/0x1b [ 189.348820][T10816] dump_header+0x81/0x220 [ 189.348853][T10816] oom_kill_process+0x334/0x3f0 [ 189.348878][T10816] out_of_memory+0x979/0xb80 [ 189.348968][T10816] mem_cgroup_out_of_memory+0x13d/0x190 [ 189.349002][T10816] try_charge_memcg+0x5e2/0x870 [ 189.349068][T10816] charge_memcg+0x51/0xc0 [ 189.349114][T10816] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 189.349144][T10816] __read_swap_cache_async+0x1df/0x350 [ 189.349251][T10816] swap_cluster_readahead+0x277/0x3e0 [ 189.349333][T10816] swapin_readahead+0xde/0x6f0 [ 189.349355][T10816] ? __filemap_get_folio+0x49f/0x650 [ 189.349379][T10816] ? __rcu_read_unlock+0x34/0x70 [ 189.349402][T10816] ? swap_cache_get_folio+0x77/0x200 [ 189.349517][T10816] do_swap_page+0x301/0x2460 [ 189.349558][T10816] ? cgroup_rstat_updated+0xa3/0x510 [ 189.349648][T10816] ? __pfx_default_wake_function+0x10/0x10 [ 189.349673][T10816] handle_mm_fault+0xb60/0x2ae0 [ 189.349780][T10816] ? mas_walk+0xf2/0x120 [ 189.349805][T10816] do_user_addr_fault+0x636/0x1090 [ 189.349841][T10816] ? restore_fpregs_from_fpstate+0x61/0x120 [ 189.349891][T10816] ? fpregs_restore_userregs+0xbb/0x190 [ 189.349918][T10816] exc_page_fault+0x54/0xc0 [ 189.349950][T10816] asm_exc_page_fault+0x26/0x30 [ 189.349996][T10816] RIP: 0033:0x7f1a856e53ac [ 189.350011][T10816] Code: 66 0f 1f 44 00 00 69 3d 06 03 e8 00 e8 03 00 00 48 8d 1d 07 0c 35 00 e8 22 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 189.350057][T10816] RSP: 002b:00007ffd11acd830 EFLAGS: 00010283 [ 189.350075][T10816] RAX: 0000000000000000 RBX: 00007f1a85a36080 RCX: 0000000000000000 [ 189.350157][T10816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558baf8808 [ 189.350171][T10816] RBP: 00007f1a85a37ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 189.350186][T10816] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002e3f0 [ 189.350200][T10816] R13: 00007f1a85a36080 R14: ffffffffffffffff R15: 00007ffd11acd940 [ 189.350224][T10816] [ 189.587560][T10816] memory: usage 140304kB, limit 307200kB, failcnt 6946 [ 189.594624][T10816] memory+swap: usage 157220kB, limit 9007199254740988kB, failcnt 0 [ 189.602938][T10816] kmem: usage 140284kB, limit 9007199254740988kB, failcnt 0 [ 189.612006][T10816] Memory cgroup stats for /syz1: [ 189.646125][T10816] cache 4096 [ 189.654888][T10816] rss 8192 [ 189.658104][T10816] shmem 0 [ 189.661094][T10816] mapped_file 4096 [ 189.664836][T10816] dirty 0 [ 189.667836][T10816] writeback 0 [ 189.671512][T10816] workingset_refault_anon 71 [ 189.676273][T10816] workingset_refault_file 2162 [ 189.681096][T10816] swap 17326080 [ 189.684575][T10816] swapcached 12288 [ 189.688311][T10816] pgpgin 432187 [ 189.691925][T10816] pgpgout 432183 [ 189.695548][T10816] pgfault 317130 [ 189.699145][T10816] pgmajfault 45 [ 189.702757][T10816] inactive_anon 0 [ 189.706614][T10816] active_anon 12288 [ 189.710624][T10816] inactive_file 0 [ 189.714428][T10816] active_file 4096 [ 189.718721][T10816] unevictable 0 [ 189.722231][T10816] hierarchical_memory_limit 314572800 [ 189.728018][T10816] hierarchical_memsw_limit 9223372036854771712 [ 189.734407][T10816] total_cache 4096 [ 189.738197][T10816] total_rss 8192 [ 189.741816][T10816] total_shmem 0 [ 189.745290][T10816] total_mapped_file 4096 [ 189.749567][T10816] total_dirty 0 [ 189.753042][T10816] total_writeback 0 [ 189.756951][T10816] total_workingset_refault_anon 71 [ 189.762177][T10816] total_workingset_refault_file 2162 [ 189.767567][T10816] total_swap 17326080 [ 189.771653][T10816] total_swapcached 12288 [ 189.775910][T10816] total_pgpgin 432187 [ 189.779943][T10816] total_pgpgout 432183 [ 189.784062][T10816] total_pgfault 317130 [ 189.788316][T10816] total_pgmajfault 45 [ 189.792325][T10816] total_inactive_anon 0 [ 189.796693][T10816] total_active_anon 12288 [ 189.801079][T10816] total_inactive_file 0 [ 189.805301][T10816] total_active_file 4096 [ 189.809580][T10816] total_unevictable 0 [ 189.813890][T10816] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2507,pid=10816,uid=0 [ 189.828878][T10816] Memory cgroup out of memory: Killed process 10816 (syz.1.2507) total-vm:93748kB, anon-rss:936kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 190.026752][T10847] loop9: detected capacity change from 0 to 512 [ 190.042791][T10849] loop7: detected capacity change from 0 to 512 [ 190.052494][T10847] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 190.061842][T10847] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 190.084222][T10849] EXT4-fs (loop7): orphan cleanup on readonly fs [ 190.092971][T10847] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 190.102651][T10847] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 190.113001][T10849] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm gtp: bg 0: block 248: padding at end of block bitmap is not set [ 190.127418][T10849] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm gtp: Failed to acquire dquot type 1 [ 190.130534][T10847] System zones: 0-2, 18-18, 34-34 [ 190.147325][T10847] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 190.162787][T10849] EXT4-fs (loop7): 1 truncate cleaned up [ 190.179841][T10849] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.189682][T10847] EXT4-fs (loop9): 1 truncate cleaned up [ 190.198504][T10847] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.307487][ T9814] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.383792][T10868] lo speed is unknown, defaulting to 1000 [ 190.767669][ T8470] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.924810][T10896] netlink: 'syz.7.2533': attribute type 4 has an invalid length. [ 190.938546][T10879] lo speed is unknown, defaulting to 1000 [ 191.113499][T10912] loop7: detected capacity change from 0 to 1024 [ 191.124106][T10912] EXT4-fs: dax option not supported [ 191.228831][ T7145] team0: Port device gre1 removed [ 191.283560][T10925] usb usb1: usbfs: process 10925 (syz.7.2543) did not claim interface 0 before use [ 191.314705][T10922] loop9: detected capacity change from 0 to 8192 [ 191.321998][T10922] vfat: Unknown parameter '&ó #ó0»!T—.yÕ„¯÷—Ž£ ÎÆ°*Æì ì#Ë' [ 191.386463][T10929] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2546'. [ 191.773881][ T29] kauditd_printk_skb: 470 callbacks suppressed [ 191.773898][ T29] audit: type=1400 audit(1746621813.721:7480): avc: denied { bind } for pid=10933 comm="syz.3.2548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 191.880892][ T7145] bond0 (unregistering): Released all slaves [ 191.891052][ T7145] bond1 (unregistering): Released all slaves [ 191.909575][ T7145] bond2 (unregistering): Released all slaves [ 192.025524][T10879] chnl_net:caif_netlink_parms(): no params data found [ 192.062994][ T29] audit: type=1400 audit(1746621814.011:7481): avc: denied { mount } for pid=10939 comm="syz.4.2550" name="/" dev="configfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 192.094521][ T29] audit: type=1400 audit(1746621814.041:7482): avc: denied { search } for pid=10939 comm="syz.4.2550" name="/" dev="configfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.117958][ T29] audit: type=1400 audit(1746621814.041:7483): avc: denied { read } for pid=10939 comm="syz.4.2550" name="/" dev="configfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.141458][ T29] audit: type=1400 audit(1746621814.041:7484): avc: denied { open } for pid=10939 comm="syz.4.2550" path="/" dev="configfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.174206][T10945] FAULT_INJECTION: forcing a failure. [ 192.174206][T10945] name failslab, interval 1, probability 0, space 0, times 0 [ 192.187362][T10945] CPU: 1 UID: 0 PID: 10945 Comm: syz.7.2552 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 192.187468][T10945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 192.187484][T10945] Call Trace: [ 192.187553][T10945] [ 192.187562][T10945] __dump_stack+0x1d/0x30 [ 192.187588][T10945] dump_stack_lvl+0xe8/0x140 [ 192.187612][T10945] dump_stack+0x15/0x1b [ 192.187632][T10945] should_fail_ex+0x265/0x280 [ 192.187705][T10945] ? alloc_fdtable+0x74/0x1b0 [ 192.187735][T10945] should_failslab+0x8c/0xb0 [ 192.187769][T10945] __kmalloc_cache_noprof+0x4c/0x320 [ 192.187795][T10945] alloc_fdtable+0x74/0x1b0 [ 192.187822][T10945] dup_fd+0x4c7/0x540 [ 192.187898][T10945] ? __pfx___bpf_trace_sys_enter+0x10/0x10 [ 192.187928][T10945] ksys_unshare+0x346/0x6d0 [ 192.188000][T10945] ? trace_sys_enter+0xd0/0x110 [ 192.188021][T10945] __x64_sys_unshare+0x1f/0x30 [ 192.188133][T10945] x64_sys_call+0x2d4b/0x2fb0 [ 192.188208][T10945] do_syscall_64+0xd0/0x1a0 [ 192.188265][T10945] ? clear_bhb_loop+0x25/0x80 [ 192.188284][T10945] ? clear_bhb_loop+0x25/0x80 [ 192.188303][T10945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.188358][T10945] RIP: 0033:0x7f58c625e969 [ 192.188371][T10945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.188391][T10945] RSP: 002b:00007f58c48c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 192.188413][T10945] RAX: ffffffffffffffda RBX: 00007f58c6485fa0 RCX: 00007f58c625e969 [ 192.188477][T10945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020060400 [ 192.188489][T10945] RBP: 00007f58c48c7090 R08: 0000000000000000 R09: 0000000000000000 [ 192.188504][T10945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.188519][T10945] R13: 0000000000000000 R14: 00007f58c6485fa0 R15: 00007ffc307a4358 [ 192.188616][T10945] [ 192.382958][ T7145] hsr_slave_0: left promiscuous mode [ 192.399791][ T7145] hsr_slave_1: left promiscuous mode [ 192.461978][ T29] audit: type=1326 audit(1746621814.411:7485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10953 comm="syz.9.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ea06e969 code=0x7ffc0000 [ 192.514788][T10952] lo speed is unknown, defaulting to 1000 [ 192.531918][ T29] audit: type=1326 audit(1746621814.431:7486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10953 comm="syz.9.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95ea06e969 code=0x7ffc0000 [ 192.555808][ T29] audit: type=1326 audit(1746621814.431:7487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10953 comm="syz.9.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ea06e969 code=0x7ffc0000 [ 192.579870][ T29] audit: type=1326 audit(1746621814.441:7488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10953 comm="syz.9.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95ea06e969 code=0x7ffc0000 [ 192.604457][ T29] audit: type=1326 audit(1746621814.441:7489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10953 comm="syz.9.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ea06e969 code=0x7ffc0000 [ 192.647353][T10879] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.654678][T10879] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.662040][T10879] bridge_slave_0: entered allmulticast mode [ 192.671304][T10879] bridge_slave_0: entered promiscuous mode [ 192.682673][T10879] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.689794][T10879] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.697251][T10879] bridge_slave_1: entered allmulticast mode [ 192.704797][T10879] bridge_slave_1: entered promiscuous mode [ 192.733381][T10879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.744179][T10879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.824949][T10879] team0: Port device team_slave_0 added [ 192.837526][T10971] netlink: 'syz.3.2561': attribute type 7 has an invalid length. [ 192.841944][T10879] team0: Port device team_slave_1 added [ 192.845460][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2561'. [ 192.870810][T10967] loop9: detected capacity change from 0 to 1024 [ 192.901108][T10967] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 192.913479][T10967] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 192.924189][T10977] veth0_macvtap: left promiscuous mode [ 192.933738][T10977] macvtap0: refused to change device tx_queue_len [ 192.943332][T10967] JBD2: no valid journal superblock found [ 192.950543][T10967] EXT4-fs (loop9): Could not load journal inode [ 192.959896][T10879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.967010][T10879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.993982][T10879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.028744][T10879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.035859][T10879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.062597][T10879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.142381][T10982] loop7: detected capacity change from 0 to 2048 [ 193.150241][T10986] netlink: 'syz.9.2569': attribute type 10 has an invalid length. [ 193.150374][ T7145] IPVS: stop unused estimator thread 0... [ 193.176028][T10986] batman_adv: batadv0: Adding interface: team0 [ 193.182458][T10986] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.208027][T10986] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 193.225842][T10982] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.246826][T10986] 9pnet_virtio: no channels available for device 127.0.0.1 [ 193.252003][T10879] hsr_slave_0: entered promiscuous mode [ 193.271000][T10879] hsr_slave_1: entered promiscuous mode [ 193.402988][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2574'. [ 193.513712][T11012] netlink: 'syz.4.2577': attribute type 7 has an invalid length. [ 193.522354][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2577'. [ 193.560943][T11014] FAULT_INJECTION: forcing a failure. [ 193.560943][T11014] name failslab, interval 1, probability 0, space 0, times 0 [ 193.574528][T11014] CPU: 0 UID: 0 PID: 11014 Comm: syz.4.2578 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 193.574605][T11014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 193.574620][T11014] Call Trace: [ 193.574627][T11014] [ 193.574635][T11014] __dump_stack+0x1d/0x30 [ 193.574659][T11014] dump_stack_lvl+0xe8/0x140 [ 193.574681][T11014] dump_stack+0x15/0x1b [ 193.574761][T11014] should_fail_ex+0x265/0x280 [ 193.574796][T11014] should_failslab+0x8c/0xb0 [ 193.574825][T11014] __kmalloc_noprof+0xa5/0x3e0 [ 193.574869][T11014] ? tls_decrypt_sg+0x450/0x1af0 [ 193.574890][T11014] tls_decrypt_sg+0x450/0x1af0 [ 193.574972][T11014] ? __copy_skb_header+0x268/0x2f0 [ 193.575031][T11014] ? skb_copy_header+0x17b/0x1a0 [ 193.575064][T11014] ? tls_strp_msg_load+0x3db/0x450 [ 193.575093][T11014] tls_decrypt_sw+0x4b/0x440 [ 193.575115][T11014] ? tls_rx_rec_wait+0x10f/0x5d0 [ 193.575154][T11014] tls_rx_one_record+0x118/0x820 [ 193.575174][T11014] ? __pfx_woken_wake_function+0x10/0x10 [ 193.575233][T11014] tls_sw_recvmsg+0xa7f/0x1480 [ 193.575271][T11014] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 193.575353][T11014] inet6_recvmsg+0x168/0x290 [ 193.575400][T11014] sock_recvmsg+0x95/0x170 [ 193.575426][T11014] __sys_recvfrom+0x122/0x1f0 [ 193.575512][T11014] __x64_sys_recvfrom+0x76/0x90 [ 193.575544][T11014] x64_sys_call+0x1a52/0x2fb0 [ 193.575565][T11014] do_syscall_64+0xd0/0x1a0 [ 193.575661][T11014] ? clear_bhb_loop+0x25/0x80 [ 193.575682][T11014] ? clear_bhb_loop+0x25/0x80 [ 193.575703][T11014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.575764][T11014] RIP: 0033:0x7faa4036e969 [ 193.575781][T11014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.575811][T11014] RSP: 002b:00007faa3e9d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 193.575830][T11014] RAX: ffffffffffffffda RBX: 00007faa40595fa0 RCX: 00007faa4036e969 [ 193.575842][T11014] RDX: 0000000000000013 RSI: 0000200000000040 RDI: 0000000000000004 [ 193.575893][T11014] RBP: 00007faa3e9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 193.575991][T11014] R10: 0000000040000041 R11: 0000000000000246 R12: 0000000000000001 [ 193.576003][T11014] R13: 0000000000000000 R14: 00007faa40595fa0 R15: 00007ffd06be2938 [ 193.576024][T11014] [ 193.855157][T11020] loop9: detected capacity change from 0 to 1024 [ 193.862314][T11020] EXT4-fs: Ignoring removed orlov option [ 193.923966][T10879] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 193.936750][T10879] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 193.954157][T10879] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.965996][T10879] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.981520][T11020] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.043300][T10879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.054529][ T7145] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 194.058624][T10879] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.080945][T11028] loop4: detected capacity change from 0 to 512 [ 194.095283][T11020] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 194.108433][ T7145] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 194.121219][ T7145] EXT4-fs (loop7): This should not happen!! Data will be lost [ 194.121219][ T7145] [ 194.122443][ T7144] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.131104][ T7145] EXT4-fs (loop7): Total free blocks count 0 [ 194.138205][ T7144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.144132][ T7145] EXT4-fs (loop7): Free/Dirty block details [ 194.157437][ T7145] EXT4-fs (loop7): free_blocks=2415919504 [ 194.158142][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2581'. [ 194.163225][ T7145] EXT4-fs (loop7): dirty_blocks=12496 [ 194.173278][ T7144] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.177547][ T7145] EXT4-fs (loop7): Block reservation details [ 194.184786][ T7144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.190757][ T7145] EXT4-fs (loop7): i_reserved_data_blocks=781 [ 194.215844][T11028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.231451][ T7144] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 194.250501][T11020] ip6gre2: entered allmulticast mode [ 194.259737][T11028] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.346347][T11028] tipc: Enabling of bearer rejected, failed to enable media [ 194.424737][T10412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.470565][T10879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.515073][T11046] netlink: 'syz.4.2587': attribute type 7 has an invalid length. [ 194.523797][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2587'. [ 194.650298][T11056] SELinux: ebitmap: truncated map [ 194.652189][T10879] veth0_vlan: entered promiscuous mode [ 194.657839][T11056] SELinux: failed to load policy [ 194.681602][T10879] veth1_vlan: entered promiscuous mode [ 194.712803][T10879] veth0_macvtap: entered promiscuous mode [ 194.724269][ T9814] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.742740][T10879] veth1_macvtap: entered promiscuous mode [ 194.755323][T10879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.766097][T10879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.776083][T10879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.786675][T10879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.796714][T10879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.807422][T10879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.820102][T10879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.840369][T10879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.850957][T10879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.861045][T10879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.871705][T10879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.881887][T10879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.892355][T10879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.974144][T10879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.011717][T10879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.020899][T10879] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.030053][T10879] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.038861][T10879] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.069516][T11067] vhci_hcd: default hub control req: 1f0f v0001 i0003 l0 [ 195.188322][T11070] loop1: detected capacity change from 0 to 1024 [ 195.234116][T11070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.247661][T11070] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.382241][T11077] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2530: bg 0: block 393: padding at end of block bitmap is not set [ 195.430302][T11077] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 117 [ 195.442962][T11077] EXT4-fs (loop1): This should not happen!! Data will be lost [ 195.442962][T11077] [ 195.576904][T10879] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.727786][T11092] netlink: 'syz.9.2598': attribute type 7 has an invalid length. [ 195.736435][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2598'. [ 195.753009][T11095] pim6reg1: entered promiscuous mode [ 195.758433][T11095] pim6reg1: entered allmulticast mode [ 195.949830][T11104] loop9: detected capacity change from 0 to 2048 [ 195.977531][T11104] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.134443][ T9814] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.360641][T11134] lo speed is unknown, defaulting to 1000 [ 196.379945][T11144] delete_channel: no stack [ 196.393184][T11144] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2620'. [ 196.451371][T11148] loop7: detected capacity change from 0 to 512 [ 196.482920][T11148] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.505243][T11148] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.523727][T11148] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.2622: corrupted inode contents [ 196.539325][T11148] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #2: comm syz.7.2622: mark_inode_dirty error [ 196.555981][T11148] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.2622: corrupted inode contents [ 196.570477][T11148] FAULT_INJECTION: forcing a failure. [ 196.570477][T11148] name failslab, interval 1, probability 0, space 0, times 0 [ 196.583762][T11148] CPU: 1 UID: 0 PID: 11148 Comm: syz.7.2622 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 196.583788][T11148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 196.583829][T11148] Call Trace: [ 196.583835][T11148] [ 196.583842][T11148] __dump_stack+0x1d/0x30 [ 196.583860][T11148] dump_stack_lvl+0xe8/0x140 [ 196.583877][T11148] dump_stack+0x15/0x1b [ 196.583891][T11148] should_fail_ex+0x265/0x280 [ 196.583919][T11148] should_failslab+0x8c/0xb0 [ 196.584039][T11148] __kmalloc_noprof+0xa5/0x3e0 [ 196.584119][T11148] ? posix_acl_alloc+0x22/0x70 [ 196.584148][T11148] posix_acl_alloc+0x22/0x70 [ 196.584176][T11148] ext4_get_acl+0x218/0x480 [ 196.584244][T11148] ? __pfx_ext4_get_acl+0x10/0x10 [ 196.584271][T11148] __get_acl+0x179/0x3a0 [ 196.584310][T11148] posix_acl_create+0xc1/0x280 [ 196.584341][T11148] ext4_init_acl+0x67/0x270 [ 196.584387][T11148] __ext4_new_inode+0x1f17/0x22d0 [ 196.584478][T11148] ext4_create+0x16e/0x2f0 [ 196.584498][T11148] ? __pfx_ext4_create+0x10/0x10 [ 196.584514][T11148] path_openat+0x1102/0x2170 [ 196.584541][T11148] do_filp_open+0x109/0x230 [ 196.584568][T11148] do_sys_openat2+0xa6/0x110 [ 196.584599][T11148] __x64_sys_openat+0xf2/0x120 [ 196.584618][T11148] x64_sys_call+0x1af/0x2fb0 [ 196.584687][T11148] do_syscall_64+0xd0/0x1a0 [ 196.584713][T11148] ? clear_bhb_loop+0x25/0x80 [ 196.584731][T11148] ? clear_bhb_loop+0x25/0x80 [ 196.584750][T11148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.584779][T11148] RIP: 0033:0x7f58c625e969 [ 196.584792][T11148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.584808][T11148] RSP: 002b:00007f58c48c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 196.584824][T11148] RAX: ffffffffffffffda RBX: 00007f58c6485fa0 RCX: 00007f58c625e969 [ 196.584835][T11148] RDX: 000000000000275a RSI: 0000200000000840 RDI: ffffffffffffff9c [ 196.584846][T11148] RBP: 00007f58c48c7090 R08: 0000000000000000 R09: 0000000000000000 [ 196.584856][T11148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.584867][T11148] R13: 0000000000000000 R14: 00007f58c6485fa0 R15: 00007ffc307a4358 [ 196.584962][T11148] [ 196.886912][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 196.886930][ T29] audit: type=1326 audit(1746621818.831:7640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4036e969 code=0x7ffc0000 [ 196.931216][ T8470] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.975464][T11160] netlink: 4172 bytes leftover after parsing attributes in process `syz.4.2627'. [ 197.028557][ T29] audit: type=1326 audit(1746621818.871:7641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7faa4036e969 code=0x7ffc0000 [ 197.061279][ T29] audit: type=1326 audit(1746621818.871:7642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4036e969 code=0x7ffc0000 [ 197.090146][ T29] audit: type=1326 audit(1746621818.871:7643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4036e969 code=0x7ffc0000 [ 197.117297][ T29] audit: type=1326 audit(1746621818.881:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7faa4036e969 code=0x7ffc0000 [ 197.148325][ T29] audit: type=1326 audit(1746621818.881:7645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4036e969 code=0x7ffc0000 [ 197.176759][ T29] audit: type=1326 audit(1746621818.881:7646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa4036e969 code=0x7ffc0000 [ 197.204915][ T29] audit: type=1326 audit(1746621818.881:7647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4036e969 code=0x7ffc0000 [ 197.230665][T11170] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11170 comm=syz.3.2631 [ 197.233707][ T29] audit: type=1326 audit(1746621818.881:7648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4036e969 code=0x7ffc0000 [ 197.285173][ T29] audit: type=1400 audit(1746621819.201:7649): avc: denied { audit_write } for pid=11169 comm="syz.3.2631" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 197.397701][T11187] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.427554][T11189] loop7: detected capacity change from 0 to 512 [ 197.451111][T11189] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.472854][T11189] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.487202][T11191] loop4: detected capacity change from 0 to 8192 [ 197.487576][T11191] vfat: Unknown parameter '&ó #ó0»!T—.yÕ„¯÷—Ž£ ÎÆ°*Æì ì#Ë' [ 197.493895][T11172] loop9: detected capacity change from 0 to 1024 [ 197.497351][T11189] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.543671][T11199] netlink: 'syz.3.2642': attribute type 29 has an invalid length. [ 197.554097][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2642'. [ 197.719495][T11214] loop1: detected capacity change from 0 to 256 [ 197.749308][T10990] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 197.841347][T11219] loop4: detected capacity change from 0 to 512 [ 197.924680][T11225] loop1: detected capacity change from 0 to 512 [ 197.933282][T11225] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 197.945739][T11225] EXT4-fs (loop1): 1 truncate cleaned up [ 197.954247][T11225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.231346][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2657'. [ 198.240521][T10879] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.296075][ T8470] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.372255][T11245] netlink: 'syz.9.2660': attribute type 7 has an invalid length. [ 198.381868][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2660'. [ 198.431726][T11249] loop7: detected capacity change from 0 to 2048 [ 198.499995][T11249] loop7: p1 < > p4 [ 198.506268][T11249] loop7: p4 size 8388608 extends beyond EOD, truncated [ 198.582870][T11261] FAULT_INJECTION: forcing a failure. [ 198.582870][T11261] name failslab, interval 1, probability 0, space 0, times 0 [ 198.601759][T11261] CPU: 0 UID: 0 PID: 11261 Comm: syz.1.2666 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 198.601891][T11261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 198.601907][T11261] Call Trace: [ 198.601914][T11261] [ 198.601923][T11261] __dump_stack+0x1d/0x30 [ 198.601948][T11261] dump_stack_lvl+0xe8/0x140 [ 198.602041][T11261] dump_stack+0x15/0x1b [ 198.602056][T11261] should_fail_ex+0x265/0x280 [ 198.602087][T11261] should_failslab+0x8c/0xb0 [ 198.602152][T11261] kmem_cache_alloc_node_noprof+0x57/0x320 [ 198.602196][T11261] ? __alloc_skb+0x101/0x320 [ 198.602235][T11261] __alloc_skb+0x101/0x320 [ 198.602266][T11261] netlink_alloc_large_skb+0xba/0xf0 [ 198.602368][T11261] netlink_sendmsg+0x3cf/0x6b0 [ 198.602424][T11261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.602706][T11261] __sock_sendmsg+0x142/0x180 [ 198.602741][T11261] ____sys_sendmsg+0x31e/0x4e0 [ 198.602765][T11261] ___sys_sendmsg+0x17b/0x1d0 [ 198.602799][T11261] __x64_sys_sendmsg+0xd4/0x160 [ 198.602908][T11261] x64_sys_call+0x2999/0x2fb0 [ 198.602936][T11261] do_syscall_64+0xd0/0x1a0 [ 198.603012][T11261] ? clear_bhb_loop+0x25/0x80 [ 198.603036][T11261] ? clear_bhb_loop+0x25/0x80 [ 198.603057][T11261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.603080][T11261] RIP: 0033:0x7fdeb8f3e969 [ 198.603099][T11261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.603128][T11261] RSP: 002b:00007fdeb75a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.603150][T11261] RAX: ffffffffffffffda RBX: 00007fdeb9165fa0 RCX: 00007fdeb8f3e969 [ 198.603163][T11261] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 198.603175][T11261] RBP: 00007fdeb75a7090 R08: 0000000000000000 R09: 0000000000000000 [ 198.603239][T11261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.603254][T11261] R13: 0000000000000000 R14: 00007fdeb9165fa0 R15: 00007ffcf9ebe518 [ 198.603280][T11261] [ 198.893088][T11246] futex_wake_op: syz.7.2659 tries to shift op by -1; fix this program [ 198.918341][T11262] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11262 comm=syz.9.2667 [ 198.920696][T11264] loop1: detected capacity change from 0 to 512 [ 198.943751][T11264] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 198.961920][T11264] EXT4-fs (loop1): 1 truncate cleaned up [ 198.970302][T11264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.145568][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2671'. [ 199.301656][T10879] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.362811][T11277] netlink: 'syz.9.2673': attribute type 7 has an invalid length. [ 199.371009][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2673'. [ 199.388711][T11281] loop7: detected capacity change from 0 to 512 [ 199.409797][T11285] netlink: 'syz.3.2669': attribute type 1 has an invalid length. [ 199.426608][T11281] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.470376][T11281] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.557006][ T8470] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.660776][T11301] FAULT_INJECTION: forcing a failure. [ 199.660776][T11301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.679985][T11301] CPU: 1 UID: 0 PID: 11301 Comm: syz.4.2681 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 199.680019][T11301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 199.680035][T11301] Call Trace: [ 199.680088][T11301] [ 199.680095][T11301] __dump_stack+0x1d/0x30 [ 199.680116][T11301] dump_stack_lvl+0xe8/0x140 [ 199.680180][T11301] dump_stack+0x15/0x1b [ 199.680201][T11301] should_fail_ex+0x265/0x280 [ 199.680322][T11301] should_fail+0xb/0x20 [ 199.680355][T11301] should_fail_usercopy+0x1a/0x20 [ 199.680384][T11301] _copy_from_user+0x1c/0xb0 [ 199.680408][T11301] __sys_bpf+0x178/0x790 [ 199.680450][T11301] __x64_sys_bpf+0x41/0x50 [ 199.680479][T11301] x64_sys_call+0x2478/0x2fb0 [ 199.680499][T11301] do_syscall_64+0xd0/0x1a0 [ 199.680522][T11301] ? clear_bhb_loop+0x25/0x80 [ 199.680547][T11301] ? clear_bhb_loop+0x25/0x80 [ 199.680571][T11301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.680599][T11301] RIP: 0033:0x7faa4036e969 [ 199.680616][T11301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.680699][T11301] RSP: 002b:00007faa3e9d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.680722][T11301] RAX: ffffffffffffffda RBX: 00007faa40595fa0 RCX: 00007faa4036e969 [ 199.680738][T11301] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 199.680753][T11301] RBP: 00007faa3e9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 199.680783][T11301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.680842][T11301] R13: 0000000000000000 R14: 00007faa40595fa0 R15: 00007ffd06be2938 [ 199.680866][T11301] [ 200.161412][T11325] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2684'. [ 200.177379][T11324] netlink: 'syz.3.2689': attribute type 7 has an invalid length. [ 200.191518][T11324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2689'. [ 200.215390][T11320] syzkaller0: entered promiscuous mode [ 200.224974][T11320] syzkaller0: entered allmulticast mode [ 200.255498][T11322] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2687'. [ 200.285674][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2687'. [ 200.305880][T11322] batman_adv: batadv0: Removing interface: team0 [ 200.391708][T11322] team0 (unregistering): Port device team_slave_0 removed [ 200.441852][T11322] team0 (unregistering): Port device team_slave_1 removed [ 200.637536][T11343] lo speed is unknown, defaulting to 1000 [ 200.678001][T11358] loop7: detected capacity change from 0 to 2048 [ 200.700840][T11364] loop9: detected capacity change from 0 to 512 [ 200.712972][T11358] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.750729][T11364] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 200.800127][ T8470] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.834399][T11364] EXT4-fs (loop9): 1 truncate cleaned up [ 200.903606][T11343] chnl_net:caif_netlink_parms(): no params data found [ 200.933188][T11364] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.010408][T11376] netlink: 'syz.7.2701': attribute type 7 has an invalid length. [ 201.020390][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2701'. [ 201.033829][T11381] xt_connbytes: Forcing CT accounting to be enabled [ 201.058022][T11343] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.068429][T11343] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.090049][T11343] bridge_slave_0: entered allmulticast mode [ 201.097542][T11343] bridge_slave_0: entered promiscuous mode [ 201.114282][ T70] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.164257][T11343] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.171831][T11343] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.199435][T11343] bridge_slave_1: entered allmulticast mode [ 201.202615][T11388] loop4: detected capacity change from 0 to 128 [ 201.209772][T11343] bridge_slave_1: entered promiscuous mode [ 201.226142][T11388] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.243849][T11388] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 201.286305][ T70] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.327519][T11343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.339595][T11343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.351643][ T70] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.363764][ T9814] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.376107][T10412] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.406873][T11343] team0: Port device team_slave_0 added [ 201.415412][ T70] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.431348][T11343] team0: Port device team_slave_1 added [ 201.473302][T11343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.482085][T11343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.517751][T11343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.536303][T11343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.545007][T11343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.574521][T11343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.609692][T11399] loop4: detected capacity change from 0 to 2048 [ 201.640147][T11399] loop4: p1 < > p4 [ 201.651804][T11399] loop4: p4 size 8388608 extends beyond EOD, truncated [ 201.690531][T11408] loop1: detected capacity change from 0 to 512 [ 201.719290][T11408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.727305][T11408] EXT4-fs: Ignoring removed orlov option [ 201.736659][T11408] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 201.737639][T11414] netlink: 'syz.9.2713': attribute type 7 has an invalid length. [ 201.755237][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2713'. [ 201.771010][T11399] futex_wake_op: syz.4.2707 tries to shift op by -1; fix this program [ 201.787697][T11408] EXT4-fs (loop1): 1 truncate cleaned up [ 201.794426][T11408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.811421][ T70] bridge_slave_1: left allmulticast mode [ 201.817385][ T70] bridge_slave_1: left promiscuous mode [ 201.823292][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.840779][T11408] FAULT_INJECTION: forcing a failure. [ 201.840779][T11408] name failslab, interval 1, probability 0, space 0, times 0 [ 201.854070][T11408] CPU: 0 UID: 0 PID: 11408 Comm: syz.1.2711 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 201.854121][T11408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 201.854191][T11408] Call Trace: [ 201.854199][T11408] [ 201.854208][T11408] __dump_stack+0x1d/0x30 [ 201.854234][T11408] dump_stack_lvl+0xe8/0x140 [ 201.854278][T11408] dump_stack+0x15/0x1b [ 201.854434][T11408] should_fail_ex+0x265/0x280 [ 201.854507][T11408] should_failslab+0x8c/0xb0 [ 201.854709][T11408] kmem_cache_alloc_node_noprof+0x57/0x320 [ 201.854763][T11408] ? __alloc_skb+0x101/0x320 [ 201.854801][T11408] __alloc_skb+0x101/0x320 [ 201.854833][T11408] ? audit_log_start+0x365/0x6c0 [ 201.854870][T11408] audit_log_start+0x380/0x6c0 [ 201.854947][T11408] audit_seccomp+0x48/0x100 [ 201.854978][T11408] ? __seccomp_filter+0x68c/0x10d0 [ 201.855005][T11408] __seccomp_filter+0x69d/0x10d0 [ 201.855030][T11408] ? avc_has_perm_noaudit+0x1b1/0x200 [ 201.855179][T11408] ? selinux_capable+0x1f9/0x270 [ 201.855211][T11408] __secure_computing+0x82/0x150 [ 201.855237][T11408] syscall_trace_enter+0xcf/0x1e0 [ 201.855296][T11408] do_syscall_64+0xaa/0x1a0 [ 201.855320][T11408] ? clear_bhb_loop+0x25/0x80 [ 201.855400][T11408] ? clear_bhb_loop+0x25/0x80 [ 201.855427][T11408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.855453][T11408] RIP: 0033:0x7fdeb8f3d37c [ 201.855544][T11408] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 201.855620][T11408] RSP: 002b:00007fdeb75a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 201.855644][T11408] RAX: ffffffffffffffda RBX: 00007fdeb9165fa0 RCX: 00007fdeb8f3d37c [ 201.855660][T11408] RDX: 000000000000000f RSI: 00007fdeb75a70a0 RDI: 0000000000000007 [ 201.855676][T11408] RBP: 00007fdeb75a7090 R08: 0000000000000000 R09: 0000000000000000 [ 201.855691][T11408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.855707][T11408] R13: 0000000000000000 R14: 00007fdeb9165fa0 R15: 00007ffcf9ebe518 [ 201.855751][T11408] [ 201.857857][ T70] bridge_slave_0: left promiscuous mode [ 201.949348][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 201.949368][ T29] audit: type=1326 audit(1746621823.861:7768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdeb8f3d41f code=0x7ffc0000 [ 201.952514][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.957732][ T29] audit: type=1326 audit(1746621823.861:7769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdeb8f3d5ca code=0x7ffc0000 [ 202.145736][ T29] audit: type=1326 audit(1746621823.861:7770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb8f3e969 code=0x7ffc0000 [ 202.170978][ T29] audit: type=1326 audit(1746621823.861:7771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb8f3e969 code=0x7ffc0000 [ 202.196891][T10879] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.212356][ T70] bridge1: port 1(bond1) entered disabled state [ 202.236756][ T29] audit: type=1326 audit(1746621824.181:7772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.1.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb8f3e969 code=0x7ffc0000 [ 202.261335][ T29] audit: type=1326 audit(1746621824.181:7773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.1.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdeb8f3e969 code=0x7ffc0000 [ 202.285285][ T29] audit: type=1326 audit(1746621824.181:7774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.1.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb8f3e969 code=0x7ffc0000 [ 202.308874][ T29] audit: type=1326 audit(1746621824.181:7775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.1.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdeb8f3e969 code=0x7ffc0000 [ 202.332634][ T29] audit: type=1400 audit(1746621824.181:7776): avc: denied { bind } for pid=11420 comm="syz.1.2714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 202.353266][ T29] audit: type=1326 audit(1746621824.181:7777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.1.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb8f3e969 code=0x7ffc0000 [ 202.379960][T11424] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2714'. [ 202.547149][ T70] bridge0 (unregistering): left promiscuous mode [ 203.512153][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.525080][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.535855][ T70] bond0 (unregistering): Released all slaves [ 203.546778][ T70] bond1 (unregistering): Released all slaves [ 203.557899][ T70] bond2 (unregistering): Released all slaves [ 203.574602][T11343] hsr_slave_0: entered promiscuous mode [ 203.584303][T11343] hsr_slave_1: entered promiscuous mode [ 203.593466][T11343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.603630][T11343] Cannot create hsr debugfs directory [ 203.613179][T11421] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.670764][ T70] tipc: Left network mode [ 203.688852][T11421] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.763004][T11421] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.837448][T11421] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.862574][ T70] hsr_slave_0: left promiscuous mode [ 203.882674][ T70] hsr_slave_1: left promiscuous mode [ 203.901146][ T70] veth1_macvtap: left promiscuous mode [ 203.907632][ T70] veth0_macvtap: left promiscuous mode [ 203.924185][ T70] veth1_vlan: left promiscuous mode [ 203.941904][ T70] veth0_vlan: left promiscuous mode [ 204.062806][ T70] team0 (unregistering): Port device team_slave_1 removed [ 204.075168][T11460] loop4: detected capacity change from 0 to 8192 [ 204.082736][T11460] vfat: Unknown parameter '&ó #ó0»!T—.yÕ„¯÷—Ž£ ÎÆ°*Æì ì#Ë' [ 204.083574][ T70] team0 (unregistering): Port device team_slave_0 removed [ 204.126114][ T7144] smc: removing ib device syz0 [ 204.139470][ T8110] lo speed is unknown, defaulting to 1000 [ 204.145324][ T8110] syz0: Port: 1 Link DOWN [ 204.178780][T11421] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.212122][T11421] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.236679][T11421] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.276747][T11421] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.355928][T11475] xt_l2tp: missing protocol rule (udp|l2tpip) [ 204.366276][ T8110] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 204.374869][ T8110] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 204.382439][ T8110] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 204.392149][ T8110] hid-generic 0000:0004:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 204.404891][T11471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2733'. [ 204.417745][T11471] serio: Serial port ptm0 [ 204.460276][T11343] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 204.473955][T11343] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 204.491538][T11477] loop4: detected capacity change from 0 to 1024 [ 204.503655][T11477] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 204.517205][T11477] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 204.517543][T11343] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 204.530965][T11477] JBD2: no valid journal superblock found [ 204.541788][T11477] EXT4-fs (loop4): Could not load journal inode [ 204.557364][T11343] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 204.623729][ T70] IPVS: stop unused estimator thread 0... [ 204.645923][T11343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.670668][T11343] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.685078][ T7234] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.695674][ T7234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.712736][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.722697][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.736464][T11489] loop9: detected capacity change from 0 to 2048 [ 204.771566][T11489] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.845674][T11343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.995052][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2745'. [ 205.044683][T11343] veth0_vlan: entered promiscuous mode [ 205.056559][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2745'. [ 205.060193][T11343] veth1_vlan: entered promiscuous mode [ 205.097851][T11343] veth0_macvtap: entered promiscuous mode [ 205.112279][T11343] veth1_macvtap: entered promiscuous mode [ 205.113733][T11507] loop7: detected capacity change from 0 to 512 [ 205.134724][ T9814] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.151215][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.166035][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.180120][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.193846][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.208768][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.222819][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.237633][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.250370][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.262660][T11343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.271477][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.282593][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.292982][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.294124][T11507] EXT4-fs (loop7): 1 orphan inode deleted [ 205.304211][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.310428][ T7224] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:39: Failed to release dquot type 1 [ 205.320204][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.343303][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.353474][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.364326][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.375592][T11343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.386731][T11507] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.390153][T11343] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.410361][T11343] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.419513][T11343] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.428694][T11343] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.438831][T11507] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.517188][ T8470] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.557786][T11526] loop7: detected capacity change from 0 to 256 [ 205.587869][T11531] FAULT_INJECTION: forcing a failure. [ 205.587869][T11531] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 205.601727][T11531] CPU: 0 UID: 0 PID: 11531 Comm: syz.3.2695 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 205.601767][T11531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 205.601783][T11531] Call Trace: [ 205.601790][T11531] [ 205.601799][T11531] __dump_stack+0x1d/0x30 [ 205.601823][T11531] dump_stack_lvl+0xe8/0x140 [ 205.601844][T11531] dump_stack+0x15/0x1b [ 205.601908][T11531] should_fail_ex+0x265/0x280 [ 205.601950][T11531] should_fail_alloc_page+0xf2/0x100 [ 205.602007][T11531] __alloc_frozen_pages_noprof+0xff/0x360 [ 205.602037][T11531] alloc_pages_mpol+0xb3/0x250 [ 205.602123][T11531] vma_alloc_folio_noprof+0x1aa/0x300 [ 205.602186][T11531] do_wp_page+0x673/0x23e0 [ 205.602222][T11531] ? xas_load+0x413/0x430 [ 205.602241][T11531] ? __rcu_read_lock+0x37/0x50 [ 205.602262][T11531] handle_mm_fault+0x6dc/0x2ae0 [ 205.602358][T11531] ? __rcu_read_unlock+0x4f/0x70 [ 205.602389][T11531] do_user_addr_fault+0x3fe/0x1090 [ 205.602426][T11531] exc_page_fault+0x54/0xc0 [ 205.602479][T11531] asm_exc_page_fault+0x26/0x30 [ 205.602562][T11531] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 205.602598][T11531] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 205.602620][T11531] RSP: 0018:ffffc90002c8fbf8 EFLAGS: 00050206 [ 205.602639][T11531] RAX: ffff888102f46d98 RBX: ffff888156a76000 RCX: 0000000000000440 [ 205.602655][T11531] RDX: 0000000000000000 RSI: ffff888156a76bc0 RDI: 0000200000036000 [ 205.602671][T11531] RBP: 0000200000035440 R08: 0000000000000330 R09: 0000000000000000 [ 205.602811][T11531] R10: 0001888156a76000 R11: 0001888156a76fff R12: 0000200000036440 [ 205.602826][T11531] R13: ffffc90002c8fe18 R14: 0000000000001000 R15: 00007ffffffff000 [ 205.602849][T11531] _copy_to_iter+0x13e/0xdd0 [ 205.602872][T11531] ? _raw_spin_unlock+0x26/0x50 [ 205.602980][T11531] ? __free_frozen_pages+0x236/0x4c0 [ 205.603075][T11531] ? __folio_put+0x11e/0x150 [ 205.603105][T11531] copy_page_to_iter+0x171/0x2b0 [ 205.603130][T11531] anon_pipe_read+0x236/0x750 [ 205.603167][T11531] ? __pfx_anon_pipe_read+0x10/0x10 [ 205.603233][T11531] vfs_read+0x5ca/0x6f0 [ 205.603262][T11531] ? __pfx_anon_pipe_read+0x10/0x10 [ 205.603325][T11531] ksys_read+0xda/0x1a0 [ 205.603378][T11531] __x64_sys_read+0x40/0x50 [ 205.603409][T11531] x64_sys_call+0x2d77/0x2fb0 [ 205.603435][T11531] do_syscall_64+0xd0/0x1a0 [ 205.603518][T11531] ? clear_bhb_loop+0x25/0x80 [ 205.603544][T11531] ? clear_bhb_loop+0x25/0x80 [ 205.603577][T11531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.603596][T11531] RIP: 0033:0x7f07e1cee969 [ 205.603610][T11531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.603626][T11531] RSP: 002b:00007f07e0336038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.603647][T11531] RAX: ffffffffffffffda RBX: 00007f07e1f16080 RCX: 00007f07e1cee969 [ 205.603716][T11531] RDX: 0000000000018fdc RSI: 0000200000032440 RDI: 0000000000000005 [ 205.603729][T11531] RBP: 00007f07e0336090 R08: 0000000000000000 R09: 0000000000000000 [ 205.603740][T11531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.603754][T11531] R13: 0000000000000001 R14: 00007f07e1f16080 R15: 00007ffe16edf468 [ 205.603781][T11531] [ 206.032618][T11528] bond2: entered promiscuous mode [ 206.037877][T11528] bond2: entered allmulticast mode [ 206.074180][T11528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.152602][T11528] bond2 (unregistering): Released all slaves [ 206.482557][T11564] 9pnet_fd: Insufficient options for proto=fd [ 206.562263][T11570] loop4: detected capacity change from 0 to 2048 [ 206.571710][T11570] journal_path: Non-blockdev passed as './file1' [ 206.578398][T11570] EXT4-fs: error: could not find journal device path [ 206.626711][T11571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11571 comm=+}[@ [ 206.744156][T11577] loop3: detected capacity change from 0 to 8192 [ 206.756071][T11578] loop4: detected capacity change from 0 to 8192 [ 206.807154][T11577] loop3: p1 p2 < > p3 p4 < p5 > [ 206.812743][T11577] loop3: partition table partially beyond EOD, truncated [ 206.821510][T11577] loop3: p1 size 100663296 extends beyond EOD, truncated [ 206.830769][T11577] loop3: p2 start 591104 is beyond EOD, truncated [ 206.837250][T11577] loop3: p3 start 33572980 is beyond EOD, truncated [ 206.855704][T11577] loop3: p5 size 100663296 extends beyond EOD, truncated [ 206.879907][T11581] hsr0: entered promiscuous mode [ 206.935083][T11582] xt_hashlimit: max too large, truncated to 1048576 [ 206.944046][T11582] Cannot find set identified by id 0 to match [ 206.954942][T11583] 9pnet_fd: Insufficient options for proto=fd [ 206.977460][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 206.977494][ T29] audit: type=1400 audit(1746621828.921:7852): avc: denied { read } for pid=11584 comm="syz.9.2772" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 207.020029][ T29] audit: type=1400 audit(1746621828.971:7853): avc: denied { open } for pid=11584 comm="syz.9.2772" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 207.045267][ T29] audit: type=1400 audit(1746621828.971:7854): avc: denied { ioctl } for pid=11584 comm="syz.9.2772" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 207.080224][ T29] audit: type=1400 audit(1746621829.031:7855): avc: denied { mounton } for pid=11586 comm="syz.9.2773" path="/128/bus" dev="tmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 207.128326][ T29] audit: type=1400 audit(1746621829.071:7856): avc: denied { unmount } for pid=9814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 207.155488][ T29] audit: type=1400 audit(1746621829.101:7857): avc: denied { create } for pid=11588 comm="syz.9.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 207.193761][ T29] audit: type=1400 audit(1746621829.101:7858): avc: denied { mounton } for pid=11588 comm="syz.9.2774" path="/129/file0" dev="tmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 207.258788][T11595] tipc: Enabling of bearer rejected, failed to enable media [ 207.278468][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2771'. [ 207.279142][ T29] audit: type=1400 audit(1746621829.171:7859): avc: denied { create } for pid=11588 comm="syz.9.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 207.309517][ T29] audit: type=1400 audit(1746621829.171:7860): avc: denied { write } for pid=11588 comm="syz.9.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 207.389221][ T29] audit: type=1400 audit(1746621829.291:7861): avc: denied { create } for pid=11580 comm="syz.4.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 207.644467][T11622] loop3: detected capacity change from 0 to 1024 [ 207.836416][T11622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.879732][T11635] FAULT_INJECTION: forcing a failure. [ 207.879732][T11635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.893389][T11635] CPU: 0 UID: 0 PID: 11635 Comm: syz.4.2786 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 207.893438][T11635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 207.893452][T11635] Call Trace: [ 207.893459][T11635] [ 207.893466][T11635] __dump_stack+0x1d/0x30 [ 207.893488][T11635] dump_stack_lvl+0xe8/0x140 [ 207.893556][T11635] dump_stack+0x15/0x1b [ 207.893576][T11635] should_fail_ex+0x265/0x280 [ 207.893675][T11635] should_fail+0xb/0x20 [ 207.893708][T11635] should_fail_usercopy+0x1a/0x20 [ 207.893727][T11635] _copy_from_user+0x1c/0xb0 [ 207.893753][T11635] __sys_sendto+0x19e/0x330 [ 207.893846][T11635] __x64_sys_sendto+0x76/0x90 [ 207.893882][T11635] x64_sys_call+0x2eb6/0x2fb0 [ 207.893904][T11635] do_syscall_64+0xd0/0x1a0 [ 207.893972][T11635] ? clear_bhb_loop+0x25/0x80 [ 207.893993][T11635] ? clear_bhb_loop+0x25/0x80 [ 207.894058][T11635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.894115][T11635] RIP: 0033:0x7faa403707fc [ 207.894131][T11635] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 207.894153][T11635] RSP: 002b:00007faa3e9d5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 207.894175][T11635] RAX: ffffffffffffffda RBX: 00007faa3e9d5fc0 RCX: 00007faa403707fc [ 207.894192][T11635] RDX: 0000000000000020 RSI: 00007faa3e9d6010 RDI: 0000000000000003 [ 207.894207][T11635] RBP: 0000000000000000 R08: 00007faa3e9d5f14 R09: 000000000000000c [ 207.894222][T11635] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 207.894269][T11635] R13: 00007faa3e9d5f68 R14: 00007faa3e9d6010 R15: 0000000000000000 [ 207.894292][T11635] [ 208.356948][T11640] loop4: detected capacity change from 0 to 1024 [ 208.378070][T11640] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 208.400006][T11640] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 208.450749][T11640] JBD2: no valid journal superblock found [ 208.457929][T11640] EXT4-fs (loop4): Could not load journal inode [ 208.564274][T11650] loop1: detected capacity change from 0 to 128 [ 208.574798][T11650] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 208.587913][T11650] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.627998][T11622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.860237][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2800'. [ 208.900007][T10879] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 208.923244][T11674] loop4: detected capacity change from 0 to 512 [ 208.941206][T11674] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 208.953782][T11674] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 208.954406][T11676] lo speed is unknown, defaulting to 1000 [ 208.963448][T11674] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.2803: corrupted in-inode xattr: e_value size too large [ 208.979676][T11676] lo speed is unknown, defaulting to 1000 [ 208.988837][T11674] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2803: couldn't read orphan inode 15 (err -117) [ 209.002841][T11674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.015801][T11676] lo speed is unknown, defaulting to 1000 [ 209.023145][T11679] FAULT_INJECTION: forcing a failure. [ 209.023145][T11679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.036986][T11679] CPU: 1 UID: 0 PID: 11679 Comm: syz.7.2804 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 209.037017][T11679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 209.037067][T11679] Call Trace: [ 209.037072][T11679] [ 209.037080][T11679] __dump_stack+0x1d/0x30 [ 209.037102][T11679] dump_stack_lvl+0xe8/0x140 [ 209.037122][T11679] dump_stack+0x15/0x1b [ 209.037206][T11679] should_fail_ex+0x265/0x280 [ 209.037241][T11679] should_fail+0xb/0x20 [ 209.037301][T11679] should_fail_usercopy+0x1a/0x20 [ 209.037370][T11679] _copy_to_user+0x20/0xa0 [ 209.037392][T11679] simple_read_from_buffer+0xb5/0x130 [ 209.037417][T11679] proc_fail_nth_read+0x100/0x140 [ 209.037553][T11679] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.037585][T11679] vfs_read+0x19d/0x6f0 [ 209.037608][T11679] ? __rcu_read_unlock+0x4f/0x70 [ 209.037683][T11679] ? __fget_files+0x184/0x1c0 [ 209.037714][T11679] ksys_read+0xda/0x1a0 [ 209.037739][T11679] __x64_sys_read+0x40/0x50 [ 209.037768][T11679] x64_sys_call+0x2d77/0x2fb0 [ 209.037855][T11679] do_syscall_64+0xd0/0x1a0 [ 209.037876][T11679] ? clear_bhb_loop+0x25/0x80 [ 209.037898][T11679] ? clear_bhb_loop+0x25/0x80 [ 209.037919][T11679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.037939][T11679] RIP: 0033:0x7f58c625d37c [ 209.037955][T11679] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 209.038021][T11679] RSP: 002b:00007f58c48c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.038039][T11679] RAX: ffffffffffffffda RBX: 00007f58c6485fa0 RCX: 00007f58c625d37c [ 209.038051][T11679] RDX: 000000000000000f RSI: 00007f58c48c70a0 RDI: 0000000000000007 [ 209.038077][T11679] RBP: 00007f58c48c7090 R08: 0000000000000000 R09: 0000000000000000 [ 209.038089][T11679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.038101][T11679] R13: 0000000000000000 R14: 00007f58c6485fa0 R15: 00007ffc307a4358 [ 209.038119][T11679] [ 209.263229][T11681] loop1: detected capacity change from 0 to 2048 [ 209.286712][T11676] infiniband syz0: set active [ 209.291589][T11676] infiniband syz0: added lo [ 209.297058][ T8105] lo speed is unknown, defaulting to 1000 [ 209.309491][T11681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.362786][T11676] RDS/IB: syz0: added [ 209.369045][T11676] smc: adding ib device syz0 with port count 1 [ 209.385724][T11676] smc: ib device syz0 port 1 has pnetid [ 209.392705][ T8122] lo speed is unknown, defaulting to 1000 [ 209.413004][T10412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.422714][T11676] lo speed is unknown, defaulting to 1000 [ 209.441289][T11691] loop3: detected capacity change from 0 to 2048 [ 209.476487][T11693] loop7: detected capacity change from 0 to 512 [ 209.479193][T11676] lo speed is unknown, defaulting to 1000 [ 209.484065][T11691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.522004][T11676] lo speed is unknown, defaulting to 1000 [ 209.540097][T11693] EXT4-fs: Ignoring removed nobh option [ 209.558431][T11676] lo speed is unknown, defaulting to 1000 [ 209.593903][T11693] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #16: comm syz.7.2808: corrupted inode contents [ 209.596838][T11676] lo speed is unknown, defaulting to 1000 [ 209.624187][T11702] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2809'. [ 209.634067][T11693] EXT4-fs (loop7): Remounting filesystem read-only [ 209.642019][T11693] EXT4-fs (loop7): 1 truncate cleaned up [ 209.669683][ T7234] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 209.684218][ T7234] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 209.711120][T11693] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.736538][T11702] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2809'. [ 209.780612][T11693] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.801398][ T7234] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 209.869633][T11693] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2808'. [ 209.871800][T11676] lo speed is unknown, defaulting to 1000 [ 209.879981][T11693] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2808'. [ 209.883433][T11693] ip6gretap0: entered promiscuous mode [ 209.901454][T11691] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 209.902242][T11681] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 209.935069][T11691] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 209.950875][T11691] EXT4-fs (loop3): This should not happen!! Data will be lost [ 209.950875][T11691] [ 209.961973][T11691] EXT4-fs (loop3): Total free blocks count 0 [ 209.964716][T11681] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 209.970178][T11691] EXT4-fs (loop3): Free/Dirty block details [ 209.984761][T11681] EXT4-fs (loop1): This should not happen!! Data will be lost [ 209.984761][T11681] [ 209.991498][T11691] EXT4-fs (loop3): free_blocks=2415919104 [ 210.001128][T11681] EXT4-fs (loop1): Total free blocks count 0 [ 210.001151][T11681] EXT4-fs (loop1): Free/Dirty block details [ 210.001165][T11681] EXT4-fs (loop1): free_blocks=2415919104 [ 210.001179][T11681] EXT4-fs (loop1): dirty_blocks=3536 [ 210.007143][T11691] EXT4-fs (loop3): dirty_blocks=8208 [ 210.013478][T11681] EXT4-fs (loop1): Block reservation details [ 210.019455][T11691] EXT4-fs (loop3): Block reservation details [ 210.019466][T11691] EXT4-fs (loop3): i_reserved_data_blocks=513 [ 210.025273][T11681] EXT4-fs (loop1): i_reserved_data_blocks=221 [ 210.082109][T11693] syz_tun: entered promiscuous mode [ 210.140517][ T8470] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.152145][T11676] lo speed is unknown, defaulting to 1000 [ 210.196487][T11676] lo speed is unknown, defaulting to 1000 [ 210.249128][T11721] loop9: detected capacity change from 0 to 256 [ 210.262655][T11687] rdma_rxe: rxe_newlink: failed to add lo [ 210.298290][ T7143] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1476 with error 28 [ 210.316690][T11723] loop9: detected capacity change from 0 to 256 [ 210.330386][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 210.365978][T11719] loop7: detected capacity change from 0 to 2048 [ 210.404175][T11727] loop9: detected capacity change from 0 to 512 [ 210.411222][T11727] EXT4-fs: Ignoring removed orlov option [ 210.418640][T11727] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 210.442746][T11719] loop7: p1 < > p4 [ 210.447205][T11727] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 210.469670][T11727] EXT4-fs error (device loop9): ext4_iget_extra_inode:4693: inode #15: comm syz.9.2819: corrupted in-inode xattr: e_value size too large [ 210.487891][T11719] loop7: p4 size 8388608 extends beyond EOD, truncated [ 210.505469][T11727] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.2819: couldn't read orphan inode 15 (err -117) [ 210.522410][T11719] futex_wake_op: syz.7.2814 tries to shift op by -1; fix this program [ 210.589354][T11727] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.646258][ T9814] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.675266][T11759] rdma_rxe: rxe_newlink: failed to add lo [ 210.693362][T11759] loop9: detected capacity change from 0 to 2048 [ 210.733900][T11759] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.872336][T11772] C: renamed from team_slave_0 (while UP) [ 210.882048][T11772] netlink: 'syz.3.2832': attribute type 1 has an invalid length. [ 210.890077][T11772] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2832'. [ 210.900561][T11772] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 211.180207][T11759] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 211.200921][T11759] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 211.214093][T11759] EXT4-fs (loop9): This should not happen!! Data will be lost [ 211.214093][T11759] [ 211.224031][T11759] EXT4-fs (loop9): Total free blocks count 0 [ 211.230380][T11759] EXT4-fs (loop9): Free/Dirty block details [ 211.236444][T11759] EXT4-fs (loop9): free_blocks=2415919104 [ 211.242552][T11759] EXT4-fs (loop9): dirty_blocks=8208 [ 211.247857][T11759] EXT4-fs (loop9): Block reservation details [ 211.255027][T11759] EXT4-fs (loop9): i_reserved_data_blocks=513 [ 211.306940][ T7145] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 211.326203][T11786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2839'. [ 211.335684][T11786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2839'. [ 211.681319][T10412] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 211.693194][T10412] CPU: 1 UID: 0 PID: 10412 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 211.693224][T10412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 211.693236][T10412] Call Trace: [ 211.693242][T10412] [ 211.693250][T10412] __dump_stack+0x1d/0x30 [ 211.693303][T10412] dump_stack_lvl+0xe8/0x140 [ 211.693327][T10412] dump_stack+0x15/0x1b [ 211.693348][T10412] dump_header+0x81/0x220 [ 211.693382][T10412] oom_kill_process+0x334/0x3f0 [ 211.693451][T10412] out_of_memory+0x979/0xb80 [ 211.693482][T10412] mem_cgroup_out_of_memory+0x13d/0x190 [ 211.693578][T10412] try_charge_memcg+0x5e2/0x870 [ 211.693650][T10412] charge_memcg+0x51/0xc0 [ 211.693678][T10412] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 211.693712][T10412] __read_swap_cache_async+0x1df/0x350 [ 211.693742][T10412] swap_cluster_readahead+0x376/0x3e0 [ 211.693838][T10412] swapin_readahead+0xde/0x6f0 [ 211.693860][T10412] ? __filemap_get_folio+0x49f/0x650 [ 211.693978][T10412] ? swap_cache_get_folio+0x77/0x200 [ 211.694040][T10412] do_swap_page+0x301/0x2460 [ 211.694075][T10412] ? _raw_spin_unlock+0x26/0x50 [ 211.694101][T10412] ? finish_task_switch+0xad/0x2b0 [ 211.694158][T10412] ? __pfx_default_wake_function+0x10/0x10 [ 211.694186][T10412] handle_mm_fault+0xb60/0x2ae0 [ 211.694302][T10412] ? mas_walk+0xf2/0x120 [ 211.694403][T10412] do_user_addr_fault+0x636/0x1090 [ 211.694477][T10412] ? switch_fpu_return+0xe/0x20 [ 211.694504][T10412] exc_page_fault+0x54/0xc0 [ 211.694541][T10412] asm_exc_page_fault+0x26/0x30 [ 211.694563][T10412] RIP: 0033:0x7faa403a11e5 [ 211.694582][T10412] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e 33 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 211.694671][T10412] RSP: 002b:00007ffd06be2c78 EFLAGS: 00010246 [ 211.694685][T10412] RAX: 0000000000000000 RBX: 00000000000000ed RCX: 00007faa403a11e3 [ 211.694698][T10412] RDX: 00007ffd06be2c90 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.694713][T10412] RBP: 00007ffd06be2cfc R08: 000000001d0fdf1c R09: 0000000000000000 [ 211.694746][T10412] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 211.694757][T10412] R13: 00000000000927c0 R14: 0000000000033864 R15: 00007ffd06be2d50 [ 211.694778][T10412] [ 211.694786][T10412] memory: usage 307200kB, limit 307200kB, failcnt 2204 [ 211.932310][T10412] memory+swap: usage 307464kB, limit 9007199254740988kB, failcnt 0 [ 211.940370][T10412] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 211.947674][T10412] Memory cgroup stats for /syz4: [ 212.081764][ T31] ================================================================== [ 212.095033][ T31] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 212.103673][ T31] [ 212.106007][ T31] write to 0xffff8881180d9508 of 44 bytes by task 11792 on cpu 0: [ 212.113853][ T31] tty_set_termios+0xc0/0x8c0 [ 212.118575][ T31] set_termios+0x496/0x4e0 [ 212.123130][ T31] tty_mode_ioctl+0x379/0x5c0 [ 212.127847][ T31] n_tty_ioctl_helper+0x91/0x210 [ 212.133017][ T31] n_tty_ioctl+0x101/0x200 [ 212.137578][ T31] tty_ioctl+0x842/0xb80 [ 212.142559][ T31] __se_sys_ioctl+0xcb/0x140 [ 212.147175][ T31] __x64_sys_ioctl+0x43/0x50 [ 212.149299][T10412] cache 0 [ 212.152473][ T31] x64_sys_call+0x19a8/0x2fb0 [ 212.155496][T10412] rss 0 [ 212.155506][T10412] shmem 0 [ 212.160163][ T31] do_syscall_64+0xd0/0x1a0 [ 212.160190][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.160220][ T31] [ 212.160226][ T31] read to 0xffff8881180d9522 of 1 bytes by task 31 on cpu 1: [ 212.163163][T10412] mapped_file 0 [ 212.163173][T10412] dirty 0 [ 212.166087][ T31] n_tty_receive_char_flow_ctrl+0x59/0x1a0 [ 212.170614][T10412] writeback 0 [ 212.176655][ T31] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 212.176690][ T31] tty_port_default_lookahead_buf+0x8e/0xc0 [ 212.179090][T10412] workingset_refault_anon 23 [ 212.186449][ T31] flush_to_ldisc+0x318/0x410 [ 212.186479][ T31] process_scheduled_works+0x4cb/0x9d0 [ 212.190060][T10412] workingset_refault_file 65 [ 212.192956][ T31] worker_thread+0x582/0x770 [ 212.198760][T10412] swap 270336 [ 212.202116][ T31] kthread+0x486/0x510 [ 212.202138][ T31] ret_from_fork+0x4b/0x60 [ 212.202157][ T31] ret_from_fork_asm+0x1a/0x30 [ 212.207960][T10412] swapcached 0 [ 212.213940][ T31] [ 212.213946][ T31] value changed: 0x13 -> 0x00 [ 212.213958][ T31] [ 212.213963][ T31] Reported by Kernel Concurrency Sanitizer on: [ 212.213975][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/u8:1 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(voluntary) [ 212.214003][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 212.218577][T10412] pgpgin 72414 [ 212.218587][T10412] pgpgout 72414 [ 212.223345][ T31] Workqueue: events_unbound flush_to_ldisc [ 212.223377][ T31] ================================================================== [ 212.242838][T11797] loop3: detected capacity change from 0 to 512 [ 212.246144][T10412] pgfault 63677 [ 212.246155][T10412] pgmajfault 20 [ 212.246220][T10412] inactive_anon 0 [ 212.246227][T10412] active_anon 0 [ 212.246233][T10412] inactive_file 0 [ 212.246240][T10412] active_file 0 [ 212.246248][T10412] unevictable 0 [ 212.255679][T11794] loop7: detected capacity change from 0 to 8192 [ 212.258894][T10412] hierarchical_memory_limit 314572800 [ 212.272960][T11797] EXT4-fs: dax option not supported [ 212.274564][T10412] hierarchical_memsw_limit 9223372036854771712 [ 212.274575][T10412] total_cache 0 [ 212.290403][T11794] vfat: Unknown parameter '&ó #ó0»!T—.yÕ„¯÷—Ž£ ÎÆ°*Æì ì#Ë' [ 212.297759][T10412] total_rss 0 [ 212.390282][T10412] total_shmem 0 [ 212.394045][T10412] total_mapped_file 0 [ 212.398272][T10412] total_dirty 0 [ 212.401828][T10412] total_writeback 0 [ 212.405727][T10412] total_workingset_refault_anon 23 [ 212.411094][T10412] total_workingset_refault_file 65 [ 212.416307][T10412] total_swap 270336 [ 212.420271][T10412] total_swapcached 0 [ 212.424254][T10412] total_pgpgin 72414 [ 212.428147][T10412] total_pgpgout 72414 [ 212.432283][T10412] total_pgfault 63677 [ 212.436304][T10412] total_pgmajfault 20 [ 212.440325][T10412] total_inactive_anon 0 [ 212.444504][T10412] total_active_anon 0 [ 212.448491][T10412] total_inactive_file 0 [ 212.452862][T10412] total_active_file 0 [ 212.456943][T10412] total_unevictable 0 [ 212.460975][T10412] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2829,pid=11756,uid=0 [ 212.476370][T10412] Memory cgroup out of memory: Killed process 11756 (syz.4.2829) total-vm:93748kB, anon-rss:936kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000