last executing test programs: 13m40.260998674s ago: executing program 32 (id=3703): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a40)='i2c_read\x00', r3, 0x0, 0x2}, 0x18) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) epoll_create1(0x0) unshare(0x24020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r6}, 0x10) r7 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xfffe, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="e32b", 0x2}], 0xbe}, 0x900000000000000) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) r8 = socket(0x2, 0x80805, 0x80004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000080), 0x8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r9, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) syz_clone3(&(0x7f0000000bc0)={0x24000000, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940), {0x37}, &(0x7f0000000980)=""/18, 0x12, &(0x7f0000000a00)=""/37, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8, {r9}}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") 7m0.720936642s ago: executing program 33 (id=8947): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000004fc0)="06088180b0429ab331ab13f480078d22", 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6m56.382585753s ago: executing program 34 (id=8971): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x78c, &(0x7f0000002580)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 6m48.764886233s ago: executing program 35 (id=9014): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a", @ANYRES32=r2], 0x3c}}, 0x0) 6m48.616376455s ago: executing program 36 (id=9018): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 6m47.808680664s ago: executing program 37 (id=9026): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xec) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x104) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090000000000000000000000010500000008000000000000000000000300000000020000000200000000000000f251d604e77ec000000000000000"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 6m46.50081202s ago: executing program 38 (id=9035): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYRES32=r2], 0x3c}}, 0x0) 6m40.986855245s ago: executing program 39 (id=9062): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 6m40.054202996s ago: executing program 40 (id=9067): syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x2b, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@hopopts={0x87}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 6m21.354193147s ago: executing program 41 (id=9245): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a40)='i2c_read\x00', r3, 0x0, 0x2}, 0x18) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) epoll_create1(0x0) unshare(0x24020400) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r7}, 0x10) r8 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xfffe, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="e32b", 0x2}], 0xbe}, 0x900000000000000) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) r9 = socket(0x2, 0x80805, 0x80004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000080), 0x8) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r10, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r10, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r10, 0x25, &(0x7f0000000180)={0x1, 0x2, 0x6, 0x80000000}) syz_clone3(&(0x7f0000000bc0)={0x24000000, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)=0x0, {0x37}, &(0x7f0000000980)=""/18, 0x12, &(0x7f0000000a00)=""/37, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8, {r10}}, 0x58) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYRESHEX, @ANYRES16=r11, @ANYRES32=r8, @ANYRESDEC=r4, @ANYBLOB="8d54e5806fb64d4216928a09c0272dfbec10217d667459b1b053e0ff839117dac3f6e436bcd4c0e6bbc703f71c8b05bf1c9ee6bef1ce9cd3f44141e91568a56762e6651c78cdb91f391c5c4f157d0c1236c6f5de6dbbe3b2db87c00cc1be65f9a7f3e2437b194f8c6f6607cb6a155130be372b741d51bbac880ab6854ec9d35e856b34f392beece2db7d66bab3e3d4c4", @ANYRESOCT=r9], 0x1c}, 0x1, 0x0, 0x0, 0x24040810}, 0x8d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") 6m17.506669183s ago: executing program 42 (id=9294): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x5, 0x2b2, &(0x7f00000006c0)="$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") r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4200, 0x1) write$9p(r1, &(0x7f0000001400)="3b27a4b403e92b", 0x4944) sendfile(r1, r2, 0x0, 0x7ffff000) 6m16.485105615s ago: executing program 43 (id=9311): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x439, 0xfffffffe, 0xfffffffa, {0x0, 0x0, 0x0, r1, 0x52140, 0x21190}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x2c}}, 0x0) 5m2.504747921s ago: executing program 8 (id=9917): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x410c84, &(0x7f0000000340), 0xfd, 0x788, &(0x7f0000001180)="$eJzs3c1rHOUfAPDvbLJNmvb3SwRB6ykgaKB0Y2psFTxUPIhgoaBn22WzDTWbbMluShMCtojgRVDxIOilZ1/qzasvV/0vPIilalps8SCR2eym22Q33aSbF5rPByb7PPPM7jPfeeblmcwwE8C+NZz+yUQciYiPkojB+vgkIrK1VG/EqZXp7iwtFtIhieXlN/9MatPcXlosRNN3UofqmScj4sf3I45m1tdbmV+YypdKxdl6frQ6fXG0Mr9w7MJ0frI4WZw5MTY+fvzkCydPdC/Wv39ZOHzj49ee/ebUP+89cf3Dn5I4FYfrZc1xdMtwDNeXSTZdhPd5tduV7bJkt2eALUk3zZ6VrTyOxGD01FIAwKPs3YhYBgD2mcTxHwD2mcb/AW4vLRZqQ390/TrYXnbzlYjoX4m/cX1zpaS3fs2uv3YddOB2ct+VkSQihrpQ/3BEfPHd21+lQ2zTdUiAVq5cjYhzQ8Or+//V/U+y7p6FzXpug7ID9c/hNePt/2DnfJ/2f15s6v+tbn+Z1f5PtOj/9LXYdrfigdv/wS5UsoG0//dy071td5rirxvqqef+V+vzZZPzF0rFdN/2/4gYiWxfmh/boI6RW//ealfW3P/765N3vkzrTz/vTZH5vbfv/u9M5Kv5h4m52c2rEU/1too/WW3/pE3/90yHdbz+0geftytL40/jbQy1+PvWTrV99yQtX4t4pmX737ujLdnw/sTR2uow2lgpWvj2188G2tXf3P7pkNbfOBfYCWn7D2wc/1DSfL9mZfN1/Hxt8Id2ZQ+Ov/X6fyB5q5Zu9CMu56vV2bGIA8kb68cfv/fdRr4xfRr/yNOtt/+N1v/0nPBch/H33vjj6+b83aZz773Q/hObav/NJ67fmeppV39n7T9eS43Ux3Sy/+t0Bh9m2QEAAAAAAAAAAAAAAAAAAAAAAABApzIRcTiSTG41ncnkcivv8H48BjKlcqV69Hx5bmYiau/KHopspvGoy8Gm56GO1Z+H38gfX5N/PiIei4hP+w4mjecoTuxy7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQcKjN+/9Tv/Xt9twBANumf7dnAADYcWuO/0nElTV5AOBR4/wfAPYfx38A2H8c/wFg/3H8BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJudOX06HZbvLi0W0vzEpfm5qfKlYxPFylRueq6QK5RnL+Ymy+XJUjFXKE8/6PdK5fLF8ZiZuzxaLVaqo5X5hbPT5bmZ6tkL0/nJ4tlidkeiAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDNqcwvTOVLpeKsxBYSy3tjNnY/0VNfndYVZffsOhaZiO78YLIXwun+8gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgA/8FAAD//2+CJQ4=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='c\b\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007000000"], 0x34}}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000240)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) mlockall(0x5) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5m2.048060736s ago: executing program 8 (id=9919): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0xff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) close_range(r3, r3, 0x0) 5m1.68869801s ago: executing program 8 (id=9926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x5, 0x2b2, &(0x7f00000006c0)="$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") 5m1.652653621s ago: executing program 44 (id=9926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x5, 0x2b2, &(0x7f00000006c0)="$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") 4m53.243004701s ago: executing program 5 (id=9987): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000030180c200000086dd677f84e50020"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m53.24287179s ago: executing program 45 (id=9987): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000030180c200000086dd677f84e50020"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m50.76251179s ago: executing program 46 (id=10004): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m49.130454269s ago: executing program 47 (id=10016): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xe, &(0x7f00000003c0)=@raw=[@exit, @ldst={0x0, 0x0, 0x6, 0x4, 0x5, 0x80, 0x8}, @jmp={0x5, 0x1, 0xd, 0x6, 0x7, 0xfffffffffffffff8, 0x8}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @jmp={0x5, 0x1, 0x8, 0xa, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xa}], &(0x7f0000000340)='GPL\x00', 0x9, 0xa5, &(0x7f0000000a00)=""/165, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0x9, 0x5, 0xa98}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000b80)=[0xffffffffffffffff], &(0x7f0000000bc0)=[{0xd, 0x1, 0x3, 0x5}, {0x2, 0x3, 0xb, 0x5}, {0x4, 0x1, 0xc, 0xc}, {0x1, 0x1, 0xf, 0x5}, {0x3, 0x5, 0xe, 0xc}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x2800800, &(0x7f0000000240)={[{@inode_readahead_blks}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fb}}, {}, {@data_err_ignore}, {@dioread_nolock}, {@noinit_itable}]}, 0x1e, 0x4bc, &(0x7f0000000540)="$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") shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) 4m40.725276018s ago: executing program 48 (id=10080): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m40.326704983s ago: executing program 49 (id=10084): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffd42) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 4m40.233560754s ago: executing program 2 (id=10087): ioctl(0xffffffffffffffff, 0xfffff001, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900442f"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 4m40.198759225s ago: executing program 2 (id=10088): syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7cb, &(0x7f0000000200)="$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") r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, 0x0, &(0x7f0000000080)}, 0x20) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000940)}, 0x142) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 4m39.257074696s ago: executing program 2 (id=10091): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socket$inet_icmp(0x2, 0x2, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m39.132649357s ago: executing program 2 (id=10092): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x410c84, &(0x7f0000000340), 0xfd, 0x788, &(0x7f0000001180)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='c\b\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007000000"], 0x34}}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4m39.048496368s ago: executing program 2 (id=10094): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r0], 0x48) creat(&(0x7f00000000c0)='./file0\x00', 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='qdisc_destroy\x00', r3, 0x0, 0xfffffffffffffffd}, 0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0xee00, 0xee01}}, './file1\x00'}) statx(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x400, 0x7ff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x12000, 0x0) fchown(0xffffffffffffffff, r5, r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec970200140400fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@inlinecrypt}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@errors_remount}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@nodelalloc}, {@grpquota}, {@noload}, {@nouid32}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 4m38.794484421s ago: executing program 4 (id=10097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='Q', 0x1, 0x200980) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x1}, 0x19200, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x40, &(0x7f0000000340), 0x2, 0x564, &(0x7f0000001280)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0xc7f}, 0x18) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101a00, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0) fgetxattr(r6, &(0x7f00000002c0)=@known='security.selinux\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r9 = getpid() syz_pidfd_open(r9, 0x0) 4m38.558060914s ago: executing program 2 (id=10098): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x78c, &(0x7f0000002580)="$eJzs3M9rXOUaAOD3nGaaNs29yYXL5d5Nr9BCC6WTpNm0K+NG3BQKBbc1JCch5CRTMpOaxEJTd4JQm42CILp36VYo9Q8QN1JQcKULQbTGhboZmR+ZtulkOm2TThufB07m+875znnfd87kyzmQMwH8bb1U+5FEDEbEhUazLo2Ig/XWoYj1xrjNu1enaksS1erFn5P62M3qUOtYW/seifou8d+IuF2IOPX2w3HLq2vzk3meLTX7I5WFyyPl1bXTcwuTs9lstjg2fm707Pj42dHxXav1+OvnDt/88tWNja8/q9w42nc6iYl63dGsbdcC3afxnhRiYtv6xb0I1kNJF2P6nkEeAAB0VrvOP9C8NivEUBzodJXmAg4AAABeSNX+arf+6HokAAAA8JxJotcZAAAAAHtr6/8Atp7t3avnYHfy0ysRMdwufl/9GeKIQ1GIiIHN5IHHD5LGbvBU1q9HxK2JNp+/bp5o7mz0XvPw7hyR3XarNv9MtJt/0tb8E23mn76t7054SjvPf/fiH9hh/rvQZYzPP/pfYcf418sr7xxtFz9pxU92iP9Gl/FvbLx7c6dt1U8iTrT9+5M8EKvD90OMzMzl7X61Wune/vPknZ3rjxh4KH6S1KMmneu/3GX9b23+Or/eIf7JY53PfyN+/wP71T4T7zXzSCPiZvO11t/YFuPYwjdfPBw5Wd+KP92o/6vvGxsecf5fa9X/cZf1f/dp/0qXQwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAujYjBSNJiq52mxWLEkYj4dwykealcOTVTWl6crm2LGI5COjOXZ6MRMdToJ7X+WL19r39mW388Iv717eFG0Lk8K06V8uleFw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDLkYgYjCQtRkQaEb8NpWmx2OusAAAAgF033OsEAAAAgD3n/h8AAAD2vye9/092OQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX7tw/nxtqW7evTpV609fWV2eL105PZ2V54sLy1PFqdLS5eJsqTSbZ8Wp0sKjjpdGxNi5WF4ZqWTlykh5de3SQml5sXJpbmFyNruUFZ5JVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyuwfqSpMWISOvtNC0WI/4REcNRSGbm8mw0Iv4ZEXeGCv21/livkwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDXlVfX5ifzPFt6sRvV/VVO141IIp6DNNo3/jPQPCudBifrEXn2Q3Nkj1JNm+Gf5jiPl/y1R7wtvW78vwdzEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvVdeXZufzPNsqdzrTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOit9MckImrLiaHjg9u3Hkx+H6q/RsSbH158f2WyUlkaq63/pbW+8kFz/Zn7drz2LGsAAACAfe/lxxm8dZ++dR8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQrfLq2vxknmdLe9iI672uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBJ/BQAA//9uN7Jr") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 4m38.550354094s ago: executing program 50 (id=10098): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x78c, &(0x7f0000002580)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 4m37.708337764s ago: executing program 4 (id=10100): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) pipe(&(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m37.427534727s ago: executing program 4 (id=10101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r3, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) 4m36.462843429s ago: executing program 4 (id=10103): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x410c84, &(0x7f0000000340), 0xfd, 0x788, &(0x7f0000001180)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='c\b\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007000000"], 0x34}}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4m36.3814505s ago: executing program 4 (id=10104): openat$tun(0xffffffffffffff9c, 0x0, 0x20b41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\t\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r4 = syz_io_uring_setup(0x10e, &(0x7f00000001c0)={0x0, 0x0, 0x400, 0x0, 0x222}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x1d}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) pause() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7, 0x0, 0x7}, 0x18) syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) 4m35.919012475s ago: executing program 4 (id=10110): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1) 4m35.918806415s ago: executing program 51 (id=10110): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1) 4m34.097048807s ago: executing program 8 (id=10085): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x410c84, &(0x7f0000000340), 0xfd, 0x788, &(0x7f0000001180)="$eJzs3c1rHOUfAPDvbLJNmvb3SwRB6ykgaKB0Y2psFTxUPIhgoaBn22WzDTWbbMluShMCtojgRVDxIOilZ1/qzasvV/0vPIilalps8SCR2eym22Q33aSbF5rPByb7PPPM7jPfeeblmcwwE8C+NZz+yUQciYiPkojB+vgkIrK1VG/EqZXp7iwtFtIhieXlN/9MatPcXlosRNN3UofqmScj4sf3I45m1tdbmV+YypdKxdl6frQ6fXG0Mr9w7MJ0frI4WZw5MTY+fvzkCydPdC/Wv39ZOHzj49ee/ebUP+89cf3Dn5I4FYfrZc1xdMtwDNeXSTZdhPd5tduV7bJkt2eALUk3zZ6VrTyOxGD01FIAwKPs3YhYBgD2mcTxHwD2mcb/AW4vLRZqQ390/TrYXnbzlYjoX4m/cX1zpaS3fs2uv3YddOB2ct+VkSQihrpQ/3BEfPHd21+lQ2zTdUiAVq5cjYhzQ8Or+//V/U+y7p6FzXpug7ID9c/hNePt/2DnfJ/2f15s6v+tbn+Z1f5PtOj/9LXYdrfigdv/wS5UsoG0//dy071td5rirxvqqef+V+vzZZPzF0rFdN/2/4gYiWxfmh/boI6RW//ealfW3P/765N3vkzrTz/vTZH5vbfv/u9M5Kv5h4m52c2rEU/1too/WW3/pE3/90yHdbz+0geftytL40/jbQy1+PvWTrV99yQtX4t4pmX737ujLdnw/sTR2uow2lgpWvj2188G2tXf3P7pkNbfOBfYCWn7D2wc/1DSfL9mZfN1/Hxt8Id2ZQ+Ov/X6fyB5q5Zu9CMu56vV2bGIA8kb68cfv/fdRr4xfRr/yNOtt/+N1v/0nPBch/H33vjj6+b83aZz773Q/hObav/NJ67fmeppV39n7T9eS43Ux3Sy/+t0Bh9m2QEAAAAAAAAAAAAAAAAAAAAAAABApzIRcTiSTG41ncnkcivv8H48BjKlcqV69Hx5bmYiau/KHopspvGoy8Gm56GO1Z+H38gfX5N/PiIei4hP+w4mjecoTuxy7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQcKjN+/9Tv/Xt9twBANumf7dnAADYcWuO/0nElTV5AOBR4/wfAPYfx38A2H8c/wFg/3H8BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJudOX06HZbvLi0W0vzEpfm5qfKlYxPFylRueq6QK5RnL+Ymy+XJUjFXKE8/6PdK5fLF8ZiZuzxaLVaqo5X5hbPT5bmZ6tkL0/nJ4tlidkeiAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDNqcwvTOVLpeKsxBYSy3tjNnY/0VNfndYVZffsOhaZiO78YLIXwun+8gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgA/8FAAD//2+CJQ4=") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='c\b\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007000000"], 0x34}}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') 4m33.952014149s ago: executing program 8 (id=10119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x5, 0x2b2, &(0x7f00000006c0)="$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") r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4200, 0x1) sendfile(r3, r4, 0x0, 0x7ffff000) 4m33.320408046s ago: executing program 5 (id=10106): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r0], 0x48) creat(&(0x7f00000000c0)='./file0\x00', 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='qdisc_destroy\x00', r3, 0x0, 0xfffffffffffffffd}, 0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0xee00, 0xee01}}, './file1\x00'}) statx(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x400, 0x7ff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x12000, 0x0) fchown(0xffffffffffffffff, r5, r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec970200140400fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@inlinecrypt}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@errors_remount}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@nodelalloc}, {@grpquota}, {@noload}, {@nouid32}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 4m32.910852841s ago: executing program 5 (id=10122): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/120, 0x78}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}], 0x4}, 0xb0}], 0x6, 0x20, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e", 0xe8}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3dc5ea", 0xf5}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b88863c73d859acf", 0x51}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797c", 0x23}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd", 0xb2}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c000000000000000000000000000000002da46e8a95bcead77a244256266fe952d151a841aaa0c9c727bf08c37869c70d6aed073d6bb9fb037a079b697f3ba963ba49b6aecdc3e839ae25d497b0e60408b8e0a9931aeb1be35eea2a22fa50d66a634804121bde6a4a2d7a23c08d8237aac90c577c24f4ec2949d9202659fe626262e0764eed651fe91d276cd8918ba1a079c716281613b127eca886d75e994a1b41314ff21f5a4fd8a7e55c65b2eebabf0db0268c53503bb309959c1c0b222c6fb8310e8f25e7c26e24baedcc72d41798c95c01626c311e9f1262dfa4dedd161672c578a7af36c8a95437f295e14a1e0c7245cb53f83cc7b4b9294bb13473331502b7735a955080f7c2fd79d3fe0d", 0x1d9}], 0x3}}], 0x2, 0xc0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4m32.851214122s ago: executing program 5 (id=10123): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x410c84, &(0x7f0000000340), 0xfd, 0x788, &(0x7f0000001180)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='c\b\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007000000"], 0x34}}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4m32.700369823s ago: executing program 5 (id=10126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m32.669155283s ago: executing program 8 (id=10127): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x104) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000900000000000000000000000105"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 4m32.628019734s ago: executing program 52 (id=10127): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x104) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000900000000000000000000000105"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 4m31.178950151s ago: executing program 5 (id=10138): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) 4m31.178712951s ago: executing program 53 (id=10138): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) 1m55.724197421s ago: executing program 9 (id=11983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c0001"], 0x118}}, 0x0) 1m55.666161442s ago: executing program 9 (id=11985): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a, 0x0, 0x0, 0x56}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000401, 0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 1m55.627557153s ago: executing program 9 (id=11988): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a, 0x0, 0x0, 0x56}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000401, 0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 1m55.606964843s ago: executing program 9 (id=11990): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x1, @perf_bp={0x0, 0xb}, 0x11d08, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") renameat(r0, &(0x7f0000000480)='./file2\x00', r0, &(0x7f0000000640)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) unshare(0x2040400) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r4}, 0x18) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r5) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305ff8100"/20, @ANYRES32=r6, @ANYBLOB="0000000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="00000118110000978e2423a023000000000000008000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)) setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0) socket(0x22, 0xa, 0x3) socket$nl_generic(0x10, 0x3, 0x10) 1m55.490579975s ago: executing program 9 (id=11994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m55.432851675s ago: executing program 9 (id=11995): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x1f, 0x1, 0x2, 0xffff, 0x0, 0x6, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0xd4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x13) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x90, 0x9, 0x6, 0x702, 0x0, 0x0, {0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x45}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x400}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'ip6tnl0\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x12, r3, 0x80000000) 1m55.415105235s ago: executing program 54 (id=11995): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x1f, 0x1, 0x2, 0xffff, 0x0, 0x6, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0xd4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x13) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x90, 0x9, 0x6, 0x702, 0x0, 0x0, {0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x45}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x400}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'ip6tnl0\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x12, r3, 0x80000000) 1.947950794s ago: executing program 3 (id=13815): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='@\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002120, &(0x7f0000002f00)) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x28000) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x10080800, &(0x7f0000000000)="e35f92", 0x3, &(0x7f0000000080), 0x0, &(0x7f00000006c0)="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") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x800000000010000, 0x0, 0x2, 0x6}}, 0x20) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000340)={0x3f, 0xc, 0x0, 0x9, 0x0, 0x1, 0x0}) 1.879862885s ago: executing program 3 (id=13817): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000240)=0xfffffefd) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYRES32, @ANYRESDEC=r1, @ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRES64], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0xc, &(0x7f0000000f40)=ANY=[@ANYRES16=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa2000900fc000007020000f8ffcdc0deab1430d4a4cc9a70d2f30000b704000000000000002b876a6774c9f7c58700"/86], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x800000000010000, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @ib_path={0x0, r7}}, 0x20) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000340)={0x3f, 0xc, 0x8a6, 0x101, 0x1, 0x1, &(0x7f0000000300)='>'}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xfffffffffffffffc) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2df0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000000)={0x0, 0x1, 0xfffffffc, 0x40, 0x5, "fcc8d21339ed2d5a599a9c12fd6771acbd5a8e"}) r9 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x0, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r9, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001080)=""/156, 0x9c}], 0x1}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000015c0)=""/57, 0x39}], 0x1}}], 0x2, 0x120a0, 0x0) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0xa8) sendmsg$NFT_BATCH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x0) 1.833423106s ago: executing program 3 (id=13818): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESHEX=r0], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000356ffc)=0xeb46, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) sendfile(r4, 0xffffffffffffffff, 0x0, 0x7ffff000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r8 = syz_io_uring_complete(0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r11], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a1, 0x0) 1.781490286s ago: executing program 3 (id=13820): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0xfc9c) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e2b, @local}, 0x1c) 1.732379457s ago: executing program 3 (id=13821): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x10c) msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300"], 0x0, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x16f37964, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x8085}, 0x82) 1.692540878s ago: executing program 3 (id=13822): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x400000, 0x100000000000000) 1.195361344s ago: executing program 1 (id=13824): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000400)=ANY=[@ANYBLOB="3200f75900000000"], 0x8) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e27, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000060000000c0000000c0000000a00000010000000000000040000400000002e6161302e5f4e00"], 0x0, 0x2e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0xffffffb7, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='net/dev_mcast\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r5 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x248580, 0x4, 0xc}, 0x18) mkdirat(r5, &(0x7f0000002040)='./file0\x00', 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000a40)=ANY=[@ANYBLOB="090000000000000002000000e00000020000000000000000000000004724a4814e65b7b2a68b4136846321000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000020000007f00000100"/270], 0x110) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0xf, 0x0) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000000)='9', 0x1}], 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2004000) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000400)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x1, 0xfffffffffffffc00}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESDEC=r9, @ANYRES32=r9, @ANYRESHEX=r9], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.124488745s ago: executing program 6 (id=13826): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1180, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) finit_module(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f0000000700)={0x3, 0xfcf5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x5}, 0x90, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local}, 0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x8264, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x28, &(0x7f0000000040)={@multicast1, @local}, 0xc) 1.087198435s ago: executing program 1 (id=13828): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x10c) msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300"], 0x0, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) msgctl$IPC_SET(r0, 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x16f37964, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x8085}, 0x82) 1.086653195s ago: executing program 6 (id=13829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x40000, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) finit_module(r1, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000001070000000000000000003f562bdcfa02fbe300000000080800034000000400080003400000000308bb5bde66a60c9ccf89554d63000340fffffffb0c000480"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) 1.037350796s ago: executing program 6 (id=13831): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e", 0xe8}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc61", 0xd7}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b88863c73d859acf", 0x51}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c", 0x25}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd", 0xb2}, {&(0x7f0000000e80)="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", 0x1d9}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.036794346s ago: executing program 1 (id=13832): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 1.010326476s ago: executing program 1 (id=13835): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 977.396757ms ago: executing program 1 (id=13837): openat$tun(0xffffffffffffff9c, 0x0, 0x20b41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r4 = syz_io_uring_setup(0x10e, &(0x7f00000001c0)={0x0, 0x0, 0x400, 0x0, 0x222}, &(0x7f0000000240)=0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x1d}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) pause() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x7}, 0x18) syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) 977.169837ms ago: executing program 0 (id=13838): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0xfc9c) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e2b, @local}, 0x1c) 950.863087ms ago: executing program 0 (id=13840): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1180, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) finit_module(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f0000000700)={0x3, 0xfcf5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x5}, 0x90, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local}, 0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x8264, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x28, &(0x7f0000000040)={@multicast1, @local}, 0xc) 950.445357ms ago: executing program 0 (id=13842): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) poll(0x0, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWSET={0x20c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xe7, 0xd, 0x1, 0x0, "5030e594221bd08517a48459d9714eab8df20707b0a179f875faf12ffeb1dd45aa72ecce1d2f4ce95405abf9acfcf632028bc52dbace512a96a548f0349667c53e76accd3f59ee653f937af1386545520e4ec4e06fbeca532f48e963744fa423be829fbb24d07d88c32d1ef42d4fffbc2678ecc0ba954a4cdf97040253f08184968d06f16c31dd5fe91dab3d84f919582c3f56337b9f6a85053aed58940127a090181e370c2a8c88a68a1f6dfc22c1c23bcbae5650dba9711792889e61faa1dd01b86663743d2219da53dee14eb922a1fc3858f00f9f851b81a9c9cef1dec3bcd48448"}, @NFTA_SET_EXPRESSIONS={0x100, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0xd0, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xc0, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x83, 0x3, "3a58fc597df49e91f1ad5eab1ef222b3abaf2e29b8a21a3df0699e79624dd82de7bd08614e4653317c69a220ff5dfecc99ca3677bc1218c996d0530b726340ff0ae52c2f757f21560bd780e77e9a5aeedd7cc5c1b78a87af245246bf1e442a25a3db238e31f2f97047039df7f90c7645a437b51d95aa2877123610c83a7838"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xd, 0x1, 'CLASSIFY\x00'}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x234}, 0x1, 0x0, 0x0, 0x800}, 0xc095) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x54, r1, 0x101, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xbd}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xe000}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) 909.352968ms ago: executing program 7 (id=13844): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0xff, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0xe, @perf_config_ext={0x10001, 0xfffffffffffffff9}, 0x1000, 0x5dd8, 0x0, 0x1, 0x0, 0x80008, 0xfff8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xfff2, 0xa}, {0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0xd5e93709d453f02a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r8}, 0x10) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x169a82, 0x109) sendfile(r9, r9, 0x0, 0xb) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0200c7bd7000fbdbdf960000000014000900fc00000000000b9b93270000000000002c4ed7c1991a1b635ba1876c13d4a8adf30a5bb81fa53c12e7963850fc6d5e8f3dc9f4d5267105e0a4ebc50aec555ec721b15e5a5678eec598907d77d9699621a8f965f24b96d7cfdb3515205be6e366ee92ee5390f257031a1b300ea4b0839ccbae018f7d0c3bce6a1ed811d71217cab14a0afb72075365c2643db2a9d5a54cdca2fcf450affa9a3b38607e8b36a800b104c93a47a957ed72b64d28b383acd5f439cb9a10b60182abc48a9fd345710bc57af8c6a2"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x14, 0x0, 0x0, 0x9, 0x84404, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x5}, 0x2000, 0xffffffffffffffff, 0x80000000, 0x0, 0x5eba, 0x13, 0x3, 0x0, 0x1, 0x0, 0xffffffffffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 878.690408ms ago: executing program 0 (id=13845): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 878.218808ms ago: executing program 0 (id=13846): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) 858.651548ms ago: executing program 7 (id=13847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 803.152089ms ago: executing program 7 (id=13848): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44f}}]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "23f75ecab000", "ad609b3f6c0783ace0cb016f7b50dbacc0a4eed94bfe42633b7b41b37d8d7fbe", "00ecff00", "5ee7d38054000a70"}, 0x38) r3 = syz_open_dev$usbfs(0x0, 0x12, 0x80801) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000200)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) 325.684186ms ago: executing program 7 (id=13849): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x100) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 309.796056ms ago: executing program 7 (id=13850): unshare(0x2c060000) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) unshare(0x2c020400) 289.073566ms ago: executing program 7 (id=13851): pipe2$9p(0x0, 0x80) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0203", 0x2, 0x0, 0x0, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) 162.886958ms ago: executing program 6 (id=13852): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000740)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@resgid={'resgid', 0x3d, 0xee01}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x433, &(0x7f0000000940)="$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") r3 = dup(r0) getpeername$l2tp(r3, &(0x7f0000000700)={0x2, 0x0, @private}, &(0x7f00000004c0)=0x10) bind$unix(r1, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e22}, 0x6e) creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) preadv2(r4, &(0x7f0000000100)=[{&(0x7f0000000280)=""/155, 0x9b}], 0x1, 0x7, 0x14, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) unshare(0x2000400) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@can_newroute={0x134, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x3}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x47, 0x0, 0x5, 0x0, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x134}}, 0x10) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) fcntl$notify(r2, 0x402, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) preadv2(r8, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/79, 0x4f}], 0x1, 0x1, 0x11e, 0x8) fcntl$setlease(r2, 0x400, 0x1) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='clear_refs\x00') ioctl$RTC_UIE_ON(r9, 0x7003) write$P9_RLOCK(r8, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x2}, 0x8) 162.473478ms ago: executing program 6 (id=13853): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='@\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002120, &(0x7f0000002f00)) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x28000) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x10080800, &(0x7f0000000000)="e35f92", 0x3, &(0x7f0000000080), &(0x7f00000000c0), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x800000000010000, 0x0, 0x2, 0x6}}, 0x20) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000340)={0x3f, 0xc, 0x0, 0x9, 0x0, 0x1, 0x0}) 143.002668ms ago: executing program 1 (id=13854): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fdatasync(0xffffffffffffffff) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x768f}}]}, 0x83, 0x5fe, &(0x7f0000001040)="$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") 102.616739ms ago: executing program 6 (id=13855): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fdatasync(0xffffffffffffffff) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x768f}}]}, 0x83, 0x5fe, &(0x7f0000001040)="$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") 0s ago: executing program 0 (id=13856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001040)={'syztnl1\x00', &(0x7f0000001240)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x5, 0x8, 0x50, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x8, 0x8, 0x4, 0x2}}) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x57, r2, 0x7ff}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000009096000000000000001811", @ANYBLOB="d12a26b73413e713e7af236a707e17b8b66bfe3cc31635720aebd38ce09f04f7c25225f3922f3b9e3f9d6ad122f2d6b3562ad946e27c3dd697b142e924cf042a3bc0c814708aee4a6df51810d9f08cd40e02286c39b1de64978a149b28873dd33d1882eb4f5a1d125647274482d210da0ba699c0b37f31a03c29f232d48339bfa3b84d7d5c008ea9672e9994ae006238fd3fad6e65d4c6e1bca01e461aae36dc8794a27191206d4d12b4631eeeefb42dd3db82a65a78f725c718d0bf97327cdebc7934ca", @ANYRES64=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x20008844) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r7 = msgget$private(0x0, 0x53) getpgrp(0x0) msgrcv(r7, 0x0, 0x0, 0x3, 0x2000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r9, 0x10d, 0xf, &(0x7f00001c9fff)="03", 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r10 = epoll_create1(0x0) epoll_wait(r10, &(0x7f0000000180)=[{}], 0x1, 0x0) r11 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r11, 0x84, 0x7c, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d4}, 0x0) 0s ago: executing program 1 (id=13857): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) sendmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)='m', 0x1}, {0x0}], 0x2}}], 0x1, 0x4000015) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x420, 0x248, 0x180, 0x180, 0x180, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_bridge\x00', 'ipvlan0\x00', {}, {0xff}, 0x67, 0x2, 0x6d}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xec}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0xffffffff, 'vlan0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x1, 0x1, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xe, @private=0xa010102, 0x4e21}}}, {{@ip={@remote, @empty, 0xffffffff, 0xffffff00, 'nr0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x0, 0x34}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x8], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @multicast2, 0x0, 0xffffff00, 'ipvlan0\x00', 'ip_vti0\x00', {0xff}, {}, 0x84, 0x0, 0x30}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0xa02, 0x80, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f0000019380)={'#! ', './file0'}, 0xb) close(r6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) (async) sendmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)='m', 0x1}, {0x0}], 0x2}}], 0x1, 0x4000015) (async) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x420, 0x248, 0x180, 0x180, 0x180, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_bridge\x00', 'ipvlan0\x00', {}, {0xff}, 0x67, 0x2, 0x6d}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xec}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0xffffffff, 'vlan0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x1, 0x1, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xe, @private=0xa010102, 0x4e21}}}, {{@ip={@remote, @empty, 0xffffffff, 0xffffff00, 'nr0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x0, 0x34}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x8], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @multicast2, 0x0, 0xffffff00, 'ipvlan0\x00', 'ip_vti0\x00', {0xff}, {}, 0x84, 0x0, 0x30}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0xa02, 0x80, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) (async) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) write$binfmt_script(r6, &(0x7f0000019380)={'#! ', './file0'}, 0xb) (async) close(r6) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) kernel console output (not intermixed with test programs): 000 [ 969.657909][T10137] R13: 00007ff202446ef0 R14: 00007ff202446eb0 R15: 00002000000007c0 [ 969.657925][T10137] [ 969.838675][T10135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 970.054408][T10142] loop1: detected capacity change from 0 to 1024 [ 970.062508][T10142] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 970.082305][T10142] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 970.094268][ T2006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.104648][T10142] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 970.114039][T10142] EXT4-fs (loop1): orphan cleanup on readonly fs [ 970.122403][T10142] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz.1.13040: Invalid inode table block 0 in block_group 0 [ 970.137309][T10142] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 970.141531][T10152] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 970.146986][T10142] EXT4-fs error (device loop1): ext4_quota_write:7324: inode #3: comm syz.1.13040: mark_inode_dirty error [ 970.167453][T10142] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.13040: Failed to acquire dquot type 0 [ 970.180536][T10142] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz.1.13040: Invalid inode table block 0 in block_group 0 [ 970.184420][T10154] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 970.200850][T10142] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 970.210689][T10142] EXT4-fs error (device loop1): ext4_ext_truncate:4457: inode #15: comm syz.1.13040: mark_inode_dirty error [ 970.223081][T10142] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz.1.13040: Invalid inode table block 0 in block_group 0 [ 970.236149][T10142] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 970.245878][T10142] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 970.256296][T10142] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz.1.13040: Invalid inode table block 0 in block_group 0 [ 970.269208][T10142] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 970.279352][T10156] loop0: detected capacity change from 0 to 512 [ 970.288519][T10142] EXT4-fs error (device loop1): ext4_truncate:4255: inode #15: comm syz.1.13040: mark_inode_dirty error [ 970.300494][T10142] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 970.309510][T10156] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 970.320528][T10142] EXT4-fs (loop1): 1 truncate cleaned up [ 970.329351][T10142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 970.343102][T10156] EXT4-fs (loop0): 1 truncate cleaned up [ 970.349328][T10156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 970.407876][T10163] loop3: detected capacity change from 0 to 512 [ 970.414697][ T7410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.416332][T10163] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 970.443240][T10163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 970.455876][T10163] ext4 filesystem being mounted at /514/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 970.486776][T10165] futex_wake_op: syz.7.13050 tries to shift op by -1; fix this program [ 970.497417][ T2006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.529768][T10177] ip6erspan0: entered promiscuous mode [ 970.539815][T10183] netlink: 124 bytes leftover after parsing attributes in process `syz.7.13054'. [ 970.591519][T10190] netlink: 'syz.3.13057': attribute type 21 has an invalid length. [ 970.599577][T10190] IPv6: NLM_F_CREATE should be specified when creating new route [ 970.658753][T10192] futex_wake_op: syz.7.13058 tries to shift op by -1; fix this program [ 970.681390][T10198] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 971.023188][ T1706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.039555][T10211] netlink: 124 bytes leftover after parsing attributes in process `syz.0.13065'. [ 971.465570][T10221] netlink: 'syz.3.13069': attribute type 21 has an invalid length. [ 971.491669][T10225] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 971.522290][T10227] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 971.538683][T10223] futex_wake_op: syz.7.13070 tries to shift op by -1; fix this program [ 971.575526][T10234] Invalid ELF header magic: != ELF [ 971.901797][T10245] loop0: detected capacity change from 0 to 8192 [ 972.212342][T10252] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 972.270050][T10259] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 972.355279][T10262] futex_wake_op: syz.1.13085 tries to shift op by -1; fix this program [ 972.419235][T10269] Invalid ELF header magic: != ELF [ 972.487327][ T29] kauditd_printk_skb: 674 callbacks suppressed [ 972.487346][ T29] audit: type=1400 audit(2000000749.650:75512): avc: denied { execmem } for pid=10274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 972.540432][ T29] audit: type=1400 audit(2000000749.700:75513): avc: denied { read } for pid=10275 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 972.562065][ T29] audit: type=1400 audit(2000000749.700:75514): avc: denied { open } for pid=10275 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 972.585939][ T29] audit: type=1400 audit(2000000749.700:75515): avc: denied { mounton } for pid=10275 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 972.611420][ T29] audit: type=1400 audit(2000000749.780:75516): avc: denied { module_request } for pid=10275 comm="syz-executor" kmod="netdev-nr7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 972.796345][T10275] chnl_net:caif_netlink_parms(): no params data found [ 972.810856][T10293] futex_wake_op: syz.6.13096 tries to shift op by -1; fix this program [ 972.842838][T10301] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.865476][T10275] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.872635][T10275] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.879875][T10275] bridge_slave_0: entered allmulticast mode [ 972.886676][T10275] bridge_slave_0: entered promiscuous mode [ 972.894152][T10275] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.901256][T10275] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.908663][T10275] bridge_slave_1: entered allmulticast mode [ 972.915466][T10275] bridge_slave_1: entered promiscuous mode [ 972.930905][T10301] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.955907][T10275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.971600][T10275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.997519][T10301] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.009524][T10275] team0: Port device team_slave_0 added [ 973.018230][T10275] team0: Port device team_slave_1 added [ 973.032400][T10275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.039366][T10275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.065426][T10275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.079699][T10301] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.093065][T10275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.100115][T10275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.126311][T10275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.151029][T10275] hsr_slave_0: entered promiscuous mode [ 973.157052][T10275] hsr_slave_1: entered promiscuous mode [ 973.163058][T10275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 973.177348][T10275] Cannot create hsr debugfs directory [ 973.206150][T10301] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.217967][T10301] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.240582][ T29] audit: type=1326 audit(2000000750.400:75517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10308 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 973.264254][ T29] audit: type=1326 audit(2000000750.400:75518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10308 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 973.287633][ T29] audit: type=1326 audit(2000000750.400:75519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10308 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 973.317807][ T29] audit: type=1326 audit(2000000750.410:75520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10308 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 973.341635][ T29] audit: type=1326 audit(2000000750.410:75521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10308 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 973.374479][T10301] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.397440][T10301] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.415233][T10275] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.472134][T10275] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.551636][T10275] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.566964][T10326] loop3: detected capacity change from 0 to 8192 [ 973.592342][T10275] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.668227][T10275] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 973.690180][T10275] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 973.699508][T10275] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 973.709001][T10275] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 973.746837][T10330] loop0: detected capacity change from 0 to 512 [ 973.762099][T21840] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 973.766504][T10330] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 973.784821][T10275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.798973][T10275] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.809980][T30603] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.816933][T10330] EXT4-fs (loop0): 1 truncate cleaned up [ 973.817107][T30603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.831763][T10330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 973.855729][T21869] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.855764][T21869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.942032][T10275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.077828][T10275] veth0_vlan: entered promiscuous mode [ 974.087095][T10275] veth1_vlan: entered promiscuous mode [ 974.106364][T10275] veth0_macvtap: entered promiscuous mode [ 974.114487][T10275] veth1_macvtap: entered promiscuous mode [ 974.126226][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.136835][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.146778][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.157819][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.167766][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.178381][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.188766][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.199304][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.209174][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.220179][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.230037][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.241100][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.253985][T10275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.265975][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.277148][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.287013][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.297482][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.307865][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.318345][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.328192][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.339236][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.349095][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.359550][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.370040][T10275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.380602][T10275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.403172][T10275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.414468][T10354] netlink: 124 bytes leftover after parsing attributes in process `syz.1.13110'. [ 974.416507][T10275] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.432551][T10275] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.441347][T10275] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.450036][T10275] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.538208][ T1706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.578432][T10372] Invalid ELF header magic: != ELF [ 974.748409][T10392] loop7: detected capacity change from 0 to 512 [ 974.755159][T10392] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 974.766355][T10392] EXT4-fs (loop7): 1 truncate cleaned up [ 974.772689][T10392] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 975.041924][T22763] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 975.258253][T10404] Invalid ELF header magic: != ELF [ 975.563093][T10275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.574136][T10414] loop3: detected capacity change from 0 to 2048 [ 975.604225][T10414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 975.633932][T10420] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 975.677432][ T2006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.719278][T10430] loop3: detected capacity change from 0 to 512 [ 975.727032][T10430] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 975.755944][T10430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 975.774410][T10430] ext4 filesystem being mounted at /536/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 975.806591][ T2006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.977851][T10449] FAULT_INJECTION: forcing a failure. [ 975.977851][T10449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 975.991056][T10449] CPU: 1 UID: 0 PID: 10449 Comm: syz.1.13146 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 975.991140][T10449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 975.991153][T10449] Call Trace: [ 975.991161][T10449] [ 975.991170][T10449] __dump_stack+0x1d/0x30 [ 975.991192][T10449] dump_stack_lvl+0xe8/0x140 [ 975.991212][T10449] dump_stack+0x15/0x1b [ 975.991229][T10449] should_fail_ex+0x265/0x280 [ 975.991338][T10449] should_fail+0xb/0x20 [ 975.991364][T10449] should_fail_usercopy+0x1a/0x20 [ 975.991381][T10449] strncpy_from_user+0x25/0x230 [ 975.991422][T10449] ? kmem_cache_alloc_noprof+0x186/0x310 [ 975.991455][T10449] ? getname_flags+0x80/0x3b0 [ 975.991494][T10449] getname_flags+0xae/0x3b0 [ 975.991555][T10449] __x64_sys_rename+0x33/0x70 [ 975.991585][T10449] x64_sys_call+0x2aee/0x2fb0 [ 975.991621][T10449] do_syscall_64+0xd0/0x1a0 [ 975.991711][T10449] ? clear_bhb_loop+0x25/0x80 [ 975.991734][T10449] ? clear_bhb_loop+0x25/0x80 [ 975.991757][T10449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.991775][T10449] RIP: 0033:0x7ff203dde969 [ 975.991789][T10449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 975.991831][T10449] RSP: 002b:00007ff202447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 975.991885][T10449] RAX: ffffffffffffffda RBX: 00007ff204005fa0 RCX: 00007ff203dde969 [ 975.991899][T10449] RDX: 0000000000000000 RSI: 0000200000002040 RDI: 0000200000000040 [ 975.991912][T10449] RBP: 00007ff202447090 R08: 0000000000000000 R09: 0000000000000000 [ 975.991999][T10449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 975.992011][T10449] R13: 0000000000000000 R14: 00007ff204005fa0 R15: 00007ffc545a4df8 [ 975.992027][T10449] [ 976.404699][T10457] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 976.647914][T10471] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.681815][T10471] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.741962][T10471] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.781735][T10471] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.068149][T10477] loop1: detected capacity change from 0 to 512 [ 977.075125][T10477] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 977.093029][T10477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 977.097083][T10471] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.105941][T10477] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 977.116961][T10471] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.135581][T10471] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.146881][T10471] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.165043][ T7410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.531853][T10489] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 977.610998][T10497] loop3: detected capacity change from 0 to 2048 [ 977.623248][T10497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 977.647682][ T2006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.666891][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 977.666910][ T29] audit: type=1400 audit(2000000754.830:75610): avc: denied { create } for pid=10500 comm="syz.3.13169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 977.703558][ T29] audit: type=1400 audit(2000000754.830:75611): avc: denied { setopt } for pid=10500 comm="syz.3.13169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 977.723412][ T29] audit: type=1400 audit(2000000754.830:75612): avc: denied { ioctl } for pid=10500 comm="syz.3.13169" path="socket:[146588]" dev="sockfs" ino=146588 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 977.748533][ T29] audit: type=1400 audit(2000000754.830:75613): avc: denied { bind } for pid=10500 comm="syz.3.13169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 977.768776][ T29] audit: type=1400 audit(2000000754.890:75614): avc: denied { create } for pid=10500 comm="syz.3.13169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 977.796965][T10503] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 977.864710][T10505] futex_wake_op: syz.3.13171 tries to shift op by -1; fix this program [ 978.056016][T10517] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 978.120510][T10523] loop1: detected capacity change from 0 to 2048 [ 978.132589][T10523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 978.157019][ T7410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.188238][T10530] loop7: detected capacity change from 0 to 512 [ 978.196522][T10530] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 978.209052][T10528] loop1: detected capacity change from 0 to 8192 [ 978.223187][T10530] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 978.235910][T10530] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 978.272359][T10275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.175295][ T29] audit: type=1400 audit(2000000756.340:75615): avc: denied { create } for pid=10544 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 979.203823][ T29] audit: type=1400 audit(2000000756.370:75616): avc: denied { write } for pid=10544 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 979.223667][ T29] audit: type=1400 audit(2000000756.370:75617): avc: denied { nlmsg_write } for pid=10544 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 979.317354][T10551] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 979.402378][ T29] audit: type=1400 audit(2000000756.570:75618): avc: denied { setopt } for pid=10559 comm="syz.1.13191" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 979.520743][T21874] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 979.560043][T10564] loop0: detected capacity change from 0 to 2048 [ 979.573170][T10564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 979.598865][T10568] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 979.721126][T10572] loop3: detected capacity change from 0 to 512 [ 979.727982][T10572] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 979.739246][T10572] EXT4-fs (loop3): 1 truncate cleaned up [ 979.745368][T10572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 979.965749][ T29] audit: type=1326 audit(2000000757.130:75619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10578 comm="syz.7.13197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 980.081233][T21874] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 980.282430][T10582] loop1: detected capacity change from 0 to 512 [ 980.289670][T10582] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 980.303717][T10582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 980.316613][T10582] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 980.341877][ T7410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.414018][T10586] futex_wake_op: syz.1.13199 tries to shift op by -1; fix this program [ 980.443745][ T1706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.476064][T10589] loop1: detected capacity change from 0 to 8192 [ 980.510987][ T2006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.558920][T10596] Invalid ELF header magic: != ELF [ 980.641085][T10600] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 980.845675][T10611] loop7: detected capacity change from 0 to 512 [ 980.852702][T10611] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 980.875125][T10611] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 980.893393][T10615] loop6: detected capacity change from 0 to 512 [ 980.900509][T10611] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 980.911383][T10615] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 980.933520][T10275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.934506][T10615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 980.955715][T10615] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 980.998226][ T8845] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.334851][T10628] Invalid ELF header magic: != ELF [ 981.402544][T10630] loop3: detected capacity change from 0 to 8192 [ 981.467698][T10634] futex_wake_op: syz.1.13217 tries to shift op by -1; fix this program [ 981.551270][T10640] loop1: detected capacity change from 0 to 8192 [ 981.652612][T10649] Invalid ELF header magic: != ELF [ 982.377225][T10671] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 982.607995][T10696] loop3: detected capacity change from 0 to 8192 [ 982.869513][T10706] loop1: detected capacity change from 0 to 8192 [ 982.873769][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 982.873820][ T29] audit: type=1326 audit(2000000760.030:75809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.6.13244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc3f5e969 code=0x7ffc0000 [ 982.907993][ T29] audit: type=1326 audit(2000000760.080:75810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.6.13244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f9cc3f5e969 code=0x7ffc0000 [ 982.934010][ T29] audit: type=1326 audit(2000000760.080:75811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.6.13244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc3f5e969 code=0x7ffc0000 [ 982.957818][ T29] audit: type=1326 audit(2000000760.080:75812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.6.13244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f9cc3f5e969 code=0x7ffc0000 [ 982.981462][ T29] audit: type=1326 audit(2000000760.080:75813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.6.13244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc3f5e969 code=0x7ffc0000 [ 983.005179][ T29] audit: type=1326 audit(2000000760.080:75814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.6.13244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f9cc3f5e969 code=0x7ffc0000 [ 983.028949][ T29] audit: type=1326 audit(2000000760.080:75815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.6.13244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc3f5e969 code=0x7ffc0000 [ 983.054036][ T29] audit: type=1326 audit(2000000760.080:75816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.6.13244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f9cc3f5e969 code=0x7ffc0000 [ 983.077699][ T29] audit: type=1326 audit(2000000760.080:75817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.6.13244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc3f5e969 code=0x7ffc0000 [ 983.101433][ T29] audit: type=1326 audit(2000000760.080:75818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.6.13244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f9cc3f5e969 code=0x7ffc0000 [ 983.635875][T10753] Invalid ELF header magic: != ELF [ 983.785373][T10761] netlink: 'syz.1.13264': attribute type 21 has an invalid length. [ 983.873469][T10770] loop7: detected capacity change from 0 to 8192 [ 984.486541][T10777] loop6: detected capacity change from 0 to 2048 [ 984.507540][T10777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 984.606106][T10786] Invalid ELF header magic: != ELF [ 984.719890][T10790] netlink: 'syz.1.13274': attribute type 21 has an invalid length. [ 984.817964][T10796] loop3: detected capacity change from 0 to 512 [ 984.826299][T10796] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 984.851317][T10796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 984.865374][T10796] ext4 filesystem being mounted at /570/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 984.868053][ T8845] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.903823][T10800] loop6: detected capacity change from 0 to 512 [ 984.910695][T10800] EXT4-fs: Ignoring removed oldalloc option [ 984.920229][ T2006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.921910][T10800] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.13279: Parent and EA inode have the same ino 15 [ 984.943499][T10800] EXT4-fs (loop6): Remounting filesystem read-only [ 984.950037][T10800] EXT4-fs warning (device loop6): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 984.960264][T10800] EXT4-fs (loop6): 1 orphan inode deleted [ 984.968925][T10800] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.006269][T10800] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13279'. [ 985.036607][T10814] Invalid ELF header magic: != ELF [ 985.087193][ T8845] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.118772][T10820] futex_wake_op: syz.3.13286 tries to shift op by -1; fix this program [ 985.148011][T10829] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.168472][T10831] Invalid ELF header magic: != ELF [ 985.191926][T10829] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.280954][T30603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 985.291889][T10839] loop6: detected capacity change from 0 to 512 [ 985.292385][T21840] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 985.299003][T10839] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 985.321109][T10829] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.330960][T10839] EXT4-fs (loop6): 1 truncate cleaned up [ 985.331475][T10839] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.401829][T10829] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.455855][T10829] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.466971][T10829] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.477791][T10829] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.489150][T10829] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.683336][T10848] loop1: detected capacity change from 0 to 1024 [ 985.690280][T10848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 985.699488][T10848] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 985.710268][T10848] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 985.718466][T10848] EXT4-fs (loop1): orphan cleanup on readonly fs [ 985.725553][T10848] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz.1.13297: Invalid inode table block 0 in block_group 0 [ 985.738685][T10848] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 985.748228][T10848] EXT4-fs error (device loop1): ext4_quota_write:7324: inode #3: comm syz.1.13297: mark_inode_dirty error [ 985.759708][T10848] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.13297: Failed to acquire dquot type 0 [ 985.771244][T10848] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz.1.13297: Invalid inode table block 0 in block_group 0 [ 985.784528][T10848] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 985.794048][T10848] EXT4-fs error (device loop1): ext4_ext_truncate:4457: inode #15: comm syz.1.13297: mark_inode_dirty error [ 985.805808][T10848] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz.1.13297: Invalid inode table block 0 in block_group 0 [ 985.818929][T10848] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 985.828432][T10848] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 985.837024][T10848] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz.1.13297: Invalid inode table block 0 in block_group 0 [ 985.850391][T10848] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 985.859879][T10848] EXT4-fs error (device loop1): ext4_truncate:4255: inode #15: comm syz.1.13297: mark_inode_dirty error [ 985.871724][T10848] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 985.880677][T10848] EXT4-fs (loop1): 1 truncate cleaned up [ 985.886827][T10848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 985.933988][ T7410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.021083][T10856] futex_wake_op: syz.1.13300 tries to shift op by -1; fix this program [ 986.072712][ T8845] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.081952][T10852] loop7: detected capacity change from 0 to 1024 [ 986.089116][T10852] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 986.099002][T10852] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 986.132348][T10852] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 986.141629][T10852] EXT4-fs (loop7): orphan cleanup on readonly fs [ 986.148457][T10852] EXT4-fs error (device loop7): __ext4_get_inode_loc:4450: comm syz.7.13298: Invalid inode table block 0 in block_group 0 [ 986.162100][T10852] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 986.171690][T10852] EXT4-fs error (device loop7): ext4_quota_write:7324: inode #3: comm syz.7.13298: mark_inode_dirty error [ 986.183264][T10852] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.13298: Failed to acquire dquot type 0 [ 986.195559][T10852] EXT4-fs error (device loop7): __ext4_get_inode_loc:4450: comm syz.7.13298: Invalid inode table block 0 in block_group 0 [ 986.208945][T10852] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 986.218609][T10852] EXT4-fs error (device loop7): ext4_ext_truncate:4457: inode #15: comm syz.7.13298: mark_inode_dirty error [ 986.230762][T10852] EXT4-fs error (device loop7): __ext4_get_inode_loc:4450: comm syz.7.13298: Invalid inode table block 0 in block_group 0 [ 986.243849][T10852] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 986.253571][T10852] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 986.262254][T10852] EXT4-fs error (device loop7): __ext4_get_inode_loc:4450: comm syz.7.13298: Invalid inode table block 0 in block_group 0 [ 986.275164][T10852] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 986.284731][T10852] EXT4-fs error (device loop7): ext4_truncate:4255: inode #15: comm syz.7.13298: mark_inode_dirty error [ 986.296276][T10852] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 986.305343][T10852] EXT4-fs (loop7): 1 truncate cleaned up [ 986.311218][T10852] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 986.346189][T10275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.422807][T10887] loop7: detected capacity change from 0 to 1024 [ 986.453341][T10889] loop7: detected capacity change from 0 to 512 [ 986.459812][T10889] EXT4-fs: Ignoring removed mblk_io_submit option [ 986.471361][T10889] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 986.479335][T10889] EXT4-fs (loop7): orphan cleanup on readonly fs [ 986.486118][T10889] EXT4-fs warning (device loop7): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 986.501443][T10889] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 986.508582][T10889] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.13312: bg 0: block 40: padding at end of block bitmap is not set [ 986.523108][T10889] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 986.532036][T10889] EXT4-fs (loop7): 1 truncate cleaned up [ 986.538134][T10889] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 986.550869][T10889] FAULT_INJECTION: forcing a failure. [ 986.550869][T10889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 986.564610][T10889] CPU: 0 UID: 0 PID: 10889 Comm: syz.7.13312 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 986.564642][T10889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 986.564653][T10889] Call Trace: [ 986.564658][T10889] [ 986.564735][T10889] __dump_stack+0x1d/0x30 [ 986.564754][T10889] dump_stack_lvl+0xe8/0x140 [ 986.564771][T10889] dump_stack+0x15/0x1b [ 986.564785][T10889] should_fail_ex+0x265/0x280 [ 986.564849][T10889] should_fail+0xb/0x20 [ 986.564870][T10889] should_fail_usercopy+0x1a/0x20 [ 986.564933][T10889] strncpy_from_user+0x25/0x230 [ 986.564950][T10889] ? kmem_cache_alloc_noprof+0x186/0x310 [ 986.564975][T10889] ? getname_flags+0x80/0x3b0 [ 986.565037][T10889] getname_flags+0xae/0x3b0 [ 986.565069][T10889] user_path_at+0x28/0x130 [ 986.565090][T10889] __se_sys_inotify_add_watch+0x102/0x7a0 [ 986.565133][T10889] ? fput+0x8f/0xc0 [ 986.565152][T10889] ? ksys_write+0x16e/0x1a0 [ 986.565223][T10889] __x64_sys_inotify_add_watch+0x43/0x50 [ 986.565245][T10889] x64_sys_call+0x29a4/0x2fb0 [ 986.565263][T10889] do_syscall_64+0xd0/0x1a0 [ 986.565285][T10889] ? clear_bhb_loop+0x25/0x80 [ 986.565335][T10889] ? clear_bhb_loop+0x25/0x80 [ 986.565358][T10889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.565398][T10889] RIP: 0033:0x7fbcde44e969 [ 986.565413][T10889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 986.565499][T10889] RSP: 002b:00007fbcdcab7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 986.565516][T10889] RAX: ffffffffffffffda RBX: 00007fbcde675fa0 RCX: 00007fbcde44e969 [ 986.565528][T10889] RDX: 0000000080000100 RSI: 0000200000000080 RDI: 0000000000000003 [ 986.565540][T10889] RBP: 00007fbcdcab7090 R08: 0000000000000000 R09: 0000000000000000 [ 986.565553][T10889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.565565][T10889] R13: 0000000000000000 R14: 00007fbcde675fa0 R15: 00007ffcbe47ce28 [ 986.565649][T10889] [ 986.773038][T10275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.841927][T10893] futex_wake_op: syz.7.13313 tries to shift op by -1; fix this program [ 986.927828][T10899] loop7: detected capacity change from 0 to 512 [ 986.934682][T10899] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 986.952641][T10899] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 986.965345][T10899] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 986.989413][T10275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.007512][T10906] loop7: detected capacity change from 0 to 512 [ 987.014405][T10906] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 987.042481][T10909] netlink: 'syz.6.13318': attribute type 21 has an invalid length. [ 987.043340][T10906] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 987.078954][T10906] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 987.135001][T10275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.256561][T10923] FAULT_INJECTION: forcing a failure. [ 987.256561][T10923] name failslab, interval 1, probability 0, space 0, times 0 [ 987.265720][T10921] loop6: detected capacity change from 0 to 8192 [ 987.269351][T10923] CPU: 0 UID: 0 PID: 10923 Comm: syz.7.13324 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 987.269381][T10923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 987.269392][T10923] Call Trace: [ 987.269399][T10923] [ 987.269407][T10923] __dump_stack+0x1d/0x30 [ 987.269509][T10923] dump_stack_lvl+0xe8/0x140 [ 987.269527][T10923] dump_stack+0x15/0x1b [ 987.269543][T10923] should_fail_ex+0x265/0x280 [ 987.269610][T10923] should_failslab+0x8c/0xb0 [ 987.269637][T10923] __kmalloc_noprof+0xa5/0x3e0 [ 987.269654][T10923] ? alloc_pipe_info+0x1c9/0x350 [ 987.269739][T10923] alloc_pipe_info+0x1c9/0x350 [ 987.269763][T10923] splice_direct_to_actor+0x592/0x680 [ 987.269784][T10923] ? kstrtouint_from_user+0x9f/0xf0 [ 987.269836][T10923] ? __pfx_direct_splice_actor+0x10/0x10 [ 987.269857][T10923] ? __rcu_read_unlock+0x4f/0x70 [ 987.269916][T10923] ? get_pid_task+0x96/0xd0 [ 987.270006][T10923] ? avc_policy_seqno+0x15/0x30 [ 987.270072][T10923] do_splice_direct+0xda/0x150 [ 987.270091][T10923] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 987.270116][T10923] do_sendfile+0x380/0x640 [ 987.270179][T10923] __x64_sys_sendfile64+0x105/0x150 [ 987.270207][T10923] x64_sys_call+0xb39/0x2fb0 [ 987.270228][T10923] do_syscall_64+0xd0/0x1a0 [ 987.270248][T10923] ? clear_bhb_loop+0x25/0x80 [ 987.270269][T10923] ? clear_bhb_loop+0x25/0x80 [ 987.270338][T10923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.270358][T10923] RIP: 0033:0x7fbcde44e969 [ 987.270379][T10923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 987.270396][T10923] RSP: 002b:00007fbcdcab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 987.270581][T10923] RAX: ffffffffffffffda RBX: 00007fbcde675fa0 RCX: 00007fbcde44e969 [ 987.270594][T10923] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 987.270605][T10923] RBP: 00007fbcdcab7090 R08: 0000000000000000 R09: 0000000000000000 [ 987.270665][T10923] R10: 0001000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 987.270677][T10923] R13: 0000000000000000 R14: 00007fbcde675fa0 R15: 00007ffcbe47ce28 [ 987.270694][T10923] [ 987.518704][T10932] futex_wake_op: syz.0.13327 tries to shift op by -1; fix this program [ 988.107191][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 988.107208][ T29] audit: type=1326 audit(2000000765.270:76008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.7.13330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 988.149186][ T29] audit: type=1326 audit(2000000765.270:76009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.7.13330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 988.172959][ T29] audit: type=1326 audit(2000000765.270:76010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.7.13330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 988.196899][ T29] audit: type=1326 audit(2000000765.270:76011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.7.13330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 988.220665][ T29] audit: type=1326 audit(2000000765.270:76012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.7.13330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 988.244343][ T29] audit: type=1326 audit(2000000765.270:76013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.7.13330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 988.268028][ T29] audit: type=1326 audit(2000000765.270:76014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.7.13330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 988.291907][ T29] audit: type=1326 audit(2000000765.270:76015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.7.13330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 988.338150][ T29] audit: type=1326 audit(2000000765.500:76016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.0.13332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2d2de969 code=0x7ffc0000 [ 988.362019][ T29] audit: type=1326 audit(2000000765.500:76017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.0.13332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2d2de969 code=0x7ffc0000 [ 988.405448][T10947] loop0: detected capacity change from 0 to 512 [ 988.412511][T10947] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 988.424404][T10947] EXT4-fs (loop0): 1 truncate cleaned up [ 988.430579][T10947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 988.515950][T10958] netlink: 124 bytes leftover after parsing attributes in process `syz.6.13335'. [ 989.184345][ T1706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.272813][T10981] loop0: detected capacity change from 0 to 8192 [ 989.379025][T10987] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 989.445302][T10995] netlink: 'syz.6.13349': attribute type 21 has an invalid length. [ 989.464770][T10991] futex_wake_op: syz.1.13347 tries to shift op by -1; fix this program [ 989.867645][T11014] loop1: detected capacity change from 0 to 8192 [ 990.328982][T11025] futex_wake_op: syz.0.13360 tries to shift op by -1; fix this program [ 990.356817][T11032] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 990.401208][T22763] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 990.753856][T11044] loop1: detected capacity change from 0 to 512 [ 990.760449][T11044] EXT4-fs: Ignoring removed mblk_io_submit option [ 990.772347][T11044] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 990.780766][T11044] EXT4-fs (loop1): orphan cleanup on readonly fs [ 990.787323][T11044] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 990.803004][T11044] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 990.810236][T11044] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.13367: bg 0: block 40: padding at end of block bitmap is not set [ 990.824701][T11044] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 990.833675][T11044] EXT4-fs (loop1): 1 truncate cleaned up [ 990.839596][T11044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 990.862208][T11044] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #16: comm syz.1.13367: corrupted xattr block 31: invalid header [ 990.875897][T11044] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 990.884891][T11044] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #16: comm syz.1.13367: corrupted xattr block 31: invalid header [ 990.898350][T11044] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 990.907498][T11044] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.13367: bad symlink. [ 990.925650][ T7410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.040853][T21837] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 991.074943][T11057] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 991.114814][T11061] netlink: 'syz.3.13374': attribute type 21 has an invalid length. [ 992.877478][T11117] netlink: 'syz.1.13391': attribute type 21 has an invalid length. [ 993.038697][T11122] loop3: detected capacity change from 0 to 1024 [ 993.045997][T11122] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 993.054714][T11122] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 993.065670][T11122] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 993.074136][T11122] EXT4-fs (loop3): orphan cleanup on readonly fs [ 993.080940][T11122] EXT4-fs error (device loop3): __ext4_get_inode_loc:4450: comm syz.3.13393: Invalid inode table block 0 in block_group 0 [ 993.093753][T11122] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 993.103627][T11122] EXT4-fs error (device loop3): ext4_quota_write:7324: inode #3: comm syz.3.13393: mark_inode_dirty error [ 993.115075][T11122] __quota_error: 53 callbacks suppressed [ 993.115087][T11122] Quota error (device loop3): write_blk: dquota write failed [ 993.128105][T11122] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 993.138354][T11122] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.13393: Failed to acquire dquot type 0 [ 993.149869][T11122] EXT4-fs error (device loop3): __ext4_get_inode_loc:4450: comm syz.3.13393: Invalid inode table block 0 in block_group 0 [ 993.163280][T11122] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 993.172812][T11122] EXT4-fs error (device loop3): ext4_ext_truncate:4457: inode #15: comm syz.3.13393: mark_inode_dirty error [ 993.184404][T11122] EXT4-fs error (device loop3): __ext4_get_inode_loc:4450: comm syz.3.13393: Invalid inode table block 0 in block_group 0 [ 993.197537][T11122] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 993.207013][T11122] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 993.215684][T11122] EXT4-fs error (device loop3): __ext4_get_inode_loc:4450: comm syz.3.13393: Invalid inode table block 0 in block_group 0 [ 993.228534][T11122] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 993.238097][T11122] EXT4-fs error (device loop3): ext4_truncate:4255: inode #15: comm syz.3.13393: mark_inode_dirty error [ 993.249485][T11122] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 993.258502][T11122] EXT4-fs (loop3): 1 truncate cleaned up [ 993.264533][T11122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 993.295197][ T2006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.766919][T11140] loop1: detected capacity change from 0 to 8192 [ 994.035047][T11151] loop0: detected capacity change from 0 to 512 [ 994.043818][T11151] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 994.074744][T11151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 994.089613][T11151] ext4 filesystem being mounted at /581/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 994.191455][T11161] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 994.530595][T11168] loop7: detected capacity change from 0 to 8192 [ 994.867155][T11185] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.939877][T11185] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.983670][T11185] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.011554][T11187] loop0: detected capacity change from 0 to 1024 [ 995.018695][T11187] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 995.027557][T11187] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 995.038722][T11187] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 995.047130][T11187] EXT4-fs (loop0): orphan cleanup on readonly fs [ 995.058040][T11185] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.069552][T11187] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz.0.13416: Invalid inode table block 0 in block_group 0 [ 995.083182][T11187] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 995.092815][T11187] EXT4-fs error (device loop0): ext4_quota_write:7324: inode #3: comm syz.0.13416: mark_inode_dirty error [ 995.105150][T11187] Quota error (device loop0): write_blk: dquota write failed [ 995.113168][T11187] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 995.123215][T11187] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.13416: Failed to acquire dquot type 0 [ 995.135821][T11187] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz.0.13416: Invalid inode table block 0 in block_group 0 [ 995.148958][T11187] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 995.154027][T11185] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.158638][T11187] EXT4-fs error (device loop0): ext4_ext_truncate:4457: inode #15: comm syz.0.13416: mark_inode_dirty error [ 995.171130][T11185] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.178251][T11187] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz.0.13416: Invalid inode table block 0 in block_group 0 [ 995.199212][T11187] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 995.203064][T11185] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.220627][T11185] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.229413][T11187] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 995.238307][T11187] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz.0.13416: Invalid inode table block 0 in block_group 0 [ 995.261116][T11187] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 995.271037][T11187] EXT4-fs error (device loop0): ext4_truncate:4255: inode #15: comm syz.0.13416: mark_inode_dirty error [ 995.291119][T11187] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 995.311473][T11187] EXT4-fs (loop0): 1 truncate cleaned up [ 995.377597][T11206] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 995.474703][T11213] loop0: detected capacity change from 0 to 2048 [ 995.539750][T11216] futex_wake_op: syz.7.13426 tries to shift op by -1; fix this program [ 995.793868][T11225] netlink: 124 bytes leftover after parsing attributes in process `syz.7.13428'. [ 995.898771][T11227] loop0: detected capacity change from 0 to 8192 [ 996.075033][T21869] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.137407][T11244] loop6: detected capacity change from 0 to 8192 [ 996.192281][T21869] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.252581][T21869] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.312155][T21869] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.449940][T11258] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 996.494259][T11241] chnl_net:caif_netlink_parms(): no params data found [ 996.553061][T11241] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.560164][T11241] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.567860][T11241] bridge_slave_0: entered allmulticast mode [ 996.577133][T11241] bridge_slave_0: entered promiscuous mode [ 996.584426][T11241] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.592211][T11241] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.599785][T11241] bridge_slave_1: entered allmulticast mode [ 996.607113][T11241] bridge_slave_1: entered promiscuous mode [ 996.637735][T11241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.661809][T11241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.699932][T11241] team0: Port device team_slave_0 added [ 996.734300][T11241] team0: Port device team_slave_1 added [ 996.742568][T11269] futex_wake_op: syz.1.13437 tries to shift op by -1; fix this program [ 996.775680][T11241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.782801][T11241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.810050][T11241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.824698][T11241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.831785][T11241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.857759][T11241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.896073][T11241] hsr_slave_0: entered promiscuous mode [ 996.911002][T11241] hsr_slave_1: entered promiscuous mode [ 996.927159][T11241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 996.938734][T11241] Cannot create hsr debugfs directory [ 997.889491][T11318] loop7: detected capacity change from 0 to 8192 [ 997.895620][T11320] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l0 [ 998.048264][T11327] loop6: detected capacity change from 0 to 8192 [ 998.060342][ T29] audit: type=1326 audit(2000000775.230:76070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.13459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 998.084452][ T29] audit: type=1326 audit(2000000775.230:76071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.13459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 998.108376][ T29] audit: type=1326 audit(2000000775.230:76072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.13459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 998.132094][ T29] audit: type=1326 audit(2000000775.230:76073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.13459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 998.174372][ T29] audit: type=1326 audit(2000000775.230:76074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.13459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 998.198330][ T29] audit: type=1326 audit(2000000775.330:76075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.13459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 998.222106][ T29] audit: type=1326 audit(2000000775.330:76076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.13459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 998.245855][ T29] audit: type=1326 audit(2000000775.330:76077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.13459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 998.269507][ T29] audit: type=1326 audit(2000000775.330:76078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.13459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 998.293488][ T29] audit: type=1326 audit(2000000775.330:76079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.13459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 998.317150][ T29] audit: type=1326 audit(2000000775.330:76080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.13459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 998.341105][ T29] audit: type=1326 audit(2000000775.330:76081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.13459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 998.364762][ T29] audit: type=1326 audit(2000000775.330:76082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.13459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 998.409954][T11333] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 998.445242][T11335] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.465613][T11337] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 998.502515][T11335] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.562117][T11335] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.621951][T11335] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.682712][T11335] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.695755][T11335] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.713752][T11335] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.725639][T11335] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.924637][T11349] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l0 [ 998.999507][T11355] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 999.127466][T11363] loop7: detected capacity change from 0 to 2048 [ 999.142978][T11363] EXT4-fs mount: 5 callbacks suppressed [ 999.143001][T11363] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 999.257475][T21869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 999.276117][T21869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.291315][T21869] bond0 (unregistering): Released all slaves [ 999.340857][T21869] hsr_slave_0: left promiscuous mode [ 999.347212][T21869] hsr_slave_1: left promiscuous mode [ 999.357684][T21869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 999.365439][T21869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 999.373697][T21869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 999.381229][T21869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 999.393317][T21869] veth1_macvtap: left promiscuous mode [ 999.399031][T21869] veth0_macvtap: left promiscuous mode [ 999.404673][T21869] veth1_vlan: left promiscuous mode [ 999.410061][T21869] veth0_vlan: left promiscuous mode [ 999.438346][T10275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.483671][T21869] team0 (unregistering): Port device team_slave_1 removed [ 999.495934][T21869] team0 (unregistering): Port device team_slave_0 removed [ 999.519698][T21869] smc: removing net device vxcan1 with user defined pnetid SYZ1 [ 999.532217][T11383] loop7: detected capacity change from 0 to 8192 [ 999.689996][T11241] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 999.701833][T11241] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 999.711360][T11241] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 999.720263][T11241] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 999.759327][T11241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.772463][T11241] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.782206][T30603] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.789323][T30603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.801494][T22763] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.808608][T22763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.879436][T11241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.931080][T11395] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.987155][T11241] veth0_vlan: entered promiscuous mode [ 999.995777][T11395] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.012772][T11241] veth1_vlan: entered promiscuous mode [ 1000.028707][T11241] veth0_macvtap: entered promiscuous mode [ 1000.036935][T11241] veth1_macvtap: entered promiscuous mode [ 1000.047453][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.057959][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.067825][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.078305][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.088403][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.098866][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.108836][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.119320][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.129342][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.139810][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.149667][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.160226][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.173641][T11241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1000.184880][T11395] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.198699][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.209330][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.219413][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.229936][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.239890][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.250434][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.260268][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.270829][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.280741][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.291269][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.301138][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.311665][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.322537][T11241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1000.332541][T11241] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.341478][T11241] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.350267][T11241] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.359050][T11241] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.371411][T21869] IPVS: stop unused estimator thread 0... [ 1000.378996][T11395] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.407967][T11395] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.419416][T11395] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.436306][T11395] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.450674][T11395] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.564013][T11411] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.649927][T11411] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.719329][T11403] loop3: detected capacity change from 0 to 1024 [ 1000.734663][T11403] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1000.744393][T11411] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.744912][T11403] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1000.766653][T11403] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1000.775271][T11403] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1000.782072][T11403] EXT4-fs error (device loop3): __ext4_get_inode_loc:4450: comm syz.3.13432: Invalid inode table block 0 in block_group 0 [ 1000.795087][T11403] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1000.806402][T11403] EXT4-fs error (device loop3): ext4_quota_write:7324: inode #3: comm syz.3.13432: mark_inode_dirty error [ 1000.817950][T11403] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.13432: Failed to acquire dquot type 0 [ 1000.830532][T11411] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.830897][T11403] EXT4-fs error (device loop3): __ext4_get_inode_loc:4450: comm syz.3.13432: Invalid inode table block 0 in block_group 0 [ 1000.853848][T11403] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1000.864220][T11403] EXT4-fs error (device loop3): ext4_ext_truncate:4457: inode #15: comm syz.3.13432: mark_inode_dirty error [ 1000.865494][T11408] chnl_net:caif_netlink_parms(): no params data found [ 1000.876489][T11403] EXT4-fs error (device loop3): __ext4_get_inode_loc:4450: comm syz.3.13432: Invalid inode table block 0 in block_group 0 [ 1000.896151][T11403] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1000.906060][T11403] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 1000.914907][T11403] EXT4-fs error (device loop3): __ext4_get_inode_loc:4450: comm syz.3.13432: Invalid inode table block 0 in block_group 0 [ 1000.927972][T11403] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1000.938956][T11403] EXT4-fs error (device loop3): ext4_truncate:4255: inode #15: comm syz.3.13432: mark_inode_dirty error [ 1000.950614][T11403] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 1000.959586][T11403] EXT4-fs (loop3): 1 truncate cleaned up [ 1000.966105][T11403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1000.970902][T11411] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.987298][T11408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.994581][T11408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.001987][T11408] bridge_slave_0: entered allmulticast mode [ 1001.008496][T11408] bridge_slave_0: entered promiscuous mode [ 1001.015452][T11408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.022559][T11408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.029814][T11408] bridge_slave_1: entered allmulticast mode [ 1001.030127][T11241] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.036380][T11408] bridge_slave_1: entered promiscuous mode [ 1001.059104][T11411] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.071208][T11411] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.088663][T11408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.099545][T11408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.108822][T11428] loop3: detected capacity change from 0 to 8192 [ 1001.121067][T11411] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.158062][T11408] team0: Port device team_slave_0 added [ 1001.165033][T11408] team0: Port device team_slave_1 added [ 1001.186095][T11408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.193165][T11408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.219166][T11408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.231887][T11408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.238922][T11408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.265086][T11408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.323059][T11408] hsr_slave_0: entered promiscuous mode [ 1001.336131][T11408] hsr_slave_1: entered promiscuous mode [ 1001.352758][T11408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1001.364372][T11408] Cannot create hsr debugfs directory [ 1001.504234][T11408] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.566699][T11408] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.634026][T11408] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.694544][T11408] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.901608][T11458] loop1: detected capacity change from 0 to 2048 [ 1001.928600][T11458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1002.105099][T11469] loop3: detected capacity change from 0 to 2048 [ 1002.114043][ T7410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.140019][T11469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1002.287529][T11241] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.383476][T11408] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1002.392095][T11408] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1002.401501][T11408] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1002.410962][T11408] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1002.444492][T11408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1002.456029][T11408] 8021q: adding VLAN 0 to HW filter on device team0 [ 1002.465145][T21837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.472227][T21837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1002.484090][T21836] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.491278][T21836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1002.515229][T11408] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1002.525833][T11408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1002.592993][T11492] loop3: detected capacity change from 0 to 2048 [ 1002.597427][T11408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1002.616468][T11492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1002.678173][T11408] veth0_vlan: entered promiscuous mode [ 1002.707658][T11408] veth1_vlan: entered promiscuous mode [ 1002.727299][T11408] veth0_macvtap: entered promiscuous mode [ 1002.735653][T11408] veth1_macvtap: entered promiscuous mode [ 1002.747238][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.757759][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.767684][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.778297][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.788271][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.798777][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.808653][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.819281][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.829315][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.839779][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.849698][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.860159][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.870086][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.880583][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.891906][T11408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.904206][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.914775][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.924664][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.924680][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.924696][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.924711][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.924727][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.924812][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.924825][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.924892][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.924904][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.924916][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.924928][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.924943][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.936572][T11408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.937889][T11408] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.937975][T11408] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.938053][T11408] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.938082][T11408] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.948442][T11241] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.128501][T11516] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 1003.229376][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 1003.229407][ T29] audit: type=1326 audit(2000000780.390:76159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.3.13511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2976de969 code=0x7ffc0000 [ 1003.234506][T11523] loop6: detected capacity change from 0 to 2048 [ 1003.240120][ T29] audit: type=1326 audit(2000000780.400:76160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.3.13511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2976de969 code=0x7ffc0000 [ 1003.289815][ T29] audit: type=1326 audit(2000000780.400:76161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.3.13511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2976de969 code=0x7ffc0000 [ 1003.313572][ T29] audit: type=1326 audit(2000000780.400:76162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.3.13511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2976de969 code=0x7ffc0000 [ 1003.340097][T11530] loop3: detected capacity change from 0 to 1024 [ 1003.348805][T11523] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.366191][ T29] audit: type=1326 audit(2000000780.530:76163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.3.13511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fd2976de969 code=0x7ffc0000 [ 1003.366729][T11530] EXT4-fs: inline encryption not supported [ 1003.398102][ T29] audit: type=1326 audit(2000000780.530:76164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.3.13511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2976de969 code=0x7ffc0000 [ 1003.399268][T11530] EXT4-fs: Ignoring removed bh option [ 1003.421873][ T29] audit: type=1326 audit(2000000780.530:76165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.3.13511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2976de969 code=0x7ffc0000 [ 1003.453866][T11530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1003.497430][ T29] audit: type=1326 audit(2000000780.660:76166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.3.13511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2976de969 code=0x7ffc0000 [ 1003.521239][ T29] audit: type=1326 audit(2000000780.660:76167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.3.13511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2976de969 code=0x7ffc0000 [ 1003.545099][ T29] audit: type=1326 audit(2000000780.660:76168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.3.13511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2976de969 code=0x7ffc0000 [ 1003.630344][T11538] FAULT_INJECTION: forcing a failure. [ 1003.630344][T11538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.632762][T11528] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.13511: Allocating blocks 497-513 which overlap fs metadata [ 1003.643700][T11538] CPU: 1 UID: 0 PID: 11538 Comm: syz.0.13512 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 1003.643731][T11538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1003.643788][T11538] Call Trace: [ 1003.643796][T11538] [ 1003.643804][T11538] __dump_stack+0x1d/0x30 [ 1003.643826][T11538] dump_stack_lvl+0xe8/0x140 [ 1003.643845][T11538] dump_stack+0x15/0x1b [ 1003.643861][T11538] should_fail_ex+0x265/0x280 [ 1003.643957][T11538] should_fail+0xb/0x20 [ 1003.644055][T11538] should_fail_usercopy+0x1a/0x20 [ 1003.644073][T11538] strncpy_from_user+0x25/0x230 [ 1003.644227][T11538] ? kmem_cache_alloc_noprof+0x186/0x310 [ 1003.644337][T11538] ? getname_flags+0x80/0x3b0 [ 1003.644364][T11538] getname_flags+0xae/0x3b0 [ 1003.644407][T11538] do_sys_openat2+0x60/0x110 [ 1003.644427][T11538] __x64_sys_openat+0xf2/0x120 [ 1003.644447][T11538] x64_sys_call+0x1af/0x2fb0 [ 1003.644467][T11538] do_syscall_64+0xd0/0x1a0 [ 1003.644488][T11538] ? clear_bhb_loop+0x25/0x80 [ 1003.644580][T11538] ? clear_bhb_loop+0x25/0x80 [ 1003.644600][T11538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.644620][T11538] RIP: 0033:0x7fab3a50e969 [ 1003.644635][T11538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1003.644653][T11538] RSP: 002b:00007fab38b77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1003.644718][T11538] RAX: ffffffffffffffda RBX: 00007fab3a735fa0 RCX: 00007fab3a50e969 [ 1003.644731][T11538] RDX: 0000000000000001 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 1003.644744][T11538] RBP: 00007fab38b77090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.644756][T11538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.644803][T11538] R13: 0000000000000001 R14: 00007fab3a735fa0 R15: 00007fffd8791e58 [ 1003.644878][T11538] [ 1003.742794][T11543] loop7: detected capacity change from 0 to 512 [ 1003.743865][T11528] EXT4-fs (loop3): Remounting filesystem read-only [ 1003.748870][ T8845] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.773785][T11528] EXT4-fs (loop3): pa ffff8881004dd8c0: logic 256, phys. 385, len 8 [ 1003.794483][T11543] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1003.885203][T11542] netlink: 124 bytes leftover after parsing attributes in process `syz.0.13516'. [ 1003.897093][T11241] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.911089][T11543] EXT4-fs (loop7): 1 truncate cleaned up [ 1003.923502][T11543] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.985856][T11557] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 1004.016243][T11563] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13524'. [ 1004.077670][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13527'. [ 1004.086820][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13527'. [ 1004.097255][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13527'. [ 1004.142987][T11575] loop0: detected capacity change from 0 to 8192 [ 1004.162030][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13527'. [ 1004.171265][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13527'. [ 1004.191287][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13527'. [ 1004.218060][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13527'. [ 1004.227423][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13527'. [ 1004.315293][T11588] loop1: detected capacity change from 0 to 1024 [ 1004.332481][T11588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1004.348292][T11588] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1004.535651][T10275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.570282][T11606] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 1004.612767][T11608] futex_wake_op: syz.3.13537 tries to shift op by -1; fix this program [ 1004.775554][T11622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11622 comm=syz.7.13541 [ 1005.039860][T11637] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1005.049591][T11637] loop6: detected capacity change from 0 to 164 [ 1005.056593][T11637] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1005.085133][T11639] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 1005.144192][T11643] loop0: detected capacity change from 0 to 164 [ 1005.152498][T11643] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1005.176848][ T7410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.194892][T11645] SELinux: failed to load policy [ 1005.231790][T11655] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1005.331721][T11668] loop1: detected capacity change from 0 to 8192 [ 1005.979414][T11681] FAULT_INJECTION: forcing a failure. [ 1005.979414][T11681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.992585][T11681] CPU: 0 UID: 0 PID: 11681 Comm: syz.7.13564 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 1005.992661][T11681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1005.992675][T11681] Call Trace: [ 1005.992683][T11681] [ 1005.992692][T11681] __dump_stack+0x1d/0x30 [ 1005.992717][T11681] dump_stack_lvl+0xe8/0x140 [ 1005.992757][T11681] dump_stack+0x15/0x1b [ 1005.992773][T11681] should_fail_ex+0x265/0x280 [ 1005.992870][T11681] should_fail+0xb/0x20 [ 1005.992898][T11681] should_fail_usercopy+0x1a/0x20 [ 1005.992990][T11681] _copy_from_user+0x1c/0xb0 [ 1005.993015][T11681] ___sys_sendmsg+0xc1/0x1d0 [ 1005.993048][T11681] __x64_sys_sendmsg+0xd4/0x160 [ 1005.993073][T11681] x64_sys_call+0x2999/0x2fb0 [ 1005.993163][T11681] do_syscall_64+0xd0/0x1a0 [ 1005.993182][T11681] ? clear_bhb_loop+0x25/0x80 [ 1005.993205][T11681] ? clear_bhb_loop+0x25/0x80 [ 1005.993229][T11681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.993299][T11681] RIP: 0033:0x7fbcde44e969 [ 1005.993327][T11681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.993408][T11681] RSP: 002b:00007fbcdcab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1005.993426][T11681] RAX: ffffffffffffffda RBX: 00007fbcde675fa0 RCX: 00007fbcde44e969 [ 1005.993438][T11681] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 1005.993509][T11681] RBP: 00007fbcdcab7090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.993520][T11681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.993592][T11681] R13: 0000000000000000 R14: 00007fbcde675fa0 R15: 00007ffcbe47ce28 [ 1005.993612][T11681] [ 1006.246874][T11691] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1006.260769][T11689] Falling back ldisc for ttyS3. [ 1006.277459][T11689] loop3: detected capacity change from 0 to 2048 [ 1006.333230][T11689] capability: warning: `syz.3.13566' uses deprecated v2 capabilities in a way that may be insecure [ 1007.345370][T11729] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1007.407595][T11732] SELinux: failed to load policy [ 1007.427411][T11740] FAULT_INJECTION: forcing a failure. [ 1007.427411][T11740] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.440154][T11740] CPU: 1 UID: 0 PID: 11740 Comm: syz.1.13585 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 1007.440176][T11740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1007.440186][T11740] Call Trace: [ 1007.440192][T11740] [ 1007.440198][T11740] __dump_stack+0x1d/0x30 [ 1007.440210][T11740] dump_stack_lvl+0xe8/0x140 [ 1007.440251][T11740] dump_stack+0x15/0x1b [ 1007.440259][T11740] should_fail_ex+0x265/0x280 [ 1007.440274][T11740] should_failslab+0x8c/0xb0 [ 1007.440309][T11740] __kmalloc_noprof+0xa5/0x3e0 [ 1007.440318][T11740] ? rds_message_alloc+0x45/0x120 [ 1007.440331][T11740] rds_message_alloc+0x45/0x120 [ 1007.440353][T11740] rds_sendmsg+0x860/0x14a0 [ 1007.440377][T11740] ? __pfx_rds_sendmsg+0x10/0x10 [ 1007.440399][T11740] __sock_sendmsg+0x142/0x180 [ 1007.440420][T11740] ____sys_sendmsg+0x31e/0x4e0 [ 1007.440454][T11740] ___sys_sendmsg+0x17b/0x1d0 [ 1007.440540][T11740] __x64_sys_sendmsg+0xd4/0x160 [ 1007.440551][T11740] x64_sys_call+0x2999/0x2fb0 [ 1007.440623][T11740] do_syscall_64+0xd0/0x1a0 [ 1007.440635][T11740] ? clear_bhb_loop+0x25/0x80 [ 1007.440649][T11740] ? clear_bhb_loop+0x25/0x80 [ 1007.440659][T11740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.440694][T11740] RIP: 0033:0x7ff203dde969 [ 1007.440702][T11740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1007.440711][T11740] RSP: 002b:00007ff202447038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1007.440754][T11740] RAX: ffffffffffffffda RBX: 00007ff204005fa0 RCX: 00007ff203dde969 [ 1007.440760][T11740] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1007.440766][T11740] RBP: 00007ff202447090 R08: 0000000000000000 R09: 0000000000000000 [ 1007.440772][T11740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1007.440778][T11740] R13: 0000000000000000 R14: 00007ff204005fa0 R15: 00007ffc545a4df8 [ 1007.440787][T11740] [ 1008.597061][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 1008.597077][ T29] audit: type=1326 audit(2000000785.760:76373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.7.13595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 1008.627882][ T29] audit: type=1326 audit(2000000785.760:76374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.7.13595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 1008.631978][T11769] futex_wake_op: syz.6.13594 tries to shift op by -1; fix this program [ 1008.651669][ T29] audit: type=1326 audit(2000000785.760:76375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.7.13595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 1008.684209][ T29] audit: type=1326 audit(2000000785.760:76376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.7.13595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 1008.707941][ T29] audit: type=1326 audit(2000000785.760:76377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.7.13595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 1008.731734][ T29] audit: type=1326 audit(2000000785.760:76378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.7.13595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 1008.755493][ T29] audit: type=1326 audit(2000000785.760:76379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.7.13595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 1008.777113][T11772] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1008.779163][ T29] audit: type=1326 audit(2000000785.760:76380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.7.13595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 1008.810326][ T29] audit: type=1326 audit(2000000785.760:76381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.7.13595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 1008.834060][ T29] audit: type=1326 audit(2000000785.760:76382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.7.13595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 1008.984299][T11782] loop7: detected capacity change from 0 to 2048 [ 1009.002795][T11782] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1009.143456][T10275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.199511][T11790] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1009.364694][T11796] __nla_validate_parse: 20 callbacks suppressed [ 1009.364712][T11796] netlink: 124 bytes leftover after parsing attributes in process `syz.3.13603'. [ 1009.382891][T11798] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13604'. [ 1010.010396][T11823] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 1010.129782][T11828] loop0: detected capacity change from 0 to 512 [ 1010.136582][T11828] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1010.143676][T11829] futex_wake_op: syz.7.13616 tries to shift op by -1; fix this program [ 1010.157647][T11828] EXT4-fs (loop0): 1 truncate cleaned up [ 1010.163577][T11828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1010.208059][T11832] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13617'. [ 1010.386516][T11863] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13629'. [ 1010.426757][T11861] loop6: detected capacity change from 0 to 2048 [ 1010.443162][T11861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1010.474721][T11873] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1010.609054][ T8845] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.631312][T11883] netlink: 124 bytes leftover after parsing attributes in process `syz.6.13637'. [ 1010.917672][T11408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.166897][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13648'. [ 1011.176246][T11911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11911 comm=syz.3.13648 [ 1011.189266][T11911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13648'. [ 1011.343668][T11916] futex_wake_op: syz.3.13650 tries to shift op by -1; fix this program [ 1011.407138][T11918] netlink: 'syz.1.13651': attribute type 21 has an invalid length. [ 1012.254526][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13659'. [ 1012.493607][T11953] loop6: detected capacity change from 0 to 8192 [ 1012.954065][T11961] loop1: detected capacity change from 0 to 2048 [ 1012.980274][T11961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.339086][ T7410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.434541][T11971] futex_wake_op: syz.1.13668 tries to shift op by -1; fix this program [ 1013.515072][T11977] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1013.546232][T11975] loop6: detected capacity change from 0 to 8192 [ 1013.574550][T11981] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1013.642159][T11988] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1013.721565][T11990] loop7: detected capacity change from 0 to 8192 [ 1014.407758][T12011] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 1014.541938][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 1014.541955][ T29] audit: type=1326 audit(2000000791.700:76583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12012 comm="syz.1.13685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 1014.571962][ T29] audit: type=1326 audit(2000000791.710:76584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12012 comm="syz.1.13685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 1014.595822][ T29] audit: type=1326 audit(2000000791.710:76585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12012 comm="syz.1.13685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 1014.619738][ T29] audit: type=1326 audit(2000000791.710:76586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12012 comm="syz.1.13685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 1014.643461][ T29] audit: type=1326 audit(2000000791.710:76587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12012 comm="syz.1.13685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 1014.667377][ T29] audit: type=1326 audit(2000000791.710:76588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12012 comm="syz.1.13685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 1014.691457][ T29] audit: type=1326 audit(2000000791.710:76589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12012 comm="syz.1.13685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 1014.715151][ T29] audit: type=1326 audit(2000000791.710:76590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12012 comm="syz.1.13685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 1014.739189][ T29] audit: type=1326 audit(2000000791.710:76591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12012 comm="syz.1.13685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 1014.763093][ T29] audit: type=1326 audit(2000000791.710:76592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12012 comm="syz.1.13685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7ff203dde969 code=0x7ffc0000 [ 1014.841197][T12017] loop6: detected capacity change from 0 to 2048 [ 1014.883288][T12019] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.883876][T12017] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.922522][T12026] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1014.975156][T12019] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.043159][T12024] loop7: detected capacity change from 0 to 1024 [ 1015.053106][T12024] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1015.071535][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13692'. [ 1015.082476][T12024] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1015.095726][T12019] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.112029][T12032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13692'. [ 1015.112305][T12029] loop0: detected capacity change from 0 to 2048 [ 1015.128801][T12024] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1015.138461][T12024] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1015.150170][T12029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1015.162501][T12024] EXT4-fs error (device loop7): __ext4_get_inode_loc:4450: comm syz.7.13688: Invalid inode table block 0 in block_group 0 [ 1015.177606][T12024] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1015.190580][T12024] EXT4-fs error (device loop7): ext4_quota_write:7324: inode #3: comm syz.7.13688: mark_inode_dirty error [ 1015.203112][T12019] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.203499][T12024] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.13688: Failed to acquire dquot type 0 [ 1015.224990][T12024] EXT4-fs error (device loop7): __ext4_get_inode_loc:4450: comm syz.7.13688: Invalid inode table block 0 in block_group 0 [ 1015.226115][ T8845] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.238035][T12024] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1015.256532][T12024] EXT4-fs error (device loop7): ext4_ext_truncate:4457: inode #15: comm syz.7.13688: mark_inode_dirty error [ 1015.283230][T12024] EXT4-fs error (device loop7): __ext4_get_inode_loc:4450: comm syz.7.13688: Invalid inode table block 0 in block_group 0 [ 1015.300110][T12024] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1015.310074][T12024] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 1015.326520][T12019] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.342639][T12024] EXT4-fs error (device loop7): __ext4_get_inode_loc:4450: comm syz.7.13688: Invalid inode table block 0 in block_group 0 [ 1015.359000][T12019] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.368385][T12024] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1015.378525][T12024] EXT4-fs error (device loop7): ext4_truncate:4255: inode #15: comm syz.7.13688: mark_inode_dirty error [ 1015.393376][T12019] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.405621][T12024] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 1015.417423][T12044] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1015.419873][T12019] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.434991][T12024] EXT4-fs (loop7): 1 truncate cleaned up [ 1015.455489][T11408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.466895][T12024] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1015.470067][T12045] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 1015.530348][T10275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.558876][T12055] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1015.595637][T12058] loop7: detected capacity change from 0 to 8192 [ 1015.656888][T12063] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13704'. [ 1015.705411][T12069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13706'. [ 1015.809041][T12077] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1016.039491][T12085] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 1016.062031][T12082] loop6: detected capacity change from 0 to 1024 [ 1016.069024][T12082] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1016.077873][T12082] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1016.093601][T12082] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1016.120691][T12082] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1016.135556][T12082] EXT4-fs error (device loop6): __ext4_get_inode_loc:4450: comm syz.6.13711: Invalid inode table block 0 in block_group 0 [ 1016.151000][T12082] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1016.161767][T12082] EXT4-fs error (device loop6): ext4_quota_write:7324: inode #3: comm syz.6.13711: mark_inode_dirty error [ 1016.173273][T12082] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.13711: Failed to acquire dquot type 0 [ 1016.211861][T12082] EXT4-fs error (device loop6): __ext4_get_inode_loc:4450: comm syz.6.13711: Invalid inode table block 0 in block_group 0 [ 1016.225201][T12082] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1016.235364][T12082] EXT4-fs error (device loop6): ext4_ext_truncate:4457: inode #15: comm syz.6.13711: mark_inode_dirty error [ 1016.249794][T12082] EXT4-fs error (device loop6): __ext4_get_inode_loc:4450: comm syz.6.13711: Invalid inode table block 0 in block_group 0 [ 1016.262961][T12082] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1016.272654][T12082] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 1016.281329][T12082] EXT4-fs error (device loop6): __ext4_get_inode_loc:4450: comm syz.6.13711: Invalid inode table block 0 in block_group 0 [ 1016.296445][T12082] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1016.307138][T12082] EXT4-fs error (device loop6): ext4_truncate:4255: inode #15: comm syz.6.13711: mark_inode_dirty error [ 1016.318672][T12082] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 1016.327881][T12082] EXT4-fs (loop6): 1 truncate cleaned up [ 1016.334085][T12082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1016.384838][ T8845] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.412442][T12105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13719'. [ 1016.503877][T12120] netlink: 124 bytes leftover after parsing attributes in process `syz.1.13726'. [ 1016.647716][T12129] futex_wake_op: syz.7.13729 tries to shift op by -1; fix this program [ 1017.486849][T12160] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 1017.501295][T12162] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.544458][T12136] loop0: detected capacity change from 0 to 1024 [ 1017.553017][T12136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1017.561601][T12136] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1017.573093][T12162] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.573732][T12136] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1017.591134][T12136] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1017.597895][T12136] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz.0.13732: Invalid inode table block 0 in block_group 0 [ 1017.610897][T12136] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1017.620659][T12136] EXT4-fs error (device loop0): ext4_quota_write:7324: inode #3: comm syz.0.13732: mark_inode_dirty error [ 1017.632137][T12136] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.13732: Failed to acquire dquot type 0 [ 1017.643805][T12136] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz.0.13732: Invalid inode table block 0 in block_group 0 [ 1017.656701][T12136] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1017.666894][T12136] EXT4-fs error (device loop0): ext4_ext_truncate:4457: inode #15: comm syz.0.13732: mark_inode_dirty error [ 1017.668460][T12162] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.679150][T12136] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz.0.13732: Invalid inode table block 0 in block_group 0 [ 1017.701429][T12136] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1017.711046][T12136] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 1017.719741][T12136] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz.0.13732: Invalid inode table block 0 in block_group 0 [ 1017.732669][T12136] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1017.742345][T12136] EXT4-fs error (device loop0): ext4_truncate:4255: inode #15: comm syz.0.13732: mark_inode_dirty error [ 1017.753738][T12136] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 1017.755035][T12162] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.765737][T12136] EXT4-fs (loop0): 1 truncate cleaned up [ 1017.778595][T12136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1017.823177][T11408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.839340][T12162] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.852828][T12162] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.863687][T12162] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.874546][T12162] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.353904][T12188] futex_wake_op: syz.1.13748 tries to shift op by -1; fix this program [ 1018.722874][T12237] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1018.737922][T12241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13769'. [ 1019.004354][T12277] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13784'. [ 1019.051163][T12283] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.104566][T12283] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.148229][T12286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13788'. [ 1019.166088][T12283] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.204797][T12283] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.246800][T12283] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.258502][T12283] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.270453][T12283] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.282668][T12283] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.345342][T12288] loop1: detected capacity change from 0 to 1024 [ 1019.352367][T12288] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1019.360993][T12288] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1019.372027][T12288] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1019.380584][T12288] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1019.387520][T12288] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz.1.13789: Invalid inode table block 0 in block_group 0 [ 1019.400578][T12288] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1019.410157][T12288] EXT4-fs error (device loop1): ext4_quota_write:7324: inode #3: comm syz.1.13789: mark_inode_dirty error [ 1019.424193][T12288] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.13789: Failed to acquire dquot type 0 [ 1019.435733][T12288] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz.1.13789: Invalid inode table block 0 in block_group 0 [ 1019.450297][T12288] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1019.459949][T12288] EXT4-fs error (device loop1): ext4_ext_truncate:4457: inode #15: comm syz.1.13789: mark_inode_dirty error [ 1019.472375][T12288] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz.1.13789: Invalid inode table block 0 in block_group 0 [ 1019.485618][T12288] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1019.495563][T12288] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 1019.504429][T12288] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz.1.13789: Invalid inode table block 0 in block_group 0 [ 1019.517423][T12288] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1019.527010][T12288] EXT4-fs error (device loop1): ext4_truncate:4255: inode #15: comm syz.1.13789: mark_inode_dirty error [ 1019.539768][T12288] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 1019.548837][T12288] EXT4-fs (loop1): 1 truncate cleaned up [ 1019.556617][T12288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1019.597805][ T7410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.632966][T12297] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.698582][T12297] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.721357][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 1019.721378][ T29] audit: type=1326 audit(2000000796.890:76808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.7.13795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 1019.753305][ T29] audit: type=1326 audit(2000000796.890:76809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.7.13795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 1019.775344][T12308] loop7: detected capacity change from 0 to 512 [ 1019.777114][ T29] audit: type=1326 audit(2000000796.890:76810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.7.13795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 1019.788221][T12308] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1019.806950][ T29] audit: type=1326 audit(2000000796.890:76811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.7.13795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fbcde44e969 code=0x7ffc0000 [ 1019.851990][T12297] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.869079][T12308] EXT4-fs (loop7): 1 truncate cleaned up [ 1019.875283][T12308] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1019.931355][T12297] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.963084][T12321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13799'. [ 1019.998605][T12297] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.012374][T12297] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.025175][T12297] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.041629][T12297] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.225524][T12339] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 1020.240509][ T29] audit: type=1326 audit(2000000797.400:76812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.3.13805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2976de969 code=0x7ffc0000 [ 1020.264237][ T29] audit: type=1326 audit(2000000797.400:76813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.3.13805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2976de969 code=0x7ffc0000 [ 1020.287984][ T29] audit: type=1326 audit(2000000797.400:76814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.3.13805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd2976de969 code=0x7ffc0000 [ 1020.313289][ T29] audit: type=1326 audit(2000000797.480:76815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.3.13805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2976de969 code=0x7ffc0000 [ 1020.337102][ T29] audit: type=1326 audit(2000000797.480:76816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.3.13805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2976de969 code=0x7ffc0000 [ 1020.377590][T12346] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13807'. [ 1020.387608][ T29] audit: type=1400 audit(2000000797.560:76817): avc: denied { write } for pid=12345 comm="syz.0.13807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1020.468534][T12360] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1020.489923][T12362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13814'. [ 1020.559160][T10275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.582872][T12371] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 1020.639538][T12377] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1020.646107][T12377] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1020.653895][T12377] vhci_hcd vhci_hcd.0: Device attached [ 1020.664411][T12377] ªªªªªª: renamed from vlan0 (while UP) [ 1020.676855][T12378] vhci_hcd: connection closed [ 1020.677136][T30603] vhci_hcd: stop threads [ 1020.686224][T30603] vhci_hcd: release socket [ 1020.690681][T30603] vhci_hcd: disconnect device [ 1021.316785][T12391] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1021.384208][T12401] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1021.517655][T12427] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13843'. [ 1021.551627][T12430] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1022.496759][T12463] ================================================================== [ 1022.504895][T12463] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 1022.511610][T12463] [ 1022.513946][T12463] write to 0xffff888104782d10 of 8 bytes by task 12461 on cpu 1: [ 1022.521700][T12463] call_rcu+0x3b/0x3e0 [ 1022.525807][T12463] mas_wmb_replace+0xc6b/0x14a0 [ 1022.530722][T12463] mas_wr_store_entry+0x17ae/0x2b60 [ 1022.535942][T12463] mas_store_prealloc+0x74d/0x9e0 [ 1022.541000][T12463] vma_iter_store_new+0x1c5/0x200 [ 1022.546048][T12463] vma_complete+0x125/0x570 [ 1022.550581][T12463] __split_vma+0x54c/0x610 [ 1022.555041][T12463] vma_modify+0x107/0x210 [ 1022.559405][T12463] vma_modify_flags+0x101/0x130 [ 1022.564291][T12463] mprotect_fixup+0x2cc/0x570 [ 1022.569005][T12463] do_mprotect_pkey+0x6d6/0x980 [ 1022.573884][T12463] __x64_sys_mprotect+0x48/0x60 [ 1022.578819][T12463] x64_sys_call+0x2794/0x2fb0 [ 1022.583536][T12463] do_syscall_64+0xd0/0x1a0 [ 1022.588069][T12463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.593993][T12463] [ 1022.596344][T12463] read to 0xffff888104782d10 of 8 bytes by task 12463 on cpu 0: [ 1022.604004][T12463] mas_state_walk+0x2f5/0x650 [ 1022.608709][T12463] mas_walk+0x30/0x120 [ 1022.612787][T12463] lock_vma_under_rcu+0xa2/0x2f0 [ 1022.617740][T12463] do_user_addr_fault+0x233/0x1090 [ 1022.622874][T12463] exc_page_fault+0x54/0xc0 [ 1022.627398][T12463] asm_exc_page_fault+0x26/0x30 [ 1022.632273][T12463] [ 1022.634596][T12463] Reported by Kernel Concurrency Sanitizer on: [ 1022.640751][T12463] CPU: 0 UID: 0 PID: 12463 Comm: syz.1.13857 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 1022.653343][T12463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1022.663405][T12463] ==================================================================