last executing test programs: 2m56.41045892s ago: executing program 32 (id=625): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=']) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000100), 0xfe, 0x246, &(0x7f0000000ac0)="$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") syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x4173, &(0x7f0000000780)={0x0, 0xb39a, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/43, 0x2b}], 0x1}) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) 2m52.429715219s ago: executing program 33 (id=682): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffddff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x7c, 0x30, 0x9, 0x0, 0x0, {}, [{0x68, 0x1, [@m_bpf={0x64, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x9, 0x1, 0xe, 0xffffffcb}}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 2m34.313918598s ago: executing program 34 (id=1003): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = syz_open_procfs(0x0, 0x0) fcntl$setsig(r1, 0xa, 0x38) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") (async) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) (async) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) (async) fallocate(r3, 0x0, 0x0, 0x1000f4) (async) name_to_handle_at(0xffffffffffffffff, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1200) (async) io_setup(0x5ff, &(0x7f0000000040)=0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) io_submit(r5, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r4}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r3, 0x0, 0x0, 0xffffffffffffffff}]) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000780)={[{@grpquota}, {@nombcache}, {@minixdf}]}, 0x1, 0x502, &(0x7f0000000fc0)="$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") (async) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {0xfffffffffffffffd, r10}}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m11.547197882s ago: executing program 35 (id=2512): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r2}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) 1m8.257529617s ago: executing program 36 (id=2566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18) 1m3.397919221s ago: executing program 37 (id=2651): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x36) close_range(r0, r1, 0x0) r2 = timerfd_create(0x6, 0x81800) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f00000001c0)=0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x5, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0xfffffdef) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r7, &(0x7f0000000980), 0x20000992) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x48, &(0x7f0000000000)=ANY=[@ANYRESHEX=r8], 0x8) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x64, 0x0, 0x0, 0x8}]}) 49.950539067s ago: executing program 38 (id=2645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000004000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400010076657468305f746f5f68737200000000080007"], 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 44.349241084s ago: executing program 3 (id=2996): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) close(r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r6 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=r5, @ANYBLOB="08001c00", @ANYRES32=r6], 0x24}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(0x0, r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r8, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4008050) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4020810}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmat(r9, &(0x7f0000ffc000/0x3000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$cgroup_type(r10, &(0x7f0000000300), 0x9) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 44.045027356s ago: executing program 3 (id=3002): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) sendmmsg(r2, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) r3 = dup2(r2, r1) sendmsg$nl_route_sched(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r3, &(0x7f0000003e80)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)="6edfed4e4b4122ac66dfc4d920f0e5e91c226757e4b723b0bd5938927e67e02de3a3f82e5a23b4c7eb5afa8893967f737989b07d4146c72492ed62d08dafeb936a6eb0fffbef27e9fe56a112dcd062ab4fc965582f2d3156838bc9adccab77e69c4080f136d3bc85677ac6d1a84da425bf868722209250e8a74d3e4cb528d335e403555938455d1a868938ec4da30e18fab3228b0a99aa41f17313b0a68517767337b31f1ae7bdee0ffd2da7051de9298f50c13ff8d6d260604a2c021030fe60", 0xc0}, {&(0x7f0000000640)="6fbbc281e10ff9ae468ec366878eac", 0xf}, {&(0x7f0000000680)="4fd627c7f6b9eb46cd29b7d5d760dd556ec676945a7f3d91a09bf42e0cef6d641bbf7fdde1421de1a299fdefccc651aa2d8dcce3376db7cfd29e7675ce8e730d0316b25aa7fadba41a6e04545d8e4ce1c6e5466c8c358594410722ff6ff2de1288b0d4aabded8d757e12dff5cf1a40cdbf0142038e950005d17bc9061f8e3367279460c9e1307deff5df65a2694555b501d0b6e99388ee5e01260045b99063f7705004ab05a51446d47d1ad962e5fb4136013d5676e387b3dd92e2d841a44d9fd4bddefb2b1a5420391e3b57fcfa54ea7f98f1ae18a242407697992bd1b3cd7414f27a5c3df58186913f9ead4061c024", 0xf0}, {&(0x7f0000000780)="6412f58d5ec762141602629f0bdd7a27fadcfd6d0b625efd9525a4b3468ab1d07e6657e3b03d3857c223ef6da2cc86a921688465ca03a70f621b81b946257f2098045fc7b3959b4f7ea19e71421bda60cda1a5eeaa59d3dfb33ff0d3f88d713553ee2675b8d3755f6037edadad6d4c563a4ee11f2264f17cedfef89b25003147", 0x80}, {&(0x7f0000000800)="e6a65aac460ffca23e07d3f1742e2863d9d6f591e9a9f46eda748ad3fa3f8eba506dd4dffc8709c0290dd9b18e0f212607563f2e0aa33ee7eb87ac373c", 0x3d}, {&(0x7f0000000840)="38aac647f7a389df2642095a932ab84671369e70fc508941a03dc7bdbc349d3df72583e46e04bd5529821cd51b7c77c56feeb85c34daacc2eaa131995af5230e9dce2ab6fe253562825375b3d0cda25eaab631fc46176b5c9ae468f701b032c84b11197a59b1b8b1af4df0cba2439117fe68c7b4ac8e75420a5460bb96a64f0f8983b42c365f245b798f1985e0", 0x8d}, {&(0x7f0000002600)="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", 0x2d4}], 0x7, 0x0, 0x0, 0xc854}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000980)='ext4_alloc_da_blocks\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x44) socket$key(0xf, 0x3, 0x2) 43.957882767s ago: executing program 3 (id=3003): ioperm(0x0, 0x2, 0x2) unshare(0xc000600) r0 = epoll_create1(0x80000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000340)={0x0, 0x9b561b00}) 43.903789376s ago: executing program 3 (id=3005): r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file0\x00', 0x804204, &(0x7f0000003240)=ANY=[], 0x3, 0x337, &(0x7f0000000480)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a00)={0xffffffffffffffff, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x23, &(0x7f0000001a40)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001840), &(0x7f0000001880), 0x8, 0x18, 0x8, 0x8, &(0x7f00000018c0)}}, 0x10) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00\x00', 0x3}], 0x1) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001ac0), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="0600000004000000070000000900000000960500", @ANYRESDEC=r2, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0100000000090000000000", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="2998ef12be46e703d7cb14c906ade4e789a7422918523399aae70fbc10ab76b3f30e20dfec74fb96bca827e52b4eaba531476067867df05b134dabd517c38ab321512214f6a5e3010c267999d13fc5332b3dad42afab25e4cab38a4f907676b57d5bdc9471771cb8a3c2b13b76784a3b1911e3f4ceacfdefe9edb4e0153e9e56510b7b4adc19bd3a3773001d22c9f9"], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001b00)=ANY=[@ANYBLOB="8089f8f6656e3c5bf0265f490ff844419f000000000000000000020000000000"], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) (async) perf_event_open(&(0x7f0000001b80)={0x0, 0x80, 0x6, 0x45, 0x4, 0x3, 0x0, 0x9, 0x14, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000001b40), 0x8}, 0x500, 0x8, 0x1000, 0x1, 0x91, 0x6, 0x2b59, 0x0, 0x661b8326, 0x0, 0x9}, 0xffffffffffffffff, 0x5, r3, 0x0) (async) r7 = getpid() syz_open_procfs(r7, &(0x7f0000001c00)='numa_maps\x00') r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) (async) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1900000004000000040000000500000000000001", @ANYRES32, @ANYRESDEC=r5, @ANYRES32=0x0, @ANYRES32], 0x48) (async) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2008, 0x800}) (async) r10 = syz_clone3(&(0x7f0000000340)={0x810000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0xc}, &(0x7f00000007c0)=""/4096, 0x1000, &(0x7f0000000280)=""/89, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x7, {r6}}, 0x58) syz_open_procfs$namespace(r10, &(0x7f00000003c0)='ns/mnt\x00') (async) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r11 = openat$cgroup_ro(r6, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) mmap$qrtrtun(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x40010, r0, 0x7) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r12}, 0x10) sched_setscheduler(r10, 0x3, &(0x7f0000001800)=0x7e) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$HIDIOCGRAWNAME(r11, 0x80404804, &(0x7f0000000000)) 43.848574057s ago: executing program 3 (id=3007): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 43.666805977s ago: executing program 3 (id=3010): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002240)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 43.666420927s ago: executing program 39 (id=3010): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002240)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 18.327286251s ago: executing program 2 (id=3465): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x1000, 0x63d, 0xb, 0x2ff, 0xff, "00000008000000fe6300"}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000500010007"], 0x1c}}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0003"], 0x20) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 18.031483862s ago: executing program 2 (id=3468): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000100)=""/214) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) ftruncate(r2, 0x51a9497) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x64}) 17.998335403s ago: executing program 2 (id=3470): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000023000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) 17.891818773s ago: executing program 2 (id=3472): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x14000, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x40}, 0x1, "45e20305c6e7f20ff628f1514d755dadefbf7e9c1218a2e149131b9a6cc23b24", 0x80000000, 0x2, 0x3, 0xf5}, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) iopl(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x19b1, 0x7a6, 0xffffe6be, 0xffffffffffffffff, 0x0, 0x5, 0x101, 0x2, 0x0, 0xa00, 0x40, 0x0, 0x8, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x4000ea, 0xfffffffffffffffd, 0x0, 0x7fffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) nanosleep(0x0, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x143) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 17.726893254s ago: executing program 7 (id=3477): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x46) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioperm(0x5, 0x1ff, 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000001280)) 17.041832618s ago: executing program 7 (id=3485): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r2}, 0x18) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0}) (fail_nth: 1) 16.769549179s ago: executing program 2 (id=3486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x1, &(0x7f0000000040)=0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xfc}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xd, 0x3ccd}, @fastopen={0x22, 0x4, "33d0"}, @eol]}}}}}}}}, 0x0) 16.671053529s ago: executing program 7 (id=3488): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xe}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000d519000000000000000000"], 0x48) io_cancel(0x0, 0x0, 0x0) 16.66358535s ago: executing program 7 (id=3489): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x14000, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x40}, 0x1, "45e20305c6e7f20ff628f1514d755dadefbf7e9c1218a2e149131b9a6cc23b24", 0x80000000, 0x2, 0x3, 0xf5}, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) iopl(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x19b1, 0x7a6, 0xffffe6be, 0xffffffffffffffff, 0x0, 0x5, 0x101, 0x2, 0x0, 0xa00, 0x40, 0x0, 0x8, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x4000ea, 0xfffffffffffffffd, 0x0, 0x7fffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) nanosleep(0x0, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x143) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 15.666747204s ago: executing program 7 (id=3500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="000000000000000000bea6c6a9ad1a77bd000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000fd9500000000000000c5c68bee6afc0d842c676a773c01000000fef67c183a60ebb31f4e8699660f0000005b081cef5095fe8687247e220933e97c87efa1b6179630166c0cf8a714c856d48ad4c6e4c9f73df60b7aa8b9e033522168b792ac401f264af54920148cb6ffa835023a884b5fbec2c865eef6d9d65f00ea7ffb486aaf2ed13815376952c6f085102e4122bee292a434f1302ab415"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001"], 0x118}}, 0x20000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000014c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001480)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf253b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00a600000000003e0000000800577fac2e899db3084500"], 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x8, &(0x7f0000000540)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="8b4871546588cb12d870c1c5921ce90e93981028a60b6467dde3e16b5b173b6d277d873ab00c897730c3bed5b577bba73ea03cbc173a0b24e7568c448768f701aef3528f628710d9d6eb362e5209220f97629044ac757b28f36731ed457cadeee2eb9d20bc0a5fd031dd9e48afbe90a8", @ANYRES32=r10, @ANYRESDEC=r9, @ANYRES32=r8], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @private0, [], [], 'veth0_to_batadv\x00', 'batadv0\x00'}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00'}, 0x10) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x0) ioctl$TUNSETOFFLOAD(r11, 0x8004745a, 0x2000000c) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_subtree(r12, &(0x7f0000000200), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$unix(r14, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(r13, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r13, &(0x7f0000001500)=ANY=[@ANYBLOB="2b63707520c6e9dde88a151624cb813b6f53c8ba9d15b0fccf097f7be0d1ad6dc79767f899ef4bd6a481a993a3103f57e2f74ffac72b80262ad973d41fad16c01ce2c4e11a412898ec8547f8f463843b612ecabd8a705a9810b3225ddb4ade6e02a13d8223223b3a20e371f90a43bae8994a5c16fb810bc09d53ac1a874b41d7c64d5e0f3f3463659b0f5be2f943811bc4fb67a8b17df9eb7cc8cd24335a4deae50b"], 0x5) 15.518933045s ago: executing program 2 (id=3504): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000"], 0x48) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x582) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000006800010003000000000000800a00000000000000060007000600000008000500", @ANYRES32=r2, @ANYBLOB], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000140)=""/181, &(0x7f0000000080)=0xb5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000002040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="3e31e04e57ac11fe49a866daa044306a81a577706f1b71abd0b7dc96b060be02efa12685b7ccd5287d28f50487f49c7abcb8452abd8fad21266fdde217804e9b402ea724ebebc1cb907aba01b5397c51c44c32a6cbd1f862c3fd4264c6fac26a3e16fc0015e733d5489ce96bde392e9adc626937ebe6968395ceeea64824e37410fd9b026ca69eefbc8c9e624b8391aac274de54ec88e4a944daea666d425efcd9f7c694012232544252820e97537d9db1b508906662186b4ce7be87c9f18172e04e4a43aa2e8191a21334b15614d9ec7bd3275c98be8412e7bf7f71f3aeb993f07a61ce1b63e713de047ddb33d27440e453f3a8a87c0ea61af249cafa78be9e75ac908467b6152118c4bd95e96e05edee1ecdb8ba5a4817c90cabfbfc046138d233de70e3d72fa7e8a179243f726e3029ace942232ee740aa406968fc360c99ac198b18bfe2f97e55dfad5363041d2e5577c496bbd29967ce78a7f75193baea4dbf9fb077d5eda3aadf5691e0bd18d76ce592f0826ae614641259dae3502c505c62b15511ab5b1f050e75e3334c1c4762d6aa9119b60d74292db52004d3bd978855b38e4178990f297a1c564504fc240e2bcd8f5bfe61c60156a34a4144e88d6c146d8a7386558e14f6526fa0469b2dc876fbc78c62d60a80bf0c680f44ffba97ee996f2dae82c22512960dcf35f4361184ab993bacd9ced74f5ab67cdfef6f7d8ebf1ee1c4d462070b8c23667601269d3cc28985cd72dc87b89f4771522654a9ba92072b4d57b5f257750e1562841ccf00ffe76d5b9b42612f5ce50d3dfdb0ee71fc629e35547a2cebb635ea2d1740605216184dac453861d756e43987e25b6035c61b43cdd0e3103553483c81fe3c8fc52f0ecce880bd5b867607f19fc00778926a49bc5892633d5916e0cf7fcae808a28d6ee4bfcc818ee2f08c6381e75d760afb967dda819defe42e6b59812581e3bafc7f603adb5d0d6bdee250086f3a3a0a2ce3768ed4aa63ebc182846fdec4efd54c58700a0aeb5d029d9b9484baab2b6478676d2b5193971e2157eca1efc12f764285f71157c69d0f78044f2e32ce2ed818acbc6d001c215a5ef10af97da125851e2581fa302049c6925615e8e9e175e8806db7075e15efbb69f65c4a3ea228d1172bc6b05f3f7472c868bdcef5759730cf1b4b556e7a47de0b8fb7817ee204e21aa4dfaddb6f6c75b5b0ada9cc8cecf1d77ece63ce5efd1e6d3f523e75d1792dee81768be49aefbc304f4c9db9d1706d3512e6fb90695fd4abb57960cfeab362d58d78a4983da4a6c11317db19770294ba4c51de3e22613c36549080af3cd43aa1b7681742501697dc7fff136b7241826b73544ddd853c63fdbfa068dfdb20ccfaaf4d5da338bcbdc6a4d2b0c03a27a12a5e04cc290ffad2e6d0e7b1cc1d82d5f5921e7ba07bc04d3e262ba9387817e30484fe90218041b965be094b5240f9fc6774ab1d340272c5a5a035f387e9b6920f92acd78844179c36339cb016b25870b00dcf8e11dfd4fb24793a5b05d691c14044d9487284510b80989db10506f943ca0bc7242446caa195886fa7f1fb70c301fb69b310e37af9991c27afcf6ac9af7a5d4c413f55169c66de9279931f8b0c3519cece40d7f264ca45b1d0ba88d26f55a36e823df199bcbab8f37711be5bb0c574c2cc1ec4285adbac402e1c79ca19ad07f997169ff9b72070dc72dc0f729b56e48539fa528569df1800fd4ffb377091375cd50b380cb36aef5e6070586d8a16b607e0c1e091d39d95239d99c8dcb4100f1ed14db8f2eb5e4a52ce0e42287e6b736da0188f5fefb898a8502b1b32146264bedaee2eec1f9bb6c678868c4a26dfdd037fc897ed3347291014b876be03eb809cb6c2e547b437cbb8575c4117d1d81d382021a9fdf653101a2a1d354cd3473756300f0f94c910cfc6cf7f33de12f08678c84145a12893a081ed4916818fe982f69ad45aaa0d4faf04119044524a1c3264ab562f108093c229d01bbbf0a337fbc92d0db549bbcd8814a74652b9a18ba1f8ddfc84cfa44c713a715915a07655a5229e3c8b3add0b89560dbb086ba1987b6bc7f514be66f672ae5243553d601ccd6f6ad4ea0eb6b82bb6bacebf696d837833ec3f6b0cb769e34f2d4a24bb43188e5ba01d668753e6b4713d149c5d960161ee5cf3aff42940efca020be37dc936d38ab0f12e263b6eb8ac14c36c9e9e87b7b29b5f2b91eade3b1fa653a65944d52d3ba7b88554b3d819dad04fdf18e961ef4cc5c6bdb82d851f7c8474de160c64f799d89ce2f63c1c7eba53a23518515745c877b150c9fa87191b1910792f46869ba4accbb30b46c8c99308d600a89121965a7edfebf6e141ec601ac4e8b50357ebc1768a2b2b35f9ce1e2ea7ac7c31e711443cb25ec0c9536b3919ae3f9583ac52c61c23c626652cbc192b6ccad9a271bf583281b684d4fa3338267885b7e5fee4bdab1d0cb1244488ec4171cf62727aea9bb041c64fd9fc6afc7143a02fbf10f2fa70ddd828c6705c5a60eba6d481b7db5b796445c0630027e38db7dfb60a9efbf804fcec6614991c62a7127d7ed4adbb0d8403779706546fb5fc0ffbdd2fd5e48dbed46cdefcd93c9c8fffc1306ffbdd0dfc884a59f249fcb774992b9328f980c09a7db9a81778d7ed8ac79c5c817fd297b168fbd1afd5c5cfe66fd5497ab6161fb6a59d7064b14e91a2a55aa00e248a1b6d44b8e7526fd8dd4b7f95039311be4c1c6426a02eacf943bc5cdbba8d20900ce21f88217e4614f83b63f380c3693e42534b4728d0991a3bb94c8c52850a251b0762c5efb905aea96341ed5ac22567592d8c2cc4d483ff45c96bcbcfd418638f14da2e8c44e76d5908fd6272996e4418a9658a811c61111142c3fc42ba6008cff7f5ac7d7438aacdb4768c1c2a26d97997049f23cced57359e9622814e8609c3ee19ba525d87486ea6fc4fde9aa11d25e16e122d50310a2a84bb796861a808d0cc29e12447df296ae6b3ba0449fd567d2b620f9e3fa7ba39cc10f6c2958ae7dcb34972e3e80643daf96e456693550a8288e08f37406781d993530d73d13268b27fe137874ea0d0f4e548ff9f753b5f31d4f2996cbf6c49a92c2a987f64835e8312da1c54254d297eb79b72e81e84b969a8c515c43efd00679b717c45d80932b5f3a31442b0eab5334b327cd3d921afd1e6ba6d0bb88398b77f63ea7e7b597fe63818830d06c0e41909b220ce26bfd9d91a4005638612059c01b57a935aabb280cb072654d5889b2abf825980ef0d2625f3be1c12a93052d63a7f4f2e8ee97f0bfb4e89731d00257dae244e07803243b4e0facbde97e6738adf765fc259853cce66a7beec2abb2d7b6d25eb387953a279ada451a894a33a8a568d883cbc2458d0e27123739e678b47f0abc700619082ecd8a0b0867c0469eaec76ec19144e628e860078968bb01c7de98e313d49b5bf2686ebc033618b3d5ff3a7796e9b53495bb91e4b8bb5bc24be4258bec078e544f801cc8233ccfd3bb44554f8f468f01c6bd1a396c49a03cce6d671bbf7fbee28e85b911379f3fe7b57d9a6d28bf7633d1c169fa1c07b9161e33715667e9039a59c4b5fb8b1b9ff04a175e56caeefb7cbbbf8a26184a99a0b4100f5363dfc99ed05cc1330f6eeefc354774cd4de8b15292d88b8add61758d9b51828d91154f643ac9827125ef71c45efe879f3221fe3c2588f0e860fc504407c8742e9f9309d9ee633f129da4e3bcc703f6a68a69882229a6f5a21c6e03f71ee00e3a9b262959ef0d48295f060f59d2add122c15876b54710692f30d0ec5730fe73c5587ba327343fd982ec9c796daa13962f792e552868b50680f07128bf62413aeabc26cf1d075bdc9bc8b3370f5f0ce391b534a60c1f74274af6a3a0fd734228abb8b4a7273a54b61dbd72c1bdd603ae4e58c2963a1a8ca9219621ac4f3619fd84548c75695110eaf0c612dc43a8e0ecf94cb01eebdb87668b4deffe27dbc3ce8cd8a33a92073810e67a082aa02a7b27c3a0e472e4fe0a9e155e0e1a3230f87f31fae003ae610e8f6c36659af0f591902a7546ad3dd7cc51b34181edc364fa108471ae1f8bcdc9895720d22cba1413101d544a4e31e6aed5946fe63e9668cf298eb57b4bfa716588c6ccbf73315ac6e4f11389ce2a1993e5ef6b3f086724b4e2b1aac48cb20346bd1718af38150538546feae0cf700daebbb845884f51148c6259b70e688cc3430a210a4ab4d154cb19bea67e7c5c1b3e6e13c5bf3beb7e59b95397ce4cd4d9a98f2fa2c6fa3f9c4ab0ea3d0d9ac01f9a5c4f766874899c6ee6b212e42e88a27938bc57aee5824e6081847e09c10b24e2f5a3bc21d51837de6cc900db045e7bf84f99c80dc3a97c31135dd357b5014f21718d301a44f91d9186e7335fd7017aa71bd5b49df5cfafcb55a7e17113d56fdb089b63ef7ba93466e7f81388e106f28dc7ecded18237dac350db736d1adb4b57ffa1a1ca72e0ca136673fd2dd91e9ea7d1e5034ee263eddd9c777776cdded30ce06628323d0e92ed54761662edf8e39c051bceed036755bc4414d39900b23af43f2e1368f33fed7956f3f2f4cabdd33cc1496d294516551b32ecb34f209223c8e5169f0e31d3c152f5b4d4dfd85b596357cd19d5090e895f8c8abc0e7383e542c8bff08f1e3b3e00000955e024df0fe91d38dbffc61ead229e6fe0781c874db8fa392d806e47c3795b4dbb3d26d867018ebe56f32134151b60220db6e723d29333463d790b46fb94eccc027a7eef56053f3efff1d81afcbbdfdfa9c999e18e23c8b1f760ed2be99d4fba3456da74e65adbdebe4033248a116034b83264cc9e691905cccd096dfba950298ebe0f12136c4e69a9cc6aad5bf1d707686002c7192ccd3fe32d71135c6d1f87577b153eed526926cbb33332a02317c9ccc390b5c5454f56adbca078616640c5c2f324ce8bc44b5ff030130752fd96ab3e3136a15cb8d1213f9bcfadd58e99f867ff39a1f7ac8fb1d6024f9caaa654193ea2f9e1ef3f42b2fc223c3dc36c11275f38c076daa259e16f38a41363927ffafa2550227dcba162c11b50eaab1f7c457e48f4efda47e9f483e251b312ed37f1cc27994206d515446d82deaf8dde7ef7e05a9bb0cd61c2e60d37b8a781ac7f19c9ad3a9e89b244b597648b6489e36df2c3d8524c6ac6d02060ece32b9c6b21bdb3f5620f57ebfe87f093686af2f6da610fbc80e0b4ddf2d1139076759f0ef7238143bf4e4394e98e73eec5783ee2d91a573f618d6e350271dde8ed10deb21501087b508519e5fddd16475c67a9982b2b42adca93438d221e282fe48b3bb241b432edce70267b65fd1a6320ed2ab97183d9075fc5593e9de460120fad8b61f6116f35de0caed812a7f40310d289ff1c6a8c1cabed8df45b019fff8991ea0780f4c05feafb7b09c06d5a5278819cca8662ffb4e3336f3f151e9c0621a605de0c3f849edb28a8cf6e7902b5c6131618921cc19472e2a56e922f29769167ff1a693b0663de70f39621b3752b72e6b791b5d4f9ee7c4a77a6eb20b56d83389728434e6ae06f9ff564f00da0cf24b6a4e7a8ecfaeaddc900d6aa557b21c78d865318e817e6e06383f814304a2ed7621a7bdb099e0023055372c3d9804c09b2341ec282e3f110ffa136f709d2bb04d6be2e6c4967e2e036dfe5b4ac1d596be67909ccd35db77a690c5c92feeb319dd0349bebd062320fe1dc64d51fb985107cdf01b0d9f3dbce78f2166e8101e1356c0aaaf94d8c7474bb5f080ede6b3735b10591c8d93", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRES64=r4, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r7}, 0x10) sendto$inet6(r6, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d270020000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r5, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r5, 0x26, &(0x7f0000000080)) fcntl$lock(r5, 0x7, 0x0) fcntl$lock(r5, 0x26, 0x0) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unlinkat(r8, &(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@mblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") (fail_nth: 17) syz_mount_image$ext4(&(0x7f0000000740)='ext3\x00', &(0x7f00000001c0)='./bus\x00', 0x240445, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpquota}, {@noquota}, {@quota}, {@noload}, {@noload}]}, 0x0, 0x50c, &(0x7f0000001440)="$eJzs3c9rHG0dAPDvbHZr06Zv8qoHfcH6o5W0aHeTxrbBQ60geiqo9V5jsgkhm2zIbtomFE3xDxBEVPCkFy+Cf4AgBS8eRSjoWVFRRFs9eNCO7O4kTdPdZNtus2n284HJPM8zM/t9ng0zO8/Mw0wAA+tjEXEjIp6maXoxIkaz8lw2xVZraqz35PH92caURJre+kcSSVa2/VlJNj+dbXYyIr76pYhvJC/GrW1sLs1UKuW1LF+qL6+WahublxaXZxbKC+WVqanJq9PXpq9MT/SknWci4voX/vL97/z0i9d/+em7f7z9twvfbFRrJFu+ux0vKb/fwlbTC83vYvcGa68Y7CjKN1uYGW63xtALJQ/ecJ0AAGivcY7//oj4RERcjNEY2v90FgAAAHgLpZ8bif8mEWl7JzqUAwAAAG+RXHMMbJIrZmMBRiKXKxZbY3g/GKdylWqt/qn56vrKXGus7FgUcvOLlfJENlZ4LApJIz/ZTD/LX96Tn4qIdyPie6PDzXxxtlqZ6/fFDwAAABgQp/f0//892ur/AwAAAMfMWL8rAAAAALxx+v8AAABw/On/AwAAwLH25Zs3G1O6/f7ruTsb60vVO5fmyrWl4vL6bHG2urZaXKhWF5rP7Fs+6PMq1erqZ2Jl/V6pXq7VS7WNzdvL1fWV+u3F516BDQAAAByidz/68PdJRGx9drg5NZzobtMuVwOOqvxOKsnmbXbrP7zTmv/5kCoFHIqhflcA6Jt8vysA9E2h3xUA+i45YHnHwTu/yeYf7219AACA3hv/cOf7/7l9t9zafzFw5NmJYXC5/w+Dq3n/v9uRvE4W4FgpOAOAgffa9/8PlKYvVSEAAKDnRppTkitml/dGIpcrFiPONF8LUEjmFyvliYh4JyJ+N1p4XyM/2dwyObDPAAAAAAAAAAAAAAAAAAAAAAAAAAC0pGkSKQAAAHCsReT+mvyq9Sz/8dHzI3uvD5xI/jMa2StC7/7o1g/uzdTra5ON8n/ulNd/mJVf7scVDAAAABgIL/UC/+1++nY/HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB66cnj+7Pb02HG/fvnI2KsXfx8nGzOT0YhIk79K4n8ru2SiBjqQfzhxp8PtYufNKq1E7Jd/OEexN96sG/8GMu+hXbxT/cgPgyyh43jz409+1+6e432+18+4rn8q+p8/Iud499Qh/3/TJcx3nv081LH+A8i3su3P/5sx086xD/XZfyvf21zs9Oy9McR421/f5LnYpXqy6ul2sbmpcXlmYXyQnllamry6vS16SvTE6X5xUo5+9s2xnc/8oun+7X/VIf4Ywe0/3yX7f/fo3uPP9BKFtrFv3CuTfxf/yRb48X4uey375NZurF8fDu91UrvdvZnvz27X/vnOrT/oP//hS7bf/Er3/5Tl6sCAIegtrG5NFOplNeObaLRSz8C1RjMxI2jUY1OiW/19APTNG32HF/jc5I4Cl9LM9HvIxMAANBrz076+10TAAAAAAAAAAAAAAAAAAAAGFyH8TixvTG3dlJJLx6hDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQE/8PAAD//xaa2hE=") 15.511856925s ago: executing program 40 (id=3504): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000"], 0x48) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x582) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000006800010003000000000000800a00000000000000060007000600000008000500", @ANYRES32=r2, @ANYBLOB], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000140)=""/181, &(0x7f0000000080)=0xb5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000002040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="3e31e04e57ac11fe49a866daa044306a81a577706f1b71abd0b7dc96b060be02efa12685b7ccd5287d28f50487f49c7abcb8452abd8fad21266fdde217804e9b402ea724ebebc1cb907aba01b5397c51c44c32a6cbd1f862c3fd4264c6fac26a3e16fc0015e733d5489ce96bde392e9adc626937ebe6968395ceeea64824e37410fd9b026ca69eefbc8c9e624b8391aac274de54ec88e4a944daea666d425efcd9f7c694012232544252820e97537d9db1b508906662186b4ce7be87c9f18172e04e4a43aa2e8191a21334b15614d9ec7bd3275c98be8412e7bf7f71f3aeb993f07a61ce1b63e713de047ddb33d27440e453f3a8a87c0ea61af249cafa78be9e75ac908467b6152118c4bd95e96e05edee1ecdb8ba5a4817c90cabfbfc046138d233de70e3d72fa7e8a179243f726e3029ace942232ee740aa406968fc360c99ac198b18bfe2f97e55dfad5363041d2e5577c496bbd29967ce78a7f75193baea4dbf9fb077d5eda3aadf5691e0bd18d76ce592f0826ae614641259dae3502c505c62b15511ab5b1f050e75e3334c1c4762d6aa9119b60d74292db52004d3bd978855b38e4178990f297a1c564504fc240e2bcd8f5bfe61c60156a34a4144e88d6c146d8a7386558e14f6526fa0469b2dc876fbc78c62d60a80bf0c680f44ffba97ee996f2dae82c22512960dcf35f4361184ab993bacd9ced74f5ab67cdfef6f7d8ebf1ee1c4d462070b8c23667601269d3cc28985cd72dc87b89f4771522654a9ba92072b4d57b5f257750e1562841ccf00ffe76d5b9b42612f5ce50d3dfdb0ee71fc629e35547a2cebb635ea2d1740605216184dac453861d756e43987e25b6035c61b43cdd0e3103553483c81fe3c8fc52f0ecce880bd5b867607f19fc00778926a49bc5892633d5916e0cf7fcae808a28d6ee4bfcc818ee2f08c6381e75d760afb967dda819defe42e6b59812581e3bafc7f603adb5d0d6bdee250086f3a3a0a2ce3768ed4aa63ebc182846fdec4efd54c58700a0aeb5d029d9b9484baab2b6478676d2b5193971e2157eca1efc12f764285f71157c69d0f78044f2e32ce2ed818acbc6d001c215a5ef10af97da125851e2581fa302049c6925615e8e9e175e8806db7075e15efbb69f65c4a3ea228d1172bc6b05f3f7472c868bdcef5759730cf1b4b556e7a47de0b8fb7817ee204e21aa4dfaddb6f6c75b5b0ada9cc8cecf1d77ece63ce5efd1e6d3f523e75d1792dee81768be49aefbc304f4c9db9d1706d3512e6fb90695fd4abb57960cfeab362d58d78a4983da4a6c11317db19770294ba4c51de3e22613c36549080af3cd43aa1b7681742501697dc7fff136b7241826b73544ddd853c63fdbfa068dfdb20ccfaaf4d5da338bcbdc6a4d2b0c03a27a12a5e04cc290ffad2e6d0e7b1cc1d82d5f5921e7ba07bc04d3e262ba9387817e30484fe90218041b965be094b5240f9fc6774ab1d340272c5a5a035f387e9b6920f92acd78844179c36339cb016b25870b00dcf8e11dfd4fb24793a5b05d691c14044d9487284510b80989db10506f943ca0bc7242446caa195886fa7f1fb70c301fb69b310e37af9991c27afcf6ac9af7a5d4c413f55169c66de9279931f8b0c3519cece40d7f264ca45b1d0ba88d26f55a36e823df199bcbab8f37711be5bb0c574c2cc1ec4285adbac402e1c79ca19ad07f997169ff9b72070dc72dc0f729b56e48539fa528569df1800fd4ffb377091375cd50b380cb36aef5e6070586d8a16b607e0c1e091d39d95239d99c8dcb4100f1ed14db8f2eb5e4a52ce0e42287e6b736da0188f5fefb898a8502b1b32146264bedaee2eec1f9bb6c678868c4a26dfdd037fc897ed3347291014b876be03eb809cb6c2e547b437cbb8575c4117d1d81d382021a9fdf653101a2a1d354cd3473756300f0f94c910cfc6cf7f33de12f08678c84145a12893a081ed4916818fe982f69ad45aaa0d4faf04119044524a1c3264ab562f108093c229d01bbbf0a337fbc92d0db549bbcd8814a74652b9a18ba1f8ddfc84cfa44c713a715915a07655a5229e3c8b3add0b89560dbb086ba1987b6bc7f514be66f672ae5243553d601ccd6f6ad4ea0eb6b82bb6bacebf696d837833ec3f6b0cb769e34f2d4a24bb43188e5ba01d668753e6b4713d149c5d960161ee5cf3aff42940efca020be37dc936d38ab0f12e263b6eb8ac14c36c9e9e87b7b29b5f2b91eade3b1fa653a65944d52d3ba7b88554b3d819dad04fdf18e961ef4cc5c6bdb82d851f7c8474de160c64f799d89ce2f63c1c7eba53a23518515745c877b150c9fa87191b1910792f46869ba4accbb30b46c8c99308d600a89121965a7edfebf6e141ec601ac4e8b50357ebc1768a2b2b35f9ce1e2ea7ac7c31e711443cb25ec0c9536b3919ae3f9583ac52c61c23c626652cbc192b6ccad9a271bf583281b684d4fa3338267885b7e5fee4bdab1d0cb1244488ec4171cf62727aea9bb041c64fd9fc6afc7143a02fbf10f2fa70ddd828c6705c5a60eba6d481b7db5b796445c0630027e38db7dfb60a9efbf804fcec6614991c62a7127d7ed4adbb0d8403779706546fb5fc0ffbdd2fd5e48dbed46cdefcd93c9c8fffc1306ffbdd0dfc884a59f249fcb774992b9328f980c09a7db9a81778d7ed8ac79c5c817fd297b168fbd1afd5c5cfe66fd5497ab6161fb6a59d7064b14e91a2a55aa00e248a1b6d44b8e7526fd8dd4b7f95039311be4c1c6426a02eacf943bc5cdbba8d20900ce21f88217e4614f83b63f380c3693e42534b4728d0991a3bb94c8c52850a251b0762c5efb905aea96341ed5ac22567592d8c2cc4d483ff45c96bcbcfd418638f14da2e8c44e76d5908fd6272996e4418a9658a811c61111142c3fc42ba6008cff7f5ac7d7438aacdb4768c1c2a26d97997049f23cced57359e9622814e8609c3ee19ba525d87486ea6fc4fde9aa11d25e16e122d50310a2a84bb796861a808d0cc29e12447df296ae6b3ba0449fd567d2b620f9e3fa7ba39cc10f6c2958ae7dcb34972e3e80643daf96e456693550a8288e08f37406781d993530d73d13268b27fe137874ea0d0f4e548ff9f753b5f31d4f2996cbf6c49a92c2a987f64835e8312da1c54254d297eb79b72e81e84b969a8c515c43efd00679b717c45d80932b5f3a31442b0eab5334b327cd3d921afd1e6ba6d0bb88398b77f63ea7e7b597fe63818830d06c0e41909b220ce26bfd9d91a4005638612059c01b57a935aabb280cb072654d5889b2abf825980ef0d2625f3be1c12a93052d63a7f4f2e8ee97f0bfb4e89731d00257dae244e07803243b4e0facbde97e6738adf765fc259853cce66a7beec2abb2d7b6d25eb387953a279ada451a894a33a8a568d883cbc2458d0e27123739e678b47f0abc700619082ecd8a0b0867c0469eaec76ec19144e628e860078968bb01c7de98e313d49b5bf2686ebc033618b3d5ff3a7796e9b53495bb91e4b8bb5bc24be4258bec078e544f801cc8233ccfd3bb44554f8f468f01c6bd1a396c49a03cce6d671bbf7fbee28e85b911379f3fe7b57d9a6d28bf7633d1c169fa1c07b9161e33715667e9039a59c4b5fb8b1b9ff04a175e56caeefb7cbbbf8a26184a99a0b4100f5363dfc99ed05cc1330f6eeefc354774cd4de8b15292d88b8add61758d9b51828d91154f643ac9827125ef71c45efe879f3221fe3c2588f0e860fc504407c8742e9f9309d9ee633f129da4e3bcc703f6a68a69882229a6f5a21c6e03f71ee00e3a9b262959ef0d48295f060f59d2add122c15876b54710692f30d0ec5730fe73c5587ba327343fd982ec9c796daa13962f792e552868b50680f07128bf62413aeabc26cf1d075bdc9bc8b3370f5f0ce391b534a60c1f74274af6a3a0fd734228abb8b4a7273a54b61dbd72c1bdd603ae4e58c2963a1a8ca9219621ac4f3619fd84548c75695110eaf0c612dc43a8e0ecf94cb01eebdb87668b4deffe27dbc3ce8cd8a33a92073810e67a082aa02a7b27c3a0e472e4fe0a9e155e0e1a3230f87f31fae003ae610e8f6c36659af0f591902a7546ad3dd7cc51b34181edc364fa108471ae1f8bcdc9895720d22cba1413101d544a4e31e6aed5946fe63e9668cf298eb57b4bfa716588c6ccbf73315ac6e4f11389ce2a1993e5ef6b3f086724b4e2b1aac48cb20346bd1718af38150538546feae0cf700daebbb845884f51148c6259b70e688cc3430a210a4ab4d154cb19bea67e7c5c1b3e6e13c5bf3beb7e59b95397ce4cd4d9a98f2fa2c6fa3f9c4ab0ea3d0d9ac01f9a5c4f766874899c6ee6b212e42e88a27938bc57aee5824e6081847e09c10b24e2f5a3bc21d51837de6cc900db045e7bf84f99c80dc3a97c31135dd357b5014f21718d301a44f91d9186e7335fd7017aa71bd5b49df5cfafcb55a7e17113d56fdb089b63ef7ba93466e7f81388e106f28dc7ecded18237dac350db736d1adb4b57ffa1a1ca72e0ca136673fd2dd91e9ea7d1e5034ee263eddd9c777776cdded30ce06628323d0e92ed54761662edf8e39c051bceed036755bc4414d39900b23af43f2e1368f33fed7956f3f2f4cabdd33cc1496d294516551b32ecb34f209223c8e5169f0e31d3c152f5b4d4dfd85b596357cd19d5090e895f8c8abc0e7383e542c8bff08f1e3b3e00000955e024df0fe91d38dbffc61ead229e6fe0781c874db8fa392d806e47c3795b4dbb3d26d867018ebe56f32134151b60220db6e723d29333463d790b46fb94eccc027a7eef56053f3efff1d81afcbbdfdfa9c999e18e23c8b1f760ed2be99d4fba3456da74e65adbdebe4033248a116034b83264cc9e691905cccd096dfba950298ebe0f12136c4e69a9cc6aad5bf1d707686002c7192ccd3fe32d71135c6d1f87577b153eed526926cbb33332a02317c9ccc390b5c5454f56adbca078616640c5c2f324ce8bc44b5ff030130752fd96ab3e3136a15cb8d1213f9bcfadd58e99f867ff39a1f7ac8fb1d6024f9caaa654193ea2f9e1ef3f42b2fc223c3dc36c11275f38c076daa259e16f38a41363927ffafa2550227dcba162c11b50eaab1f7c457e48f4efda47e9f483e251b312ed37f1cc27994206d515446d82deaf8dde7ef7e05a9bb0cd61c2e60d37b8a781ac7f19c9ad3a9e89b244b597648b6489e36df2c3d8524c6ac6d02060ece32b9c6b21bdb3f5620f57ebfe87f093686af2f6da610fbc80e0b4ddf2d1139076759f0ef7238143bf4e4394e98e73eec5783ee2d91a573f618d6e350271dde8ed10deb21501087b508519e5fddd16475c67a9982b2b42adca93438d221e282fe48b3bb241b432edce70267b65fd1a6320ed2ab97183d9075fc5593e9de460120fad8b61f6116f35de0caed812a7f40310d289ff1c6a8c1cabed8df45b019fff8991ea0780f4c05feafb7b09c06d5a5278819cca8662ffb4e3336f3f151e9c0621a605de0c3f849edb28a8cf6e7902b5c6131618921cc19472e2a56e922f29769167ff1a693b0663de70f39621b3752b72e6b791b5d4f9ee7c4a77a6eb20b56d83389728434e6ae06f9ff564f00da0cf24b6a4e7a8ecfaeaddc900d6aa557b21c78d865318e817e6e06383f814304a2ed7621a7bdb099e0023055372c3d9804c09b2341ec282e3f110ffa136f709d2bb04d6be2e6c4967e2e036dfe5b4ac1d596be67909ccd35db77a690c5c92feeb319dd0349bebd062320fe1dc64d51fb985107cdf01b0d9f3dbce78f2166e8101e1356c0aaaf94d8c7474bb5f080ede6b3735b10591c8d93", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRES64=r4, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r7}, 0x10) sendto$inet6(r6, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d270020000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r5, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r5, 0x26, &(0x7f0000000080)) fcntl$lock(r5, 0x7, 0x0) fcntl$lock(r5, 0x26, 0x0) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unlinkat(r8, &(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@mblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") (fail_nth: 17) syz_mount_image$ext4(&(0x7f0000000740)='ext3\x00', &(0x7f00000001c0)='./bus\x00', 0x240445, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpquota}, {@noquota}, {@quota}, {@noload}, {@noload}]}, 0x0, 0x50c, &(0x7f0000001440)="$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") 14.626911329s ago: executing program 7 (id=3512): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00', 0x1}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'dummy0\x00'}, 0x18) 14.626624869s ago: executing program 41 (id=3512): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00', 0x1}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'dummy0\x00'}, 0x18) 14.62640712s ago: executing program 1 (id=3514): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) 14.274430491s ago: executing program 1 (id=3518): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000140000007dffffffffffffff00"/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000360ca0000878d66c432cd000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x8, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe}) ioctl$MON_IOCX_GETX(r4, 0x80089203, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x2, 0x6, @remote}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff", @ANYBLOB], 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000000000000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r7}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRES16=r8, @ANYRES32=r8, @ANYBLOB="1f1e3836d41ffcbd047eb0a2be343fee6dc52e3d1c0dd018dab3a2559d8c42494a44b72d650f42946e325b4e1ab283e8f8d2fc2904509f4c32825661b9c31c3c51924a50028a90674841152c1b518ebc64da472975c9618557249f6179ea95ab6bb222c8c3a00fa365d0246306f3193395f24b850ad399f31a79e15e0ec1ccbb6f6112a864ba94b44e5cddb19c4f75e3270ce12e702210e7d4", @ANYBLOB="fc403a50df13d019e95d57caf08f339077cdbd458bd070ae40bb9eaef870c8eebb47c2442c4c32b2981ab4a40a2542c8f743dfa954c923b11ad0483a055b2ce8bd74c9def5f21dff49a395114eea41bd024c4ea2d0", @ANYRES32=r6, @ANYRESDEC=r5, @ANYBLOB="1128ec9fca57", @ANYRESOCT=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r9}, 0xffffffffffffff7c) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newtfilter={0x108, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xe, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0xd8, 0x2, [@TCA_FLOW_EMATCHES={0xd4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xc8, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc4, 0x2, 0x0, 0x0, {{0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xef2e, 0x4}, {0x7, 0x8, 0x1}}}, @TCA_EM_META_LVALUE={0x2f, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="f4afb1", @TCF_META_TYPE_VAR="2527f2ef0e", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="f2a1bb08954731"]}, @TCA_EM_META_LVALUE={0x2d, 0x2, [@TCF_META_TYPE_VAR="8d6a79ce56711b628a91", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="96938ebb84e40b7f", @TCF_META_TYPE_VAR="23e3f5504697e4"]}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="2465a091811ce520"]}, @TCA_EM_META_LVALUE={0x38, 0x2, [@TCF_META_TYPE_VAR="19e8ca3b7372", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="c95a730a8820c25303", @TCF_META_TYPE_VAR="32803ff52816a0e068", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="54fa9135c4ebc2f1", @TCF_META_TYPE_VAR="8e33c48b0154", @TCF_META_TYPE_VAR="ce2b"]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff9}}]}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x44}, 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e00000005000000430000000600000000000200", @ANYRES32, @ANYBLOB="010100005e", @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="0200000003000000030000000100"/28], 0x50) 14.106963472s ago: executing program 1 (id=3519): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000100)=""/214) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) r3 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x64}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 13.946859363s ago: executing program 1 (id=3520): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x14000, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x40}, 0x1, "45e20305c6e7f20ff628f1514d755dadefbf7e9c1218a2e149131b9a6cc23b24", 0x80000000, 0x2, 0x3, 0xf5}, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) iopl(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x19b1, 0x7a6, 0xffffe6be, 0xffffffffffffffff, 0x0, 0x5, 0x101, 0x2, 0x0, 0xa00, 0x40, 0x0, 0x8, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x4000ea, 0xfffffffffffffffd, 0x0, 0x7fffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) nanosleep(0x0, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x143) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 13.454359365s ago: executing program 1 (id=3524): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, 0x0, 0x0, 0x0, 0x0, 0x8010}, 0x0) sendmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) r2 = dup2(r1, r0) sendmsg$nl_route_sched(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r2, &(0x7f0000003e80)={0x0, 0x0, 0x0}, 0x0) 12.490514109s ago: executing program 1 (id=3531): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010041800400140012800b0001"], 0x44}}, 0x4850) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) 12.48136219s ago: executing program 42 (id=3531): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010041800400140012800b0001"], 0x44}}, 0x4850) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) 11.354927226s ago: executing program 4 (id=3539): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x49, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r3}, 0x3c) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0xd, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) 11.273141285s ago: executing program 4 (id=3540): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 11.247319836s ago: executing program 4 (id=3541): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) getxattr(0x0, &(0x7f0000000080)=@known='system.posix_acl_access\x00', 0x0, 0x0) 11.182052166s ago: executing program 4 (id=3542): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x14000, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x40}, 0x1, "45e20305c6e7f20ff628f1514d755dadefbf7e9c1218a2e149131b9a6cc23b24", 0x80000000, 0x2, 0x3, 0xf5}, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) iopl(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x19b1, 0x7a6, 0xffffe6be, 0xffffffffffffffff, 0x0, 0x5, 0x101, 0x2, 0x0, 0xa00, 0x40, 0x0, 0x8, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x4000ea, 0xfffffffffffffffd, 0x0, 0x7fffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) nanosleep(0x0, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x143) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 10.523748969s ago: executing program 4 (id=3544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="0213000005000000000000000000000003000058"], 0x28}}, 0x0) 9.807874643s ago: executing program 4 (id=3550): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) 9.721860183s ago: executing program 43 (id=3550): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) 6.824459568s ago: executing program 5 (id=3576): mkdir(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r2, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) connect$unix(r5, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 6.113964361s ago: executing program 5 (id=3586): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32], 0xffffff07, 0x40400d1}}], 0x1, 0x40090) 6.052838631s ago: executing program 5 (id=3587): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000900)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 5.901194412s ago: executing program 5 (id=3591): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x14000, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x40}, 0x1, "45e20305c6e7f20ff628f1514d755dadefbf7e9c1218a2e149131b9a6cc23b24", 0x80000000, 0x2, 0x3, 0xf5}, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) iopl(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x19b1, 0x7a6, 0xffffe6be, 0xffffffffffffffff, 0x0, 0x5, 0x101, 0x2, 0x0, 0xa00, 0x40, 0x0, 0x8, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x4000ea, 0xfffffffffffffffd, 0x0, 0x7fffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) nanosleep(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 5.621513953s ago: executing program 5 (id=3598): r0 = getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) setns(r1, 0x24020000) syz_clone(0xf58a3180, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x29) 4.509283809s ago: executing program 9 (id=3532): r0 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @broadcast}, 0x2b, &(0x7f0000000080)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x80) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) socket(0x1e, 0xa, 0x7) 4.354044689s ago: executing program 9 (id=3606): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x333783) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0xdf, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x4000}) 4.25098199s ago: executing program 9 (id=3607): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000a00000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 4.24010764s ago: executing program 5 (id=3609): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x200008c0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) unshare(0x4a060480) (fail_nth: 16) 4.17878526s ago: executing program 44 (id=3609): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x200008c0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) unshare(0x4a060480) (fail_nth: 16) 3.696652682s ago: executing program 9 (id=3613): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x14000, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x40}, 0x1, "45e20305c6e7f20ff628f1514d755dadefbf7e9c1218a2e149131b9a6cc23b24", 0x80000000, 0x2, 0x3, 0xf5}, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) iopl(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x19b1, 0x7a6, 0xffffe6be, 0xffffffffffffffff, 0x0, 0x5, 0x101, 0x2, 0x0, 0xa00, 0x40, 0x0, 0x8, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x4000ea, 0xfffffffffffffffd, 0x0, 0x7fffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 3.299849344s ago: executing program 9 (id=3618): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2200c3a, &(0x7f0000000500)=ANY=[@ANYBLOB="8638fb6700997c4b0572b8b3e868ef9502a3362eabbb6ba3238bba7a77bf92fcc1e5d36b496b2a95ababbac08b7e41a8781192ad266266ca28b562dd0aa95b5345e9df2975dc8bcbebc7334597764ea2d211baa4b9a9ab", @ANYRESHEX=0x0, @ANYBLOB=',mode=00000000000000000000000,\x00']) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7a00, 0x0, 0x3) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000340)="01000722625a900ede290f00015b097ead85847837353d2dbad05d", 0x1b, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x22020600) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x0) connect$unix(r6, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") open(0x0, 0x4823e, 0x180) connect$pppoe(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, {0x204, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 'geneve0\x00'}}, 0x1e) 2.530394969s ago: executing program 6 (id=3621): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) dup(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x9e5d) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2.15499454s ago: executing program 9 (id=3626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) getxattr(0x0, &(0x7f0000000080)=@known='system.posix_acl_access\x00', 0x0, 0x0) 2.08367235s ago: executing program 45 (id=3626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) getxattr(0x0, &(0x7f0000000080)=@known='system.posix_acl_access\x00', 0x0, 0x0) 2.0815836s ago: executing program 6 (id=3630): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x401) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1000000) 2.001898771s ago: executing program 0 (id=3632): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x84000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x8000) 1.937320092s ago: executing program 0 (id=3633): mkdir(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r2, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) connect$unix(r5, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.525827603s ago: executing program 0 (id=3638): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x49, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3}, 0x3c) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0xd, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) 1.414951744s ago: executing program 0 (id=3639): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x46) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioperm(0x5, 0x1ff, 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000001280)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c00) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @tick=0x5, {}, {}, @result}], 0x1c) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000400fffb07c518467b0000001c00120001000100626f6e6400a26c2f8cc55ec052cb6a9103"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005704000000000000000010000000", @ANYRES32=r7], 0x20}}, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000480)={0x2c, 0x8, r7, 0x223}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="00679f981decbcaa5cef6ff85e45cbda2d642bafd450808e86a032bf7a1d9a34b9b1fca3ebcf", 0x26}, {&(0x7f0000000080)="df3a39d76442f883aa0c65c225fea2a7d326b531733856679ed9141303cb3e25486768c0fff02e1d2f6b1240888621cd6733e7972602257c300af09acfc7ecd94a13ad610a6805f7a4a4972e7ae88d97357b07d2b4d9d11b1a9b25e45e894fb7c89c3f9af9f91d5ec123324ee0194daa46ed47419d385614c2f956c600164876b04d50699d3b8e2f0177ca41e4121cbb8bb598448508e28fe0808e9493183703ca9d3eae4b96e74e200b6c7928e0dbf1a4441f439d225c85", 0xb8}, {&(0x7f0000000140)="385bfad597fc7bd24331f5ebc5bb47263ceaa67e43e3edda40debd626b8607524add95c638db5d59ed85650ad9b1219f92f469edcadcbae97653313e3bd4ca93186fdaef5844f87f694a59590f242cf870906df0e19ff5c96ad08d9075bc78ae9f4eeb183c7823", 0x67}, {&(0x7f00000001c0)="f3cde6235f5b6cd606705f82ae6b10605ae6d664856821a9dd2e80f4c26c4bb541980e936f60ccea3674a5a9c46cd8545f676f25184ce3", 0x37}], 0x4, 0x0, 0x0, 0x100d4}, 0x48000) 1.414679894s ago: executing program 8 (id=3640): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_destroy(0x0) 1.220678035s ago: executing program 8 (id=3641): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000230000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) 1.163841235s ago: executing program 6 (id=3642): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2200c3a, &(0x7f0000000500)=ANY=[@ANYBLOB="8638fb6700997c4b0572b8b3e868ef9502a3362eabbb6ba3238bba7a77bf92fcc1e5d36b496b2a95ababbac08b7e41a8781192ad266266ca28b562dd0aa95b5345e9df2975dc8bcbebc7334597764ea2d211baa4b9a9ab", @ANYRESHEX=0x0, @ANYBLOB=',mode=00000000000000000000000,\x00']) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7a00, 0x0, 0x3) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000340)="01000722625a900ede290f00015b097ead85847837353d2dbad05d", 0x1b, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x22020600) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") open(0x0, 0x4823e, 0x180) connect$pppoe(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, {0x204, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 'geneve0\x00'}}, 0x1e) 1.051114885s ago: executing program 8 (id=3643): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = dup3(r1, r0, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="0213000005000000000000000000000003000058"], 0x28}}, 0x0) 988.786266ms ago: executing program 8 (id=3644): ioperm(0x0, 0x5fd, 0x80000000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) brk(0x20ffc004) (fail_nth: 3) 930.948346ms ago: executing program 6 (id=3645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200008010001f0000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 930.403996ms ago: executing program 8 (id=3646): mkdir(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r2, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) connect$unix(r5, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 423.036379ms ago: executing program 0 (id=3647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000ff0700000003801400010073797a5f74756e000000000000000000140000001100010000000000000000000000000a17fc94e58834a808428e69fde217e326c0f8987eeb449a69934f17958968a15b243f34c3ca5c3e988bc17b94d3525ac02d5cacfd07b20c8395c6eb6bea1597ba1aac1e3cd9d6e623be70b1f07b08120ffc8c9300"], 0x80}}, 0x0) 322.763049ms ago: executing program 0 (id=3648): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000140000007dffffffffffffff00"/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000360ca0000878d66c432cd000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x8, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe}) ioctl$MON_IOCX_GETX(r4, 0x80089203, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x2, 0x6, @remote}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff", @ANYBLOB], 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000000000000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r7}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRES16=r8, @ANYRES32=r8, @ANYBLOB="1f1e3836d41ffcbd047eb0a2be343fee6dc52e3d1c0dd018dab3a2559d8c42494a44b72d650f42946e325b4e1ab283e8f8d2fc2904509f4c32825661b9c31c3c51924a50028a90674841152c1b518ebc64da472975c9618557249f6179ea95ab6bb222c8c3a00fa365d0246306f3193395f24b850ad399f31a79e15e0ec1ccbb6f6112a864ba94b44e5cddb19c4f75e3270ce12e702210e7d4", @ANYBLOB="fc403a50df13d019e95d57caf08f339077cdbd458bd070ae40bb9eaef870c8eebb47c2442c4c32b2981ab4a40a2542c8f743dfa954c923b11ad0483a055b2ce8bd74c9def5f21dff49a395114eea41bd024c4ea2d0", @ANYRES32=r6, @ANYRESDEC=r5, @ANYBLOB="1128ec9fca57", @ANYRESOCT=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r9}, 0xffffffffffffff7c) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newtfilter={0x108, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xe, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0xd8, 0x2, [@TCA_FLOW_EMATCHES={0xd4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xc8, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc4, 0x2, 0x0, 0x0, {{0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xef2e, 0x4}, {0x7, 0x8, 0x1}}}, @TCA_EM_META_LVALUE={0x2f, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="f4afb1", @TCF_META_TYPE_VAR="2527f2ef0e", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="f2a1bb08954731"]}, @TCA_EM_META_LVALUE={0x2d, 0x2, [@TCF_META_TYPE_VAR="8d6a79ce56711b628a91", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="96938ebb84e40b7f", @TCF_META_TYPE_VAR="23e3f5504697e4"]}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="2465a091811ce520"]}, @TCA_EM_META_LVALUE={0x38, 0x2, [@TCF_META_TYPE_VAR="19e8ca3b7372", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="c95a730a8820c25303", @TCF_META_TYPE_VAR="32803ff52816a0e068", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="54fa9135c4ebc2f1", @TCF_META_TYPE_VAR="8e33c48b0154", @TCF_META_TYPE_VAR="ce2b"]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff9}}]}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x44}, 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e00000005000000430000000600000000000200", @ANYRES32, @ANYBLOB="010100005e", @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="0200000003000000030000000100"/28], 0x50) 30.992191ms ago: executing program 6 (id=3649): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 19.64538ms ago: executing program 6 (id=3650): utimes(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={{}, {0x0, 0x2710}}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x40, 0x8, 0x0, 0x1}]}) 0s ago: executing program 8 (id=3651): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x46) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioperm(0x5, 0x1ff, 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000001280)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c00) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @tick=0x5, {}, {}, @result}], 0x1c) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000400fffb07c518467b0000001c00120001000100626f6e6400a26c2f8cc55ec052cb6a9103"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005704000000000000000010000000", @ANYRES32=r8], 0x20}}, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000480)={0x2c, 0x8, r8, 0x223}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="00679f981decbcaa5cef6ff85e45cbda2d642bafd450808e86a032bf7a1d9a34b9b1fca3ebcf", 0x26}, {&(0x7f0000000080)="df3a39d76442f883aa0c65c225fea2a7d326b531733856679ed9141303cb3e25486768c0fff02e1d2f6b1240888621cd6733e7972602257c300af09acfc7ecd94a13ad610a6805f7a4a4972e7ae88d97357b07d2b4d9d11b1a9b25e45e894fb7c89c3f9af9f91d5ec123324ee0194daa46ed47419d385614c2f956c600164876b04d50699d3b8e2f0177ca41e4121cbb8bb598448508e28fe0808e9493183703ca9d3eae4b96e74e200b6c7928e0dbf1a4441f439d225c85", 0xb8}, {&(0x7f0000000140)="385bfad597fc7bd24331f5ebc5bb47263ceaa67e43e3edda40debd626b8607524add95c638db5d59ed85650ad9b1219f92f469edcadcbae97653313e3bd4ca93186fdaef5844f87f694a59590f242cf870906df0e19ff5c96ad08d9075bc78ae9f4eeb183c7823", 0x67}, {&(0x7f00000001c0)="f3cde6235f5b6cd606705f82ae6b10605ae6d664856821a9dd2e80f4c26c4bb541980e936f60ccea3674a5a9c46cd8545f676f25184ce3", 0x37}], 0x4, 0x0, 0x0, 0x100d4}, 0x48000) kernel console output (not intermixed with test programs): id=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12666 comm="syz.2.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304562e819 code=0x7ffc0000 [ 214.421672][T12671] kmem_cache_alloc_bulk_noprof+0x58/0x440 [ 214.421734][T12671] ? mas_alloc_nodes+0x1d3/0x4a0 [ 214.421780][T12671] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 214.425085][ T29] audit: type=1326 audit(1732289458.131:12998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12666 comm="syz.2.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304562e819 code=0x7ffc0000 [ 214.427993][T12671] mas_alloc_nodes+0x2ad/0x4a0 [ 214.432581][ T29] audit: type=1326 audit(1732289458.131:12999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12666 comm="syz.2.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f304562e819 code=0x7ffc0000 [ 214.436721][T12671] mas_preallocate+0x449/0x650 [ 214.441417][ T29] audit: type=1326 audit(1732289458.131:13000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12666 comm="syz.2.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304562e819 code=0x7ffc0000 [ 214.445985][T12671] mmap_region+0xc95/0x14a0 [ 214.469603][ T29] audit: type=1326 audit(1732289458.131:13001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12666 comm="syz.2.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f304562e819 code=0x7ffc0000 [ 214.475284][T12671] do_mmap+0x718/0xb60 [ 214.480225][ T29] audit: type=1326 audit(1732289458.131:13002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12666 comm="syz.2.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304562e819 code=0x7ffc0000 [ 214.485811][T12671] vm_mmap_pgoff+0x133/0x290 [ 214.509349][ T29] audit: type=1326 audit(1732289458.131:13003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12666 comm="syz.2.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f304562e819 code=0x7ffc0000 [ 214.514060][T12671] ksys_mmap_pgoff+0xd0/0x330 [ 214.514086][T12671] ? fpregs_assert_state_consistent+0x83/0xa0 [ 214.660798][T12671] x64_sys_call+0x1940/0x2dc0 [ 214.665512][T12671] do_syscall_64+0xc9/0x1c0 [ 214.670037][T12671] ? clear_bhb_loop+0x55/0xb0 [ 214.674746][T12671] ? clear_bhb_loop+0x55/0xb0 [ 214.679458][T12671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.685371][T12671] RIP: 0033:0x7f9773f1e853 [ 214.689800][T12671] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 214.709442][T12671] RSP: 002b:00007f9772554e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 214.717977][T12671] RAX: ffffffffffffffda RBX: 0000000000000785 RCX: 00007f9773f1e853 [ 214.726021][T12671] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 214.734063][T12671] RBP: 0000000020001002 R08: 00000000ffffffff R09: 0000000000000000 [ 214.742122][T12671] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 214.750118][T12671] R13: 00007f9772554ef0 R14: 00007f9772554eb0 R15: 0000000020000280 [ 214.758178][T12671] [ 214.797114][T12686] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 214.810298][T12678] IPVS: stopping master sync thread 12686 ... [ 215.265086][T12699] syzkaller0: entered allmulticast mode [ 215.292124][T12699] syzkaller0 (unregistering): left allmulticast mode [ 215.780813][T12712] loop2: detected capacity change from 0 to 8192 [ 215.991578][T12730] netlink: 'syz.4.3282': attribute type 4 has an invalid length. [ 216.001569][T12730] netlink: 'syz.4.3282': attribute type 13 has an invalid length. [ 216.010335][T12730] syz_tun: refused to change device tx_queue_len [ 216.016865][T12730] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 216.120430][T12736] 9pnet: Could not find request transport: t [ 216.253315][T12747] loop0: detected capacity change from 0 to 164 [ 216.272105][T12747] Unable to read rock-ridge attributes [ 216.309897][T12747] Unable to read rock-ridge attributes [ 216.390935][T12756] netlink: 'syz.1.3294': attribute type 4 has an invalid length. [ 216.409853][T12759] loop0: detected capacity change from 0 to 512 [ 216.417669][T12756] netlink: 'syz.1.3294': attribute type 13 has an invalid length. [ 216.424603][T12759] ext2: Unknown parameter 'obj_user' [ 216.458180][T12756] syz_tun: refused to change device tx_queue_len [ 216.464610][T12756] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 216.515895][T12764] x_tables: duplicate underflow at hook 2 [ 216.631344][T12780] loop7: detected capacity change from 0 to 16384 [ 216.640856][T12785] FAULT_INJECTION: forcing a failure. [ 216.640856][T12785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.654075][T12785] CPU: 0 UID: 0 PID: 12785 Comm: syz.0.3307 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 216.664671][T12785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 216.674747][T12785] Call Trace: [ 216.678052][T12785] [ 216.680998][T12785] dump_stack_lvl+0xf2/0x150 [ 216.685616][T12785] dump_stack+0x15/0x20 [ 216.689810][T12785] should_fail_ex+0x223/0x230 [ 216.694549][T12785] should_fail+0xb/0x10 [ 216.698789][T12785] should_fail_usercopy+0x1a/0x20 [ 216.703989][T12785] _copy_from_user+0x1e/0xb0 [ 216.708620][T12785] __copy_siginfo_from_user+0x41/0x2b0 [ 216.714105][T12785] __se_sys_rt_sigqueueinfo+0x46/0x110 [ 216.719657][T12785] __x64_sys_rt_sigqueueinfo+0x43/0x50 [ 216.725224][T12785] x64_sys_call+0x2cc0/0x2dc0 [ 216.729935][T12785] do_syscall_64+0xc9/0x1c0 [ 216.734486][T12785] ? clear_bhb_loop+0x55/0xb0 [ 216.739183][T12785] ? clear_bhb_loop+0x55/0xb0 [ 216.743877][T12785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.749788][T12785] RIP: 0033:0x7f9773f1e819 [ 216.754229][T12785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.773882][T12785] RSP: 002b:00007f9772597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000081 [ 216.782307][T12785] RAX: ffffffffffffffda RBX: 00007f97740d5fa0 RCX: 00007f9773f1e819 [ 216.790283][T12785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.798274][T12785] RBP: 00007f9772597090 R08: 0000000000000000 R09: 0000000000000000 [ 216.806251][T12785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.814227][T12785] R13: 0000000000000000 R14: 00007f97740d5fa0 R15: 00007fff08073528 [ 216.822232][T12785] [ 216.876522][T12780] loop7: detected capacity change from 16384 to 16383 [ 216.985487][T12795] loop0: detected capacity change from 0 to 512 [ 217.002792][T12795] ext2: Unknown parameter 'obj_user' [ 217.019132][T12780] usb usb7: usbfs: process 12780 (syz.7.3308) did not claim interface 0 before use [ 217.590193][T12814] vlan2: entered allmulticast mode [ 217.632912][T12819] __nla_validate_parse: 5 callbacks suppressed [ 217.632953][T12819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3321'. [ 217.672064][T12822] loop1: detected capacity change from 0 to 256 [ 217.689114][T12822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3322'. [ 217.756842][T12828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3325'. [ 217.793904][T12832] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 217.800466][T12832] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 217.808086][T12832] vhci_hcd vhci_hcd.0: Device attached [ 217.827950][T12832] IPv6: Can't replace route, no match found [ 217.858145][T12833] vhci_hcd: connection closed [ 217.858262][ T3569] vhci_hcd: stop threads [ 217.867296][ T3569] vhci_hcd: release socket [ 217.871727][ T3569] vhci_hcd: disconnect device [ 218.486035][T12850] loop0: detected capacity change from 0 to 256 [ 218.490145][T12853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.519140][T12850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3334'. [ 218.521774][T12853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.559603][T12852] loop7: detected capacity change from 0 to 128 [ 218.680914][T12852] syz.7.3333: attempt to access beyond end of device [ 218.680914][T12852] loop7: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 218.741389][T12852] syz.7.3333: attempt to access beyond end of device [ 218.741389][T12852] loop7: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 218.760357][T12866] FAULT_INJECTION: forcing a failure. [ 218.760357][T12866] name failslab, interval 1, probability 0, space 0, times 0 [ 218.767891][T12852] syz.7.3333: attempt to access beyond end of device [ 218.767891][T12852] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 218.773020][T12866] CPU: 1 UID: 0 PID: 12866 Comm: syz.4.3342 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 218.786864][T12852] syz.7.3333: attempt to access beyond end of device [ 218.786864][T12852] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 218.796460][T12866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 218.796481][T12866] Call Trace: [ 218.796489][T12866] [ 218.796499][T12866] dump_stack_lvl+0xf2/0x150 [ 218.796534][T12866] dump_stack+0x15/0x20 [ 218.796562][T12866] should_fail_ex+0x223/0x230 [ 218.839377][T12866] ? audit_log_start+0x34c/0x6b0 [ 218.844395][T12866] should_failslab+0x8f/0xb0 [ 218.849015][T12866] kmem_cache_alloc_noprof+0x4c/0x290 [ 218.854412][T12866] audit_log_start+0x34c/0x6b0 [ 218.859201][T12866] audit_seccomp+0x4b/0x130 [ 218.863776][T12866] __seccomp_filter+0x6fa/0x1180 [ 218.868785][T12866] ? __rcu_read_unlock+0x4e/0x70 [ 218.873737][T12866] ? mntput_no_expire+0x70/0x3c0 [ 218.878758][T12866] __secure_computing+0x9f/0x1c0 [ 218.883719][T12866] syscall_trace_enter+0xd1/0x1f0 [ 218.888759][T12866] ? fpregs_assert_state_consistent+0x83/0xa0 [ 218.894880][T12866] do_syscall_64+0xaa/0x1c0 [ 218.899438][T12866] ? clear_bhb_loop+0x55/0xb0 [ 218.904133][T12866] ? clear_bhb_loop+0x55/0xb0 [ 218.908827][T12866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.914776][T12866] RIP: 0033:0x7f1636bad25c [ 218.919199][T12866] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 218.938903][T12866] RSP: 002b:00007f1635227030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 218.947322][T12866] RAX: ffffffffffffffda RBX: 00007f1636d65fa0 RCX: 00007f1636bad25c [ 218.955297][T12866] RDX: 000000000000000f RSI: 00007f16352270a0 RDI: 0000000000000006 [ 218.963271][T12866] RBP: 00007f1635227090 R08: 0000000000000000 R09: 0000000000000000 [ 218.971298][T12866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.979276][T12866] R13: 0000000000000000 R14: 00007f1636d65fa0 R15: 00007ffc16067878 [ 218.987260][T12866] [ 219.000623][T12864] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 219.008630][T12852] syz.7.3333: attempt to access beyond end of device [ 219.008630][T12852] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 219.042892][T12852] syz.7.3333: attempt to access beyond end of device [ 219.042892][T12852] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 219.060126][T12876] 9pnet_fd: Insufficient options for proto=fd [ 219.269753][T12886] loop4: detected capacity change from 0 to 256 [ 219.279401][T12886] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3348'. [ 219.314662][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 219.314680][ T29] audit: type=1326 audit(1732289463.191:13237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12887 comm="syz.4.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1636bae819 code=0x7ffc0000 [ 219.353010][T12891] loop2: detected capacity change from 0 to 512 [ 219.353303][T12888] netlink: 596 bytes leftover after parsing attributes in process `syz.7.3347'. [ 219.368662][ T29] audit: type=1326 audit(1732289463.191:13238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12887 comm="syz.4.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1636bae819 code=0x7ffc0000 [ 219.392401][ T29] audit: type=1326 audit(1732289463.191:13239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12887 comm="syz.4.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1636bae819 code=0x7ffc0000 [ 219.416112][ T29] audit: type=1326 audit(1732289463.191:13240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12887 comm="syz.4.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1636bae819 code=0x7ffc0000 [ 219.439779][ T29] audit: type=1326 audit(1732289463.191:13241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12887 comm="syz.4.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1636bae819 code=0x7ffc0000 [ 219.463603][ T29] audit: type=1326 audit(1732289463.191:13242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12887 comm="syz.4.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1636bae819 code=0x7ffc0000 [ 219.487290][ T29] audit: type=1326 audit(1732289463.191:13243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12887 comm="syz.4.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1636bae819 code=0x7ffc0000 [ 219.510998][ T29] audit: type=1326 audit(1732289463.191:13244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12887 comm="syz.4.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1636bae819 code=0x7ffc0000 [ 219.534660][ T29] audit: type=1326 audit(1732289463.191:13245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12887 comm="syz.4.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1636bae819 code=0x7ffc0000 [ 219.558316][ T29] audit: type=1326 audit(1732289463.191:13246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12887 comm="syz.4.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1636bae819 code=0x7ffc0000 [ 219.584633][T12891] EXT4-fs (loop2): too many log groups per flexible block group [ 219.592413][T12891] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 219.600367][T12899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3352'. [ 219.610144][T12891] EXT4-fs (loop2): mount failed [ 219.679275][T12908] netlink: 'syz.0.3356': attribute type 29 has an invalid length. [ 219.688199][T12906] loop4: detected capacity change from 0 to 2048 [ 219.698427][T12891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3350'. [ 219.707791][T12908] netlink: 'syz.0.3356': attribute type 29 has an invalid length. [ 219.723804][T12908] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3356'. [ 219.771020][T12906] Alternate GPT is invalid, using primary GPT. [ 219.777663][T12906] loop4: p2 p3 p7 [ 219.797843][T12921] loop0: detected capacity change from 0 to 256 [ 219.813083][T12906] sctp: [Deprecated]: syz.4.3353 (pid 12906) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.813083][T12906] Use struct sctp_sack_info instead [ 219.814349][T12921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3360'. [ 219.896692][T12927] FAULT_INJECTION: forcing a failure. [ 219.896692][T12927] name failslab, interval 1, probability 0, space 0, times 0 [ 219.909847][T12927] CPU: 1 UID: 0 PID: 12927 Comm: syz.0.3362 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 219.909877][T12927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 219.909890][T12927] Call Trace: [ 219.909973][T12927] [ 219.909982][T12927] dump_stack_lvl+0xf2/0x150 [ 219.910019][T12927] dump_stack+0x15/0x20 [ 219.910107][T12927] should_fail_ex+0x223/0x230 [ 219.910214][T12927] should_failslab+0x8f/0xb0 [ 219.910276][T12927] kmem_cache_alloc_bulk_noprof+0x58/0x440 [ 219.910307][T12927] ? mas_dup_build+0x1e8/0xd10 [ 219.910402][T12927] ? should_failslab+0x8f/0xb0 [ 219.910429][T12927] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 219.910458][T12927] mas_dup_build+0x6df/0xd10 [ 219.910540][T12927] __mt_dup+0xcf/0x190 [ 219.910661][T12927] copy_mm+0x332/0x10e0 [ 219.910701][T12927] copy_process+0xd5b/0x1f90 [ 219.910733][T12927] kernel_clone+0x167/0x5e0 [ 219.910760][T12927] ? vfs_write+0x596/0x920 [ 220.002822][T12927] __x64_sys_clone+0xe8/0x120 [ 220.007558][T12927] x64_sys_call+0x2d7e/0x2dc0 [ 220.007591][T12927] do_syscall_64+0xc9/0x1c0 [ 220.007616][T12927] ? clear_bhb_loop+0x55/0xb0 [ 220.021580][T12927] ? clear_bhb_loop+0x55/0xb0 [ 220.021624][T12927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.032195][T12927] RIP: 0033:0x7f9773f1e819 [ 220.036679][T12927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.056399][T12927] RSP: 002b:00007f9772596fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 220.056426][T12927] RAX: ffffffffffffffda RBX: 00007f97740d5fa0 RCX: 00007f9773f1e819 [ 220.072953][T12927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 220.072975][T12927] RBP: 00007f9772597090 R08: 0000000000000000 R09: 0000000000000000 [ 220.089098][T12927] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 220.089116][T12927] R13: 0000000000000000 R14: 00007f97740d5fa0 R15: 00007fff08073528 [ 220.089138][T12927] [ 220.191230][T12933] FAULT_INJECTION: forcing a failure. [ 220.191230][T12933] name failslab, interval 1, probability 0, space 0, times 0 [ 220.203962][T12933] CPU: 1 UID: 0 PID: 12933 Comm: syz.0.3363 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 220.214426][T12933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 220.224504][T12933] Call Trace: [ 220.227793][T12933] [ 220.230758][T12933] dump_stack_lvl+0xf2/0x150 [ 220.235372][T12933] dump_stack+0x15/0x20 [ 220.239581][T12933] should_fail_ex+0x223/0x230 [ 220.244278][T12933] ? prepare_creds+0x37/0x480 [ 220.249077][T12933] should_failslab+0x8f/0xb0 [ 220.253725][T12933] kmem_cache_alloc_noprof+0x4c/0x290 [ 220.259193][T12933] prepare_creds+0x37/0x480 [ 220.263757][T12933] lookup_user_key+0x213/0xdf0 [ 220.268576][T12933] ? should_fail_ex+0xd7/0x230 [ 220.273385][T12933] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 220.279692][T12933] __se_sys_add_key+0x24b/0x320 [ 220.284653][T12933] ? fput+0x1c4/0x200 [ 220.288675][T12933] __x64_sys_add_key+0x67/0x80 [ 220.293457][T12933] x64_sys_call+0x2964/0x2dc0 [ 220.298190][T12933] do_syscall_64+0xc9/0x1c0 [ 220.302708][T12933] ? clear_bhb_loop+0x55/0xb0 [ 220.307398][T12933] ? clear_bhb_loop+0x55/0xb0 [ 220.312200][T12933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.318107][T12933] RIP: 0033:0x7f9773f1e819 [ 220.322527][T12933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.342211][T12933] RSP: 002b:00007f9772597038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 220.350670][T12933] RAX: ffffffffffffffda RBX: 00007f97740d5fa0 RCX: 00007f9773f1e819 [ 220.358705][T12933] RDX: 00000000200004c0 RSI: 0000000020000480 RDI: 0000000020000440 [ 220.366683][T12933] RBP: 00007f9772597090 R08: fffffffffffffffe R09: 0000000000000000 [ 220.374736][T12933] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 220.382801][T12933] R13: 0000000000000000 R14: 00007f97740d5fa0 R15: 00007fff08073528 [ 220.390787][T12933] [ 220.407404][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 220.779424][T12961] loop2: detected capacity change from 0 to 512 [ 220.800734][T12961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.813954][T12961] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.985599][T12972] loop1: detected capacity change from 0 to 512 [ 220.997593][T12972] EXT4-fs (loop1): too many log groups per flexible block group [ 221.005349][T12972] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 221.012993][T12972] EXT4-fs (loop1): mount failed [ 221.265204][T12997] loop1: detected capacity change from 0 to 256 [ 221.381064][T13004] loop1: detected capacity change from 0 to 1024 [ 221.553500][T10847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.057391][T13015] loop2: detected capacity change from 0 to 256 [ 222.089895][T13018] loop7: detected capacity change from 0 to 512 [ 222.099477][T13020] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 222.109495][T13019] IPVS: stopping master sync thread 13020 ... [ 222.118078][T13018] EXT4-fs (loop7): too many log groups per flexible block group [ 222.125973][T13018] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 222.155276][T13018] EXT4-fs (loop7): mount failed [ 222.341775][T13031] FAULT_INJECTION: forcing a failure. [ 222.341775][T13031] name failslab, interval 1, probability 0, space 0, times 0 [ 222.354705][T13031] CPU: 1 UID: 0 PID: 13031 Comm: syz.1.3397 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 222.365144][T13031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 222.375226][T13031] Call Trace: [ 222.378525][T13031] [ 222.381480][T13031] dump_stack_lvl+0xf2/0x150 [ 222.386118][T13031] dump_stack+0x15/0x20 [ 222.390331][T13031] should_fail_ex+0x223/0x230 [ 222.395064][T13031] ? vm_area_dup+0x2c/0x130 [ 222.399600][T13031] should_failslab+0x8f/0xb0 [ 222.404281][T13031] kmem_cache_alloc_noprof+0x4c/0x290 [ 222.409787][T13031] vm_area_dup+0x2c/0x130 [ 222.414141][T13031] copy_mm+0x60b/0x10e0 [ 222.418345][T13031] copy_process+0xd5b/0x1f90 [ 222.423024][T13031] kernel_clone+0x167/0x5e0 [ 222.427573][T13031] ? vfs_write+0x596/0x920 [ 222.432015][T13031] __x64_sys_clone+0xe8/0x120 [ 222.436739][T13031] x64_sys_call+0x2d7e/0x2dc0 [ 222.441594][T13031] do_syscall_64+0xc9/0x1c0 [ 222.446116][T13031] ? clear_bhb_loop+0x55/0xb0 [ 222.450821][T13031] ? clear_bhb_loop+0x55/0xb0 [ 222.455532][T13031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.461457][T13031] RIP: 0033:0x7f6fec63e819 [ 222.465926][T13031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.485620][T13031] RSP: 002b:00007f6feacb0fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 222.494075][T13031] RAX: ffffffffffffffda RBX: 00007f6fec7f5fa0 RCX: 00007f6fec63e819 [ 222.502076][T13031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 222.510109][T13031] RBP: 00007f6feacb1090 R08: 0000000000000000 R09: 0000000000000000 [ 222.518112][T13031] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 222.526172][T13031] R13: 0000000000000000 R14: 00007f6fec7f5fa0 R15: 00007ffed0311c48 [ 222.534181][T13031] [ 222.678865][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 222.729897][T13037] __nla_validate_parse: 6 callbacks suppressed [ 222.729917][T13037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3399'. [ 222.982410][T13064] loop2: detected capacity change from 0 to 1024 [ 223.139991][T13072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3410'. [ 223.210115][T13077] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 223.221483][T13076] IPVS: stopping master sync thread 13077 ... [ 223.249057][T13081] loop1: detected capacity change from 0 to 512 [ 223.269775][T13081] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 223.280750][T13081] EXT4-fs (loop1): orphan cleanup on readonly fs [ 223.300832][T13086] netlink: 'syz.0.3415': attribute type 4 has an invalid length. [ 223.309513][T13086] netlink: 'syz.0.3415': attribute type 13 has an invalid length. [ 223.317469][T13086] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3415'. [ 223.328594][T13081] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 223.343928][T13086] syz_tun: refused to change device tx_queue_len [ 223.350376][T13086] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 223.370947][T13081] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 223.410940][T13081] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #16: comm syz.1.3413: iget: immutable or append flags not allowed on symlinks [ 223.425777][T13081] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.3413: couldn't read orphan inode 16 (err -117) [ 223.456214][T13081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 223.578796][T13090] lo speed is unknown, defaulting to 1000 [ 223.732207][T13081] bpf_get_probe_write_proto: 2 callbacks suppressed [ 223.732228][T13081] syz.1.3413[13081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.786695][T13091] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 223.820412][T13081] syz.1.3413[13081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.820584][T13081] syz.1.3413[13081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.223638][T11984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.405933][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 224.405949][ T29] audit: type=1326 audit(1732289468.281:13435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13096 comm="syz.7.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5fbee819 code=0x7ffc0000 [ 224.496478][ T29] audit: type=1326 audit(1732289468.321:13436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13096 comm="syz.7.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5fbee819 code=0x7ffc0000 [ 224.585866][ T29] audit: type=1326 audit(1732289468.461:13437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13117 comm="syz.2.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304562e819 code=0x7ffc0000 [ 224.609625][ T29] audit: type=1326 audit(1732289468.461:13438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13117 comm="syz.2.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304562e819 code=0x7ffc0000 [ 224.700299][T13125] FAULT_INJECTION: forcing a failure. [ 224.700299][T13125] name failslab, interval 1, probability 0, space 0, times 0 [ 224.713016][T13125] CPU: 0 UID: 0 PID: 13125 Comm: syz.2.3428 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 224.723613][T13125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 224.733705][T13125] Call Trace: [ 224.737018][T13125] [ 224.739974][T13125] dump_stack_lvl+0xf2/0x150 [ 224.744659][T13125] dump_stack+0x15/0x20 [ 224.744694][T13125] should_fail_ex+0x223/0x230 [ 224.744774][T13125] ? alloc_empty_file+0xd0/0x200 [ 224.744851][T13125] should_failslab+0x8f/0xb0 [ 224.744879][T13125] kmem_cache_alloc_noprof+0x4c/0x290 [ 224.744916][T13125] alloc_empty_file+0xd0/0x200 [ 224.744948][T13125] path_openat+0x6a/0x1fa0 [ 224.745079][T13125] ? xas_load+0x3ae/0x3d0 [ 224.745115][T13125] ? xas_load+0x3ae/0x3d0 [ 224.745151][T13125] ? should_fail_ex+0xd7/0x230 [ 224.745253][T13125] ? getname_kernel+0x3d/0x1e0 [ 224.745274][T13125] ? should_failslab+0x8f/0xb0 [ 224.745293][T13125] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 224.745323][T13125] do_file_open_root+0x1c8/0x3e0 [ 224.745362][T13125] file_open_root+0xf9/0x120 [ 224.745425][T13125] kernel_read_file_from_path_initns+0xe7/0x180 [ 224.745512][T13125] _request_firmware+0x712/0x9c0 [ 224.745633][T13125] request_firmware+0x36/0x50 [ 224.745670][T13125] devlink_compat_flash_update+0xaf/0x1b0 [ 224.745715][T13125] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 224.745759][T13125] dev_ethtool+0x138b/0x14c0 [ 224.745814][T13125] ? __rcu_read_unlock+0x4e/0x70 [ 224.745843][T13125] dev_ioctl+0x854/0xab0 [ 224.745873][T13125] sock_do_ioctl+0x11c/0x260 [ 224.746036][T13125] sock_ioctl+0x46a/0x640 [ 224.746057][T13125] ? __pfx_sock_ioctl+0x10/0x10 [ 224.746169][T13125] __se_sys_ioctl+0xc9/0x140 [ 224.746198][T13125] __x64_sys_ioctl+0x43/0x50 [ 224.746307][T13125] x64_sys_call+0x1690/0x2dc0 [ 224.746344][T13125] do_syscall_64+0xc9/0x1c0 [ 224.746370][T13125] ? clear_bhb_loop+0x55/0xb0 [ 224.746443][T13125] ? clear_bhb_loop+0x55/0xb0 [ 224.746477][T13125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.746584][T13125] RIP: 0033:0x7f304562e819 [ 224.746601][T13125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.746624][T13125] RSP: 002b:00007f3043ca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.746677][T13125] RAX: ffffffffffffffda RBX: 00007f30457e5fa0 RCX: 00007f304562e819 [ 224.746694][T13125] RDX: 0000000020000000 RSI: 0000000000008946 RDI: 0000000000000004 [ 224.746709][T13125] RBP: 00007f3043ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 224.746726][T13125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.746741][T13125] R13: 0000000000000000 R14: 00007f30457e5fa0 R15: 00007fffba123bb8 [ 224.746806][T13125] [ 224.767031][ T29] audit: type=1326 audit(1732289468.521:13439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13117 comm="syz.2.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f304562e819 code=0x7ffc0000 [ 224.767070][ T29] audit: type=1326 audit(1732289468.521:13440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13117 comm="syz.2.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304562e819 code=0x7ffc0000 [ 224.767118][ T29] audit: type=1326 audit(1732289468.521:13441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13117 comm="syz.2.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304562e819 code=0x7ffc0000 [ 224.767144][ T29] audit: type=1400 audit(1732289468.521:13442): avc: denied { write } for pid=13111 comm="syz.1.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 224.767168][ T29] audit: type=1326 audit(1732289468.521:13443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13117 comm="syz.2.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f304562d1b0 code=0x7ffc0000 [ 224.767194][ T29] audit: type=1326 audit(1732289468.521:13444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13117 comm="syz.2.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f304562d1b0 code=0x7ffc0000 [ 224.800454][T13125] netdevsim netdevsim2: loading /lib/firmware/updates/6.12.0-syzkaller-07749-g28eb75e178d3/. failed with error -12 [ 224.800586][T13125] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 224.800678][T13125] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 224.957824][T13140] tracefs: Unknown parameter '†8ûg' [ 224.963077][T13127] loop1: detected capacity change from 0 to 1024 [ 225.014429][T13140] loop7: detected capacity change from 0 to 1024 [ 225.018288][T13127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.020239][T13136] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13136 comm=syz.2.3440 [ 225.020647][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3440'. [ 225.030478][T13140] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.035395][T13140] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.105876][T13127] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 225.106974][T13127] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 32 with error 28 [ 225.107003][T13127] EXT4-fs (loop1): This should not happen!! Data will be lost [ 225.107003][T13127] [ 225.107027][T13127] EXT4-fs (loop1): Total free blocks count 0 [ 225.107040][T13127] EXT4-fs (loop1): Free/Dirty block details [ 225.107131][T13127] EXT4-fs (loop1): free_blocks=68451041280 [ 225.107148][T13127] EXT4-fs (loop1): dirty_blocks=64 [ 225.107162][T13127] EXT4-fs (loop1): Block reservation details [ 225.107174][T13127] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 225.244404][T13151] lo speed is unknown, defaulting to 1000 [ 225.925372][T13157] netlink: 'syz.4.3435': attribute type 13 has an invalid length. [ 225.925427][T13157] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3435'. [ 225.929910][T13157] syz_tun: refused to change device tx_queue_len [ 225.929951][T13157] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 226.046943][T13163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3438'. [ 226.302769][ T3569] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 226.394603][T13169] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 226.405684][T13168] IPVS: stopping master sync thread 13169 ... [ 226.625128][T13175] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3439'. [ 226.634170][T13175] 0ªX¹¦D: renamed from gretap0 [ 226.666208][T13175] 0ªX¹¦D: left promiscuous mode [ 226.671458][T13175] 0ªX¹¦D: entered allmulticast mode [ 226.678943][T13175] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 226.729073][T13175] loop7: detected capacity change from 0 to 2048 [ 226.806733][T13175] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.090196][T13186] loop2: detected capacity change from 0 to 1024 [ 227.347794][T13189] netlink: 'syz.0.3448': attribute type 13 has an invalid length. [ 227.355736][T13189] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3448'. [ 227.365573][T13186] EXT4-fs: Ignoring removed i_version option [ 227.371837][T13186] EXT4-fs: Ignoring removed nobh option [ 227.377492][T13186] EXT4-fs: Ignoring removed orlov option [ 227.425403][T13186] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 227.442906][T13189] syz_tun: refused to change device tx_queue_len [ 227.449426][T13189] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 227.493181][T13186] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #11: comm syz.2.3446: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 227.571869][T13186] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.3446: couldn't read orphan inode 11 (err -117) [ 227.621176][T13186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.671893][T13193] tracefs: Unknown parameter '†8ûg' [ 228.056599][T13183] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 228.117877][ T6363] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.124037][T13193] loop1: detected capacity change from 0 to 1024 [ 228.149554][T13193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.196410][T13193] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.231367][T13194] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3446: Invalid block bitmap block 0 in block_group 0 [ 228.273225][T13194] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.3446: Failed to acquire dquot type 0 [ 228.292903][T13208] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3453'. [ 228.302555][T13213] loop1: detected capacity change from 0 to 512 [ 228.312106][T13208] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 228.331152][T13213] EXT4-fs (loop1): too many log groups per flexible block group [ 228.338994][T13213] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 228.360771][T13208] smc: net device bond0 applied user defined pnetid SYZ0 [ 228.370495][T13218] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 228.380118][T13217] IPVS: stopping master sync thread 13218 ... [ 228.392431][T10847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.401958][T13213] EXT4-fs (loop1): mount failed [ 228.407534][ T36] EXT4-fs error (device loop2): ext4_release_dquot:6961: comm kworker/u8:2: Failed to release dquot type 0 [ 228.439229][T13220] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3458'. [ 228.490034][T13228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3455'. [ 228.580621][T13224] syzkaller0: entered allmulticast mode [ 228.607364][T13224] syzkaller0 (unregistering): left allmulticast mode [ 228.615884][T13238] FAULT_INJECTION: forcing a failure. [ 228.615884][T13238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.629138][T13238] CPU: 0 UID: 0 PID: 13238 Comm: syz.4.3464 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 228.639653][T13238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 228.649730][T13238] Call Trace: [ 228.653021][T13238] [ 228.655984][T13238] dump_stack_lvl+0xf2/0x150 [ 228.660617][T13238] dump_stack+0x15/0x20 [ 228.664872][T13238] should_fail_ex+0x223/0x230 [ 228.669574][T13238] should_fail+0xb/0x10 [ 228.673829][T13238] should_fail_usercopy+0x1a/0x20 [ 228.678944][T13238] _copy_to_user+0x20/0xa0 [ 228.683416][T13238] simple_read_from_buffer+0xa0/0x110 [ 228.688820][T13238] proc_fail_nth_read+0xf9/0x140 [ 228.693822][T13238] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.699395][T13238] vfs_read+0x1a2/0x700 [ 228.703571][T13238] ? __rcu_read_unlock+0x4e/0x70 [ 228.708525][T13238] ? __fget_files+0x17c/0x1c0 [ 228.713218][T13238] ksys_read+0xe8/0x1b0 [ 228.717401][T13238] __x64_sys_read+0x42/0x50 [ 228.721945][T13238] x64_sys_call+0x2874/0x2dc0 [ 228.726705][T13238] do_syscall_64+0xc9/0x1c0 [ 228.731223][T13238] ? clear_bhb_loop+0x55/0xb0 [ 228.735913][T13238] ? clear_bhb_loop+0x55/0xb0 [ 228.740676][T13238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.746646][T13238] RIP: 0033:0x7f1636bad25c [ 228.751068][T13238] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 228.770720][T13238] RSP: 002b:00007f1635227030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 228.779204][T13238] RAX: ffffffffffffffda RBX: 00007f1636d65fa0 RCX: 00007f1636bad25c [ 228.787247][T13238] RDX: 000000000000000f RSI: 00007f16352270a0 RDI: 0000000000000006 [ 228.795238][T13238] RBP: 00007f1635227090 R08: 0000000000000000 R09: 0000000000000000 [ 228.803330][T13238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.811306][T13238] R13: 0000000000000000 R14: 00007f1636d65fa0 R15: 00007ffc16067878 [ 228.819293][T13238] [ 228.830818][T13242] tracefs: Unknown parameter '†8ûg' [ 228.886877][T13246] loop0: detected capacity change from 0 to 128 [ 228.912679][T13250] IPVS: stopping master sync thread 13252 ... [ 228.919089][T13252] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 228.932396][T13246] FAT-fs (loop0): bogus logical sector size 0 [ 228.938660][T13246] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 228.948124][T13246] FAT-fs (loop0): Can't find a valid FAT filesystem [ 228.962272][T13236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3463'. [ 229.005325][T13246] loop0: detected capacity change from 0 to 256 [ 229.021114][T13246] vfat: Unknown parameter 'u' [ 229.111449][T13262] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3471'. [ 229.115566][T13261] loop2: detected capacity change from 0 to 4096 [ 229.136847][T13257] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3471'. [ 229.174029][T13261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.222681][T13264] blk-mq: reduced tag depth (128 -> 64) [ 229.308892][T13261] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #15: comm syz.2.3472: corrupted inode contents [ 229.346621][T13261] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #15: comm syz.2.3472: mark_inode_dirty error [ 229.348358][T13283] tracefs: Unknown parameter '†8ûg' [ 229.379487][T13261] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #15: comm syz.2.3472: corrupted inode contents [ 229.401713][T13286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3482'. [ 229.421947][T13261] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.3472: mark_inode_dirty error [ 229.474476][T13261] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #15: comm syz.2.3472: corrupted inode contents [ 229.486963][T13290] netlink: 'syz.0.3483': attribute type 10 has an invalid length. [ 229.507454][T13261] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.3472: mark_inode_dirty error [ 229.520522][T13292] loop1: detected capacity change from 0 to 512 [ 229.533293][T13290] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.538161][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3483'. [ 229.540564][T13290] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.550891][T13261] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #15: comm syz.2.3472: corrupted inode contents [ 229.589068][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 229.589086][ T29] audit: type=1400 audit(1732292033.477:13762): avc: denied { block_suspend } for pid=13289 comm="syz.0.3483" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 229.611833][T13290] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.619492][T13261] EXT4-fs error (device loop2): ext4_truncate:4240: inode #15: comm syz.2.3472: mark_inode_dirty error [ 229.624028][T13290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.642412][T13290] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.649521][T13290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.659377][ T29] audit: type=1326 audit(1732292033.477:13763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.0.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9773f1e819 code=0x7ffc0000 [ 229.683131][ T29] audit: type=1326 audit(1732292033.477:13764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.0.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9773f1e819 code=0x7ffc0000 [ 229.700419][T13261] EXT4-fs error (device loop2) in ext4_setattr:5568: Corrupt filesystem [ 229.706894][ T29] audit: type=1326 audit(1732292033.477:13765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.0.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9773f1e819 code=0x7ffc0000 [ 229.737285][T13290] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 229.738683][ T29] audit: type=1326 audit(1732292033.477:13766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.0.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9773f1e819 code=0x7ffc0000 [ 229.771033][ T29] audit: type=1326 audit(1732292033.477:13767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.0.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9773f1e819 code=0x7ffc0000 [ 229.794663][ T29] audit: type=1326 audit(1732292033.497:13768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.0.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9773f1e819 code=0x7ffc0000 [ 229.818370][ T29] audit: type=1326 audit(1732292033.497:13769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.0.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9773f1e819 code=0x7ffc0000 [ 229.842027][ T29] audit: type=1326 audit(1732292033.497:13770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.0.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9773f1e819 code=0x7ffc0000 [ 229.865677][ T29] audit: type=1326 audit(1732292033.497:13771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.0.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9773f1e819 code=0x7ffc0000 [ 229.890166][T13293] bridge_slave_1: left allmulticast mode [ 229.890222][T13292] EXT4-fs (loop1): too many log groups per flexible block group [ 229.895890][T13293] bridge_slave_1: left promiscuous mode [ 229.903610][T13292] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 229.909190][T13293] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.916033][T13292] EXT4-fs (loop1): mount failed [ 229.937178][T13293] bridge_slave_0: left allmulticast mode [ 229.942879][T13293] bridge_slave_0: left promiscuous mode [ 229.948630][T13293] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.961814][T13299] FAULT_INJECTION: forcing a failure. [ 229.961814][T13299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.975079][T13299] CPU: 1 UID: 0 PID: 13299 Comm: syz.7.3485 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 229.985524][T13299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 229.995597][T13299] Call Trace: [ 229.998891][T13299] [ 230.001837][T13299] dump_stack_lvl+0xf2/0x150 [ 230.006479][T13299] dump_stack+0x15/0x20 [ 230.010661][T13299] should_fail_ex+0x223/0x230 [ 230.015367][T13299] should_fail+0xb/0x10 [ 230.019538][T13299] should_fail_usercopy+0x1a/0x20 [ 230.024606][T13299] _copy_from_user+0x1e/0xb0 [ 230.029281][T13299] vt_ioctl+0x9b1/0x1810 [ 230.033552][T13299] tty_ioctl+0x815/0xbe0 [ 230.037814][T13299] ? __pfx_tty_ioctl+0x10/0x10 [ 230.042655][T13299] __se_sys_ioctl+0xc9/0x140 [ 230.047279][T13299] __x64_sys_ioctl+0x43/0x50 [ 230.051900][T13299] x64_sys_call+0x1690/0x2dc0 [ 230.056603][T13299] do_syscall_64+0xc9/0x1c0 [ 230.061232][T13299] ? clear_bhb_loop+0x55/0xb0 [ 230.066020][T13299] ? clear_bhb_loop+0x55/0xb0 [ 230.070713][T13299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.076625][T13299] RIP: 0033:0x7f9b5fbee819 [ 230.081080][T13299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.100763][T13299] RSP: 002b:00007f9b5e267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.109268][T13299] RAX: ffffffffffffffda RBX: 00007f9b5fda5fa0 RCX: 00007f9b5fbee819 [ 230.117303][T13299] RDX: 0000000020000400 RSI: 0000000000004b72 RDI: 0000000000000004 [ 230.125359][T13299] RBP: 00007f9b5e267090 R08: 0000000000000000 R09: 0000000000000000 [ 230.133364][T13299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.141340][T13299] R13: 0000000000000000 R14: 00007f9b5fda5fa0 R15: 00007ffe60082ec8 [ 230.149381][T13299] [ 230.172930][T13293] bond0: (slave bridge0): Releasing backup interface [ 230.181746][T10847] EXT4-fs error (device loop2): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /200/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 230.243653][T10847] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 230.285434][T10847] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 230.300019][T13308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3484'. [ 230.339280][T10847] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 230.364413][T13306] loop7: detected capacity change from 0 to 4096 [ 230.403276][T13306] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.423940][T10847] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 230.442173][T10847] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 230.467107][T13315] loop4: detected capacity change from 0 to 512 [ 230.487659][T10847] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 230.499922][T13315] ext4: Unknown parameter 'fowner' [ 230.616963][T10847] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 230.648394][T13306] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #15: comm syz.7.3489: corrupted inode contents [ 230.663501][T10847] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 230.747641][T13306] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #15: comm syz.7.3489: mark_inode_dirty error [ 230.759644][T10847] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 230.802964][T13306] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #15: comm syz.7.3489: corrupted inode contents [ 230.815237][T10847] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 230.869944][T13306] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.3489: mark_inode_dirty error [ 230.924508][T13306] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #15: comm syz.7.3489: corrupted inode contents [ 230.942986][T13322] tracefs: Unknown parameter '†8ûg' [ 230.991793][T13306] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.3489: mark_inode_dirty error [ 231.038971][T13306] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #15: comm syz.7.3489: corrupted inode contents [ 231.079212][T12238] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.126893][T13306] EXT4-fs error (device loop7): ext4_truncate:4240: inode #15: comm syz.7.3489: mark_inode_dirty error [ 231.156798][T13306] EXT4-fs error (device loop7) in ext4_setattr:5568: Corrupt filesystem [ 231.220704][ T6363] EXT4-fs error (device loop7): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /469/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 231.290290][ T6363] EXT4-fs warning (device loop7): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 231.301487][T13336] loop0: detected capacity change from 0 to 512 [ 231.327646][ T6363] EXT4-fs warning (device loop7): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 231.340964][T13336] EXT4-fs (loop0): too many log groups per flexible block group [ 231.348863][T13336] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 231.380477][ T6363] EXT4-fs warning (device loop7): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 231.398160][ T3340] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.409397][T13336] EXT4-fs (loop0): mount failed [ 231.428187][ T6363] EXT4-fs warning (device loop7): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 231.451500][ T6363] EXT4-fs warning (device loop7): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 231.485910][ T3340] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.491047][T13336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3501'. [ 231.515385][ T6363] EXT4-fs warning (device loop7): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 231.557951][ T6363] EXT4-fs warning (device loop7): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 231.571755][ T3340] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.595931][ T6363] EXT4-fs warning (device loop7): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 231.642141][ T6363] EXT4-fs warning (device loop7): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 231.659570][ T3340] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.681169][ T6363] EXT4-fs warning (device loop7): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 231.814887][ T3340] bridge_slave_1: left allmulticast mode [ 231.820764][ T3340] bridge_slave_1: left promiscuous mode [ 231.826558][ T3340] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.884995][ T3340] bridge_slave_0: left allmulticast mode [ 231.890797][ T3340] bridge_slave_0: left promiscuous mode [ 231.896601][ T3340] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.986846][T12458] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.024810][ T3340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.049149][ T3340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.073298][ T3340] bond0 (unregistering): Released all slaves [ 232.184504][T13350] lo speed is unknown, defaulting to 1000 [ 232.201611][T13370] x_tables: duplicate underflow at hook 2 [ 232.239748][ T3340] hsr_slave_0: left promiscuous mode [ 232.247457][ T3340] hsr_slave_1: left promiscuous mode [ 232.262344][ T3340] veth1_macvtap: left promiscuous mode [ 232.267952][ T3340] veth0_macvtap: left promiscuous mode [ 232.273549][ T3340] veth1_vlan: left promiscuous mode [ 232.278875][ T3340] veth0_vlan: left promiscuous mode [ 232.445036][ T3340] team0 (unregistering): Port device team_slave_1 removed [ 232.463678][ T3340] team0 (unregistering): Port device team_slave_0 removed [ 232.509766][T13383] loop0: detected capacity change from 0 to 256 [ 232.530876][ T3396] lo speed is unknown, defaulting to 1000 [ 232.580427][T13388] loop0: detected capacity change from 0 to 512 [ 232.590095][T13388] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 232.610726][T13388] EXT4-fs (loop0): 1 truncate cleaned up [ 232.632964][T13388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.634802][T13350] chnl_net:caif_netlink_parms(): no params data found [ 232.686438][T13394] syzkaller0: entered allmulticast mode [ 232.714589][T13394] syzkaller0 (unregistering): left allmulticast mode [ 232.914185][T13350] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.921381][T13350] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.971546][T13350] bridge_slave_0: entered allmulticast mode [ 232.981680][T13350] bridge_slave_0: entered promiscuous mode [ 232.993114][T13406] loop1: detected capacity change from 0 to 4096 [ 232.999838][T13350] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.007010][T13350] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.016098][T13350] bridge_slave_1: entered allmulticast mode [ 233.023132][T13350] bridge_slave_1: entered promiscuous mode [ 233.034877][T13406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.100290][T13406] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #15: comm syz.1.3520: corrupted inode contents [ 233.113906][T13350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.128916][T13406] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #15: comm syz.1.3520: mark_inode_dirty error [ 233.155470][T13350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.175529][T13406] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #15: comm syz.1.3520: corrupted inode contents [ 233.205834][T13406] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.3520: mark_inode_dirty error [ 233.229342][T13406] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #15: comm syz.1.3520: corrupted inode contents [ 233.264865][T13406] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.3520: mark_inode_dirty error [ 233.291888][T13406] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #15: comm syz.1.3520: corrupted inode contents [ 233.308888][T13416] loop4: detected capacity change from 0 to 2048 [ 233.323052][T13406] EXT4-fs error (device loop1): ext4_truncate:4240: inode #15: comm syz.1.3520: mark_inode_dirty error [ 233.323878][T13350] team0: Port device team_slave_0 added [ 233.358656][T13406] EXT4-fs error (device loop1) in ext4_setattr:5568: Corrupt filesystem [ 233.363853][T13377] chnl_net:caif_netlink_parms(): no params data found [ 233.370022][T13416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.378822][T13350] team0: Port device team_slave_1 added [ 233.508342][T11984] EXT4-fs error (device loop1): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /76/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 233.550247][T11984] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 233.573061][T11613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.575740][T13350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.589245][T13350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.615957][T13350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.638645][T13350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.645667][T13350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.672301][T13350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.674392][T11984] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 233.735844][T11984] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 233.770488][T11984] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 233.771638][T11010] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.799055][T11984] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 233.812884][T13350] hsr_slave_0: entered promiscuous mode [ 233.815487][T11984] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 233.837702][T13350] hsr_slave_1: entered promiscuous mode [ 233.844096][T11984] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 233.859794][T13350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.870819][T13350] Cannot create hsr debugfs directory [ 233.890295][T11984] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 233.918839][T13433] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 233.944236][T11984] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 233.950464][T13377] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.962921][T13377] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.970763][T13377] bridge_slave_0: entered allmulticast mode [ 233.978272][T13377] bridge_slave_0: entered promiscuous mode [ 233.988140][T11984] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 234.000445][T13377] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.008184][T13377] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.016938][T13377] bridge_slave_1: entered allmulticast mode [ 234.024336][T13377] bridge_slave_1: entered promiscuous mode [ 234.070244][T13377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.096083][T13377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.139267][T13377] team0: Port device team_slave_0 added [ 234.146325][T13377] team0: Port device team_slave_1 added [ 234.173474][T13377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.180563][T13377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.207197][T13377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.225694][T13350] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.239921][T13377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.246948][T13377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.273755][T13377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.305242][T13377] hsr_slave_0: entered promiscuous mode [ 234.311729][T13377] hsr_slave_1: entered promiscuous mode [ 234.318898][T13377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.328753][T13377] Cannot create hsr debugfs directory [ 234.337691][T13350] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.378546][T11984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.395497][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.426301][T13350] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.464599][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.496005][T13350] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.525787][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.590198][T13377] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.613499][T13350] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 234.628529][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.642372][T13350] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 234.668293][T13377] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.686242][T13350] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 234.708654][T13350] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 234.727178][ T11] bridge_slave_1: left allmulticast mode [ 234.732885][ T11] bridge_slave_1: left promiscuous mode [ 234.738574][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.753257][ T11] bridge_slave_0: left allmulticast mode [ 234.759000][ T11] bridge_slave_0: left promiscuous mode [ 234.764778][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.788448][T13449] syz.0.3533[13449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.788539][T13449] syz.0.3533[13449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.809245][T13449] syz.0.3533[13449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.838550][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 234.838569][ T29] audit: type=1400 audit(1732297158.723:13950): avc: denied { create } for pid=13448 comm="syz.0.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 234.882576][ T29] audit: type=1400 audit(1732297158.763:13951): avc: denied { setopt } for pid=13448 comm="syz.0.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 234.939893][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.949970][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.963511][ T11] bond0 (unregistering): Released all slaves [ 234.975680][T13377] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.054367][T13458] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.074277][T13377] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.120031][ T11] hsr_slave_0: left promiscuous mode [ 235.134602][ T11] hsr_slave_1: left promiscuous mode [ 235.147746][ T11] veth1_macvtap: left promiscuous mode [ 235.153264][ T11] veth0_macvtap: left promiscuous mode [ 235.158884][ T11] veth1_vlan: left promiscuous mode [ 235.164379][ T11] veth0_vlan: left promiscuous mode [ 235.245358][ T11] team0 (unregistering): Port device team_slave_1 removed [ 235.258674][ T11] team0 (unregistering): Port device team_slave_0 removed [ 235.302008][T13458] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.349145][T13350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.372262][T13458] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.438644][T13377] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 235.451129][T13350] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.463009][T13377] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 235.477907][T13458] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.503004][T13377] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 235.533646][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.542943][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.562354][T13377] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 235.585744][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.593567][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.647298][T13458] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.696992][T13441] chnl_net:caif_netlink_parms(): no params data found [ 235.721057][T13350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.737042][T13458] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.749113][T13458] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.761891][T13458] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.774085][T13476] loop4: detected capacity change from 0 to 4096 [ 235.814108][T13476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.877777][T13476] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #15: comm syz.4.3542: corrupted inode contents [ 235.891506][ T29] audit: type=1326 audit(1732299719.764:13952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13475 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1636bae819 code=0x7ffc0000 [ 235.915867][ T29] audit: type=1326 audit(1732299719.764:13953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13475 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f1636bae819 code=0x7ffc0000 [ 235.936240][T13377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.940204][ T29] audit: type=1326 audit(1732299719.764:13954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13475 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1636bae819 code=0x7ffc0000 [ 235.970099][ T29] audit: type=1326 audit(1732299719.764:13955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13475 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1636bae819 code=0x7ffc0000 [ 235.996079][T13476] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #15: comm syz.4.3542: mark_inode_dirty error [ 236.009102][T13476] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #15: comm syz.4.3542: corrupted inode contents [ 236.022245][T13476] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.3542: mark_inode_dirty error [ 236.034367][ T29] audit: type=1326 audit(1732299719.904:13956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.0.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9773f1e819 code=0x7ffc0000 [ 236.038187][T13487] FAULT_INJECTION: forcing a failure. [ 236.038187][T13487] name failslab, interval 1, probability 0, space 0, times 0 [ 236.058829][ T29] audit: type=1326 audit(1732299719.904:13957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.0.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9773f1e819 code=0x7ffc0000 [ 236.070710][T13487] CPU: 1 UID: 0 PID: 13487 Comm: syz.0.3543 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 236.095001][ T29] audit: type=1326 audit(1732299719.904:13958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.0.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9773f1e819 code=0x7ffc0000 [ 236.104607][T13487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 236.104668][T13487] Call Trace: [ 236.104677][T13487] [ 236.104688][T13487] dump_stack_lvl+0xf2/0x150 [ 236.129245][ T29] audit: type=1326 audit(1732299719.904:13959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.0.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9773f1e819 code=0x7ffc0000 [ 236.138351][T13487] dump_stack+0x15/0x20 [ 236.138388][T13487] should_fail_ex+0x223/0x230 [ 236.138418][T13487] ? mas_alloc_nodes+0x1d3/0x4a0 [ 236.138463][T13487] should_failslab+0x8f/0xb0 [ 236.138488][T13487] kmem_cache_alloc_noprof+0x4c/0x290 [ 236.146993][T13476] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #15: comm syz.4.3542: corrupted inode contents [ 236.149294][T13487] mas_alloc_nodes+0x1d3/0x4a0 [ 236.175154][T13476] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.3542: mark_inode_dirty error [ 236.177081][T13487] mas_preallocate+0x449/0x650 [ 236.177123][T13487] mmap_region+0xc95/0x14a0 [ 236.177174][T13487] do_mmap+0x718/0xb60 [ 236.182535][T13476] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #15: comm syz.4.3542: corrupted inode contents [ 236.186832][T13487] aio_setup_ring+0x3bf/0x6a0 [ 236.192590][T13476] EXT4-fs error (device loop4): ext4_truncate:4240: inode #15: comm syz.4.3542: mark_inode_dirty error [ 236.196842][T13487] ioctx_alloc+0x2b2/0x4c0 [ 236.196888][T13487] __se_sys_io_setup+0x6b/0x1b0 [ 236.197107][T13487] __x64_sys_io_setup+0x31/0x40 [ 236.197144][T13487] x64_sys_call+0x160f/0x2dc0 [ 236.197235][T13487] do_syscall_64+0xc9/0x1c0 [ 236.197267][T13487] ? clear_bhb_loop+0x55/0xb0 [ 236.197376][T13487] ? clear_bhb_loop+0x55/0xb0 [ 236.197487][T13487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.211502][T13476] EXT4-fs error (device loop4) in ext4_setattr:5568: Corrupt filesystem [ 236.214065][T13487] RIP: 0033:0x7f9773f1e819 [ 236.317645][T13487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.337322][T13487] RSP: 002b:00007f9772597038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 236.345795][T13487] RAX: ffffffffffffffda RBX: 00007f97740d5fa0 RCX: 00007f9773f1e819 [ 236.353776][T13487] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000008 [ 236.361775][T13487] RBP: 00007f9772597090 R08: 0000000000000000 R09: 0000000000000000 [ 236.369816][T13487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.377804][T13487] R13: 0000000000000000 R14: 00007f97740d5fa0 R15: 00007fff08073528 [ 236.385812][T13487] [ 236.409491][T11613] EXT4-fs error (device loop4): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /146/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 236.448861][T13441] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.456027][T13441] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.471889][T13441] bridge_slave_0: entered allmulticast mode [ 236.481769][T11613] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 236.495708][T13441] bridge_slave_0: entered promiscuous mode [ 236.504692][T13441] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.511899][T13441] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.521052][T11613] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 236.533932][T11613] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 236.547301][T13441] bridge_slave_1: entered allmulticast mode [ 236.554216][T13441] bridge_slave_1: entered promiscuous mode [ 236.561753][T11613] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 236.580484][T11613] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 236.587968][T13492] syzkaller0: entered allmulticast mode [ 236.612400][T13350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.637708][T13441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.648794][T11613] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 236.649941][T13377] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.675702][T11613] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 236.689140][T11613] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 236.701592][T13492] syzkaller0 (unregistering): left allmulticast mode [ 236.720113][T11613] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 236.733402][T11613] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 236.770085][T13441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.826825][T13270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.837936][T13441] team0: Port device team_slave_0 added [ 236.845833][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.853006][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.863449][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.870561][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.884223][T13441] team0: Port device team_slave_1 added [ 236.938169][T13441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.945194][T13441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.971911][T13441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.006685][T13441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.013764][T13441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.040596][T13441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.058193][T13509] loop0: detected capacity change from 0 to 512 [ 237.065102][T13509] EXT4-fs: Ignoring removed oldalloc option [ 237.107077][T13509] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.3549: Parent and EA inode have the same ino 15 [ 237.143745][T13377] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.154251][T13377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.177259][T13509] EXT4-fs (loop0): Remounting filesystem read-only [ 237.183936][T13509] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 237.205561][T13509] EXT4-fs (loop0): 1 orphan inode deleted [ 237.258043][T13509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.275498][T13509] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 237.285072][T13509] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.316890][T13441] hsr_slave_0: entered promiscuous mode [ 237.333524][T13441] hsr_slave_1: entered promiscuous mode [ 237.340724][T13441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.352692][T13441] Cannot create hsr debugfs directory [ 237.374931][T13350] veth0_vlan: entered promiscuous mode [ 237.410360][T13350] veth1_vlan: entered promiscuous mode [ 237.514079][T13377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.552571][T13350] veth0_macvtap: entered promiscuous mode [ 237.586217][T13350] veth1_macvtap: entered promiscuous mode [ 237.613336][T13441] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.648102][T13350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.658811][T13350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.701036][T13350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.713014][T13441] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.733371][T13350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.743995][T13350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.763446][T13350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.791594][T13441] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.823568][T13350] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.832516][T13350] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.841404][T13350] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.850872][T13350] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.914137][T13441] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.053958][T13441] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 238.082881][T13441] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 238.113080][T13441] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 238.145040][T13377] veth0_vlan: entered promiscuous mode [ 238.163718][T13441] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 238.199748][T13556] syzkaller0: entered allmulticast mode [ 238.209718][T13377] veth1_vlan: entered promiscuous mode [ 238.228927][T13518] chnl_net:caif_netlink_parms(): no params data found [ 238.243327][T13556] syzkaller0 (unregistering): left allmulticast mode [ 238.392781][T13377] veth0_macvtap: entered promiscuous mode [ 238.435021][T13518] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.442281][T13518] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.450642][T13518] bridge_slave_0: entered allmulticast mode [ 238.457785][T13518] bridge_slave_0: entered promiscuous mode [ 238.464705][T13518] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.471931][T13518] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.479889][T13518] bridge_slave_1: entered allmulticast mode [ 238.486463][T13518] bridge_slave_1: entered promiscuous mode [ 238.503585][T13377] veth1_macvtap: entered promiscuous mode [ 238.515815][T13518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.528482][T13377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.539899][T13377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.549789][T13377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.560343][T13377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.582834][T13377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.598978][T13518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.609799][T13377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.620436][T13377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.631088][T13377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.641653][T13377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.653614][T13377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.679834][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.696046][T13377] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.704930][T13377] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.713751][T13377] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.723199][T13377] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.744668][T13518] team0: Port device team_slave_0 added [ 238.752393][T13518] team0: Port device team_slave_1 added [ 238.760857][T13441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.781402][T13571] tracefs: Unknown parameter '†8ûg' [ 238.791626][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.811415][T13518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.818452][T13518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.845100][T13518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.857545][T13518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.864527][T13518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.891229][T13518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.907508][T13571] loop6: detected capacity change from 0 to 1024 [ 238.927753][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.944410][T13571] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.971840][T13441] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.010557][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.057442][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.064573][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.074568][T13571] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.101009][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.108165][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.150160][T13591] netlink: 'syz.6.3565': attribute type 13 has an invalid length. [ 239.158754][T13591] __nla_validate_parse: 2 callbacks suppressed [ 239.158766][T13591] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3565'. [ 239.182751][T13518] hsr_slave_0: entered promiscuous mode [ 239.296414][T13518] hsr_slave_1: entered promiscuous mode [ 239.305918][T13518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.331294][T13518] Cannot create hsr debugfs directory [ 239.340530][T13587] syzkaller0: entered allmulticast mode [ 239.358740][T13591] syz_tun: refused to change device tx_queue_len [ 239.365144][T13591] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 239.384604][T13594] syzkaller0 (unregistering): left allmulticast mode [ 239.412203][T13602] FAULT_INJECTION: forcing a failure. [ 239.412203][T13602] name failslab, interval 1, probability 0, space 0, times 0 [ 239.424916][T13602] CPU: 0 UID: 0 PID: 13602 Comm: syz.6.3568 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 239.435365][T13602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 239.445481][T13602] Call Trace: [ 239.448777][T13602] [ 239.451728][T13602] dump_stack_lvl+0xf2/0x150 [ 239.456357][T13602] dump_stack+0x15/0x20 [ 239.460540][T13602] should_fail_ex+0x223/0x230 [ 239.465270][T13602] ? audit_log_start+0x34c/0x6b0 [ 239.470235][T13602] should_failslab+0x8f/0xb0 [ 239.474861][T13602] kmem_cache_alloc_noprof+0x4c/0x290 [ 239.480356][T13602] audit_log_start+0x34c/0x6b0 [ 239.485160][T13602] ? kmem_cache_free+0xdc/0x2d0 [ 239.490042][T13602] audit_seccomp+0x4b/0x130 [ 239.494594][T13602] __seccomp_filter+0x6fa/0x1180 [ 239.499616][T13602] ? update_load_avg+0x1f7/0x7c0 [ 239.504693][T13602] ? __dequeue_entity+0x22/0x310 [ 239.509709][T13602] ? __list_add_valid_or_report+0x36/0xc0 [ 239.515489][T13602] ? tracing_record_taskinfo_sched_switch+0x6f/0x270 [ 239.522322][T13602] __secure_computing+0x9f/0x1c0 [ 239.527290][T13602] syscall_trace_enter+0xd1/0x1f0 [ 239.532341][T13602] do_syscall_64+0xaa/0x1c0 [ 239.536879][T13602] ? clear_bhb_loop+0x55/0xb0 [ 239.541654][T13602] ? clear_bhb_loop+0x55/0xb0 [ 239.546108][T13604] loop0: detected capacity change from 0 to 256 [ 239.546351][T13602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.546388][T13602] RIP: 0033:0x7f269cc9d25c [ 239.563024][T13602] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 239.582670][T13602] RSP: 002b:00007f269b311030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.591206][T13602] RAX: ffffffffffffffda RBX: 00007f269ce55fa0 RCX: 00007f269cc9d25c [ 239.599196][T13602] RDX: 000000000000000f RSI: 00007f269b3110a0 RDI: 0000000000000003 [ 239.607203][T13602] RBP: 00007f269b311090 R08: 0000000000000000 R09: 0000000000000000 [ 239.615191][T13602] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.623186][T13602] R13: 0000000000000000 R14: 00007f269ce55fa0 R15: 00007ffcf1395898 [ 239.631170][T13602] [ 239.679396][ T11] bridge_slave_1: left allmulticast mode [ 239.681537][T13604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3569'. [ 239.685076][ T11] bridge_slave_1: left promiscuous mode [ 239.685192][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.723046][ T11] bridge_slave_0: left allmulticast mode [ 239.728844][ T11] bridge_slave_0: left promiscuous mode [ 239.734672][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.823715][T13617] netlink: 'syz.5.3573': attribute type 13 has an invalid length. [ 239.832326][T13617] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3573'. [ 239.919315][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.942019][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.960851][ T11] bond0 (unregistering): Released all slaves [ 239.987432][T13441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.027871][T13617] syz_tun: refused to change device tx_queue_len [ 240.034342][T13617] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 240.067063][ T11] IPVS: stopping master sync thread 13433 ... [ 240.137028][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 240.137044][ T29] audit: type=1326 audit(1732299724.004:14108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.6.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269cc9e819 code=0x7ffc0000 [ 240.166885][ T29] audit: type=1326 audit(1732299724.004:14109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.6.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269cc9e819 code=0x7ffc0000 [ 240.190518][ T29] audit: type=1326 audit(1732299724.004:14110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.6.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f269cc9e819 code=0x7ffc0000 [ 240.214179][ T29] audit: type=1326 audit(1732299724.004:14111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.6.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269cc9e819 code=0x7ffc0000 [ 240.237823][ T29] audit: type=1326 audit(1732299724.004:14112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.6.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269cc9e819 code=0x7ffc0000 [ 240.300083][ T11] hsr_slave_0: left promiscuous mode [ 240.317320][ T29] audit: type=1326 audit(1732299724.044:14113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.6.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f269cc9e819 code=0x7ffc0000 [ 240.340999][ T29] audit: type=1326 audit(1732299724.044:14114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.6.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269cc9e819 code=0x7ffc0000 [ 240.364630][ T29] audit: type=1326 audit(1732299724.044:14115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.6.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f269cc9e819 code=0x7ffc0000 [ 240.388292][ T29] audit: type=1326 audit(1732299724.044:14116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.6.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269cc9e819 code=0x7ffc0000 [ 240.411952][ T29] audit: type=1326 audit(1732299724.064:14117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.6.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269cc9e819 code=0x7ffc0000 [ 240.435723][ T11] hsr_slave_1: left promiscuous mode [ 240.476322][ T11] veth1_macvtap: left promiscuous mode [ 240.482050][ T11] veth0_macvtap: left promiscuous mode [ 240.487890][ T11] veth1_vlan: left promiscuous mode [ 240.493328][ T11] veth0_vlan: left promiscuous mode [ 240.582302][T13645] loop6: detected capacity change from 0 to 128 [ 240.610724][T13645] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.658455][T13645] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.775292][ T11] team0 (unregistering): Port device team_slave_1 removed [ 240.785820][ T11] team0 (unregistering): Port device team_slave_0 removed [ 240.888523][T13441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.913426][T13655] netlink: 'syz.5.3587': attribute type 13 has an invalid length. [ 240.921340][T13655] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3587'. [ 240.957453][T13655] syz_tun: refused to change device tx_queue_len [ 240.963865][T13655] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 241.133269][T13669] loop5: detected capacity change from 0 to 4096 [ 241.159301][T13669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.271815][T13441] veth0_vlan: entered promiscuous mode [ 241.291015][T13518] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 241.307721][T13377] EXT4-fs error (device loop5): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /7/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 241.309908][T13518] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 241.340730][T13518] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 241.347785][T13377] EXT4-fs error (device loop5): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 241.382566][T13441] veth1_vlan: entered promiscuous mode [ 241.390373][T13377] EXT4-fs warning (device loop5): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 241.408703][T13518] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 241.418928][T13645] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.432793][T13377] EXT4-fs error (device loop5): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /7/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 241.483588][T13441] veth0_macvtap: entered promiscuous mode [ 241.494456][T13377] EXT4-fs error (device loop5): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 241.521196][T13441] veth1_macvtap: entered promiscuous mode [ 241.548993][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.559586][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.569525][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.580333][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.590399][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.592457][T13377] EXT4-fs warning (device loop5): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 241.600890][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.631917][T13692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3597'. [ 241.654792][T13377] EXT4-fs error (device loop5): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /7/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 241.657382][T13441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.700980][T13518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.727847][T13377] EXT4-fs error (device loop5): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 241.734335][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.758185][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.768073][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.778558][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.788392][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.798887][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.812225][T13377] EXT4-fs warning (device loop5): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 241.832359][T13441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.841233][T13518] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.841670][T13377] EXT4-fs error (device loop5): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /7/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 241.870084][T13377] EXT4-fs error (device loop5): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 241.905945][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.913065][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.928607][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.935745][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.947104][T13377] EXT4-fs warning (device loop5): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 241.974935][T13377] EXT4-fs error (device loop5): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /7/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 241.988815][T13698] FAULT_INJECTION: forcing a failure. [ 241.988815][T13698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.009155][T13698] CPU: 1 UID: 0 PID: 13698 Comm: syz.6.3600 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 242.010575][T13377] EXT4-fs error (device loop5): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 242.019584][T13698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 242.019620][T13698] Call Trace: [ 242.019629][T13698] [ 242.019639][T13698] dump_stack_lvl+0xf2/0x150 [ 242.019677][T13698] dump_stack+0x15/0x20 [ 242.047481][T13441] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.049121][T13698] should_fail_ex+0x223/0x230 [ 242.052425][T13441] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.055320][T13698] should_fail+0xb/0x10 [ 242.060222][T13441] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.064036][T13698] should_fail_usercopy+0x1a/0x20 [ 242.064076][T13698] _copy_to_user+0x20/0xa0 [ 242.064106][T13698] simple_read_from_buffer+0xa0/0x110 [ 242.073118][T13441] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.077515][T13698] proc_fail_nth_read+0xf9/0x140 [ 242.093034][T13518] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 242.099001][T13698] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.099044][T13698] vfs_read+0x1a2/0x700 [ 242.104142][T13518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.108476][T13698] ? __rcu_read_unlock+0x4e/0x70 [ 242.131602][T13377] EXT4-fs warning (device loop5): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 242.137794][T13698] ? __fget_files+0x17c/0x1c0 [ 242.137840][T13698] ksys_read+0xe8/0x1b0 [ 242.137876][T13698] __x64_sys_read+0x42/0x50 [ 242.144146][T13377] EXT4-fs warning (device loop5): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 242.147623][T13698] x64_sys_call+0x2874/0x2dc0 [ 242.147663][T13698] do_syscall_64+0xc9/0x1c0 [ 242.147692][T13698] ? clear_bhb_loop+0x55/0xb0 [ 242.161054][T13377] EXT4-fs warning (device loop5): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 242.162938][T13698] ? clear_bhb_loop+0x55/0xb0 [ 242.194417][T13377] EXT4-fs warning (device loop5): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 242.199220][T13698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.199268][T13698] RIP: 0033:0x7f269cc9d25c [ 242.199286][T13698] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 242.205388][T13377] EXT4-fs warning (device loop5): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 242.208467][T13698] RSP: 002b:00007f269b311030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.208528][T13698] RAX: ffffffffffffffda RBX: 00007f269ce55fa0 RCX: 00007f269cc9d25c [ 242.215112][T13377] EXT4-fs warning (device loop5): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 242.224620][T13698] RDX: 000000000000000f RSI: 00007f269b3110a0 RDI: 0000000000000007 [ 242.224640][T13698] RBP: 00007f269b311090 R08: 0000000000000000 R09: 0000000000000000 [ 242.224656][T13698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 242.224671][T13698] R13: 0000000000000000 R14: 00007f269ce55fa0 R15: 00007ffcf1395898 [ 242.224731][T13698] [ 242.231130][T13708] tracefs: Unknown parameter '†8ûg' [ 242.411020][T13709] loop0: detected capacity change from 0 to 1024 [ 242.463726][T13709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.489765][T13518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.577607][T13727] loop6: detected capacity change from 0 to 128 [ 242.595396][T13709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.642534][T13377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.655872][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.698634][T13733] netlink: 'syz.9.3607': attribute type 29 has an invalid length. [ 242.720306][T13735] FAULT_INJECTION: forcing a failure. [ 242.720306][T13735] name failslab, interval 1, probability 0, space 0, times 0 [ 242.720480][T13736] netlink: 'syz.9.3607': attribute type 29 has an invalid length. [ 242.732986][T13735] CPU: 1 UID: 0 PID: 13735 Comm: syz.0.3608 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 242.751329][T13735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 242.761410][T13735] Call Trace: [ 242.764723][T13735] [ 242.766707][T13736] netlink: 500 bytes leftover after parsing attributes in process `syz.9.3607'. [ 242.767653][T13735] dump_stack_lvl+0xf2/0x150 [ 242.767687][T13735] dump_stack+0x15/0x20 [ 242.785507][T13735] should_fail_ex+0x223/0x230 [ 242.790279][T13735] ? getname_kernel+0x3d/0x1e0 [ 242.795071][T13735] should_failslab+0x8f/0xb0 [ 242.799827][T13735] kmem_cache_alloc_noprof+0x4c/0x290 [ 242.805299][T13735] getname_kernel+0x3d/0x1e0 [ 242.809941][T13735] do_file_open_root+0xc3/0x3e0 [ 242.814904][T13735] ? cgroup_rstat_updated+0x9f/0x570 [ 242.820241][T13735] file_open_root+0xf9/0x120 [ 242.824880][T13735] kernel_read_file_from_path_initns+0xe7/0x180 [ 242.831189][T13735] _request_firmware+0x712/0x9c0 [ 242.836204][T13735] request_firmware+0x36/0x50 [ 242.840964][T13735] reg_reload_regdb+0x58/0x240 [ 242.845908][T13735] nl80211_reload_regdb+0xe/0x20 [ 242.850950][T13735] genl_rcv_msg+0x61b/0x6c0 [ 242.855516][T13735] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 242.860908][T13735] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 242.866694][T13735] ? __pfx_nl80211_post_doit+0x10/0x10 [ 242.872180][T13735] ? __dev_queue_xmit+0xb6e/0x2090 [ 242.877402][T13735] netlink_rcv_skb+0x12c/0x230 [ 242.882210][T13735] ? __pfx_genl_rcv_msg+0x10/0x10 [ 242.887255][T13735] genl_rcv+0x28/0x40 [ 242.891278][T13735] netlink_unicast+0x599/0x670 [ 242.896098][T13735] netlink_sendmsg+0x5cc/0x6e0 [ 242.900907][T13735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.906275][T13735] __sock_sendmsg+0x140/0x180 [ 242.910977][T13735] ____sys_sendmsg+0x312/0x410 [ 242.915795][T13735] __sys_sendmsg+0x19d/0x230 [ 242.920494][T13735] __x64_sys_sendmsg+0x46/0x50 [ 242.925276][T13735] x64_sys_call+0x2734/0x2dc0 [ 242.930023][T13735] do_syscall_64+0xc9/0x1c0 [ 242.934540][T13735] ? clear_bhb_loop+0x55/0xb0 [ 242.939232][T13735] ? clear_bhb_loop+0x55/0xb0 [ 242.943947][T13735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.949851][T13735] RIP: 0033:0x7f9773f1e819 [ 242.954269][T13735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.973898][T13735] RSP: 002b:00007f9772597038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.982370][T13735] RAX: ffffffffffffffda RBX: 00007f97740d5fa0 RCX: 00007f9773f1e819 [ 242.990372][T13735] RDX: 0000000004000054 RSI: 0000000020000480 RDI: 0000000000000003 [ 242.998431][T13735] RBP: 00007f9772597090 R08: 0000000000000000 R09: 0000000000000000 [ 243.006409][T13735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 243.014384][T13735] R13: 0000000000000000 R14: 00007f97740d5fa0 R15: 00007fff08073528 [ 243.022370][T13735] [ 243.031804][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.045363][T13735] platform regulatory.0: loading /lib/firmware/updates/6.12.0-syzkaller-07749-g28eb75e178d3/regulatory.db failed with error -12 [ 243.075316][T13735] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 243.089866][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.139108][T13518] veth0_vlan: entered promiscuous mode [ 243.158268][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.191319][T13518] veth1_vlan: entered promiscuous mode [ 243.223792][T13518] veth0_macvtap: entered promiscuous mode [ 243.280755][T13518] veth1_macvtap: entered promiscuous mode [ 243.291739][T13759] loop9: detected capacity change from 0 to 4096 [ 243.314706][T13518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.325509][T13518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.335453][T13518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.346164][T13518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.356067][T13518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.366547][T13518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.376411][T13518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.387005][T13518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.411976][T13759] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.427739][T13518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.470231][T13518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.480808][T13518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.490697][T13518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.501396][T13518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.511345][T13518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.521916][T13518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.531774][T13518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.542271][T13518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.554560][T13518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.560709][T13776] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3616'. [ 243.572060][ T11] bridge_slave_1: left allmulticast mode [ 243.578218][ T11] bridge_slave_1: left promiscuous mode [ 243.583954][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.620082][ T11] bridge_slave_0: left allmulticast mode [ 243.625787][ T11] bridge_slave_0: left promiscuous mode [ 243.631540][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.640831][T13441] EXT4-fs error (device loop9): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /3/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 243.664365][T13441] EXT4-fs error (device loop9): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 243.684527][T13441] EXT4-fs warning (device loop9): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 243.696897][T13441] EXT4-fs error (device loop9): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /3/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 243.726503][T13441] EXT4-fs error (device loop9): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 243.766958][T13441] EXT4-fs warning (device loop9): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 243.792434][T13441] EXT4-fs error (device loop9): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /3/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 243.823508][T13441] EXT4-fs error (device loop9): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 243.837580][T13781] loop0: detected capacity change from 0 to 512 [ 243.843966][T13441] EXT4-fs warning (device loop9): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 243.866083][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.867608][T13781] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.878513][T13441] EXT4-fs error (device loop9): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /3/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 243.902002][T13781] EXT4-fs: Ignoring removed mblk_io_submit option [ 243.904363][T13441] EXT4-fs error (device loop9): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 243.929680][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.935513][T13781] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 243.939713][T13441] EXT4-fs warning (device loop9): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 243.958368][T13441] EXT4-fs error (device loop9): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /3/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 243.967468][T13781] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 243.981667][T13441] EXT4-fs error (device loop9): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 244.008122][ T11] bond0 (unregistering): Released all slaves [ 244.019107][T13781] EXT4-fs (loop0): 1 truncate cleaned up [ 244.026421][T13781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.042265][T13518] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.051103][T13518] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.059950][T13518] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.068675][T13518] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.079769][T13441] EXT4-fs warning (device loop9): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 244.094028][T13441] EXT4-fs warning (device loop9): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 244.095745][T13777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3617'. [ 244.109056][T13441] EXT4-fs warning (device loop9): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 244.131041][T13776] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3616'. [ 244.170020][T13441] EXT4-fs warning (device loop9): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 244.182643][T13441] EXT4-fs warning (device loop9): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 244.209095][T13441] EXT4-fs warning (device loop9): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 244.227823][ T11] hsr_slave_0: left promiscuous mode [ 244.240498][ T11] hsr_slave_1: left promiscuous mode [ 244.256301][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.263816][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.272586][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.280085][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.292010][ T11] veth1_macvtap: left promiscuous mode [ 244.297654][ T11] veth0_macvtap: left promiscuous mode [ 244.303279][ T11] veth1_vlan: left promiscuous mode [ 244.308614][ T11] veth0_vlan: left promiscuous mode [ 244.419153][T13789] loop6: detected capacity change from 0 to 128 [ 244.430508][T11010] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.440044][ T11] team0 (unregistering): Port device team_slave_1 removed [ 244.449650][T13789] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 244.467885][ T11] team0 (unregistering): Port device team_slave_0 removed [ 244.481497][T13789] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 244.685600][T13746] chnl_net:caif_netlink_parms(): no params data found [ 244.694166][T13441] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.748389][T13806] netlink: 'syz.0.3627': attribute type 13 has an invalid length. [ 244.756446][T13806] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3627'. [ 244.820483][T13350] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 244.839936][T13806] syz_tun: refused to change device tx_queue_len [ 244.846375][T13806] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 244.886936][T13814] netlink: 'syz.8.3631': attribute type 13 has an invalid length. [ 244.894820][T13814] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3631'. [ 244.960768][T13746] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.968054][T13746] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.992690][T13746] bridge_slave_0: entered allmulticast mode [ 245.009038][T13746] bridge_slave_0: entered promiscuous mode [ 245.022600][T13814] syz_tun: refused to change device tx_queue_len [ 245.029143][T13814] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 245.058861][ T11] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.082825][T13746] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.090206][T13746] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.101258][T13746] bridge_slave_1: entered allmulticast mode [ 245.114719][T13746] bridge_slave_1: entered promiscuous mode [ 245.162870][ T11] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.227454][T13746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.259128][ T11] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.290243][T13746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.327959][ T11] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.424733][T13746] team0: Port device team_slave_0 added [ 245.439110][T13746] team0: Port device team_slave_1 added [ 245.518375][T13746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.525383][T13746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.551427][T13746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.566295][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 245.566314][ T29] audit: type=1326 audit(1732304849.445:14314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13848 comm="syz.8.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1211ede819 code=0x7ffc0000 [ 245.597600][T13746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.604580][T13746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.630620][T13746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.657049][ T29] audit: type=1326 audit(1732304849.445:14315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13848 comm="syz.8.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1211ede819 code=0x7ffc0000 [ 245.680871][ T29] audit: type=1326 audit(1732304849.455:14316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13848 comm="syz.8.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f1211ede819 code=0x7ffc0000 [ 245.704675][ T29] audit: type=1326 audit(1732304849.455:14317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13848 comm="syz.8.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1211ede819 code=0x7ffc0000 [ 245.728467][ T29] audit: type=1326 audit(1732304849.455:14318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13848 comm="syz.8.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1211ede819 code=0x7ffc0000 [ 245.787100][T13847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3639'. [ 245.808351][ T11] bridge_slave_1: left allmulticast mode [ 245.808892][T13856] tracefs: Unknown parameter '†8ûg' [ 245.814041][ T11] bridge_slave_1: left promiscuous mode [ 245.814210][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.840924][T13856] loop6: detected capacity change from 0 to 1024 [ 245.850415][ T11] bridge_slave_0: left allmulticast mode [ 245.856227][ T11] bridge_slave_0: left promiscuous mode [ 245.861946][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.879948][T13856] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.916782][T13856] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.049769][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.071691][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.082274][ T11] bond0 (unregistering): Released all slaves [ 246.105032][T13746] hsr_slave_0: entered promiscuous mode [ 246.189100][T13746] hsr_slave_1: entered promiscuous mode [ 246.319254][T13746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.379205][T13746] Cannot create hsr debugfs directory [ 246.540205][T13872] loop0: detected capacity change from 0 to 256 [ 246.570099][T13872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3647'. [ 246.612719][ T11] hsr_slave_0: left promiscuous mode [ 246.632649][ T11] hsr_slave_1: left promiscuous mode [ 246.653291][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.660954][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.670443][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.678020][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.689523][ T11] veth1_macvtap: left promiscuous mode [ 246.695045][ T11] veth0_macvtap: left promiscuous mode [ 246.701243][ T11] veth1_vlan: left promiscuous mode [ 246.706622][ T11] veth0_vlan: left promiscuous mode [ 246.857186][ T11] team0 (unregistering): Port device team_slave_1 removed [ 246.878972][ T11] team0 (unregistering): Port device team_slave_0 removed [ 246.936985][ T29] audit: type=1400 audit(1732304850.815:14319): avc: denied { write } for pid=13885 comm="syz.6.3650" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 246.960056][ T29] audit: type=1400 audit(1732304850.815:14320): avc: denied { ioctl } for pid=13885 comm="syz.6.3650" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 247.102505][T13820] chnl_net:caif_netlink_parms(): no params data found [ 247.121837][ T24] ================================================================== [ 247.129963][ T24] BUG: KCSAN: data-race in mon_reader_del / usb_hcd_submit_urb [ 247.137649][ T24] [ 247.140002][ T24] write to 0xffff88810015c088 of 4 bytes by task 13874 on cpu 0: [ 247.147754][ T24] mon_reader_del+0x20a/0x260 [ 247.152460][ T24] mon_bin_release+0x66/0x120 [ 247.157166][ T24] __fput+0x17a/0x6d0 [ 247.161177][ T24] ____fput+0x1c/0x30 [ 247.165178][ T24] task_work_run+0x13a/0x1a0 [ 247.166553][T13889] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3651'. [ 247.169791][ T24] syscall_exit_to_user_mode+0xa8/0x120 [ 247.184343][ T24] do_syscall_64+0xd6/0x1c0 [ 247.188878][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.194797][ T24] [ 247.197128][ T24] read to 0xffff88810015c088 of 4 bytes by task 24 on cpu 1: [ 247.204519][ T24] usb_hcd_submit_urb+0x86/0x1510 [ 247.209562][ T24] usb_submit_urb+0xa80/0xb70 [ 247.214243][ T24] usb_start_wait_urb+0x91/0x190 [ 247.219184][ T24] usb_control_msg+0x182/0x240 [ 247.223950][ T24] hub_ext_port_status+0xbf/0x480 [ 247.229426][ T24] hub_event+0x538/0x2910 [ 247.233756][ T24] process_scheduled_works+0x483/0x9a0 [ 247.239213][ T24] worker_thread+0x51d/0x6f0 [ 247.243809][ T24] kthread+0x1d1/0x210 [ 247.248059][ T24] ret_from_fork+0x4b/0x60 [ 247.252494][ T24] ret_from_fork_asm+0x1a/0x30 [ 247.257267][ T24] [ 247.259589][ T24] value changed: 0x00000001 -> 0x00000000 [ 247.265300][ T24] [ 247.267618][ T24] Reported by Kernel Concurrency Sanitizer on: [ 247.273781][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 247.284021][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 247.294084][ T24] Workqueue: usb_hub_wq hub_event [ 247.299123][ T24] ================================================================== [ 247.325277][T13891] bond0: (slave bond_slave_0): Releasing backup interface [ 247.419544][T13820] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.426734][T13820] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.434518][T13820] bridge_slave_0: entered allmulticast mode [ 247.443634][T13820] bridge_slave_0: entered promiscuous mode [ 247.455597][T13820] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.462769][T13820] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.471682][T13820] bridge_slave_1: entered allmulticast mode [ 247.478432][T13820] bridge_slave_1: entered promiscuous mode [ 247.501616][T13820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.514412][T13820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.558873][T13820] team0: Port device team_slave_0 added [ 247.566053][T13820] team0: Port device team_slave_1 added [ 247.593079][T13820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.600119][T13820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.626092][T13820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.637613][T13820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.644582][T13820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.670689][T13820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.703835][T13820] hsr_slave_0: entered promiscuous mode [ 247.710125][T13820] hsr_slave_1: entered promiscuous mode [ 247.716257][T13820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.725105][T13820] Cannot create hsr debugfs directory [ 247.763774][T13746] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 247.788221][T13746] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 247.806728][T13746] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 247.825154][T13746] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 247.890164][T13746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.908058][T13746] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.919249][ T3340] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.926380][ T3340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.939443][T11684] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.946573][T11684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.980166][T13746] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.990759][T13746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.062744][T13820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 248.082342][T13820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 248.092284][T13820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 248.108775][T13746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.121505][T13820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 248.232378][T13820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.265704][T13746] veth0_vlan: entered promiscuous mode [ 248.279390][T13820] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.289567][T13746] veth1_vlan: entered promiscuous mode [ 248.312222][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.319365][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.338984][T11684] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.346089][T11684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.359420][T13746] veth0_macvtap: entered promiscuous mode [ 248.386786][T13746] veth1_macvtap: entered promiscuous mode [ 248.411276][T13746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.421835][T13746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.431809][T13746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.442381][T13746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.452366][T13746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.463018][T13746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.477441][T13746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.491105][T13746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.501653][T13746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.511535][T13746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.522000][T13746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.531919][T13746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.542434][T13746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.554049][T13746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.568533][T13746] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.577464][T13746] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.586218][T13746] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.595062][T13746] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.692541][T13820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.780911][T13820] veth0_vlan: entered promiscuous mode [ 248.790791][T13820] veth1_vlan: entered promiscuous mode [ 248.809471][T13820] veth0_macvtap: entered promiscuous mode [ 248.818653][T13820] veth1_macvtap: entered promiscuous mode [ 248.829614][T13820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.840150][T13820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.850122][T13820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.860827][T13820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.870784][T13820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.881389][T13820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.891270][T13820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.901746][T13820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.913546][T13820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.924573][T13820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.935214][T13820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.945138][T13820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.955707][T13820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.965580][T13820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.976129][T13820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.985982][T13820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.996462][T13820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.007842][T13820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.019826][T13820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.028745][T13820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.037560][T13820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.046316][T13820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0